When a network operator recently moved one of their partners from a Tier 1 only transit setup to include a Tier 2 provider, the expected win was routing performance. Most traffic shifted to shorter, lower latency paths almost immediately. But what the operator did not expect to write about publicly was this:

“The bigger surprise was the portal.”

Specifically, flow visibility without needing to run a separate flow analyser. A single pane of glass across all services. Provisioning that used to take days compressed into under an hour.

You can read the original post here. It is what prompted us to investigate something worth examining. Most operators compete on network quality, price, and coverage. Very few compete on what they give customers the ability to see. For the engineers actually running infrastructure on top of your network, visibility is not a nice to have but is the difference between being able to do their job independently or depending on you for every question.

The Gap Inter.link Set Out to Close

Inter.link already had strong internal visibility into their own network through BENOCS traffic flow analytics. The question was what their customers could actually see, and the answer was not much beyond standard utilization graphs.

Utilization data only tells you how much traffic is moving. It says nothing about what that traffic is, where it is going, or why it is routing the way it is. For a customer trying to understand a routing change, troubleshoot a performance issue, or simply validate that their traffic is behaving as expected, that gap creates friction. Every question that cannot be answered by self-serve becomes a support interaction.

Inter.link integrated BENOCS directly into their customer portal to close that gap, giving customers access to the same quality of network intelligence that their own engineering team relies on, scoped specifically to each customer’s traffic.

What Meaningful Visibility Actually Includes

There are distinct layers to network visibility, and most customer portals stop at the first one. Here is what each layer actually gives a customer:

• Utilization data tells you how much traffic is flowing across which interfaces. Essential, but blunt. It tells you that something is happening, not what.

• Flow data shows what traffic is flowing, which source ASNs are sending to which destination ASNs, and how that composition shifts over time. This is where customers start to understand their traffic rather than just measure it. Most customers do not run their own flow analyzers. Providing this layer gives them a capability they likely do not have anywhere else.

• Routing context explains why. How BGP decisions are affecting traffic distribution, which peers and upstreams are carrying what traffic, and how routing changes shift flows in practice.

Together, these layers let a customer answer questions they previously had to escalate, such as:

• Where is my traffic going?

• Why did my routing change yesterday?

• How much of my traffic is going via which peer?

These are not exotic questions. They are the everyday operational questions that a good visibility layer should make straightforward to answer.

How the Integration Works in Practice

The technical foundation involves correlating four inputs continuously:

• Underlay topology

• BGP routing data

• Sampled flow telemetry

• Interface utilization metrics

When combined, these give a complete picture of how traffic is moving through the network and why. Each customer sees only their own traffic. Filtering by AS number means the view is scoped entirely to their network’s presence in the Inter.link network.

A few implementation details that turn out to matter more than expected:

• Seamless login. The Inter.link portal acts as the identity provider and passes the relevant AS number to the visibility layer automatically. There is no separate login, no onboarding friction, and no reason not to use it. Adoption follows access.

• Shareable URLs for specific queries. When a customer spots an unusual traffic pattern and wants to discuss it with their account manager, a persistent URL for that exact query changes the quality of the conversation entirely. Both sides are looking at the same data, in real time, without exchanging screenshots or trying to recreate a view over a call.

• A fully branded environment. The visibility tooling appears as a native part of the Inter.link portal rather than a third-party product alongside it. That consistency matters how customers experience the service.

This model is not exclusive to transit providers. Any operator offering connectivity to enterprise or wholesale customers faces the same underlying challenge: customers want to understand how their traffic is behaving on your network, not just how much of it there is. When visibility is built into the service rather than treated as an optional extra, it shifts the relationship from reactive support towards more substantive conversations about routing decisions, peering strategy, and capacity. It is also a trust signal.

Why This Matters in the Current Climate

European network operators are increasingly focused on where their intelligence comes from, and this includes not only connectivity but also the data and routing insights that inform how networks are managed. Relying on non-European sources for operational network intelligence carries real risk, whether regulatory, reputational or operational.

This is part of what the Connectivity Insight Initiative endeavors to address. By combining European IP infrastructure with network analytics, the goal is to make practical insights about traffic patterns, routing behavior, and interconnection dynamics available to the broader network community

What was going on?

DENIC, the managing entity of the .de TLD, issued DNS responses with incorrect signatures. Consequently, DNSSEC-validating resolvers were failing to resolve .de domains.

Traffic from DENIC started to increase at around 19:30 UTC and normalized at approx. 22:30 (closely matching Cloudflare Radar’s observations). This increased traffic was caused by resolvers continuing trying to resolve .de domains but failing to do so.

Phew!

To quote Redditor jamesthethirteenth:

• It’s not you.

• It’s a botched scheduled maintenance window at the German national TLD registry.

• Bahn (the federal railway) and Chip (huge tech publication) are down with you.

• DENIC themselves can’t receive email about it.

Ouch.

The problem has now been resolved and all resolvers are resolving as normal again.

Traffic drops. Every day, right around the same time.

Same pattern. Same timing. No alerts.

The drop wasn’t random. Instead, it showed up consistently in the time-series:

• Same time

• Similar magnitude

• Clean recovery afterward

There were no spikes or instability leading up to the drop, just a steady and predictable dip. At first glance, this usually points to congestion, capacity limits or routing issues.

