PNIO Proposal for PTA

Pakistan National Internet Observatory

Proposal: Pakistan National Internet Observatory (PNIO)

Bringing Visibility, Accountability & Improvement to Pakistan's Internet

Prepared for: Pakistan Telecommunication Authority (PTA) Prepared by: Server4Sale (S4S) Technologies IT Partner: PASHA (Pakistan Software Houses Association) Contributing ISPs: Multiple ISPs already participating Date: February 2026 Version: 2.0 Status: Live Platform -- Active Data Collection


Executive Summary

Pakistan's internet serves over 130 million broadband subscribers across 19+ ISPs, 6 submarine cable systems, and thousands of domestic and international routes. Despite this scale, there is currently no independent, continuous, evidence-based system that gives PTA visibility into how Pakistan's internet actually performs at the routing level.

PNIO -- the Pakistan National Internet Observatory -- is a fully operational network monitoring platform that changes this. It is already live and collecting data.

What PNIO Does Today

PNIO monitors Pakistan's internet by tracing the actual path that data packets take when travelling to and from Pakistani networks. Using 100+ measurement servers worldwide and 3,600+ monitoring points across 112 countries, the platform continuously traces routes into Pakistan, measuring the distance and time between each network hop. Every trace is enriched with metadata identifying which ISP, which city, and which network each hop belongs to. Anomalies are detected automatically and analysed by AI.

Current data collected:

MetricValue
Total traceroute measurements175,000+
Individual hop records analysed2,700,000+
Unique IP addresses enriched35,000+
Pakistani target endpoints monitored4,688 (banks, media, govt, social, cloud, e-commerce)
Measurement servers in use100+ VPS nodes worldwide
Monitoring vantage points3,600+ across 112 countries
Pakistani ISPs tracked19
Cities with active targets8 locations across 3 cities
Submarine cables monitored6
AI analysis providers21 active LLMs
Dashboard pages55+ interactive views
API endpoints95+

Current Limitations

While the system is operational and producing valuable data, the current accuracy is limited because:

  • Most measurement nodes are outside Pakistan. We observe Pakistan's internet from the outside -- tracing routes that enter Pakistan and measuring hop-by-hop performance. This reveals international routing issues, submarine cable problems, and entry point congestion effectively.
  • Only 8 target locations across 3 Pakistani cities have active monitoring. Domestic coverage needs significant expansion.
  • Data quality is sufficient for investigation but not yet comprehensive. More in-country vantage points will dramatically improve accuracy and enable domestic inter-ISP monitoring.

What We Are Proposing

PTA directs major backbone ISPs -- particularly PTCL, Transworld (TWA), Cybernet, and Multinet -- to contribute lightweight monitoring nodes. These ISPs form Pakistan's internet backbone, and their participation is essential for comprehensive visibility.

Project Sponsorship

This project is already being sponsored by Server4Sale with PASHA as the IT industry partner. Several ISPs are already contributing to the platform. We are seeking PTA's support to expand participation to all major providers.


How PNIO Works

The Measurement Process

1. TRACE: A measurement server (e.g., in Dubai, London, or New York)
   sends a traceroute to a Pakistani target (e.g., HBL banking server in Karachi)

2. RECORD: Every router along the path is recorded with its IP address
   and the time taken to reach it (latency in milliseconds)

   Server (Dubai) -> Router 1 (UAE) -> Router 2 (Submarine cable) ->
   Router 3 (PTCL Karachi) -> Router 4 (PTCL internal) -> Target (HBL)

3. ENRICH: Each IP is identified -- which ISP owns it, which city
   it is in, which country, what organisation operates it

4. SCORE: Anomaly detection rules check for problems:
   - Unexpected route (traffic going through wrong countries)
   - Latency spike (one hop taking much longer than expected)
   - Packet loss (hops not responding)
   - Route manipulation (paths changing unexpectedly)

5. ANALYSE: AI examines high-anomaly traces and produces a forensic
   verdict identifying the problem and which ISP is responsible

