# NTP traffic drop for .de server
**URL:** https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908
**Category:** Server operators
**Tags:** dns
**Created:** [June 8, 2023, 10:07am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908 "2023-06-08T10:07:49Z")
**Posts on this page:** 19
**Page:** 1
### Author:  [@aubergine](https://community.ntppool.org/u/aubergine)
#### Post date: [June 8, 2023, 10:07am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/1 "2023-06-08T10:07:49Z")
I have a NTP server in the .de zone. From 29.05-30.05 and till then the NTP IPv4 traffic dropped significantly. Is there a reason for this and is it expected? The monitoring rating is always 20.
---
### Author:  [@NTPman](https://community.ntppool.org/u/NTPman)
#### Post date: [June 8, 2023, 12:00pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/2 "2023-06-08T12:00:49Z")
Let me second that, I encountered the same thing:
---
### Author:  [@Max](https://community.ntppool.org/u/Max)
#### Post date: [June 8, 2023, 11:58pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/3 "2023-06-08T23:58:00Z")
Strange. Mine looks consistent. Located in the US region
---
### Author:  [@alica](https://community.ntppool.org/u/alica)
#### Post date: [June 10, 2023, 2:03am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/4 "2023-06-10T02:03:02Z")
Nothing changed in Taiwan.
(Legend in Chinese but same as above↑ English chart by @NTPman )
---
### Author:  [@HAHAHAHA](https://community.ntppool.org/u/HAHAHAHA)
#### Post date: [June 13, 2023, 3:25pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/5 "2023-06-13T15:25:08Z")
This may be slightly off-topic but below is the normal traffic (\>50k requests / second) between 7-11pm China time for HK and ASIA zones for me.
---
### Author:  [@ask](https://community.ntppool.org/u/ask)
#### Post date: [June 13, 2023, 5:31pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/6 "2023-06-13T17:31:59Z")
That’s pretty wild. No obvious changes in the available servers for Germany or Europe around that time.
---
### Author:  [@NTPman](https://community.ntppool.org/u/NTPman)
#### Post date: [June 13, 2023, 5:34pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/7 "2023-06-13T17:34:51Z")
My server is in Switzerland. But at least Europe. The other change, that the traffic is not so spiky, it is more flat now.
---
### Author:  [@ask](https://community.ntppool.org/u/ask)
#### Post date: [June 13, 2023, 5:49pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/8 "2023-06-13T17:49:49Z")
Ooh, …
Over a couple days that week (around May 29-30) I did disable two DNS servers that were running a very old version of the GeoDNS software (all the other servers are managed by @gfk and I so we keep them updated).
I have to look through the change history to see if I can think of why that’d make such a change though.
---
### Author:  [@NTPman](https://community.ntppool.org/u/NTPman)
#### Post date: [June 13, 2023, 5:51pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/9 "2023-06-13T17:51:08Z")
Another drop today. The previous one was also around 2 am (midnight in UTC).
---
### Author:  [@mlichvar](https://community.ntppool.org/u/mlichvar)
#### Post date: [June 13, 2023, 6:09pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/10 "2023-06-13T18:09:23Z")
Hm, I saw the first drop on my server in the de zone, but nothing today.
---
### Author:  [@ask](https://community.ntppool.org/u/ask)
#### Post date: [June 14, 2023, 12:44am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/11 "2023-06-14T00:44:58Z")
The query rate to the DNS servers (globally and from Switzerland) haven’t had any changes. I don’t log the answers the DNS servers give, but that might be a worthwhile addition to help validate that future changes work as expected (and it could maybe help figure out things like this).
---
### Author:  [@stevesommars](https://community.ntppool.org/u/stevesommars)
#### Post date: [June 15, 2023, 5:34pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/12 "2023-06-15T17:34:40Z")
I monitor a New Zealand IPv4 NTP server’s traffic closely and noticed the same decrease in request rate at the end of May. I compared two 24-hour intervals, one before and one after, the change.
Summary:
- the number of unique client IPs dropped by 40%
The decrease came from non-New Zealand client IPs.
- The number of non-New Zealand clients dropped significantly.
The number of requests from New Zealand clients increased a bit.
- No observed change in per-client behavior
This seems consistent with a GeoDNS change, perhaps one specific to the global zone?
Did anyone with NTP servers in under-served areas noticed a traffic increase?
---
### Author:  [@mnordhoff](https://community.ntppool.org/u/mnordhoff)
#### Post date: [June 16, 2023, 1:00am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/13 "2023-06-16T01:00:48Z")
FWIW, trying to divine information from a US server’s network graphs, IPv6 traffic patterns changed a bit at the same time. It looks like peak times (around 01:00 UTC) increased by around 20-30 Kbps and the troughs (around 10:00) might have stayed about the same or increased slightly.
IPv4 might also have increased a bit but it’s harder to say.
---
### Author:  [@apuls](https://community.ntppool.org/u/apuls)
#### Post date: [June 16, 2023, 7:05pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/14 "2023-06-16T19:05:27Z")
Also a drop in Moldova & Lithuania
Moldova :
Lithuania:
---
### Author:  [@lordgurke](https://community.ntppool.org/u/lordgurke)
#### Post date: [June 18, 2023, 10:17am UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/15 "2023-06-18T10:17:50Z")
My servers in Mumbai get a bit more traffic since end of may. This graph is showing accumulated queries over 3 servers.
Since my servers in DE got quite notable amounts of traffic from Asia (mostly China), a change in GeoDNS might be a good explaination. It makes sense for GeoDNS to route Clients from Asia to Servers on the same continent.
---
### Author:  [@stevesommars](https://community.ntppool.org/u/stevesommars)
#### Post date: [June 18, 2023, 11:48pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/16 "2023-06-18T23:48:42Z")
Some more data supporting the GeoDNS hypothesis. I have data from one day in early May and one day in early June from NTP servers located in San Francisco, Washington, and London.
NTP requests from
Chinanet(AS4134) dropped by 30%
Argentina(AS27747) dropped by 99%
Emirates (AS5384) dropped by 50-70%)
---
### Author:  [@NTPman](https://community.ntppool.org/u/NTPman)
#### Post date: [June 19, 2023, 12:21pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/17 "2023-06-19T12:21:06Z")
The second drop wasn’t that significant, the traffic is slowly climbing up:
---
### Author:  [@aubergine](https://community.ntppool.org/u/aubergine)
#### Post date: [June 20, 2023, 9:02pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/18 "2023-06-20T21:02:33Z")
I also assume that this change was for the better for the pool.
In this thread [Far away clients from AWS](https://community.ntppool.org/t/far-away-clients-from-aws/2202) I mentioned in 2022 that I see a lot of traffic from AWS virtual machines from far away. This is now not the case any more after capturing the requests for a few minutes.
So I assume the GeoDNS setup before the change was working suboptimal for some clients.
---
### Author:  [@someone](https://community.ntppool.org/u/someone)
#### Post date: [September 6, 2023, 8:27pm UTC](https://community.ntppool.org/t/ntp-traffic-drop-for-de-server/2908/19 "2023-09-06T20:27:06Z")
I was debugging my box for like forever as I suspected a hardware or network config or debian upgrade or ISP issue since my connections dropped too … guess I was just wasting my time.
(server is [pool.ntp.org: Statistics for 185.144.161.170](https://www.ntppool.org/scores/185.144.161.170))