Cloudflare

Introducing notifications for HTTP Traffic Anomalies

Oct 31, 2023Cathy Chi, Natasha Wissmann
Introducing notifications for HTTP Traffic Anomalies
SummaryAI, from the source post

Introduced Traffic Anomalies notifications for enterprise customers, which trigger based on unexpected changes in HTTP traffic volume. This feature utilizes z-scores to compare short-term (5-minute) traffic averages against long-term (4-hour) averages, alerting when deviations exceed 3.5 standard deviations. Minimum thresholds of 200 requests for spikes and drops are applied to reduce noise. The system stores sampled statistics in Clickhouse, processes them in VictoriaMetrics, and leverages the existing Alert Notification System for delivery.

More from the Observability Platform trail