Network plane / Sonar
All systems operational.
Sonar is the Hyx network seen from the outside and the inside at once: every public service probed each minute with ninety days of history, the anycast fleet that serves it, and a network-wide observatory of traffic, attacks and DNS built from the same analytics customers use. Everything on this page is aggregate. No customer, hostname or visitor is identifiable from it.
48.7K
requests, last 24 h
served across the edge
14.3K
threats mitigated, 24 h
blocked or challenged at the edge
5.00 s
edge p95 latency
edge processing time, 24 h
99.927%
90-day uptime
8 monitored services
01 / status
Every service, every minute, ninety days back.
Each row is probed from the control plane once a minute. The strip is one cell per UTC day; hover for the day's uptime and p95. Latency is what the probe measured to first byte.
Consoles & API
operationalHyx console
hyxcloud.uk — sign-in, customer console and staff surfaces.
operationalchecked 22s ago90 days agotoday99.806%
uptime · 90 d
30 d 99.806% · 24 h 99.93%
30 ms
time to first byte
Control-plane API
api.hyxcloud.uk — the control plane every edge and console depends on.
operationalchecked 22s ago90 days agotoday99.792%
uptime · 90 d
30 d 99.792% · 24 h 99.86%
21 ms
time to first byte
SwiftPress storefront
swiftpress.io — managed WordPress storefront and portal.
operationalchecked 22s ago90 days agotoday99.847%
uptime · 90 d
30 d 99.847% · 24 h 99.93%
47 ms
time to first byte
Edge network
operationalEdge anycast
109.224.228.115 — the anycast address every proxied site resolves to.
operationalchecked 22s ago90 days agotoday100.000%
uptime · 90 d
30 d 100.000% · 24 h 100.00%
20 ms
time to first byte
Authoritative DNS
operationalDNS anycast
109.224.230.100 — authoritative answers for every hosted zone.
operationalchecked 22s ago90 days agotoday100.000%
uptime · 90 d
30 d 100.000% · 24 h 100.00%
8 ms
soa answer
Platform
operationalControl-plane database
Zones, records, accounts and the replicated journal.
operationalchecked 22s ago90 days agotoday100.000%
uptime · 90 d
30 d 100.000% · 24 h 100.00%
1 ms
round trip
Coordination store
Rate limits, cron ledgers and edge fan-out.
operationalchecked 22s ago90 days agotoday100.000%
uptime · 90 d
30 d 100.000% · 24 h 100.00%
0 ms
round trip
Analytics warehouse
Per-request analytics, security events and DNS telemetry.
operationalchecked 22s ago90 days agotoday99.972%
uptime · 90 d
30 d 99.972% · 24 h 100.00%
22 ms
round trip
Incidents, last 30 days
41 recorded
SwiftPress storefront
Sep 7, 2026, 7:12 AM UTC · http_503
1 min
Hyx console
Sep 7, 2026, 7:12 AM UTC · http_503
1 min
Control-plane API
Sep 7, 2026, 7:10 AM UTC · timeout
3 min
Control-plane API
Sep 6, 2026, 7:17 AM UTC · http_503
1 min
Hyx console
Sep 6, 2026, 7:17 AM UTC · http_503
1 min
SwiftPress storefront
Sep 6, 2026, 7:17 AM UTC · http_503
1 min
SwiftPress storefront
Sep 6, 2026, 5:48 AM UTC · http_503
