What was going on?

DENIC, the managing entity of the .de TLD, issued DNS responses with incorrect signatures. Consequently, DNSSEC-validating resolvers were failing to resolve .de domains.

Traffic from DENIC started to increase at around 19:30 UTC and normalized at approx. 22:30 (closely matching Cloudflare Radar’s observations). This increased traffic was caused by resolvers continuing trying to resolve .de domains but failing to do so.

Phew!

To quote Redditor jamesthethirteenth:

• It’s not you.

• It’s a botched scheduled maintenance window at the German national TLD registry.

• Bahn (the federal railway) and Chip (huge tech publication) are down with you.

• DENIC themselves can’t receive email about it.

Ouch.

The problem has now been resolved and all resolvers are resolving as normal again.

Traffic drops. Every day, right around the same time.

Same pattern. Same timing. No alerts.

The drop wasn’t random. Instead, it showed up consistently in the time-series:

• Same time

• Similar magnitude

• Clean recovery afterward

There were no spikes or instability leading up to the drop, just a steady and predictable dip. At first glance, this usually points to congestion, capacity limits or routing issues.

But this didn’t behave like any of those.

That’s where things changed

We started peeling it back. From overall traffic → to contributing networks → down to individual flows.

Using BENOCS’ Raw Network Analyzer, we then looked at the actual subnets.

Specific IPs stood out, and a reverse lookup pointed to something more specific: an embedded cache inside the network in question.

Now the pattern starts to shift from “network issue” to something else entirely.

So what’s actually happening here?

A few possibilities emerge:

• A scheduled cache refresh or content rotation

• Demand shifting at a very specific time of day

• Traffic being redirected based on cost or policy

• Application-driven behavior rather than network-driven

Questions worth thinking about

• Why would traffic drop so precisely at the same time every day?

• What kind of content creates such a synchronized pattern?

• Is this driven by users or by infrastructure?

• And more importantly, is this even a “problem”?

Important to remember

Not every anomaly is an incident. Some are patterns. And patterns are often more valuable than incidents in showing how the network actually behaves.

The real value isn’t in spotting the drop.

It’s in understanding why it’s there in the first place.

Why BENOCS’ involvement in the initiative?
We feel it is important to use our capabilities to contribute to the industry: a smooth functioning internet is beneficial for everyone, network operators and consumers alike. We believe such a cooperation will strengthen the industry as a whole.

What you do you hope network operators gain from this initiative?

Light-bulb moments! Our vision is that our industry peers can utilise intelligence gained from the Connectivity Insight Initiative to understand and optimize their own network’s behaviour.

What is unique about this initiative?
In today’s political climate, a European-made initiative is essential for internet safety and stability. The Connectivity Insight Initiative is unique in that it is 100 percent made in Europe and free for everyone to access.

Why do you feel Inter.link is a worthwhile partner for this initiative?

Inter.link has proven that a fresh attitude can create momentum of modernization in a market burdened with legacy and traditional beliefs. Inter.link’s commitment to transparency and their willingness to share relevant information from their network makes them the perfect partner for the Connectivity Insight Initiative

Highlights:

• Inter.link and BENOCS are working together to launch the Connectivity Insight Initiative, a project focused on sharing insights with the network community.

• This collaboration benefits the wider network community by publishing European-based reports and intelligence on internet events to help optimize routing, latency, quality, and resilience, and support informed decisions.

• BENOCS was chosen by Inter.link for its startup mindset, speed, and alignment, enabling execution where few European players currently operate.

In the world of connectivity, transparency is essential. This is because networks change, and routes continually require optimization.

Inter.link and BENOCS are combining their strengths to launch a new project for the network community: The Connectivity Insight Initiative.

By utilizing cutting-edge network analytics to give a window into quality connectivity services, Inter.link and BENOCS will share actionable information about connectivity. What are the current challenges faced by the industry? How do traffic patterns change in a shifting peering landscape? How can ISPs optimize their traffic?

BENOCS and Inter.link are working together to explore these topics and share their findings with the network community free of charge, since no subscription is required.

Theo Voss, CEO and Co-Founder of Inter.link said, “The Connectivity Insight Initiative is about curating data and then sharing it so the network community can make better connectivity decisions or have better insights for their own business.

“The collaboration between two European companies is crucial. Looking at today’s geopolitical development, there is no large-scale European alternative. And there’s also no trans-national European carrier, that is not American or Russian, which will share the kind of insights we will be working with BENOCS to share. This creates a unique momentum in terms of data sovereignty and internet intelligence.”

Hari Jayaraman, Manager: Sales & Strategy at BENOCS said, “It’s important to use our abilities to contribute to the industry. As Theo mentioned, especially from a European perspective, we don’t generally see many great insights in the industry even though there’s a lot of data here. With this collaboration, we aim to help network operators understand aspects of cross-border traffic behaviour and then translate this understanding into tangible benefits within their network operations.”

Stefan Funke, Head of Network and Infrastructure at Inter.link said, “There is not much visibility for this right now in the community, but large portions of the internet change very frequently without anyone ever noticing it.

“These are huge traffic or topology changes which may impact customers because it could create a peering problem between two Tier 1 providers. There may be congestion between other network operators and despite the customer being able to reach their desired targets, the quality can become worse. Now in collaboration with BENOCS, we can share this information so the community can actually see what happened and then react to it, such as choosing a different path.”

Follow the Connectivity Insight Initiative to receive new network insights which can help your business make more informed choices about connectivity.


About Inter.link

Inter.link is the Tier 2+ Network-as-a-Service provider (AS5405) delivering carbon neutral IP Transit, IP Access, integrated DDoS Protection, and FlexEthernet connectivity, provisioned on-demand in minutes. Our expanding multi-terabit network spans Europe and the U.S., offering 1G/400G in every PoP, and fast, self-service provisioning through the Inter.link portal.

About BENOCS

BENOCS is a growing company on a mission to revolutionize network traffic management. Its intelligent and fully automated solutions are suitable for networks of any size and offer telecommunications providers strategic options for managing growing network traffic. With BENOCS Analytics, network operators, transit and wholesale carriers, hosting providers, and CDNs gain end-to-end visibility into their entire data flows.