Re: Recent NTP pool traffic increase

[Ask Bjørn Hansen <ask () develooper com>]

> On Dec 15, 2016, at 14:45, Jose Gerardo Perales Soto <gerardo.perales () axtel com mx> wrote:
>
> We've recently experienced a traffic increase on the NTP queries to NTP pool project (pool.ntp.org) servers. One 
> theory is that some service provider NTP infraestructure failed approximately 2 days ago and traffic is now being 
> redirected to servers belonging to the NTP pool project.

Hi Jose,

It’s more widespread than a particular service provider, so it seems more likely it’s a software update for some “IoT” 
device or similar.

The increase in DNS queries was on the “non-vendor” names, so it’s difficult to know who it is without being on a local 
network with one of the bad device 

The increase in DNS queries is much smaller than the increase in NTP queries that are being seen, so it’s not just more 
clients, but badly behaving ones. :-(

        https://status.ntppool.org/incidents/vps6y4mm0m69

If you have NTP servers that can be added to the pool. it’d be greatly appreciated.

        http://www.pool.ntp.org/join.html


Ask