1 min
Control-plane API
Sep 6, 2026, 5:48 AM UTC · http_503
1 min
Hyx console
Sep 6, 2026, 5:48 AM UTC · http_503
1 min
Analytics warehouse
Sep 5, 2026, 10:34 PM UTC · error
1 min
Hyx console
Sep 5, 2026, 6:33 AM UTC · http_503
1 min
Control-plane API
Sep 5, 2026, 6:33 AM UTC · http_503
1 min
Control-plane API
Sep 5, 2026, 2:59 AM UTC · http_503
1 min
SwiftPress storefront
Sep 5, 2026, 2:59 AM UTC · http_503
1 min
Hyx console
Sep 5, 2026, 2:59 AM UTC · http_503
1 min
Control-plane API
Sep 5, 2026, 2:52 AM UTC · http_503
1 min
SwiftPress storefront
Sep 5, 2026, 2:52 AM UTC · http_503
1 min
Hyx console
Sep 5, 2026, 2:52 AM UTC · http_503
1 min
SwiftPress storefront
Sep 5, 2026, 2:45 AM UTC · http_503
1 min
Control-plane API
Sep 5, 2026, 2:45 AM UTC · http_503
1 min
Latency by window
probe p50 / p95 / p99
| service | 1 h | 24 h | 7 d | 30 d |
|---|---|---|---|---|
| Hyx console | 30 / 46 / 78 | 30 / 113 / 4007 | 30 / 114 / 4008 | 30 / 114 / 4008 |
| Control-plane API | 22 / 39 / 69 | 23 / 101 / 279 | 23 / 99 / 341 | 23 / 99 / 341 |
| SwiftPress storefront | 42 / 72 / 1727 | 44 / 121 / 378 | 44 / 129 / 4019 | 44 / 129 / 4019 |
| Edge anycast | 17 / 21 / 21 | 18 / 20 / 22 | 18 / 21 / 23 | 18 / 21 / 23 |
| DNS anycast | 8 / 9 / 9 | 8 / 9 / 10 | 8 / 9 / 10 | 8 / 9 / 10 |
| Control-plane database | 0 / 1 / 1 | 0 / 1 / 1 | 0 / 1 / 1 | 0 / 1 / 1 |
| Coordination store | 0 / 1 / 1 | 0 / 1 / 1 | 0 / 1 / 1 | 0 / 1 / 1 |
| Analytics warehouse | 23 / 39 / 72 | 24 / 92 / 198 | 25 / 80 / 204 | 25 / 80 / 204 |
milliseconds · p50 / p95 / p99 of successful probes
02 / fleet
Where Hyx runs.
The anycast edge and DNS fleet on Bunny Magic Containers, and the control-plane services on the platform host, read straight from their orchestrators.
Hyx DNS
bunny magic containers · active
37
instances
autoscale 1–3 / region
37
regions
anycast points of presence
operational
state
anycast addresses
- 109.224.230.100
endpoints
- endpoint-1anycast109.224.230.100:5353/tcp+udp
- endpoint-2anycast109.224.230.100:80538053/tcp+udp
- httpanycast109.224.230.100:80808080/tcp+udp
instances · active regions, 24 h
- instances
- active regions
traffic per hour, 24 h
Hyx
bunny magic containers · active
37
instances
autoscale 1–3 / region
37
regions
anycast points of presence
operational
state
anycast addresses
- 109.224.228.115
endpoints
- httpanycast109.224.228.115:8080/tcp+udp · 443/tcp+udp
instances · active regions, 24 h
- instances
- active regions
traffic per hour, 24 h
Points of presence
37 in service · 20 available
EU
- AMS
- AT
- BU
- CZ
- DE
- DK
- ES
- FR
- GR
- HR
NA
- ASB
- BO
- CA
- DEN
- GA
- IL
SA
- BR
- CO
ASIA
- HK
- ID
Platform services
not configured
Platform read-out is not configured on this deployment.
03 / traffic
The network, in aggregate.
HTTP traffic across every site on the edge: volume, protocol adoption, who is asking, how fast it was answered and how much never had to reach an origin.