6. PRESENT: Results appear on the dashboard in real-time with
   drill-down to every individual hop

What Gets Measured Between Each Hop

For every single hop in every traceroute, PNIO records:

  • Latency (RTT): How many milliseconds does it take to reach this router?
  • IP Address: What is the router's public IP?
  • ASN / ISP: Which ISP operates this router? (e.g., AS17557 = PTCL)
  • City / Country: Where is this router physically located?
  • Organisation: What company owns this IP range?
  • Network Name: What is the network called? (e.g., "PTCL Backbone", "Nayatel-Islamabad")
  • Hop Distance: How much latency was added between this hop and the previous one?

This hop-by-hop measurement is what makes PNIO fundamentally different from speed tests. We don't just know that "the internet is slow" -- we know exactly where it is slow, which ISP is responsible, and how long the problem has persisted.


Comprehensive Dashboard Features

What PTA Can See (Regulatory View)

FeatureDescription
ISP Performance ScoreboardReal-time ranking of all 19 Pakistani ISPs by completion rate, latency, anomaly rate, and route stability
ISP Penalty ScoringComposite penalty score (0--100) per ISP based on weighted performance metrics
Boomerang / Trombone DetectionIdentifies when domestic Pakistani traffic is unnecessarily routed through other countries (e.g., Karachi-to-Lahore via Dubai), adding 100--200ms of unnecessary latency
Anomaly Score SystemEvery traceroute receives an anomaly score from 0.0 (normal) to 1.0 (critical). Scores above 0.7 trigger investigation. The scoring uses 10+ detection rules covering path integrity, latency spikes, blackholes, route manipulation, and AS boundary anomalies
Submarine Cable MonitoringTracks 6 cables (SEA-ME-WE-4, SEA-ME-WE-5, IMEWE, AAE-1, TW1, PEACE) with latency correlation and RSS-based event detection
International Route IssuesDetects when Pakistan's international connectivity degrades -- which cable, which ISP affected, how severe
City-to-City Connectivity MatrixReal-time latency between all Pakistani cities, broken down by ISP
Evidence Dossier SystemFor enforcement actions: timestamped, SHA-256 hashed traceroute evidence that cannot be fabricated
Daily Health ReportsAI-generated narrative summaries of Pakistan's internet health
Historical Trend AnalysisWeek-over-week, month-over-month ISP performance tracking
Real-Time AlertingConfigurable alerts via email, webhook, or Telegram for threshold breaches
War Room DashboardFull-screen operations view for monitoring during cable cuts or major incidents

What ISPs Can See (ISP Admin View)

FeatureDescription
Their Own PerformanceHow their network compares to peers on latency, completion rate, and anomaly rate
Internal Fault DetectionIdentifies latency spikes and packet loss within their own network hops
Route AnalysisVisualises their AS paths (Sankey diagrams) showing how traffic flows through their network
Chokepoint IdentificationPinpoints specific routers in their network causing congestion
Peer ComparisonSide-by-side trace comparison: same destination, same time, different ISP -- isolates who is at fault
Entry Point AnalysisWhich international routers does their traffic enter Pakistan through? Is there redundancy?
City CoverageWhich cities are well-served by their network and which are underperforming?
Improvement TrackingHistorical data showing whether their fixes actually improved performance

What the Public Can See (Citizen View)

FeatureDescription
Pakistan Internet Health OverviewIs the internet healthy today? Simple colour-coded map
ISP LeaderboardWhich ISP is performing best right now? Public transparency
Ask PNIONatural language query -- ask questions like "Is PTCL having issues in Karachi?" and get AI-powered answers with evidence
Live FeedReal-time stream of traceroutes being collected (WebSocket)
City PerformanceHow is internet quality in my city compared to others?
Global StatusCity-to-city ping matrix showing connectivity between Pakistani cities
Daily ReportsAI-generated daily summary of Pakistan's internet health
Data ExportPublic API with API key for researchers and journalists (JSON/CSV export)

