Kentik - Network Flow Analytics

Network Intelligence and Superior DDoS Mitigation with Kentik and Cloudflare Magic Transit

Detecting and mitigating DDoS attacks on your networks with precision and speed is key to ensuring business continuity.

Protect your networks with a joint solution powered by enterprise-class DDoS mitigation from Cloudflare and high precision DDoS detection from Kentik.

For a limited time, access the Kentik Network Intelligence Platform with Cloudflare Magic Transit at no cost, for up to 4 months. Terms and conditions apply.

Use Kentik in…

By submitting the form, you request to receive information about Kentik and Cloudflare products, events, and special offers, and you agree to the processing of your personal data by Kentik as described in the Kentik Privacy Policy, and by Cloudflare as described in the Cloudflare Privacy Policy. You also authorize Kentik to share your personal data with Cloudflare.

No credit card required

Joint Solution Benefits

Combine Protection and Business Continuity

  • 42 Tbps of DDoS mitigation + precise DDoS detection = awesome protection
  • See traffic trends on your network, identify root causes and perform forensics
  • Get increased uptime and ensure business continuity with automated detection and mitigation of DDoS attacks

Get time back to focus on major threats

  • Get peace of mind with Kentik’s AIOps-powered threat intelligence and network analytics and from Cloudflare’s always-learning global network
  • Inspect network traffic in real-time and detect and mitigate DDoS attacks with precision
  • Reduce alarm fatigue and increase the efficiency of your SOC team

Simplify and strengthen your security stack

  • No hardware or software to install and maintain
  • Quick deployment and no ongoing maintenance by operations staff required
  • RESTFul APIs to measure deployments in minutes

How Does It Work?

The Kentik Platform inspects network traffic and detects DDoS attacks in real-time. Notification of the attack is sent to operations or security staff via one or more configured methods: email, JSON, Syslog, OpsGenie, PagerDuty, Slack, ServiceNow, or Syslog.

Integrated with Cloudflare Magic Transit, Kentik signals Cloudflare to automatically shift traffic destined for the target IP into their cloud mitigation data centers. Cloudflare filters the malicious traffic and delivers only the legitimate traffic back to the end-user. Mitigation actions can be fully automated, or the user can choose to require an acknowledgment from security or operations staff before the mitigation is activated.


What is the Kentik service?

Kentik is the world’s most powerful network analytics and monitoring platform. As a massively scalable datastore in an easy-to-onboard SaaS, Kentik correlates scores of key data points about your network traffic flows from both data centers and cloud providers and delivers actionable real-time insights into current status and trends. Our intuitive portal provides ready-made views of current activity, workflows targeted for common use cases, and power tools that let you drill down into every detail of your network traffic. Kentik gives you the comprehensive picture you need — both real-time and historical — to answer key operational questions in areas including network performance, system utilization and capacity, and DDoS attacks, as well as providing business intelligence such as peering opportunities and potential cost savings.

What is Cloudflare Magic Transit?

Cloudflare Magic Transit protects entire IP subnets from DDoS attacks, while also accelerating network traffic. It uses Cloudflare’s global network to mitigate attacks, employing two fundamental networking protocols, BGP and GRE, for routing and encapsulation.

All your network assets can be safeguarded, whether on-premises or in private or public hosted cloud environments.

What’s included from Kentik in this offer?

This offer includes the following:

  • Access to all workflows in the Operate, Edge, Protect, and Service Provider sections of the Kentik portal for 120 days.
  • Ingest into the Kentik Data Engine (KDE) from the following data sources:
    • Flow records from up to six BGP-speaking network devices (e.g. routers) sending up to 1,000 flows-per-second (FPS) each.
    • Flow logs from cloud providers (AWS, GCP, Azure and IBM) sending up to 2,000 FPS each.
  • 30-day data retention (maximum lookback for historical queries)
  • Up to 50 API queries per hour
Who is eligible for Kentik’s trial offer?

