惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

博客园_首页
H
Help Net Security
量子位
The Cloudflare Blog
博客园 - Franky
博客园 - 聂微东
博客园 - 司徒正美
Last Week in AI
Last Week in AI
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Apple Machine Learning Research
Apple Machine Learning Research
宝玉的分享
宝玉的分享
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
有赞技术团队
有赞技术团队
罗磊的独立博客
GbyAI
GbyAI
雷峰网
雷峰网
T
The Blog of Author Tim Ferriss
Martin Fowler
Martin Fowler
S
SegmentFault 最新的问题
美团技术团队
阮一峰的网络日志
阮一峰的网络日志
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
U
Unit 42
MongoDB | Blog
MongoDB | Blog

Help Net Security

Police arrest 10 suspected members of Black Axe cybercrime gang ShinyHunters claims it stole 1.4 million records from Udemy Sevii unveils Cyber Swarm Defense Mode to stop AI-driven attacks at scale Alleged Chinese hacker extradited to US over cyberattacks targeting COVID-19 research Cequence Agent Personas bring granular control and governance to enterprise AI agents NowSecure MARI gives enterprises evidence-based visibility into third-party mobile app risk The metrics killing your SOC, and what to use instead US state privacy fines reached $3.425 billion in 2025 Canada’s first SMS blaster case leads to three arrests Linux storage management tool Stratis 3.9.0 adds online encryption and cache-less pool startup TLS Connect gives SMBs a right-sized automated tool to manage TLS certificates Aptori expands its platform with autonomous offensive testing to reduce security bottlenecks Your IAM was built for humans, AI agents don’t care The AI criminal mastermind is already hiring on gig platforms 25 open-source cybersecurity tools that don’t care about your budget Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach Users advised to drop passwords and make room for passkeys - Help Net Security Indirect prompt injection is taking hold in the wild - Help Net Security Compromised everyday devices power Chinese cyber espionage operations - Help Net Security New Cisco firewall malware can only be killed by pulling the plug - Help Net Security Meta is overhauling how you sign in, manage settings, and protect your accounts - Help Net Security Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers - Help Net Security OpenAI’s GPT-5.5 is out with expanded cybersecurity safeguards - Help Net Security AI is speeding up nation-state cyber programs - Help Net Security A study of 1,000 Android apps finds a privacy policy logging gap - Help Net Security IT spending to hit $6.31 trillion record, thanks to AI - Help Net Security Where AI in CI/CD is working for engineering teams - Help Net Security With AI's help, North Korean hackers stumbled into a near-undetectable attack - Help Net Security Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security
AI traffic is getting bigger, louder, and less predictable
Anamarija Po · 2026-05-01 · via Help Net Security

AI workflows need storage that supports repeated movement across the model lifecycle. Large datasets are ingested, transformed, exported for training, pulled back for evaluation, and refreshed as models evolve. Backblaze’s Q1 2026 Network Stats report says this creates a shift from diffuse internet-style traffic to large, high-bandwidth flows between fewer endpoints.

AI network traffic trends

Monthly view of all bits transferred to each network type (2025-05 to current) (Source: Backblaze)

“From a network perspective, this represents a meaningful shift from diffuse, internet-style traffic patterns to large, high-bandwidth flows between a smaller set of endpoints typical of AI-centric infrastructure,” Brent Nowak, Manager of Network Engineering at Backblaze, explained.

The report shows that this traffic pattern is becoming an operational factor for cloud infrastructure teams. Neocloud, or AI-focused compute networks, and hyperscaler traffic behave differently from content delivery networks (CDN), hosting, and ISP regional traffic.

Traffic slowed, then rebounded

Q1 2026 showed a winter slowdown in neocloud and hyperscaler traffic, followed by an upward trend in March. Backblaze also recorded an increase in CDN traffic during the winter months. Hosting and ISP traffic stayed largely within historical norms, reflecting steady usage patterns.

The report suggests two possible explanations. The slowdown may reflect a seasonal business cycle, with more downtime during the winter months. Another possibility is tied to dataset movement. If a large dataset is already stored, network traffic may remain low until a later update or training cycle sends a new volume of data across the network.

Traffic distribution by region

Quarter-over-quarter heatmaps show how traffic distribution changes by region and provider type. The analysis combines total traffic with the number of active endpoints to measure flow magnitude.

Q1 2026 showed lower neocloud and hyperscaler traffic during the winter months, followed by renewed activity in March. Neocloud traffic maintained high magnitude through the quarter, indicating large transfers across a small number of endpoints.

Northern Virginia, including the Ashburn and Reston corridor, remains a primary location for neocloud activity. Activity also expanded into US-West and EU-Central in March after lower levels earlier in the quarter.

Hyperscaler traffic followed a similar pattern, with a winter decrease and continued visibility in US-East.

CDN, hosting, and ISP regional traffic remained more predictable and spread out over time. These traffic types involve more sources and destinations, which makes them easier to model and load balance.

Network flow characteristics

Neocloud traffic is concentrated in regions tied to dense data center and compute infrastructure.

The United States shows the highest concentration of neocloud, hyperscaler, and CDN traffic. Backblaze notes that the U.S. contains about 40% to 45% of global data centers, which aligns with the traffic patterns observed in its network data.

Within the U.S., neocloud traffic is concentrated in California. Hyperscaler activity aligns with California and Virginia, including the Ashburn and Reston corridor.

Outside the United States, neocloud activity appears in Finland, Brazil, France, and Canada. CDN traffic shows concentration in the Netherlands, while hosting activity appears in Germany.

Neocloud and hyperscaler traffic are more dynamic than CDN, hosting, and ISP regional traffic. They move large volumes of data across fewer endpoints, appear in bursts, and require network planning around high-magnitude flows.