Kerberos propagation and unusual networking

My Kerberos servers are scattered around the Internet, behind NAT in some cases, connected with VPNs, etc. As such the hostname or IP that one server might use to connect to another is often different from the actual hostname or default IP of the other server. For most services this isn't a particular challenge, but Kerberos replication with kprop and kpropd has often been difficult to get