Anatomy of an OTT traffic surge: Dune release on HBO Max

Last month, the long-awaited film adaptation of Frank Herbert’s sci-fi epic Dune was released in theaters and on HBO Max. Directed by Canadian filmmaker Denis Villeneuve, the movie was a hit at the box office as well as via streaming, leading to another OTT traffic surge.

OTT Service Tracking

Kentik’s OTT Service Tracking (part of Kentik Service Provider Analytics) combines DNS queries with NetFlow to allow a user to understand exactly how OTT services are being delivered — an invaluable capability when trying to determine what is responsible for the latest traffic surge. Whether it is a Call of Duty update or a Microsoft Patch Tuesday, these OTT traffic events can put a lot of load on a network and understanding them is necessary to keep a network operating at an optimal level.

The capability is more than simple NetFlow analysis. Knowing the source and destination IPs of the NetFlow of a traffic surge isn’t enough to decompose a networking incident into the specific OTT services, ports, and CDNs involved. DNS query data is necessary to associate NetFlow traffic statistics with specific OTT services in order to answer questions such as, “What specific OTT service is causing my peering link with a certain CDN to become saturated?”

Kentik True Origin is the engine that powers OTT Service Tracking workflow. True Origin detects and analyzes the DNA of over 540 categorized OTT services and providers and more than 50 CDNs in real time, all without the need to deploy DPI (deep packet inspection) appliances behind every port at the edge of the network.

The spice (and traffic) must flow

Villeneuve’s Dune was the most streamed movie for three weeks following its debut on October 21, a day ahead of its theatrical release.

As illustrated below in a screenshot from Kentik’s Data Explorer view, HBO Max traffic experienced a 66% jump in volume following the release of Dune on streaming. When broken down by CDN, we saw that HBO Max traffic was mostly via Akamai (46.8%), Amazon/AWS (22.1%) and Limelight (21.1%).

When broken down by Connectivity Type (below), Kentik customers delivered HBO Max to their subscribers from a variety of sources including private peering (83.2%), transit (22%), embedded cache (17.4%), and IXP (7.1%). Usually, CDNs with a last mile cache embedding program heavily favor these against other connectivity types as it both allows:

• The ISP to save transit costs
• The subscribers to get demonstrably better last-mile performance

In this case, the fact that embedded cache traffic is a small proportion of the overall delivery implies that some ISPs from this dataset have maxed-out their embedded caches.

In addition to source CDN and connectivity type, users of Kentik’s OTT Service Tracking are also able to break down traffic volumes by subscribers, specific router interfaces and customer locations.

How does OTT Service Tracking help?

In July, my colleague Greg Villain described the latest enhancements to our OTT Service Tracking workflow which allows providers to plan and execute what matters to their subscribers, including:

• Maintaining competitive costs
• Anticipating and fixing subscriber OTT service performance issues
• Delivering sufficient inbound capacity to ensure resilience

Major traffic events like the release of a blockbuster movie on streaming can have impacts in all three areas. OTT Service Tracking is the key to understanding and responding when they occur. Learn more about the application of Kentik for network business analytics here.

Ready to improve over-the-top service tracking for your own networks? Start a free trial of Kentik today.