Network plane / Sonar
All systems operational.
Sonar is the Hyx network seen from the outside and the inside at once: every public service probed each minute with ninety days of history, the anycast fleet that serves it, and a network-wide observatory of traffic, attacks and DNS built from the same analytics customers use. Everything on this page is aggregate. No customer, hostname or visitor is identifiable from it.
417.8K
requests, last 24 h
served across the edge
25.4K
threats mitigated, 24 h
blocked or challenged at the edge
867.6 ms
edge p95 latency
edge processing time, 24 h
99.912%
90-day uptime
8 monitored services
01 / status
Every service, every minute, ninety days back.
Each row is probed from the control plane once a minute. The strip is one cell per UTC day; hover for the day's uptime and p95. Latency is what the probe measured to first byte.
Consoles & API
operationalHyx console
hyxcloud.uk — sign-in, customer console and staff surfaces.
operationalchecked 10s ago90 days agotoday99.895%
uptime · 90 d
30 d 99.910% · 24 h 99.93%
180 ms
time to first byte
Control-plane API
api.hyxcloud.uk — the control plane every edge and console depends on.
operationalchecked 10s ago90 days agotoday99.910%
uptime · 90 d
30 d 99.933% · 24 h 99.93%
166 ms
time to first byte
SwiftPress storefront
swiftpress.io — managed WordPress storefront and portal.
operationalchecked 10s ago90 days agotoday99.911%
uptime · 90 d
30 d 99.930% · 24 h 100.00%
190 ms
time to first byte
Edge network
operationalEdge anycast
109.224.228.115 — the anycast address every proxied site resolves to.
operationalchecked 10s ago90 days agotoday99.624%
uptime · 90 d
30 d 99.430% · 24 h 97.42%
14 ms
time to first byte
Authoritative DNS
operationalDNS anycast
109.224.230.100 — authoritative answers for every hosted zone.
operationalchecked 10s ago90 days agotoday99.978%
uptime · 90 d
30 d 99.968% · 24 h 100.00%
9 ms
soa answer
Platform
operationalControl-plane database
Zones, records, accounts and the replicated journal.
operationalchecked 10s ago90 days agotoday99.993%
uptime · 90 d
30 d 99.988% · 24 h 100.00%
1 ms
round trip
Coordination store
Rate limits, cron ledgers and edge fan-out.
operationalchecked 10s ago90 days agotoday100.000%
uptime · 90 d
30 d 100.000% · 24 h 100.00%
0 ms
round trip
Analytics warehouse
Per-request analytics, security events and DNS telemetry.
operationalchecked 10s ago90 days agotoday99.986%
uptime · 90 d
30 d 99.981% · 24 h 100.00%
174 ms
round trip
Incidents, last 30 days
100 recorded
Control-plane API
Oct 23, 2026, 7:11 AM UTC · http_503
1 min
Edge anycast
Oct 23, 2026, 12:48 AM UTC · timeout
2 min
Hyx console
Oct 23, 2026, 12:43 AM UTC · timeout
1 min
Edge anycast
Oct 23, 2026, 12:42 AM UTC · timeout
1 min
Edge anycast
Oct 23, 2026, 12:19 AM UTC · timeout
2 min
Edge anycast
Oct 22, 2026, 11:54 PM UTC · timeout
2 min
Edge anycast
Oct 22, 2026, 11:40 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 11:34 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 11:28 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 11:24 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 11:17 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 11:04 PM UTC · timeout
3 min
Edge anycast
Oct 22, 2026, 10:55 PM UTC · timeout
4 min
Edge anycast
Oct 22, 2026, 10:47 PM UTC · timeout
2 min
Edge anycast
Oct 22, 2026, 10:42 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 10:37 PM UTC · timeout
2 min
Edge anycast
Oct 22, 2026, 10:00 PM UTC · timeout
6 min
Edge anycast
Oct 22, 2026, 9:43 PM UTC · timeout
1 min
Edge anycast
Oct 22, 2026, 9:18 PM UTC · timeout
7 min
Edge anycast
Oct 22, 2026, 9:10 PM UTC · timeout
5 min
Latency by window
probe p50 / p95 / p99
| service | 1 h | 24 h | 7 d | 30 d |
|---|---|---|---|---|
| Hyx console | 34 / 181 / 1950 | 31 / 104 / 4009 | 31 / 125 / 4009 | 30 / 134 / 4008 |
| Control-plane API | 27 / 79 / 178 | 26 / 96 / 4005 | 25 / 111 / 1482 | 25 / 122 / 594 |
| SwiftPress storefront | 50 / 192 / 1819 | 48 / 121 / 935 | 46 / 141 / 1456 | 46 / 151 / 1079 |
| Edge anycast | 18 / 21 / 24 | 18 / 21 / 23 | 18 / 22 / 33 | 18 / 21 / 23 |
| DNS anycast | 8 / 9 / 13 | 8 / 9 / 10 | 8 / 10 / 20 | 8 / 9 / 10 |
| Control-plane database | 0 / 1 / 1 | 0 / 1 / 1 | 1 / 1 / 3 | 0 / 1 / 2 |
| Coordination store | 0 / 1 / 1 | 0 / 1 / 1 | 0 / 1 / 2 | 0 / 1 / 1 |
| Analytics warehouse | 32 / 153 / 1757 | 26 / 69 / 189 | 24 / 78 / 214 | 25 / 102 / 221 |
milliseconds · p50 / p95 / p99 of successful probes
02 / fleet
Where Hyx runs.
