Recovery is provided in a timing network. A configuration is defined for that network, and in that configuration, an active primary server is identified that provides a clock source for the network. Additionally, an alternate server is identified that can perform the role of the active primary server, should the active primary server fail. In response to a failure of the primary server, the alternate server detects the failure and performs takeover of the primary server.