Our current configuration involves two trusted time servers on the local network and several alternatives a little further away:
server tick minpoll 3 maxpoll 4 trust prefer iburst
server tock minpoll 3 maxpoll 4 trust prefer iburst
server time-alt1 minpoll 3 maxpoll 4
...
If (say) tick starts sending bad time, we want chrony to declare it a falseticker on the basis of a majority made up of tock + time-alt1 + [other selectable servers] and continue to synchronize. We think this configuration used to do that on 3.2, and it looks like it doesn't anymore on 4.1.
Is that correct? If so, is there a better way to get the behavior we're looking for?