The anycast edge and DNS fleet on Bunny Magic Containers, and the control-plane services on the platform host, read straight from their orchestrators.
Hyx DNS
bunny magic containers · active
37
instances
autoscale 1–3 / region
37
regions
anycast points of presence
operational
state
anycast addresses
- 109.224.230.100
endpoints
- endpoint-1anycast109.224.230.100:5353/tcp+udp
- endpoint-2anycast109.224.230.100:80538053/tcp+udp
- httpanycast109.224.230.100:80808080/tcp+udp
instances · active regions, 24 h
- instances
- active regions
traffic per hour, 24 h
Hyx
bunny magic containers · active
37
instances
autoscale 1–3 / region
37
regions
anycast points of presence
operational
state
anycast addresses
- 109.224.228.115
endpoints
- httpanycast109.224.228.115:8080/tcp+udp · 443/tcp+udp
instances · active regions, 24 h
- instances
- active regions
traffic per hour, 24 h
Points of presence
37 in service · 20 available
EU
- AMS
- AT
- BU
- CZ
- DE
- DK
- ES
- FR
- GR
- HR
NA
- ASB
- BO
- CA
- DEN
- GA
- IL
SA
- BR
- CO
ASIA
- HK
- ID
Platform services
not configured
Platform read-out is not configured on this deployment.
03 / traffic
The network, in aggregate.
HTTP traffic across every site on the edge: volume, protocol adoption, who is asking, how fast it was answered and how much never had to reach an origin.
417.8K
requests
8.0 GB served
73.5K
unique client addresses
per-minute distinct, summed
6.09%
mitigated
15K blocked · 10.4K challenged
67.9%
cache hit ratio
of 203K cacheable
59.7 ms / 867.6 ms
edge latency p50 / p95
p99 5.00 s · avg 973.12 ms
1.59 s
origin time, avg
251.2K origin fetches · 94.2K errors
Requests over time
24h · 5-minute buckets
- requests
- cache hits
- mitigated
Edge latency distribution
share of requests by edge time
max observed 300.14 s · cached responses avg 5.77 ms
Average edge latency
per bucket, ms
Bandwidth · 5xx
bytes served and origin failures
- bytes
- 5xx responses
Protocol adoption
HTTP version negotiated
- 01151.4K 39.3%HTTP/3
- 02140.4K 36.4%HTTP/2
- 0393.5K 24.2%h1
- 04349 0.09%internal
Client class
as classified at the edge
- 01356.9K 97.5%Browser1.6K blocked
- 029K 2.5%Automated373 blocked
Response status
by class
- 01263.7K 63.1%2xx success
- 0215.1K 3.6%3xx redirect
- 0344.8K 10.7%4xx client error
- 0494.2K 22.5%5xx server error
Cache outcome
edge cache status
- 01138.2K 41.5%BYPASS
- 02131.5K 39.5%HIT
- 0363.2K 19.0%MISS
- 0423 0.01%COLLAPSED
- 056 0.00%STALE
Top countries
by requests
- 01107.1K 29.0%🇳🇱 NL0.2% blocked
- 0298.5K 26.7%🇵🇱 PL0.0% blocked
- 0359.9K 16.2%🇺🇸 US3.4% blocked
- 0420.9K 5.7%🇸🇬 SG7.0% blocked
- 0513.8K 3.7%🇩🇪 DE6.2% blocked
- 0612.6K 3.4%🇮🇷 IR0.3% blocked
- 0711.4K 3.1%🇧🇪 BE7.3% blocked
- 086.9K 1.9%🇨🇳 CN0.6% blocked
- 096.5K 1.8%🇬🇧 GB4.1% blocked
