As some of you may have noticed already; Ubuntu / Canonical is having some (DDoS related) issues lately:
https://status.canonical.com/
Interestingly, their NTP servers are not on that status page. But they do have some issues too, especially on the NTS level, and I’m pretty sure some folks are affected by this.
Luckily we have the pool 
./ntsdetail 0.ntp.ubuntu.com
[0.ntp.ubuntu.com] ----------------------
[0.ntp.ubuntu.com] Resolver: [185.125.190.123]:123
Time could not be get: read udp 192.168.1.200:53495->185.125.190.123:123: i/o timeout
1 Like
I noticed something was up when I was trying to run “apt update” and “apt dist-upgrade”, but did not know why.
Seems to be OK at the moment.
That shows port 123, not 4460, so that wouldn’t be related to NTS, or is it sensitive to the NTP packet length?
From my corner of the Internet, their servers seem to responding fine to NTS-protected NTP and NTS-KE requests.
True - sorry for the confusion, and thanks for looking so closely at the details.
I guess what I meant to say is that the NTP/NTS servers also seemed to be affected by the DDoS, but they are not listed on the status page - regardless of the details I shared in a failed attempt to illustrate this.
Also, things indeed seem to be better now.
1 Like