Traffic & Telemetry

What Is Captured

TLSOps records traffic telemetry for every device on the network:

• DNS queries: every domain queried per device, with timestamps, response status (allowed/blocked), and the tunnel or outbound used
• Outbound traffic: which tunnel or direct path each flow used, with approximate data volume
• Latency data: per-tunnel health-check latency history (for tunnel groups)

Telemetry Retention

Retention depends on your plan:

• Free: 1 hour after the appliance refreshes current entitlements
• Starter: 24 hours (1 day)
• Pro: 168 hours (7 days)
• Ultimate: 720 hours (30 days)

Immediately after switching to Free or during a temporary Free fallback, the dashboard can briefly show telemetry as unavailable until the entitlement refresh completes. Older records are pruned automatically. Telemetry is stored locally on the appliance — it is not sent to any external server.

Viewing Per-Device Traffic

1. Go to the Traffic tab in the main navigation
2. Find the device row or card you want to inspect and open its expanded telemetry view
3. Review that device's DNS activity, live usage, history, and route breakdown within the retention window available on your plan

DNS Query Log

1. Go to the Logs tab in the dashboard
2. The query log shows all DNS requests across all devices, with filtering by device, domain, status (allowed/blocked), and time range
3. Click any log entry to see which blocklist blocked the domain, or which outbound it was routed through

Live Log Stream

The Logs tab includes a live stream view showing new DNS queries in real time. This is useful for debugging filtering rules or watching which domains a device is contacting. The stream is capped at a limited number of concurrent viewers per appliance.

Telemetry and Privacy

All telemetry is stored locally on the appliance and is never transmitted to TLSOps servers or any third party. Telemetry records are cleared when the retention window expires or when the appliance is factory-reset.