- 106.4K 1.7%🇭🇰 HK22.3% blocked
- 116K 1.6%🇫🇷 FR1.2% blocked
- 124.2K 1.1%🇨🇦 CA39.3% blocked
- 133K 0.81%🇯🇵 JP63.8% blocked
- 142.9K 0.77%🇫🇮 FI9.7% blocked
- 151.8K 0.49%🇮🇳 IN3.4% blocked
Top networks
autonomous systems
- 0197.4K 33.2%AS198389
- 0231.1K 10.6%AS1136
- 0330.3K 10.3%AS39698210.9K blocked
- 0424.7K 8.4%AS33915
- 0512.6K 4.3%AS215930
- 0610.9K 3.7%AS132203190 blocked
- 079.7K 3.3%AS1650999 blocked
- 088.8K 3.0%AS60439
- 098.2K 2.8%AS502661 blocked
- 107.8K 2.7%AS15169
- 117.4K 2.5%AS1461812 blocked
- 127K 2.4%AS14061247 blocked
- 136K 2.0%AS249401 blocked
- 145.7K 2.0%AS1627621 blocked
- 155.5K 1.9%AS1333588 blocked
Methods
HTTP method
- 01353.2K 91.6%GET
- 0227.6K 7.2%POST
- 034.7K 1.2%HEAD
- 0428 0.01%OPTIONS
- 0510 0.00%PUT
Content types
response media type
- 01138.6K 36.4%text/html3.7 GB
- 02100.7K 26.4%application/json30.0 MB
- 0345K 11.8%text/javascript366.7 MB
- 0444.2K 11.6%text/css153.2 MB
- 0517K 4.5%font/woff2643.8 MB
- 066.6K 1.7%image/webp323.1 MB
- 076.5K 1.7%image/jpeg943.5 MB
- 084.9K 1.3%text/plain3.7 MB
- 094.4K 1.2%text/xml5.2 MB
- 104.1K 1.1%image/avif293.8 MB
- 113.5K 0.91%image/png444.4 MB
- 122.8K 0.73%image/svg+xml10.6 MB
Top user agents
daily table · crawlers surface here
- 01347.7K 69.9%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36
- 0237.3K 7.5%Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Mobile Safari/537.36
- 0317.6K 3.5%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.367.3K blocked
- 0416.6K 3.3%Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.6.1 Mobile/15E148 Safari/604.1
- 0513.4K 2.7%Go-http-client/2.0677 blocked
- 0612.7K 2.5%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36 Edg/155.0.0.0
- 0711.1K 2.2%Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/27.0.1 Mobile/15E148 Safari/604.12 blocked
- 0810.6K 2.1%Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.367.7K blocked
- 098.5K 1.7%Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.365.5K blocked
- 107.7K 1.5%Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/30.0 Chrome/143.0.0.0 Mobile Safari/537.36
- 117.3K 1.5%Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.3613 blocked
- 127K 1.4%Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)6 blocked
Delivery
what the edge did for you
2.4K
images optimised
28% of eligible
336.8 MB
image bytes saved
549.6 MB → 212.9 MB
25.3%
datacenter traffic
from hosting / cloud ranges
397.1K
fingerprinted
JA4-attributed requests
166
challenges passed
362 waived
22.542%
status 5xx
of all requests
04 / security
What the edge refused.
Every mitigation the firewall, managed rules, reputation and Hyx AI applied, by cause, origin network and point of presence. Source addresses are counted, never listed.
