This section explains the terminology used in the Internet Insights module, and describes its basic concepts.

For information on finding and interpreting Internet Insights data, see Overview, Views, and Catalog Settings Screens.

For configuration instructions, see Configuring Internet Insights.

ASN (Autonomous System Number)

An ASN is a unique number assigned to an organization (also referred to as service provider) that operates one or more networks. ASNs are used by the Border Gateway Protocol (BGP) to construct the Internet's routing tables. A list of ASNs, the names of their operators, and the network blocks included under the ASN can be found at . An example of a service provider and its associated ASN is ThousandEyes, which is assigned ASN 394101.

Catalog and catalog entries

The Internet Insights catalog is a database of service providers, categorized by provider name, provider type and either ASNs or networks (for providers who operate public networks not associated with their ASNs).

The types of service providers are

  • Internet Service Providers (ISP)

  • Content Delivery Networks (CDN)

  • Infrastructure-as-a-Service providers (IAAS)

  • DDoS Mitigation providers (SECAAS)

  • DNS providers (DNS)

  • Unified communications as a service providers (UCaaS)

An Internet Insights catalog entry consists of a unique combination of provider name, provider type, either ASN or networks (for providers who use public networks not associated to their ASNs), and geographic region, in addition to other data.

The geographic regions are

  • North America (NA)

  • Latin America (LATAM)

  • Europe, Middle East and Africa (EMEA)

  • Asia Pacific (APAC)

For example, one catalog entry is

Provider Name

Provider Type




North America

CenturyLink has additional catalog entries for the other three regions. All will have the same provider type, but other data could vary.


An interface is a publicly-accessible IP address belonging to a node in a path trace. A single path trace can detect only one interface per node.

For example, in the Path Visualization below, the Show IP Address labels setting has been selected to show each node’s discovered interface.

Figure 1 Figure 1

The Path Visualization shows a test run by four Cloud Agents, each generating three path traces (the default configuration for most test types). The three traces from each agent travel one path until the node with interface The path traces then discover paths through the three nodes with interfaces, and (one path trace per node). The traces then converge and follow a common path, terminating at a node with IP address, prior to the target of the test,

See also Terminal interface.


A network is a block of continuous IP addresses, specified in Classless Inter-Domain Routing (CIDR) notation. An example of a network expressed as a CIDR block is, which is the network containing the two terminal interfaces from the previous image.


A node is a device such as a router, load balancer or firewall that is discovered by one or more path traces from the Path Visualization view. Nodes possess at least two interfaces (typically more) and perform IP forwarding (that is, routing) between interfaces.


An outage is an event or series of events that causes the number of terminal interfaces and associated Network metrics at one or more points of presence of a given service provider (ASN) to exceed the Internet Insights thresholds. These thresholds include criteria such as the number of Cloud or Enterprise Agents running the affected tests, the number of test destinations affected, and end-to-end packet loss in those tests.

For example, in a given round of test data, say Internet Insights detects eight terminal interfaces in three networks that belong to one service provider/ASN. Those interfaces' IP addresses are located in two points of presence belonging to that service provider. If the associated data from all affected tests passes the filter criteria, Internet Insights indicates an outage in that service provider.

Package and package license

A package is a collection of Internet Insights catalog entries with the same provider type and region. Customers license a package in order to display outages originating from the providers included in the package.

An example of a package is the provider type ISP in the region North America. This package contains catalog entries of providers in North America who are classified as Internet service providers. The example from Catalog entry above with provider CenturyLink would be included in this package.

In addition, because CenturyLink has points of presence (and thus catalog entries) in other locations, this provider appears in two other packages of type ISP. The other packages have regions of EMEA and Asia Pacific.

PoP (Point of Presence)

A PoP is the physical location of one or more interfaces belonging to a given service provider. Internet Insights specifies PoPs based on the provider’s ASN number and a geographic location.

Private data centers, colocation data centers, and Internet exchanges (IXs) are examples of PoPs.

Terminal interface

A terminal interface is an interface in a path trace where the trace ends before the target of the test. It is the last responding IP address of that path trace. No trace responses are received from subsequent intermediate nodes beyond the terminal interface's node, nor from the target itself.

For example, consider the path trace in Figure 2 below, from the Cloud Agent in Boston, Massachusetts, to the nodes outlined in red, with interfaces and, respectively.

Figure 2 Figure 2

No intermediate nodes beyond the red outlined nodes have responded to the Boston Cloud Agent. Additionally, the agent is solid red in color, indicating no response (100% end-to-end loss) from the target, Therefore, and are classified as terminal interfaces.

Note that in Figure 1, the red-outlined node with interface is not a terminal interface because the target responded to end-to-end metrics (the separate probes for loss, latency, and jitter) as indicated by the green color of the agents.