惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Recent Announcements
Recent Announcements
雷峰网
雷峰网
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
Hugging Face - Blog
Hugging Face - Blog
博客园 - 司徒正美
人人都是产品经理
人人都是产品经理
博客园 - 【当耐特】
量子位
有赞技术团队
有赞技术团队
博客园 - 三生石上(FineUI控件)
博客园 - Franky
M
MIT News - Artificial intelligence
U
Unit 42
Last Week in AI
Last Week in AI
酷 壳 – CoolShell
酷 壳 – CoolShell
The Cloudflare Blog
J
Java Code Geeks
V
Visual Studio Blog
Engineering at Meta
Engineering at Meta
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
MyScale Blog
MyScale Blog
T
Tailwind CSS Blog
T
The Blog of Author Tim Ferriss
V
V2EX

Help Net Security

Your work apps are quietly handing 19 data points to someone ChatGPT advanced account security adds passkeys and hardware keys Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months Automating Pentest Delivery: A Step-by-Step Guide - PlexTrac Open-source privacy proxy masks PII before prompts reach external AI services Shadow AI risks deepen as 31% of users get no employer training Identity is the control plane for distributed infrastructure New infosec products of the month: April 2026 cPanel zero-day exploited for months before patch release (CVE-2026-41940) Cisco releases open-source toolkit for verifying AI model lineage Met Police face criticism for using AI to spy on their own officers Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431) Hacker with a special interest in breaching sports institutions ends behind bars - Help Net Security IP Fabric MCP server adds governance and control to enterprise AIOps workflows - Help Net Security Aqua Compass MCP server enables real-time investigation and containment of runtime threats - Help Net Security Google brings instant email verification to Android, no OTP needed - Help Net Security If cyber espionage via HDMI worries you, NCSC built a device to stop it - Help Net Security Apple fixes iPhone bug that let FBI retrieve deleted Signal messages(CVE-2026-28950) - Help Net Security GopherWhisper APT group hides command and control traffic in Slack and Discord - Help Net Security OpenAI tackles a bad habit people have when interacting with AI - Help Net Security A year in, Zoom's CISO reflects on balancing security and business - Help Net Security Scenario: Open-source framework for automated AI app red-teaming - Help Net Security GDPR works, but only where someone enforces it - Help Net Security Ransomware, fraud, and lawsuits drive cyber insurance claims to new peaks - Help Net Security Google’s Workspace Intelligence promises privacy while running on your data - Help Net Security Cyberattack on French government agency triggers phishing alert - Help Net Security Claude Mythos finds 271 Firefox flaws, Mozilla believes zero-days are numbered - Help Net Security Prove Identity Platform connects verification, authentication, and fraud prevention - Help Net Security New Mirai variants target routers and DVRs in parallel campaigns - Help Net Security Acronis GenAI Protection gives MSPs control over AI usage and data risks - Help Net Security
AI traffic is getting bigger, louder, and less predictable
Anamarija Po · 2026-05-01 · via Help Net Security

AI workflows need storage that supports repeated movement across the model lifecycle. Large datasets are ingested, transformed, exported for training, pulled back for evaluation, and refreshed as models evolve. Backblaze’s Q1 2026 Network Stats report says this creates a shift from diffuse internet-style traffic to large, high-bandwidth flows between fewer endpoints.

AI network traffic trends

Monthly view of all bits transferred to each network type (2025-05 to current) (Source: Backblaze)

“From a network perspective, this represents a meaningful shift from diffuse, internet-style traffic patterns to large, high-bandwidth flows between a smaller set of endpoints typical of AI-centric infrastructure,” Brent Nowak, Manager of Network Engineering at Backblaze, explained.

The report shows that this traffic pattern is becoming an operational factor for cloud infrastructure teams. Neocloud, or AI-focused compute networks, and hyperscaler traffic behave differently from content delivery networks (CDN), hosting, and ISP regional traffic.

Traffic slowed, then rebounded

Q1 2026 showed a winter slowdown in neocloud and hyperscaler traffic, followed by an upward trend in March. Backblaze also recorded an increase in CDN traffic during the winter months. Hosting and ISP traffic stayed largely within historical norms, reflecting steady usage patterns.

The report suggests two possible explanations. The slowdown may reflect a seasonal business cycle, with more downtime during the winter months. Another possibility is tied to dataset movement. If a large dataset is already stored, network traffic may remain low until a later update or training cycle sends a new volume of data across the network.

Traffic distribution by region

Quarter-over-quarter heatmaps show how traffic distribution changes by region and provider type. The analysis combines total traffic with the number of active endpoints to measure flow magnitude.

Q1 2026 showed lower neocloud and hyperscaler traffic during the winter months, followed by renewed activity in March. Neocloud traffic maintained high magnitude through the quarter, indicating large transfers across a small number of endpoints.

Northern Virginia, including the Ashburn and Reston corridor, remains a primary location for neocloud activity. Activity also expanded into US-West and EU-Central in March after lower levels earlier in the quarter.

Hyperscaler traffic followed a similar pattern, with a winter decrease and continued visibility in US-East.

CDN, hosting, and ISP regional traffic remained more predictable and spread out over time. These traffic types involve more sources and destinations, which makes them easier to model and load balance.

Network flow characteristics

Neocloud traffic is concentrated in regions tied to dense data center and compute infrastructure.

The United States shows the highest concentration of neocloud, hyperscaler, and CDN traffic. Backblaze notes that the U.S. contains about 40% to 45% of global data centers, which aligns with the traffic patterns observed in its network data.

Within the U.S., neocloud traffic is concentrated in California. Hyperscaler activity aligns with California and Virginia, including the Ashburn and Reston corridor.

Outside the United States, neocloud activity appears in Finland, Brazil, France, and Canada. CDN traffic shows concentration in the Netherlands, while hosting activity appears in Germany.

Neocloud and hyperscaler traffic are more dynamic than CDN, hosting, and ISP regional traffic. They move large volumes of data across fewer endpoints, appear in bursts, and require network planning around high-magnitude flows.