149.5K
mitigation events
24h
5.6K
distinct sources
client addresses, counted not listed
988
source networks
113 countries
327
distinct fingerprints
JA4 TLS fingerprints
6.2%
likely automated
bot score ≥ 70 at the time of the event
Mitigations over time
by action taken
Why
top reasons
- 0183.3K 56.6%origin_error:origin_5xx43 sources
- 0223.9K 16.2%origin:4043K sources
- 0312.9K 8.7%banned_ip92 sources
- 0410.4K 7.1%origin_error:connect:Backend h2 Request failure: H2 response failed: stream error received: stream no longer needed [retry=idem]65 sources
- 055K 3.4%origin:403171 sources
- 064.6K 3.1%rule:captcha-myft.cloud255 sources
- 071.6K 1.1%rule:captcha-countires825 sources
- 081.3K 0.91%bic:no_user_agent40 sources
- 091.2K 0.84%ml:sticky_attack_flag25 sources
- 10938 0.64%rule:Block blacklisted countries283 sources
- 11660 0.45%ml:structural_bot_score=7025 sources
- 12502 0.34%edge:http_403358 sources
Source countries
by events
- 0183.5K 59.3%🇵🇱 PL39 sources
- 0211.7K 8.3%🇺🇸 US1.7K sources
- 0310.2K 7.3%🇸🇬 SG244 sources
- 046.9K 4.9%🇮🇷 IR11 sources
- 055.6K 4.0%🇧🇪 BE74 sources
- 064.5K 3.2%🇳🇱 NL893 sources
- 074.1K 2.9%🇩🇪 DE250 sources
- 083K 2.2%🇨🇦 CA36 sources
- 092.8K 2.0%🇭🇰 HK151 sources
- 102.3K 1.7%🇯🇵 JP42 sources
- 111.3K 0.94%🇦🇺 AU25 sources
- 121.2K 0.87%🇮🇳 IN101 sources
- 131.2K 0.85%🇬🇧 GB138 sources
- 141.1K 0.80%🇹🇼 TW7 sources
- 151.1K 0.78%🇫🇷 FR117 sources
Source networks
autonomous systems
- 0183.2K 65.1%AS1983892 sources
- 0223.6K 18.5%AS396982385 sources
- 036.8K 5.4%AS2159307 sources
- 045.4K 4.3%AS14061157 sources
- 052.7K 2.1%AS20609226 sources
- 061.4K 1.1%AS21878514 sources
- 071.2K 0.95%AS14618317 sources
- 081.2K 0.94%AS8075136 sources
- 091.2K 0.92%AS13740933 sources
- 101.1K 0.84%AS3189811 sources
Rules
managed and custom rules that fired
- 014.6K 63.7%captcha-myft.cloud
- 021.6K 22.7%captcha-countires
- 03938 13.0%Block blacklisted countries
- 0442 0.58%Block xmlrpc.php totally
Where it was stopped
point of presence
- 0191.9K 61.5%62afb7228f1e
- 029.9K 6.6%a770f0d6c1d6
- 038.3K 5.6%7ed10e12119c
- 046.7K 4.5%6595890ac7a8
- 053.9K 2.6%2d27e4633575
- 063.3K 2.2%6343acfe1da3
- 073.3K 2.2%997ae01ad684
- 082.8K 1.9%5955d1cb3b60
- 092.7K 1.8%c5885ebdf1e1
- 102.4K 1.6%1952b795a997
- 112K 1.3%1dd3fd5dcf84
- 121.6K 1.1%a13322462821
- 131.2K 0.79%27f9c59ac4bf
- 141.1K 0.74%e37028859a62
- 151.1K 0.72%f893d096a0c4
- 161K 0.70%48bbf0650a7e
- 17927 0.62%342024f483df
- 18848 0.57%a48d812d11f6
- 19771 0.52%da1ca59e52f2
- 20741 0.50%7f5030b21d39
Actions
what the edge did
- 0194.2K 63.0%origin_error
- 0230K 20.1%client_error
- 0313.5K 9.0%ban
- 0410K 6.7%challenge
- 051.5K 1.0%block
- 06285 0.19%server_error
Methods
of mitigated requests
- 01134.3K 89.9%GET
- 0213.6K 9.1%POST
- 031.6K 1.0%HEAD
- 043 0.00%PUT
- 052 0.00%OPTIONS
Bot score at the event
edge classifier
- 01133.3K 89.2%0–29 · likely human
- 027K 4.7%30–69 · uncertain
- 039.2K 6.2%70–100 · likely automated
05 / dns
Authoritative DNS, answered.