But this didn’t behave like any of those.

That’s where things changed

We started peeling it back. From overall traffic → to contributing networks → down to individual flows.

Using BENOCS’ Raw Network Analyzer, we then looked at the actual subnets.

Specific IPs stood out, and a reverse lookup pointed to something more specific: an embedded cache inside the network in question.

Now the pattern starts to shift from “network issue” to something else entirely.

So what’s actually happening here?

A few possibilities emerge:

• A scheduled cache refresh or content rotation

• Demand shifting at a very specific time of day

• Traffic being redirected based on cost or policy

• Application-driven behavior rather than network-driven

Questions worth thinking about

• Why would traffic drop so precisely at the same time every day?

• What kind of content creates such a synchronized pattern?

• Is this driven by users or by infrastructure?

• And more importantly, is this even a “problem”?

Important to remember

Not every anomaly is an incident. Some are patterns. And patterns are often more valuable than incidents in showing how the network actually behaves.

The real value isn’t in spotting the drop.

It’s in understanding why it’s there in the first place.

Why BENOCS’ involvement in the initiative?
We feel it is important to use our capabilities to contribute to the industry: a smooth functioning internet is beneficial for everyone, network operators and consumers alike. We believe such a cooperation will strengthen the industry as a whole.

What you do you hope network operators gain from this initiative?

Light-bulb moments! Our vision is that our industry peers can utilise intelligence gained from the Connectivity Insight Initiative to understand and optimize their own network’s behaviour.

What is unique about this initiative?
In today’s political climate, a European-made initiative is essential for internet safety and stability. The Connectivity Insight Initiative is unique in that it is 100 percent made in Europe and free for everyone to access.

Why do you feel Inter.link is a worthwhile partner for this initiative?

Inter.link has proven that a fresh attitude can create momentum of modernization in a market burdened with legacy and traditional beliefs. Inter.link’s commitment to transparency and their willingness to share relevant information from their network makes them the perfect partner for the Connectivity Insight Initiative

Highlights:

• Inter.link and BENOCS are working together to launch the Connectivity Insight Initiative, a project focused on sharing insights with the network community.

• This collaboration benefits the wider network community by publishing European-based reports and intelligence on internet events to help optimize routing, latency, quality, and resilience, and support informed decisions.

• BENOCS was chosen by Inter.link for its startup mindset, speed, and alignment, enabling execution where few European players currently operate.

In the world of connectivity, transparency is essential. This is because networks change, and routes continually require optimization.

Inter.link and BENOCS are combining their strengths to launch a new project for the network community: The Connectivity Insight Initiative.

By utilizing cutting-edge network analytics to give a window into quality connectivity services, Inter.link and BENOCS will share actionable information about connectivity. What are the current challenges faced by the industry? How do traffic patterns change in a shifting peering landscape? How can ISPs optimize their traffic?

BENOCS and Inter.link are working together to explore these topics and share their findings with the network community free of charge, since no subscription is required.

Theo Voss, CEO and Co-Founder of Inter.link said, “The Connectivity Insight Initiative is about curating data and then sharing it so the network community can make better connectivity decisions or have better insights for their own business.

“The collaboration between two European companies is crucial. Looking at today’s geopolitical development, there is no large-scale European alternative. And there’s also no trans-national European carrier, that is not American or Russian, which will share the kind of insights we will be working with BENOCS to share. This creates a unique momentum in terms of data sovereignty and internet intelligence.”

Hari Jayaraman, Manager: Sales & Strategy at BENOCS said, “It’s important to use our abilities to contribute to the industry. As Theo mentioned, especially from a European perspective, we don’t generally see many great insights in the industry even though there’s a lot of data here. With this collaboration, we aim to help network operators understand aspects of cross-border traffic behaviour and then translate this understanding into tangible benefits within their network operations.”

Stefan Funke, Head of Network and Infrastructure at Inter.link said, “There is not much visibility for this right now in the community, but large portions of the internet change very frequently without anyone ever noticing it.

“These are huge traffic or topology changes which may impact customers because it could create a peering problem between two Tier 1 providers. There may be congestion between other network operators and despite the customer being able to reach their desired targets, the quality can become worse. Now in collaboration with BENOCS, we can share this information so the community can actually see what happened and then react to it, such as choosing a different path.”

Follow the Connectivity Insight Initiative to receive new network insights which can help your business make more informed choices about connectivity.


About Inter.link

Inter.link is the Tier 2+ Network-as-a-Service provider (AS5405) delivering carbon neutral IP Transit, IP Access, integrated DDoS Protection, and FlexEthernet connectivity, provisioned on-demand in minutes. Our expanding multi-terabit network spans Europe and the U.S., offering 1G/400G in every PoP, and fast, self-service provisioning through the Inter.link portal.

About BENOCS

BENOCS is a growing company on a mission to revolutionize network traffic management. Its intelligent and fully automated solutions are suitable for networks of any size and offer telecommunications providers strategic options for managing growing network traffic. With BENOCS Analytics, network operators, transit and wholesale carriers, hosting providers, and CDNs gain end-to-end visibility into their entire data flows.