Documentation | Flowtriq DDoS Detection API & Agent Setup
Detection, Mitigation & Response

Detect and mitigate DDoS attacks in under 1 second, respond automatically, and keep your users informed.

All features →
Learn
Documentation Quick Start API Reference Agent Setup DDoS Protection Landscape State of DDoS 2026 REPORT Free Certifications NEW
Research & Guides
Mirai Botnet Kill Switch Research memcached Amplification Dynamic Baselines PCAP Forensics PagerDuty Setup
Company
About Us Partners Whitelabel / Reseller Affiliate Program Pay with Crypto System Status
Legal & Support
Contact Us Terms Privacy SLA
Who Uses Flowtriq

From indie hosts to ISPs, see how teams like yours use Flowtriq to detect and stop DDoS attacks.

Talk to Us →
Infrastructure
Hosting Providers ISPs MSPs/MSSPs Small Operators Routers Edge Node Defense
Gaming
Game Server Hosting Game Studios
Business
SaaS Platforms E-Commerce Financial Services Compliance NEW

Transit Analytics & Traffic Intelligence

95th percentile billing, top talker analysis, and protocol trend monitoring

Transit Analytics

Transit Analytics computes 95th percentile bandwidth measurements per node and across your workspace. This is the standard billing metric used by transit providers.

Accessing Transit Analytics

Go to Dashboard → Analytics and select the Transit tab.

Features

  • 95th percentile BPS: Computed per node and workspace-wide
  • Per-node billing table: Sortable table showing each node's 95th percentile, average, and peak bandwidth
  • CSV export: Download per-node billing data for reconciliation against provider invoices
  • Time ranges: 7 days, 30 days, 90 days, 365 days, or all-time

Traffic Intelligence

Traffic Intelligence provides real-time and historical traffic analysis. Access it from Dashboard → Traffic Intelligence.

Top Talkers

Shows the top 10 nodes ranked by average PPS, with columns for:

  • Average and peak PPS
  • Average and peak BPS
  • Protocol breakdown (TCP%, UDP%, ICMP%)

Filter by time range (1h, 6h, 24h, 7d, 30d) and by specific node.

Protocol Trends

Track how your TCP/UDP/ICMP distribution changes over time. A sudden shift in protocol ratio (e.g. UDP jumping from 20% to 80%) often indicates attack traffic before the PPS threshold is crossed.

Anomaly Detection

Traffic Intelligence flags anomalies in historical patterns: unusual protocol shifts, traffic volume spikes during off-hours, and unexpected geographic source changes.

Kafka Export

Stream flow data and mitigation events to Kafka topics in real time for integration with your data pipeline. Configure from Dashboard → Scrubbing → Advanced → Kafka.

SettingDescription
BrokersComma-separated Kafka broker addresses
Flow topicTopic for flow data (default: flowtriq.flows)
Events topicTopic for mitigation events (default: flowtriq.mitigation.events)
SASL authPLAIN, SCRAM-SHA-256, or SCRAM-SHA-512
TLSEnable TLS encryption for broker connections