48.7K
requests
49.7 GB served
9.3K
unique client addresses
per-minute distinct, summed
29.40%
mitigated
6.6K blocked · 7.7K challenged
47.8%
cache hit ratio
of 22.6K cacheable
4.5 ms / 5.00 s
edge latency p50 / p95
p99 5.00 s · avg 5.35 s
1.38 s
origin time, avg
23.3K origin fetches · 685 errors
Requests over time
24h · 5-minute buckets
- requests
- cache hits
- mitigated
Edge latency distribution
share of requests by edge time
max observed 304.41 s · cached responses avg 6.76 ms
Average edge latency
per bucket, ms
Bandwidth · 5xx
bytes served and origin failures
- bytes
- 5xx responses
Protocol adoption
HTTP version negotiated
- 0120.6K 43.3%h1
- 0214.3K 30.0%HTTP/2
- 0312.7K 26.7%HTTP/3
Client class
as classified at the edge
- 0140.1K 93.6%Browser1.6K blocked
- 022.8K 6.4%Automated437 blocked
Response status
by class
- 0138.1K 78.2%2xx success
- 021.2K 2.5%3xx redirect
- 038.7K 17.8%4xx client error
- 04703 1.4%5xx server error
Cache outcome
edge cache status
- 0111.4K 37.4%MISS
- 029.9K 32.4%HIT
- 038.8K 29.0%BYPASS
- 04343 1.1%COLLAPSED
Top countries
by requests
- 0116.5K 36.8%🇵🇱 PL0.0% blocked
- 027.2K 16.0%🇺🇸 US25.8% blocked
- 034.1K 9.2%🇩🇪 DE13.2% blocked
- 044.1K 9.1%🇬🇧 GB7.4% blocked
- 053.3K 7.3%🇳🇱 NL10.4% blocked
- 061.3K 2.9%🇸🇬 SG4.8% blocked
- 071.3K 2.9%🇧🇷 BR65.8% blocked
- 081.2K 2.7%🇦🇩 AD63.5% blocked
- 09869 1.9%🇯🇵 JP1.5% blocked
- 10798 1.8%🇮🇳 IN18.9% blocked
- 11655 1.5%🇦🇺 AU61.2% blocked
- 12626 1.4%🇪🇸 ES58.9% blocked
- 13525 1.2%🇫🇷 FR8.2% blocked
- 14507 1.1%🇸🇦 SA0.2% blocked
- 15452 1.0%🇧🇪 BE0.4% blocked
Top networks
autonomous systems
- 0115.1K 38.9%AS198389
- 027.9K 20.2%AS3969824.7K blocked
- 032.9K 7.5%AS249407 blocked
- 041.5K 4.0%AS48090927 blocked
- 051.5K 4.0%AS3189819 blocked
- 061.2K 3.2%AS2856
- 071.1K 2.9%AS5607
- 08957 2.5%AS197113
- 09862 2.2%AS1650977 blocked
- 10809 2.1%AS1461883 blocked
- 11730 1.9%AS60439
- 12585 1.5%AS15169
- 13565 1.5%AS451023 blocked
- 14542 1.4%AS80758 blocked
- 15465 1.2%AS212027
Methods
HTTP method
- 0140.8K 85.9%GET
- 026.3K 13.3%POST
- 03366 0.77%HEAD
- 046 0.01%PUT
- 052 0.00%OPTIONS
Content types
response media type
- 0124.1K 51.5%text/html1.8 GB
- 029.9K 21.2%image/jpeg44.4 GB
- 034.1K 8.8%text/javascript52.5 MB
- 042.5K 5.4%text/css17.4 MB
- 052K 4.3%application/json7.1 MB
- 061.2K 2.5%text/plain1.1 MB
- 07703 1.5%font/woff227.7 MB
- 08533 1.1%image/svg+xml564.1 kB
- 09464 0.99%image/png42.5 MB
- 10443 0.95%image/webp36.7 MB
- 11270 0.58%image/avif8.5 MB
- 12268 0.57%text/xml151.9 kB
Top user agents
daily table · crawlers surface here
- 0111.9K 28.6%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36
- 029.6K 22.9%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36121 blocked
- 034K 9.5%Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.362.5K blocked
- 043.9K 9.3%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.362.2K blocked
- 052K 4.7%Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36899 blocked
- 061.7K 4.0%Fivenines-Uptime/1.0
- 071.6K 3.8%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36668 blocked
- 081.5K 3.7%Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36
- 091.5K 3.6%Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/151.0.0.0 Safari/537.36
- 101.4K 3.3%Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36
- 111.4K 3.3%Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.110 blocked
- 121.4K 3.3%InstatusBot/1.0 (+https://instatus.com; support@instatus.com)
Delivery
what the edge did for you
300
images optimised
5% of eligible
43.9 MB
image bytes saved
73.0 MB → 29.1 MB
37.0%
datacenter traffic
from hosting / cloud ranges
44K
fingerprinted
JA4-attributed requests
95
challenges passed
16 waived
1.443%
status 5xx
of all requests
04 / security
What the edge refused.
