NOC2: the BNGSOFT network operations centre
Internet weather · Is it down? · Access Health
NEW RELEASENOC2 · Internet Observatory 3

Is it the internet, is it a service,or is it your access network?

Every "the internet is down" call has three suspects. Internet Observatory 3 answers which one, in plain words: a shared CDN, IX or transit path; a popular service having trouble; or your own fiber, OLTs and VLANs. Each verdict is held to a rule, says likely where it is likely, and never paints unknown as healthy.
  1. 01Internet weathershared path or your own path
  2. 02Is it down?64 popular services, own baseline
  3. 03Access Healthoutage radar, vendor scorecard
  4. 04Public status pageanonymous, launching now
  5. 05Plan-scaled protectionin Session Info
One question, three suspects
~
Likely the CDN, IX or transit, not your network.Google is slow at 3 or more operators in City A, and the verdict has held for 4 of the last 6 five-minute windows.
!problem ~shared path ~your own path ✓normal ?learning / not enough data, never green
≥3 operators
slow in one city: likely the
shared path, not you
64 services
each judged against
its own normal
1 event
per OLT cut, with
customer-minutes lost
“Not enough data”
never a false
“all fine”

00The problem: one phone call, three suspects

"The internet is down" can mean three very different things, and each one needs a different team and a different answer to the customer.

The internet
CDN · IX

A shared path everyone uses

A slow cache, a congested exchange or a transit problem hits many networks at once. Nothing in your building can fix it, yet your support desk takes the calls.

A service
UPI ✕

A popular app having trouble

A payment app or a game fails nationally. Customers blame their ISP first, and support learns about it from the queue, not from a dashboard.

Your access
OLT ⚡

Your own fiber, OLTs and VLANs

A cut fiber or a lost OLT power feed drops a whole area. Session logs show hundreds of disconnects, but nobody sees them as one event with a cause.

01Internet weather: is it the internet, or is it us?

NOC2 combines what every gateway sees, per destination network owner (Google, Meta, Akamai, Amazon, Microsoft, Jio and more) and per city, into a weather map. Shared weather means a shared path. Weather over only one operator means that operator's own path. Click a square.

Normal Shared path (≥3 operators) Your own path Not enough data
Google · City A

Likely the CDN, IX or transit, not your network.

≥3 ops
The verdict ruleSlow at 3 or more operators in the same city: likely the CDN, IX or transit. Slow at only one operator: likely that operator's own path.
4 of 6
No flappingA verdict must hold for 4 of the last 6 five-minute windows before it shows, so one bad sample never paints the map.
Anonymous benchmark

"Your Google answer time is slower than most operators measured in your region."

Shown only when at least 3 other operators measure the same thing; otherwise it rolls up to the region. It never names anyone, and each operator sees only its own gateways by name.

Experience in plain words

What a subscriber in that city can do right now

YouTube 4K ✓Video calls ✓Gaming ⚠ 85 msDNS ✓

ESTIMATEThroughput is estimated from round-trip time and loss (the Mathis formula), and labelled as an estimate everywhere it appears.

Monthly CDN scorecard

Where your users could be faster, once a month

  • Caches bypassed: traffic that should be served close by but is not.
  • Peering missing: owners you reach the long way round.
  • Slow DNS upstreams: the resolvers that add time to every page.

02“Is it down?” for popular services

The gateway resolves each service's domains itself, then counts new connections and how fast that service's servers answer, measured at the gateway, so the subscriber's own line is not included. Each service is judged only against its own normal on that gateway: the same hour on past days, else the last 7 days. Never against a fixed number.

Try it: pick a service, then a situation
VerdictNormal for this hour.
Operators, anonymous:YouABCD

Demo values are illustrative. The shaded band is the service's own normal for that hour; the line is today.

Its own normal
66%

Can be perfectly healthy

Some services have only 66% of connections answered on a normal day, because remote caches answer slowly. A fixed threshold would cry wolf all day; NOC2 compares each service with itself.

Fleet rule
≥3

Operators at the same time

Down at 3 or more operators at once: "the service is having trouble". Down at only one operator: "that operator's path". Support knows which answer to give before the queue fills.

Learning mode
~2 days

Grey until it knows

A new gateway learns what is normal. Meanwhile live readings show in grey: "WhatsApp: learning normal · measured now 96.6% answered · ~1 ms". Nothing turns green or red before it has its own baseline.