How the Anomaly Score Works

Every traceroute is scored from 0.0 (completely normal) to 1.0 (critical anomaly) using these detection rules:

RuleWeightWhat It Detects
Latency SpikeHighA single hop adding >100ms unexpectedly
Boomerang / TromboneHighDomestic traffic leaving Pakistan and returning
BlackholeHigh3+ consecutive hops with no response (traffic being dropped)
Path Length AnomalyMediumSignificantly more hops than expected for this route
AS Boundary SpikeMediumLarge latency increase when crossing from one ISP to another
Country DetourMediumTraffic passing through unexpected countries
Route FlapMediumAS path changing frequently (BGP instability)
Incomplete TraceLowTrace failing to reach the destination
High Base LatencyLowOverall RTT significantly above baseline for this route
Timeout RatioLowHigh percentage of hops not responding

Scoring levels:

  • 0.0 -- 0.3: Normal -- no action required
  • 0.3 -- 0.5: Review -- minor anomaly detected, logged for pattern analysis
  • 0.5 -- 0.7: Warning -- significant anomaly, AI analysis triggered
  • 0.7 -- 1.0: Critical -- major issue detected, alert generated, full investigation

What PNIO Can Identify

1. Boomerang Routing (Trombone Detection)

The Problem: Pakistani domestic traffic (e.g., a user in Karachi accessing a server in Lahore) is unnecessarily routed through Dubai, Singapore, or Europe before returning to Pakistan. This adds 100--200ms of unnecessary latency and wastes international bandwidth capacity.

How PNIO Catches It: Every traceroute records the full hop-by-hop path with country identification for each router. When a Karachi-to-Lahore trace shows hops in UAE (AS5384) or Singapore (AS13335), PNIO flags it as a boomerang with:

  • The exact hop where traffic exits Pakistan
  • The countries it transits through
  • The exact hop where it re-enters Pakistan
  • The latency penalty caused by the detour
  • Which ISP's routing decision caused the boomerang

2. ISP Internal Network Faults

The Problem: An ISP has a congested or faulty internal router causing packet loss or latency spikes for all traffic passing through it.

How PNIO Catches It: By comparing traces to the same destination from multiple ISPs simultaneously. If PTCL traces show 200ms at hop 4 (PTCL's own router) while Nayatel traces to the same target show 30ms, the fault is isolated to PTCL's internal network with specific router identification.

3. International Route Degradation

The Problem: When submarine cables develop faults, or international peering degrades, some ISPs are affected more than others depending on their routing configuration and cable diversity.

How PNIO Catches It: Continuous monitoring of latency to international destinations (Dubai, Singapore, London, Frankfurt, New York). When RTTs to European destinations spike across multiple ISPs simultaneously, PNIO correlates this with submarine cable events and identifies:

  • Which cable is likely affected
  • Which ISPs are impacted and by how much
  • Which ISPs have resilient multi-cable routing vs single-cable dependency
  • Recovery timeline tracking

4. Selective Service Degradation

The Problem: An ISP throttles or degrades traffic to specific services (e.g., VoIP, streaming, or specific websites).

How PNIO Catches It: By tracing to diverse target categories:

  • Banking: HBL, Meezan, JazzCash, Easypaisa
  • Social Media: WhatsApp, TikTok, Instagram, Facebook
  • Media: Geo, Dawn, ARY, Express
  • E-commerce: Daraz, Amazon
  • Government: NADRA, FBR, PTA itself
  • Cloud/Dev: GitHub, Teams, Azure, AWS
  • Middle East: absher.sa, etisalat.ae (for diaspora route quality)

When one category performs significantly worse than others on the same ISP, selective degradation is identified with evidence.

5. BGP Route Instability

The Problem: Frequent AS path changes (route flaps) indicate misconfigured or unstable routing that causes intermittent connectivity issues.

How PNIO Catches It: By tracking the AS path sequence for every trace to the same destination over time. Path changes are recorded with before/after comparison, frequency analysis, and impact on latency.