Every mitigation the firewall, managed rules, reputation and Hyx AI applied, by cause, origin network and point of presence. Source addresses are counted, never listed.
17.3K
mitigation events
24h
1.1K
distinct sources
client addresses, counted not listed
275
source networks
75 countries
183
distinct fingerprints
JA4 TLS fingerprints
23.7%
likely automated
bot score ≥ 70 at the time of the event
Mitigations over time
by action taken
Why
top reasons
- 014.7K 29.6%banned_ip30 sources
- 023.8K 24.1%ml:sticky_attack_flag42 sources
- 032.1K 13.1%ml:structural_bot_score=7057 sources
- 041.8K 11.2%origin:404165 sources
- 05808 5.1%ml:structural_bot_score=8066 sources
- 06665 4.2%firehol:firehol_level129 sources
- 07423 2.6%ml:structural_bot_score=100163 sources
- 08273 1.7%origin_error:connect:Origin request failed8 sources
- 09272 1.7%firehol:datacenters113 sources
- 10228 1.4%rule:Block blacklisted countries87 sources
- 11216 1.4%rule:captcha-countires140 sources
- 12174 1.1%ml:structural_bot_score=6018 sources
Source countries
by events
- 013.4K 23.9%🇺🇸 US438 sources
- 021.3K 9.3%🇵🇱 PL12 sources
- 031.3K 9.0%🇧🇷 BR34 sources
- 041.2K 8.4%🇦🇩 AD5 sources
- 051K 7.2%🇳🇱 NL72 sources
- 06993 6.9%🇩🇪 DE82 sources
- 07944 6.6%🇮🇳 IN25 sources
- 08855 6.0%🇯🇵 JP19 sources
- 09748 5.2%🇬🇧 GB44 sources
- 10551 3.9%🇪🇸 ES7 sources
- 11514 3.6%🇦🇺 AU6 sources
- 12482 3.4%🇸🇦 SA5 sources
- 13389 2.7%🇮🇩 ID9 sources
- 14292 2.0%🇮🇱 IL7 sources
- 15257 1.8%🇶🇦 QA1 sources
Source networks
autonomous systems
- 017.4K 57.6%AS39698291 sources
- 021.5K 12.0%AS4809012 sources
- 031.3K 10.5%AS3189838 sources
- 041.2K 9.7%AS1983892 sources
- 05316 2.5%AS604392 sources
- 06252 2.0%AS1650934 sources
- 07200 1.6%AS14618117 sources
- 08196 1.5%AS807530 sources
- 09177 1.4%AS90096 sources
- 10174 1.4%AS249409 sources
Rules
managed and custom rules that fired
- 01228 51.0%Block blacklisted countries
- 02216 48.3%captcha-countires
- 033 0.67%Block xmlrpc.php totally
Where it was stopped
point of presence
- 012.8K 16.3%31a1528c6b48
- 022.2K 12.9%1d84e8cb16d9
- 031.4K 8.2%82d2d0c12fea
- 041.3K 7.5%265c0c19645c
- 051.3K 7.4%88b7e4192265
- 061.3K 7.3%ef27e4b80066
- 071.1K 6.4%cc104c4aace7
- 08996 5.8%fc4a50d2674a
- 09813 4.7%40eb6bd87aa9
- 10593 3.4%0df4dcc9ee50
- 11554 3.2%ea4609bdf549
- 12553 3.2%31ff2f3ca264
- 13454 2.6%85b83aeb915f
- 14425 2.5%9298f139675e
- 15280 1.6%1fcb9eae4874
- 16210 1.2%f155d4c65554
- 17201 1.2%060363b08dd4
- 18194 1.1%d4f3135c3fe2
- 19180 1.0%365ff1abe7a6
- 20146 0.84%8de54a5c6d7c
Actions
what the edge did
- 017.6K 44.0%challenge
- 025.8K 33.5%ban
- 032.1K 12.0%client_error
- 04981 5.7%block
- 05808 4.7%origin_error
- 0619 0.11%server_error
Methods
of mitigated requests
- 0113K 75.1%GET
- 024.3K 24.7%POST
- 0334 0.20%HEAD
- 043 0.02%PROPFIND
- 052 0.01%OPTIONS
Bot score at the event
edge classifier
- 018.5K 49.1%0–29 · likely human
- 024.7K 27.2%30–69 · uncertain
- 034.1K 23.7%70–100 · likely automated
05 / dns
Authoritative DNS, answered.