The Kentik trial part of this offer is not available to current Kentik customers.

What’s included from Cloudflare in this offer?

This offer includes:

  • Cloudflare Magic Transit at no charge for 120 days
  • Over 42+ Tbps of network capacity 
  • Supported integration via BGP routing and GRE encapsulation 
  • Support for all IP services 
  • 200+ data centers for DDoS mitigation 
  • On-demand DDoS support
What is the duration of the joint offer?

The complimentary trial subscription to Kentik services runs for four months from the date of registration. Registration must be complete by December 31, 2020.

How can I start using Magic Transit?

To take advantage of this promotion, you must purchase Magic Transit from Cloudflare by December 31, 2020. You must agree to Cloudflare’s standard Enterprise Subscription Agreement and to a 12-month minimum term following the expiration of your free 120 days as offered in the solution. Upon signing Cloudflare’s standard enterprise subscription, the earliest date at which you can terminate your contract with no fee is within 120-days upon signing. The no-charge period cannot exceed more than 120-days. Bandwidth and other usage limits apply and will be assessed by the Cloudflare Account team.

When does access to Kentik start?

Access to Kentik starts immediately upon successful registration, which includes onboarding at least one data source (network device or cloud provider). If you need help with onboarding, please reach out to us at

Within a day or two of sign-up, your primary points of contact (relationship managers) will reach out to you by email to introduce themselves and offer any additional help needed to get you up to speed.

Note: We don’t currently anticipate the need for a queueing system, but if demand for this offer requires us to establish a queue we will announce details at that time.

When does access to Kentik end?

Upon the end of the Kentik’s 120-day trial period, access to Kentik will be automatically terminated.

How do I configure Kentik with Cloudflare Magic Transit?

To take full advantage of your joint trial of Kentik and Cloudflare Magic Transit, you’ll need to have network devices sending flow data to Kentik and also setup Cloudflare Magic Transit as a mitigation platform in the Kentik interface. Visit the Kentik Knowledge Base for step-by-step details.

How many users in my organization will be able to use Kentik?

Kentik supports unlimited users per customer.

What happens when the complimentary trial period expires?

Upon expiration of your complimentary trial period you may, at your option, subscribe to the Kentik service. If you’re interested we’ll work with you to structure a package that meets your needs.

How do I send data to Kentik?

Kentik stores your network data in the massively scalable Kentik Data Engine (KDE) data store. Data from your devices (flow data, BGP, SNMP, etc.) and clouds (flow logs) is correlated along with other relevant information (e.g., GeoIP, DNS, threat feeds, etc.) into timestamped flow records. Data may come to KDE from any of the following sources:

  • Direct: From routers or switches directly to KDE.
  • Host agent: From hosts that are monitored using kprobe, Kentik’s software host agent.
  • Proxy agent: From routers or switches via a locally hosted instance of kproxy, Kentik’s proxy agent, which can be configured to collect and encrypt both flow and SNMP.
  • Cloud provider: From the cloud platform’s flow log collector (method varies depending on provider).

Regardless of the source, the onboarding process involves a few settings in Kentik as well as configuration of the source itself to send the data. The Kentik portal includes wizards that will guide you through each step, and Kentik support is available to provide any needed assistance.

How long does it take to set up Kentik?

Initial registration and setup of a single data source should take less than 30 minutes. Additional data sources can then be registered in a few minutes each.

What should I do if I need help with set up, or other support?

When you join as part of the Kentik + Cloudflare joint solution you'll receive the same excellent support as our other customers:

Where can I obtain security and compliance information about the Kentik Platform?

Kentik takes extremely seriously the security of the data collected for, sent to, and ingested by our data platform. Information regarding security, compliance and certification, data protection and segregation, access and identity management, and privacy questions is available in the Kentik Knowledge Base.

We use cookies to deliver our services.
By using our website, you agree to the use of cookies as described in our Privacy Policy.