Field Brief AI Infrastructure June 2026

AI Workloads Are Network Workloads

Agentic AI will not scale on models alone. It needs bandwidth, telemetry, path visibility, and security context across every dependency.

Workload AI demand shows up as infrastructure pressure
Telemetry Runtime, tokens, memory, and cost need evidence
Path Latency, loss, DNS, and provider handoff matter
Governance Agents need policy, visibility, and action boundaries
Capacity 73% Facing or expecting campus and branch constraints within two years
Traffic 209% Expected network traffic growth over three years
Security 80% Say AI has already expanded the attack surface
Visibility 71% Describe growing blind spots in monitoring and visibility
What to Take Away AI adoption is becoming an infrastructure readiness test. If you cannot see the workload, available bandwidth, every network hop, and the user impact together, you are guessing where AI will break first.

This is the practical point behind the Cisco and Foundry research: the network is no longer background plumbing. It is the place where agentic AI demand, performance, policy, visibility, and trust collide.

The Shift: AI Is Becoming a Network Event

The first AI conversations were about models. The next operating challenge is where those models run, what they touch, and whether the infrastructure can keep up.

When an AI workflow runs, the model is only one piece of the system. A prompt may trigger tool calls, retrieve data, query logs, open tickets, reach SaaS applications, call APIs, inspect telemetry, and return an answer to a user or another agent. Every one of those steps depends on infrastructure.

That is why AI workloads are network workloads. They create new traffic patterns, new dependency paths, new security boundaries, and new questions about performance. A slow answer might be a model runtime issue. It might be memory pressure. It might also be a bandwidth bottleneck at one network hop. The team cannot know unless workload and path signals are visible together.

Layer 1 Workload telemetry

Runtime, tokens, model footprint, memory pressure, GPU/ANE/package power, and cost indicators.

Layer 2 Network path evidence

Available bandwidth, throughput, utilization, route, latency, loss, DNS behavior, provider handoff, and bottleneck signals.

Layer 3 Security and governance context

Identity, access, segmentation, policy, approved tools, sensitive data, and action boundaries.

The Pressure: The Network Is Already Feeling AI

Cisco and Foundry's research is a warning that AI ambition is moving faster than campus and branch readiness.

Cisco's Newsroom coverage of the Cisco and Foundry study says the research surveyed more than 3,400 senior IT and networking decision-makers across 15 countries. The headline is not subtle: organizations want AI, but the infrastructure path to scale is under pressure.

AI demand More traffic, more tools, more paths, more risk
73%

Capacity constraints now or within two years

209%

Expected traffic growth over three years

80%

AI has expanded the attack surface

71%

Growing monitoring and visibility blind spots

61%

Holding back AI scale until security confidence improves

For IT leaders, this reframes the AI roadmap. It is not enough to ask which model or AI tool the business wants to use. The harder question is whether the network can support the demand, whether security can govern the access, and whether operations can prove what is happening when the experience changes.

The Lab: A Small Version of a Big Operating Problem

My local setup is intentionally small, but the questions are the same ones that show up at enterprise scale.

I run local AI models on a Mac Studio and monitor the environment as if it were a miniature production workload. The point is not that every organization needs this exact lab. The point is that AI creates measurable demand, and that demand needs to be understood before it spreads across real users, branches, agents, and business workflows.

Run Local models on Mac Studio

Generate real inference behavior instead of treating AI as an abstract architecture slide.

Measure Splunk Observability

Track model-side and host-side signals: resources, memory, tokens, footprint, and cost.

Trace ThousandEyes

Validate the routes and network conditions the AI workload depends on.

Decide Scale where evidence points

Improve the host, runtime, path, access model, or network before users feel the bottleneck.

That combination matters because AI performance is easy to misdiagnose. If a response feels slow, the model might not be the issue. The problem could be memory pressure, path loss, DNS, an upstream endpoint, a provider handoff, or a tool call that crosses the wrong boundary.

Splunk Evidence: Make the Workload Measurable

Observability turns AI from a black box into a set of operating signals IT can discuss, tune, and defend.

For my local AI setup, Splunk Observability helps tie the model experience back to infrastructure signals. I want to know whether GPU, ANE, package power, memory pressure, model footprint, process activity, token volume, and local operating cost are moving the way I expect.

Splunk Observability dashboard showing local AI resource metrics including GPU power, ANE power, package power, memory pressure, and loaded model VRAM.
Resource evidence answers the first scaling question: is the AI workload constrained by the host, the model, or something outside the box?
Splunk Observability dashboard showing local AI tokenomics including tokens processed, input tokens, output tokens, local operating cost, and cost per request.
Token and cost evidence answers the second scaling question: which users, workflows, prompts, or agents are driving the demand?