Query volume, record types, response codes, transports and the points of presence answering, from the anycast DNS fleet's own telemetry.
154.7K
queries
125 zones answered
100.00%
answered
29.7K NXDOMAIN
43 µs
avg answer time
max 2.5 ms
96.5%
EDNS
DNSSEC OK 87.1% · cookies 3.6%
0
rate-limited
0 slipped · 0 truncated
18.0 MB
bytes
in 7.9 MB · 0 send errors
Queries over time
answers, NXDOMAIN and rate-limit drops
- queries
- NXDOMAIN
- rate-limited
Answer latency
avg per bucket, ms
Record types
query type
- 0175.9K 49.1%A
- 0230.8K 19.9%AAAA
- 0322.5K 14.6%DNSKEY
- 046.3K 4.1%NS
- 055.9K 3.8%MX
- 065.2K 3.3%TXT
- 072.6K 1.7%SOA
- 082K 1.3%CNAME
- 092K 1.3%HTTPS
- 10755 0.49%SRV
- 11470 0.30%CAA
- 1298 0.06%ANY
Response codes
RCODE
- 01125K 80.8%NOERROR
- 0229.7K 19.2%NXDOMAIN
- 035 0.00%REFUSED
Transports
how resolvers asked
- 01154.2K 99.7%UDP
- 02472 0.31%TCP
Points of presence
queries answered per PoP
- 0130.7K 19.9%AMS43 µs
- 0220K 12.9%ASB41 µs
- 0313.8K 9.0%FR44 µs
- 0413.3K 8.6%LA40 µs
- 0511.7K 7.6%SG42 µs
- 069.7K 6.3%UK51 µs
- 079.3K 6.0%NY41 µs
- 085.2K 3.4%IT41 µs
- 094.5K 2.9%SE40 µs
- 104K 2.6%BR41 µs
- 113.2K 2.1%CA48 µs
- 123.2K 2.1%DEN37 µs
- 133.2K 2.1%AT47 µs
- 143K 2.0%IL38 µs
- 152.9K 1.9%WA39 µs
- 162.9K 1.9%TX60 µs
- 172.9K 1.8%JP44 µs
- 182.7K 1.8%HK53 µs
- 192.1K 1.4%SYD54 µs
- 201.7K 1.1%GA41 µs
- 211.3K 0.87%ES43 µs
- 22951 0.61%PL38 µs
- 23887 0.57%HR44 µs
- 24416 0.27%TR49 µs
- 25257 0.17%MI47 µs
- 26210 0.14%DK38 µs
- 27165 0.11%CZ39 µs
- 28101 0.07%GR41 µs
- 2976 0.05%MX44 µs
- 3068 0.04%BO44 µs
- 3116 0.01%UA39 µs
06 / origins
Behind the edge.
How the origins the edge fronts are behaving: health observations, error classes and circuit-breaker state, aggregated across every site.
5
origins observed
distinct upstreams
98.68%
healthy observations
breaker open 0.00% of observations
498.7 ms
origin latency, avg
as seen from the edge
22.7K
origin requests
health-tracked fetches
111
origin errors
0.488%
0
timeouts
0.000%
Error classes
what went wrong upstream
No data in this window.
07 / api
Take the data with you.
Both halves of Sonar are plain JSON, anonymous, CORS-open and cached at the edge. Same numbers as this page.
status
GET https://api.hyxcloud.uk/api/v1/sonar/status
Services, current probe, 90 daily buckets, latency windows, incidents, fleet read-outs.
observatory
GET https://api.hyxcloud.uk/api/v1/sonar/radar?range=24h|7d|30d
Traffic, security, DNS and origin aggregates. Grouped only by non-identifying dimensions.
Method: probes run from the control plane once a minute with an 8 s budget; a minute counts as down if the probe fails. Traffic and DNS figures are the edge's per-minute counters; security figures are individual mitigation events. Ranges are UTC. Sonar keeps 90 days of probe history. How Hyx records a request →