Hello. I’m attempting to configure some devices that need to be configured for all IP traffic to remain within China. I was able to configure them to use {0,1,2,3}.cn.pool.ntp.org, but at times a few of these are resulting in IP addresses outside of China. Is this the expected behavior?
Yes. In a previous effort to save CN zone from being stormed by numerous clients, non-CN volunteered servers were added into CN zone. If you want CN-only time sources, maybe you can consider service from Cloudflare, which should be able to serve time from China based DC using anycast address.