6. Backbone Congestion Points

The Problem: Specific routers in Pakistan's backbone infrastructure become congestion points, affecting traffic for multiple ISPs.

How PNIO Catches It: The chokepoint analysis aggregates hop data across all traces and identifies IP addresses that consistently show high latency or packet loss. These are displayed on the Chokepoints page with:

  • Router IP and owning ISP
  • Number of traces affected
  • Average latency spike caused
  • Time-of-day patterns (peak hour congestion)

7. Entry Point Concentration Risk

The Problem: Pakistan's international traffic enters through a limited number of routers. If these fail, large portions of the internet become unreachable.

How PNIO Catches It: The Entry Points page maps every international router where traffic enters Pakistan, showing:

  • Which ISPs operate these entry points
  • How much traffic depends on each one
  • Redundancy analysis (single point of failure risk)
  • Geographic distribution of entry points

The Goal: Improvement & Visibility for Pakistan

PNIO's purpose is not punitive -- it is to bring measurable improvement to Pakistan's internet infrastructure. The platform enables:

For PTA

  • Evidence-based regulation instead of complaint-driven reaction
  • Objective ISP comparison that ISPs cannot dispute (the data is independently collected and cryptographically timestamped)
  • Early warning for infrastructure issues before they become public complaints
  • Progress tracking -- when PTA directs an ISP to improve, the improvement (or lack thereof) is objectively measurable
  • International benchmarking -- how does Pakistan's internet quality compare to regional peers?

For ISPs

  • Visibility into their own blind spots -- faults they may not be aware of
  • Competitive motivation -- public leaderboard creates healthy competition
  • Evidence for investment -- data to justify infrastructure upgrades to their boards
  • Peer collaboration -- identifying inter-ISP peering issues that require bilateral fixes

For Pakistan

  • Digital economy enablement -- reliable internet is the foundation of e-commerce, fintech, and IT exports
  • Consumer protection -- citizens deserve to know the quality of service they are paying for
  • International reputation -- demonstrating that Pakistan takes internet quality seriously attracts investment
  • Infrastructure planning -- data-driven decisions about where to invest in new capacity

What We Need: In-Country Monitoring Nodes

The Gap

Currently, PNIO monitors Pakistan from the outside -- 100+ servers worldwide trace routes into Pakistan. This is effective for detecting international routing issues, submarine cable problems, and entry point congestion.

What we cannot fully see today:

  • Domestic inter-city latency as experienced by actual users
  • ISP-to-ISP peering quality within Pakistan
  • Last-mile performance from ISP edge routers to endpoints
  • Regional network quality in underserved areas (Balochistan, KPK, rural areas)

What Each ISP / Data Centre Provides

RequirementSpecification
VPS instances2--3 per ISP/DC location
CPU1 core (minimal requirement)
RAM2 GB
Disk10 GB
NetworkStandard internet access
Bandwidth< 1 GB/month (traceroutes are tiny packets)
Data collectedICMP/TCP traceroutes only -- no subscriber data, no DPI, no traffic capture
EffortProvision VPS, provide SSH access for initial setup. Automated thereafter.

Priority Backbone Providers

The following ISPs form Pakistan's internet backbone and their participation is critical:

ProviderRoleWhy Critical
PTCL (AS17557)Incumbent, largest backboneCarries the majority of Pakistan's domestic and international traffic. N-5 highway fibre corridor operator.
Transworld (TWA) (AS38193)Major backbone, TW1 cable operatorOperates the TW1 submarine cable (Karachi-Fujairah), critical international link.
Cybernet (AS9541)Backbone providerMajor transit provider for other ISPs.
Multinet (AS17911)Backbone providerSignificant transit and enterprise connectivity.
NayatelFibre ISP (Islamabad/Rawalpindi/Faisalabad)Best fibre coverage in twin cities.
Jazz (AS45669)Mobile + fixed broadbandLargest mobile operator, growing fixed broadband.
StormFiberFibre ISP (Karachi/Lahore)Growing urban fibre network.
NTCGovernment backboneServes government institutions nationwide.