ThousandEyes Evidence: Make the Path Visible

Agentic AI reaches across tools, APIs, data sources, clouds, and branches. That means path evidence becomes AI evidence.

ThousandEyes helps me look at the network side of the same workload. If an AI workflow reaches an endpoint, calls a service, or depends on a remote tool, the answer may not live in the model runtime. It may live in available bandwidth, a route, one overloaded hop, an ISP handoff, packet loss, DNS, or a target that is reachable but degraded.

Consider an internal AI assistant used from the office. Employees may report slow answers even while the model and server are healthy. If Access switch X is oversubscribed—or its uplink has too little available throughput—the request can queue at that hop, adding delay to every retrieval and tool call that crosses it. To the employee, “AI is slow.” To the network team, one dependency is capacity-constrained.

Office request path A slow AI answer, traced to one hop
Model healthy
  1. 01 · Request Office user Prompt leaves the device
  2. 02 · Bottleneck Access switch X Uplink near capacity Throughput constrained
  3. 03 · Transit Campus core Path remains healthy
  4. 04 · Service Internal AI Model responds normally
The endpoint is healthy, but the user still waits. Path evidence isolates where performance changes; switch telemetry confirms whether Access switch X is saturated.
ThousandEyes path visualization showing local AI path tests, runtime, hops, loss, and bottleneck evidence.
Path evidence answers the third scaling question: is the AI experience limited by the model, the network, the provider, or the endpoint?

That is the operating advantage. ThousandEyes can help show where the path changes from healthy to degraded, while switch telemetry confirms whether the cause is an overloaded uplink. Visibility does not create more bandwidth, but it points the team to the right action: rebalance or reroute traffic where an alternate path exists, apply QoS, move the workload closer to users, or add capacity at the constrained access layer.

The Operating Model: Correlate Before You Scale

AI readiness is not one dashboard. It is the ability to connect workload, path, policy, and outcome.

Workload evidence What is the AI system consuming?

Tokens, runtime, memory, model footprint, host pressure, and cost.

Path evidence Where does the workload travel?

Routes, hops, loss, latency, DNS, reachability, provider behavior, and endpoint health.

Policy evidence What is allowed to happen?

Identity, access, segmentation, approved tools, sensitive data, logging, and change control.

Business evidence Is the workflow helping?

User experience, adoption, reliability, owner, risk, and next action.

This is where Cisco's platform strategy becomes relevant. The value of Cisco Cloud Control is not just that it brings domains into one view. The important direction is a governed operating layer where humans and trusted AI agents can work from shared context across networking, security, observability, collaboration, and infrastructure.

For IT leaders, the takeaway is straightforward: before AI becomes another sprawling set of tools, build the operating model that lets the team see what AI is doing, where it is going, what it is allowed to touch, and what needs to change next.

What IT Leaders Should Do Next

The best time to prepare the network for AI is before the business depends on the workload.

01 Instrument

Capture runtime, token, resource, cost, path, and policy signals for the AI workflows that matter.

02 Baseline

Know normal traffic, available bandwidth, uplink utilization, latency, memory, token volume, endpoint behavior, and user experience before rollout pressure hits.

03 Map

Identify which apps, APIs, users, agents, branches, clouds, and data sources each workload depends on.

04 Secure

Apply identity, segmentation, access policy, logging, and governance where the work actually happens.

05 Scale

Relieve constrained hops, modernize the network or runtime, and scale capacity based on evidence instead of reacting to complaints.

06 Recheck

Keep measuring as models, agents, traffic paths, and business usage change.

The organizations that scale AI well will not treat the network as background plumbing. They will treat it as part of the AI platform: observable, secure, governed, and ready to adapt as workloads change.

Source Trail View the References Behind This Brief Cisco, Splunk, and ThousandEyes sources are used for product and research context. The lab screenshots are my own local environment.

Cisco / Foundry AI Network Research

Used for the campus and branch AI research statistics, including survey size, capacity constraints, traffic growth, security concerns, visibility blind spots, and readiness gaps.

Splunk Observability for AI

Used for Splunk Observability for AI context around AI application monitoring, infrastructure health, token usage, estimated cost, and agentic application observability.

ThousandEyes Network Assurance

Used for ThousandEyes context around network and application synthetics, traffic insights, WAN insights, path evidence, packet loss, latency, and bottleneck visibility.

Cisco Cloud Control

Used only for broader platform context: humans, AI agents, telemetry, policy, governance, and action coming together in one operating layer.

Local Lab Screenshots

Used as a practical example of local AI instrumentation, including Mac Studio resource telemetry, local AI tokenomics, and path visibility for an AI workload.

Author lab environment
Join the thread

React or leave a comment.

Public reactions and comments help keep the conversation attached to the brief.