Re: [Ntp] NAT devices not translating privileged ports

[Miroslav Lichvar <[e-mail]>]

On Thu, Jun 10, 2021 at 09:37:43AM +0000, Fernando Gont wrote:
> I'm now considering whether we'd be better off removing the whole
> Section 3.4.? i.e., remove this:

That would work for me.

There is an effect of NAT that could be mentioned if you are
considering some replacement for the text. NATs typically have a
shorter timeout for UDP sessions that the client polling interval, so
if there are multiple clients using the same server behind NAT, their
source port from the server's point of view will be randomized even if
their local port is the same.

> ---- cut here ----
>  3.4.  Effect on NAT devices
> 
>   Some NAT devices will not translate the source port of a packet when
>   a privileged port number is employed.  In networks where such NAT
>   devices are employed, use of the NTP well-known port for the client
>   port will essentially limit the number of hosts that may successfully
>   employ NTP client implementations.
> 
>   In the case of NAT devices that will translate the source port even
>   when a privileged port is employed, packets reaching the external
>   realm of the NAT will not employ the NTP well-known port as the local
>   port, since the local port will normally be translated by the NAT
>   device possibly, but not necessarily, with a random port.
> ---- cut here ----

-- 
Miroslav Lichvar