Proposed City Coverage

CityProvinceImportanceProposed Nodes
KarachiSindhSubmarine cable landing station, financial hub, largest city6--8
LahorePunjabSecond largest city, IT hub6--8
Islamabad/RawalpindiICT/PunjabCapital, government services, IT corridor6--8
FaisalabadPunjabIndustrial hub, growing connectivity3--4
PeshawarKPKProvincial capital, CPEC connectivity3--4
QuettaBalochistanProvincial capital, underserved region2--3
MultanPunjabSouthern Punjab hub2--3
HyderabadSindhSecond Sindh city2--3
SialkotPunjabExport industry hub1--2
GwadarBalochistanPEACE cable landing, CPEC port1--2
Total32--45 nodes

What In-Country Nodes Enable

CapabilityWithout In-CountryWith In-Country
International route monitoringFull visibilityFull visibility
Submarine cable healthFull visibilityFull visibility
Domestic inter-city latencyEstimated onlyDirect measurement
ISP-to-ISP peering qualityCannot measureFull visibility
Last-mile performanceCannot measureDirect measurement
Balochistan/KPK coverageMinimalDirect measurement
ISP internal routing qualityPartial (from outside)Complete visibility
Data accuracyGood for investigationComprehensive evidence

Expected Domestic Baselines

RouteExpected RTTMax AcceptableBeyond This = Problem
Islamabad -- Rawalpindi1--3 ms8 msISP internal fault
Islamabad -- Lahore8--15 ms35 msBackbone congestion
Karachi -- Hyderabad4--8 ms20 msRegional link issue
Karachi -- Lahore22--35 ms80 msBackbone or boomerang
Karachi -- Islamabad25--40 ms90 msMajor backbone issue
Islamabad -- Peshawar5--12 ms30 msKPK link quality
Karachi -- Quetta20--35 ms80 msBalochistan link quality
Lahore -- Faisalabad5--10 ms25 msPunjab backbone quality

Live Demo Available

A live demonstration of the platform is available with real data being collected in real-time:

Demo Access

URL
Live Platformhttps://pnio.s4s.host
Backup Instancehttps://pmiobackup.hkru2.s4s.host
Proposal Documenthttps://pmiobackup.hkru2.s4s.host/proposal

What You Will See in the Demo

  1. Dashboard -- Pakistan health map with city markers, live metrics, health score
  2. Live Feed -- Real-time WebSocket stream of traceroutes being collected right now
  3. ISP Leaderboard -- Performance ranking of all tracked Pakistani ISPs
  4. Sankey Diagram -- Visual AS path flows showing how traffic routes through Pakistan
  5. Anomaly Detection -- High-anomaly traces with AI forensic verdicts
  6. Trace Detail -- Drill into any single traceroute to see every hop with latency bars, ISP attribution, and issue highlighting
  7. War Room -- Full-screen operations dashboard for real-time monitoring
  8. Ask PNIO -- Natural language query interface: ask questions in plain English
  9. Submarine Cables -- Monitor all 6 cables serving Pakistan with latency correlation
  10. City Matrix -- City-to-city connectivity grid
  11. ISP Detail Pages -- Deep-dive into any ISP's performance, cities, routes, and faults
  12. Daily Reports -- AI-generated narrative summaries of internet health

The live feed demonstrates data actively flowing into the system from measurement points worldwide. The platform is under continuous development with improvements being made regularly.


