Re: [Ntp] Microbursts of NTP packets

These may be the same 10 second NTP request bursts seen by administrators
of NTP pool servers; typically in the 1K to 20K Pkts/sec range, though
we've seen higher.   The bursts come from buggy FortiGate firewalls.
FortiNet tells me that FortiOS version 6.2.5, scheduled for release at the
end of this week, will correct the problem.  There's no telling when the
individual FortiGates will upgrade to that release.

I can provide further details, if there is interest.

Steve Sommars

On Mon, Aug 17, 2020 at 8:20 PM Watson Ladd <watsonbladd@gmail.com> wrote:

> Dear NTP WG,
>
> We're observing short bursts of high numbers of NTP queries at one
> point of presence, exceeding the queue length of the listening ntp
> socket, and leading to drops. The bursts are very short, so the
> overall qps is nothing special. I'm quite mystified as to what the
> possible causes could be.
>
> This is unfortunately leading to packet drops. If any operators have
> seen this, their input on possible causes and solutions is welcome.
>
> Sincerely,
> Watson Ladd
>
> _______________________________________________
> ntp mailing list
> ntp@ietf.org
> https://www.ietf.org/mailman/listinfo/ntp
>