Spectrum joins Network Analytics for Enterprise DDoS visibility

Cloudflare has extended its Network Analytics dashboard to Spectrum customers on the Enterprise plan. The dashboard, which tracks packet- and bit-level traffic patterns and DDoS attacks at OSI Layers 3 and 4, was previously available only to customers using Bring Your Own IP (BYOIP) with Spectrum or Magic Transit. Now, Spectrum customers using Cloudflare's Anycast IPs get the same visibility into their TCP and UDP applications.

Spectrum is Cloudflare's L4 reverse-proxy service, providing unmetered DDoS protection and acceleration for TCP and UDP workloads. It improves performance via faster TLS, optimized routing, and high-speed interconnect, and adds encryption to legacy protocols that lack built-in security. Typical deployments include email, remote access, and gaming infrastructure, where network performance and attack resilience are business-critical.

With this expansion, Spectrum users can view detailed DDoS reports for their configured applications, including attack size, vectors, source geography, and permitted traffic. They can also set up real-time alerts for when their services come under attack.

Two new investigation tools

Alongside the Spectrum rollout, the dashboard gains two capabilities aimed at simplifying reporting and incident investigation: DDoS Insights & Trends and a new Group-by option for time-series charting.

The DDoS Insights & Trends card delivers an at-a-glance summary of attack activity over time. It surfaces real-time figures for the number of attacks, percentage of attack traffic, peak attack rates, total mitigated bytes, top attack origin country, and total attack duration—metrics that indicate the downtime potentially prevented. Period-over-period change percentages are included so users can track how their security posture evolves.

The dashboard's main time-series chart now lets users adjust the Group-by field to customize the Y axis. That allows quick identification of traffic anomalies and sudden shifts based on dimensions like IP protocol, TCP flags, or source country, enabling faster response via Magic Firewall, Spectrum, or BYOIP.

Additional enhancements in the dashboard

The update also packs several smaller usability improvements, including:

  • CSV log export
  • A zoom-in feature for the time-series chart
  • A drop-down to switch the view between average rate and total volume
  • Expanded Top N views for source and destination values
  • New country and data center fields for source values
  • Updated visualization of TCP flag distribution

Documentation for these features is available in the Help Center, which is now linked directly from the dashboard.

Cloudflare says it will extend Network Analytics to Spectrum customers on the Business plan, as well as to WAF customers on Enterprise and Business plans, in the near future. Existing Magic Transit, Spectrum, and BYOIP customers can access the updated dashboard today.