Technical Architecture Summary

ComponentDetails
BackendFastAPI (Python), 95+ API endpoints, 12 router modules
FrontendNext.js (React/TypeScript), 55+ pages, dark theme, mobile responsive
DatabasePostgreSQL + TimescaleDB (time-series optimised)
AI Engine21 LLM providers with automatic fallback for forensic analysis
Anomaly Detection10+ rule-based detectors, scored 0.0--1.0, applied at ingest time
AuthenticationJWT with role-based access: Citizen, ISP Admin, PTA Admin, System Admin
Real-TimeWebSocket live feed with PostgreSQL NOTIFY triggers
AlertingEmail, webhook, Telegram notification channels
Public APIRate-limited, API key authenticated, JSON/CSV export
Measurement Infrastructure100+ VPS servers, 3,600+ vantage points, 112 countries
Backup & RedundancyPostgreSQL streaming replication to offsite server, automated snapshots

Privacy & Security

What PNIO Does NOT Do

  • No subscriber data is collected. Only public infrastructure IPs (routers, servers) are recorded.
  • No Deep Packet Inspection. Only standard ICMP/TCP traceroute -- a basic network diagnostic tool.
  • No traffic interception. Measurement nodes generate outbound traceroutes only. They do not sit in the data path.
  • No private information. All data collected is about public internet infrastructure, not individuals.

Security Measures

  • All communication encrypted via HTTPS with TLS certificates
  • Bearer token authentication for collector nodes
  • SHA-256 integrity hashes on every measurement (tamper-proof evidence)
  • Role-based access control with JWT authentication
  • SQL injection prevention via parameterised queries throughout
  • Rate limiting on all API endpoints

Cost & Sustainability

Current Infrastructure

ItemMonthly Cost
Primary server (OVH VPS, France)~$50
Backup server (Hetzner, EU)~$25
IP enrichment service (ip-api.com PRO)$13
AI analysis (free-tier LLM providers)$0--50
Domain & TLS certificates (Let's Encrypt)$0
Total platform operating cost~$90/month

In-Country Node Cost

ItemCost
VPS provided by ISP/DC$0 (ISP contribution)
Software (open-source Python agent)$0
Bandwidth (< 1 GB/month)$0 (negligible)

Total incremental cost for 40 in-country nodes: $0 -- ISPs provide the VPS as their contribution to improving Pakistan's internet visibility.

Sponsorship

  • Server4Sale is sponsoring the platform development and central infrastructure
  • PASHA is the IT industry partner
  • Multiple ISPs are already contributing measurement resources
  • The platform is designed to be self-sustaining at minimal cost

Implementation Roadmap

PhaseTimelineMilestone
Phase 1: Live DemoImmediatePlatform demonstration for PTA decision-makers
Phase 2: PTA Dashboard2--4 weeksDedicated regulatory views, penalty scoring, evidence export
Phase 3: Backbone ISP Nodes4--8 weeksPTCL, TWA, Cybernet, Multinet deploy nodes in Karachi, Lahore, Islamabad
Phase 4: Consumer ISP Nodes6--10 weeksJazz, Nayatel, StormFiber, Telenor deploy nodes
Phase 5: City Expansion8--14 weeksFaisalabad, Peshawar, Multan, Hyderabad, Quetta, Sialkot
Phase 6: Full Coverage14--20 weeksGwadar (PEACE cable), remaining cities, 40+ nodes operational
Phase 7: Operational Maturity20--24 weeksPTA staff training, SLA integration, automated compliance reporting

Call to Action

We request PTA to:

  1. View the live platform at https://pnio.s4s.host (real data, real-time collection)
  2. Schedule a demonstration for PTA leadership and technical teams
  3. Direct backbone ISPs (PTCL, Transworld, Cybernet, Multinet) to provision 2--3 VPS nodes each in their Karachi, Lahore, and Islamabad data centres
  4. Encourage all licensed ISPs to participate by contributing monitoring nodes
  5. Define PTA-specific requirements for the dedicated regulatory dashboard

Pakistan deserves world-class internet monitoring. The technology is built. The data is flowing. The investment required is minimal. What is needed now is PTA's leadership to bring every major ISP to the table.


PNIO -- Pakistan National Internet Observatory Monitoring Pakistan's Internet Integrity at Layer 3 Sponsored by Server4Sale | IT Partner: PASHA

Live Platform: https://pnio.s4s.host Proposal: https://pmiobackup.hkru2.s4s.host/proposal

PNIO — Pakistan National Internet Observatory | S4S Technologies | February 2026