I just use tools to get optimized cloudflare cdn ip and redirect to that ip.

Yup,restart is not a must,but it is easily to just restart for fully clear connection.

Edited:
Due to TM crap routing,sometimes TM to some cloudflare ip will just reroute to HKG or other country that out of MY or SG,which will cause the performance degradation for browsing website that using Cloudflare CDN.
So i just redirect all Cloudflare IP to the best ip that will get low ping and high speed.

Edited 2:
With redirect IP,I can just redirect Cloudflare usage to JHB/KUL/SGP CF node for better connection.

This post has been edited by go626201: May 29 2023, 10:23 PM

I usually use pingplotter as it will show every network node between the connection.
For the simple latency,i just add to my smokeping for monitoring.

I not sure why start from 1-2 weeks ago,i cant connect to Cloudflare IP - 172.64.80.1
As i was using it for weeks,and suddenly i cant connect to it anymore,but other than that 172.64.80.2 - 172.64.80.255 all accessible...

Waoooo.... your ping is ridiculous low....

Pinging 104.16.166.129 with 32 bytes of data:
Reply from 104.16.166.129: bytes=32 time=6ms TTL=60
Reply from 104.16.166.129: bytes=32 time=6ms TTL=60
Reply from 104.16.166.129: bytes=32 time=6ms TTL=60
Reply from 104.16.166.129: bytes=32 time=6ms TTL=60

Ping statistics for 104.16.166.129:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 6ms, Maximum = 6ms, Average = 6ms

I just get the list from a repository on Github.
https://github.com/XIU2/CloudflareSpeedTest

They had compile a list of most possible ips range that might use for CDN visit usage.

Can you send a traceroute or pingplotter or mtr result here?

The reason for doing this is because sometime the routing to those CF ip might route with 40-100ms,and sometimes with packet lost.

This post has been edited by go626201: May 31 2023, 11:06 PM

Ah...you Time ISP... I thought u TM unifi... no wonder u can get below 2ms...

Yours also good...
I am located at Johor...

As long as the end point didn't have packet loss, it is okay. The traceroute showing packet loss between nodes is not really affecting the connection.

I was using RB750Gr3 before 2020 with 800mbps plan,it works without any issue.
For now hAP AX2 or AX3 should be enough for up to 1G if you do not need any multiple complicated rule for the firewall.

If u have more budget,just straight up to RB5009 is also can. (which included 1x 10G SFP+ and 1x2.5G ethernet port)

Just take a look on it, and mikrotik test show that its cpu is weaker than Hap ac2.

So my suggestion is better take hap AX2 or AX3 for more cpu power.
More cpu power mean more customize setting can be done without cpu bottleneck. (Like VPN tunnel on Mikrotik can run higher speed without affecting network stability)

Yes - https://mikrotik.com/products/group/ethernet-routers
Those are mainly for non-wifi usage.

With fasttrack,should be okay,but if you need additional firewall rule and without fasttrack ,the cpu power is not enough for 1gbps.

Just preorder from distributor?
2 years ago ,I preorder RB5009 after Mikrotik public release while Subtel didn't have the stock in Aug 2021. (I think i might be the first people or within 5-10 person that bought first batch RB5009 in Malaysia)

RM999 to Sublime in Aug 2021. (included RM10 delivery fee)
Now price i dont know, but i think should be price up for inflation.

Edited:
Lazada Subtel showing RM1122 but out of stock.
https://www.lazada.com.my/products/mikrotik...1382899891.html

This post has been edited by go626201: Nov 30 2023, 12:44 PM

I think it should be the same for all of the world since the firmware is the same one.


And also I think next year end, mikrotik might release a new generation ethernet router with more 2.5G port. (8 port?)

This post has been edited by go626201: Dec 1 2023, 02:00 PM

CPU bottleneck,change to Hap ax2 or ax3 should be able to hit more than 600M.

RB5009 should be enough. (But with 1.X-2X price compare to AX2 or AX3)

If not urgent use,just wait for another 1-2 years for next gen of RB5009 which should be having more 2.5G port. (My guess only)
And disable ipv6 until 2025,now ipv6 still not suitable for wide usage.

I not sure did you saw a post/replies on lowyat from few weeks or months ago or not.
There is someone who having problem while using mikrotik router and ipv6 with full speed steam download causing Mikrotik router cpu overload,and the internet connectivity will be unstable at the time.
So unless Mikrotik update the routeros with ipv6 fasttrack,then those lower grade mikrotik router will not have enough cpu power to run ipv6 with high speed usage.
(To be clear,i had using RB750Gr3 for few years before i getting my current RB5009)

And the reason why i said ipv6 is not suitable to enable at current state,is because most countries isp or hosting provider does not really care about ipv6 performance/routing connectivity at current state, they just provide the ipv6 connectivity,
and didn't put enough effort to optimize the ipv6 connectivity.
Simple example,enable ipv6 with unifi will having some foreign site loading slower compare to ipv4. (Cloudflare site is fast for most time, but there are still lot of site not using CF)

That ipv6.speedtest.net does not mean speedtest with ipv6 only.
This link is 100% same to speedtest.net.
But it is possible that speedtest with ipv6 on speedtest.net,some speedtest server is ipv6 enabled(Which mean ipv4 and ipv6 dns resolve with same hostname or server)
so if the hostname is resolve to ipv6,then it is speedtest with ipv6.
And when ipv6 is disabled,it will speedtest with ipv4.

The fastest way to speedtest with ipv6,is disable your ipv4 on your device and run speedtest on those ipv6 supported site.
Like speed.cloudflare.com is supported.
Later if i found any ipv6 speedtest site can hit more than 600mbps with unifi,then i will post here.

Edited:
I had setup a ipv6 only speedtest server on my next week expiring 10G SG vps.
Feel free to speedtest with it. (If ipv6 is not enabled,then u might not be able to access the site)
http://v6test.mywebping.com/

Just now i tried can hit full speed without any issue. (Device RB5009 + 2.5G PC)
Please don't spam too many time speedtest on it,thanks.

With Queue-

Without Queue-

Time need +8hour (2.30am)

This post has been edited by go626201: Jan 8 2024, 02:31 AM

10G not enough for your usage?
I think 10G should be enough for next 5 years for most people.

My advice just pull 1 fiber and 1 ethernet cable to every room in your house for future proof.
Incase you want to setup 100% super stable high speed wifi mesh in future.
And you can also have 10G Lan port for any device you want in every room.

Cat6A is enough for next 5-10 years. (The standard longevity for standard quality ethernet cable is around 8-10year)
When the time higher speed release for public, the cable is out of tech already.
And Cat8 cable is super thick.

And Remember to test the cable before fully finishing renovation to ensure the cable is okay to be use.
I had bought a short Cat8 Ugreen cable in few years ago,and the cable seems like having some issue,that will flip the speed rate and sudden disconnect and reconnect.

I am just saying Cat8 is not worth at current stage,and the longevity is just a estimate for the worst situation.
And also at the time when it start having issue,most people might already plan to move or re-renovation again. (like 12-14years or more)
Secondly,10G is good enough for 99% of device for next 5-10years.

Cat6A is still the better choice that considering money cost + tech level ,as current time - most installer does not crimp Cat8 properly, which might causing more issue.