Query volume, record types, response codes, transports and the points of presence answering, from the anycast DNS fleet's own telemetry.
300.2K
queries
168 zones answered
100.00%
answered
54.7K NXDOMAIN
47 µs
avg answer time
max 11.6 ms
97.6%
EDNS
DNSSEC OK 90.3% · cookies 2.0%
0
rate-limited
0 slipped · 1 truncated
35.8 MB
bytes
in 15.4 MB · 0 send errors
Queries over time
answers, NXDOMAIN and rate-limit drops
- queries
- NXDOMAIN
- rate-limited
Answer latency
avg per bucket, ms
Record types
query type
- 01144K 48.0%A
- 0263.9K 21.3%AAAA
- 0352.9K 17.6%DNSKEY
- 049.3K 3.1%NS
- 058K 2.7%TXT
- 067.6K 2.5%MX
- 076.4K 2.1%CNAME
- 083K 1.0%SOA
- 092.3K 0.77%HTTPS
- 101.1K 0.38%CAA
- 11830 0.28%SRV
- 12540 0.18%ANY
Response codes
RCODE
- 01245.5K 81.8%NOERROR
- 0254.7K 18.2%NXDOMAIN
Transports
how resolvers asked
- 01298.9K 99.6%UDP
- 021.3K 0.44%TCP
Points of presence
queries answered per PoP
- 0196.6K 32.2%AMS53 µs
- 0228.6K 9.5%ASB43 µs
- 0325K 8.3%IL36 µs
- 0424K 8.0%FR45 µs
- 0523.1K 7.7%SG46 µs
- 0614.5K 4.8%SE42 µs
- 0711.5K 3.8%LA51 µs
- 0810.8K 3.6%UK51 µs
- 099.5K 3.2%HK44 µs
- 107.6K 2.5%IT40 µs
- 117.4K 2.5%BR43 µs
- 125.7K 1.9%WA41 µs
- 135.2K 1.7%TX50 µs
- 144.4K 1.5%BU43 µs
- 154.4K 1.5%GA42 µs
- 163.3K 1.1%JP40 µs
- 173.1K 1.0%PL36 µs
- 182.8K 0.93%CA49 µs
- 192.5K 0.82%SYD40 µs
- 202.2K 0.74%UA48 µs
- 211.5K 0.48%ES56 µs
- 221.4K 0.46%AT45 µs
- 231.2K 0.41%DEN44 µs
- 24999 0.33%MI47 µs
- 25679 0.23%MX46 µs
- 26497 0.17%HR44 µs
- 27453 0.15%TR44 µs
- 28369 0.12%CZ43 µs
- 29257 0.09%CO41 µs
- 30202 0.07%DK40 µs
- 31161 0.05%BO42 µs
- 3253 0.02%GR45 µs
- 3347 0.02%ISR29 µs
06 / origins
Behind the edge.
How the origins the edge fronts are behaving: health observations, error classes and circuit-breaker state, aggregated across every site.
38
origins observed
distinct upstreams
87.81%
healthy observations
breaker open 0.17% of observations
3.30 s
origin latency, avg
as seen from the edge
251.2K
origin requests
health-tracked fetches
94.2K
origin errors
37.488%
313
timeouts
0.125%
Error classes
what went wrong upstream
- 0110.2K 94.1%other
- 02513 4.7%timeout
- 0381 0.75%backend_missing
- 0440 0.37%tls
- 054 0.04%connect
07 / api
Take the data with you.
Both halves of Sonar are plain JSON, anonymous, CORS-open and cached at the edge. Same numbers as this page.
status
GET https://api.hyxcloud.uk/api/v1/sonar/status
Services, current probe, 90 daily buckets, latency windows, incidents, fleet read-outs.
observatory
GET https://api.hyxcloud.uk/api/v1/sonar/radar?range=24h|7d|30d
Traffic, security, DNS and origin aggregates. Grouped only by non-identifying dimensions.
Method: probes run from the control plane once a minute with an 8 s budget; a minute counts as down if the probe fails. Traffic and DNS figures are the edge's per-minute counters; security figures are individual mitigation events. Ranges are UTC. Sonar keeps 90 days of probe history. How Hyx records a request →