A starter catalog of 64 popular services

PaymentsUPI, PhonePe, Google Pay, Paytm, the big banks
SocialWhatsApp, Instagram, Facebook, Telegram, X, ShareChat
VideoYouTube, Netflix, Prime Video, JioHotstar, Zee5, SonyLIV
GamingBGMI, Free Fire, Steam, PSN, Xbox
WorkMeet, Zoom, Teams, Gmail, Microsoft 365
GovernmentIRCTC, DigiLocker, UIDAI, Income Tax
Shopping & foodAmazon, Flipkart, Swiggy, Zomato, Blinkit
AIChatGPT, Gemini, Claude
InfrastructureCloudflare, Akamai, AWS Mumbai, 8.8.8.8, 1.1.1.1
The catalog maintains itself, carefully. A new address block joins a service only with evidence: the DNS CNAME chain ends at the service's own domain, or the addresses sit in the service's own network or published ranges. It must also be seen from 3 or more different operators; otherwise it stays "unclassified". Every change is logged, a change cannot raise "down" for 2 windows, and it is reverted automatically if a service reads down everywhere right after a change.

03Access Health: your own access network, as events

A new NOC2 menu for the part of the network only you own: fiber, OLTs, VLANs and the routers in your customers' homes.

Outage radar
Trigger

10 sessions, 60 seconds, half the VLAN

10 or more sessions on one VLAN drop within 60 s for Lost-Carrier or Idle-Timeout, and they are at least 50% of that VLAN. Operator resets are shown apart and never counted.

VLAN labels

"OLT Block-C lost 86 of 86 sessions"

Name each VLAN after its OLT or area once. Outages and incidents then speak your field team's language, not "VLAN 2417".

Chronic line faults

The lines that never quite heal

Lines that were faulty for at least 50% of the last 7 days, per gateway: the list for a planned visit, before the customer churns.

Honest note: outage start times lag the real cut by one session timer, usually 1–4 minutes, because a session only reports it is gone when its timer expires. NOC2 says so on the event.

Router vendor scorecard: is it the line or the Wi-Fi?

Per CPE vendor (labelled "vendor, not model", from the MAC OUI). Line delay (floor) is the line itself; extra delay on top of it is buffering or Wi-Fi in the home. Click a bar.

Illustrative values. Groups only from 20 subscribers up; randomised MACs form their own group; fewer than 20 measured subscribers is a hint, never a verdict.

04A public internet status page your customers can trust

An anonymous status page for end users and the press, launching now at status.bngsoft.com. It is still learning, so today it honestly says "Not enough data" until enough operators have a baseline.

status.bngsoft.com

Mock-up of the launch state. Layout may change as the page learns.

Rule

≥3 operators, and at least half

A problem shows only when 3 or more different operators see it and they are at least half of the operators with data there.

No footprint

Never a name, never a count

No operator names, no counts of anything, no tracking. Cities only from a fixed metro list; a wide outage reads "across India" or "parts of India", so no one's footprint can be mapped.

Honest

"Not enough data", never "all fine"

Each operator can opt out. An invisible, self-hosted bot check keeps it clean, with no Google or Cloudflare captcha.

05Session Info: protection that scales with the plan

Upload protection thresholds now scale with the subscriber's upload plan: ×1 per 100 Mbps, from ×1 to ×10. Session Info shows the scale, e.g. "plan scale ×3". Fixed limits sized for 100M homes were pushing 300M–1G business customers into LIMITED or BLOCKED, and their calls dropped. After the change: zero false escalations.

300 Mbpsplan scale ×3
100M ×1 · 300M ×3 · 1G ×10

06Built to be believed

Unknown is never green

Learning, not enough data, not measured: each says so, in grey. A green square always means measured and normal.

Anonymous across operators

Every cross-operator fact is anonymous. Each operator sees only its own gateways by name.

One incident

VLAN flags, upstream findings, slow destinations, DDoS and outages merge into one incident with a likely cause and the evidence.

Our promise: where the product is sure, it says so. Where it is likely, it says likely. Where it does not know yet, it says "not enough data". Nothing unmeasured is ever shown as healthy.

07What operators get

Stop guessing

Know whether it's the internet or you, per owner and per city, before anyone escalates.

Proof, not opinion

"It's not your network" backed by a rule your customers and your management can read.

Ahead of the queue

Know a payment app is failing nationally before customers flood support.

One event per cut

See an OLT power cut as one event with a likely cause and customer-minutes lost.

Line or Wi-Fi?

Learn which CPE vendor makes the complaints, and whether it is the line or the home.

A page to trust

Give your customers a public status page that never pretends to know.

Ask it the next time someone says "the internet is down".

We will walk through Internet Observatory 3 on a live NOC2: the weather map, "Is it down?", the outage radar and the vendor scorecard, on your questions.

Request a demo Read about the Observatory path view

Examples on this page are illustrative and anonymised. Gateway names, VLAN numbers, cities, times and values are invented; operators are shown only as anonymous letters. Service and company names (including Google, Meta, Akamai, Amazon, Microsoft, Jio, UPI and the apps listed) are trademarks of their respective owners, named only as destinations subscribers reach; BNGSOFT is not affiliated with them. Throughput figures marked ESTIMATE are calculated, not measured.

Product page: Support & operations · Talk to us