You may try to reboot your router to get another IP range that have lower ping to US.

No problem here, can stream 4k smoothly.

Do you disabled your IPv6?
If yes, then you should consider to enable IPv6 as many sites work better over IPv6 connection.

You may try enable IPv6 to get better performance.

Websites that have IPv6 support (including Netflix, Cloudflare, Google, YouTube, Facebook) work better with IPv6 enabled.

This post has been edited by michaelkkl: Aug 6 2021, 10:30 AM

Kindly enable your IPv6.

Lowyat is using Cloudflare, and Cloudflare is better over IPv6.

As far as my observation, Cloudflare in Unifi IPv4 is mostly route via HKG, NRT, SIN, and JHB colo. Problem is HKG, NRT via PCCW global link sometime will get congested. That's why sometime will get lag over Cloudflare IPv4.

Cloudflare in Unifi IPv6 will mainly route via SIN, JHB colo which is more better performance. So far I didn't get lag to Cloudflare sites after enabling IPv6.

IPv4 only:


With IPv6 enabled:


This post has been edited by michaelkkl: Aug 13 2021, 10:48 PM

How about testing other devices using wifi?
Does it have the same delay issue?

Quad9 actually provided by PCH (AS42) which have PoP in KUL (MyIX, AIMS).
ISP that peer with PCH in MyIX will get Quad9 route via MyIX.

During Quad9 firstly launched in MyIX, I did feedback about TM routing to Quad9.
They replied that TM peering with them in SG but not in KUL.

That is why routing from TM to Quad9 will goes via Equinix SG instead of local MyIX.

This post has been edited by michaelkkl: Aug 25 2021, 10:58 AM

218.100.44.0/24 IP block previously owned by Global Transit before MyIX.
Some of the sites didn't update their IP database that's why it still showing old data.

You may try APNIC whois, it will shows the IP is under MyIX.

If you're familiar with the router settings, you may reset it and reconfigure it back.
You may request your unifi pppoe login password through unifi live chat.

TR-069 is a protocol use by ISP for remote management and feature provisioning of CPE (ISP supplied modem and/or router).
Firmware update by ISP also can be pushed to CPE using this protocol.

As for remote management feature that you mentioned is mostly use by users to access the router page outside from router local network.

Normally we will use IPv4 and IPv6 dual stack, which mean we get an IPv4 and IPv6 address.

If you switch to IPv6 only, some of the website will be inaccessible as some website didn't have IPv6 or have IPv6 disabled.

Yes, your IPv6 is public IP address.

This post has been edited by michaelkkl: Oct 14 2021, 02:13 PM

First, there is nothing to scare from being on a public IP allocation, as long as your router security are configured right. One of the most common myth regarding IPv6 security is that the lack of NAT makes IPv6 less secure.

NAT is often seen as a security feature in IPv4 networks, but the reality is NAT does not provide any real network security.

Although IPv6 is an global address, but it does not mean you can get there from wherever you are on the public internet. This is what firewalls were designed to do.
A stateful firewall uses state to determine which packets to allow into the network. That is, it remembers when you send packets out and to whom so that it can allow packets back in only from those hosts with which you initiated communication. In other words, a stateful firewall stops all incoming traffic unless it is a reply to valid traffic that you sent.

While the NAT may provide a bit of obfuscation, by hiding your internal addresses, it is really this stateful firewall function that protects your network from unwanted intrusion.

Reference:
https://blog.apnic.net/2019/03/18/common-mi...-ipv6-security/
https://www.internetsociety.org/blog/2015/0...-less-security/

This post has been edited by michaelkkl: Oct 14 2021, 09:24 PM

It is normal. The CGNAT router (at TM end) may add some latency (1~2ms).
The ping also depend on where are you geographically located and looks like northern states.

You may test on http://test-ipv6.com/
If you enabled IPv6, you'll get 10/10 marks and should have no problem for your connection.

This post has been edited by michaelkkl: Oct 25 2021, 01:13 PM

Cloudflare KUL PoP is now optimized since I feedback to Cloudflare team about performance issue in KUL PoP few week before.
It seems that before that KUL PoP only announced some of the Cloudflare prefixes, that is why the traffic is going through JHB/SIN PoP.

Did you enabled Apple iCloud private relay?
Private relay works in Safari to protect browsing activities, and Apple use Akamai, Fastly and Cloudflare for this feature.
That is why Akamai IP shows up in Safari speedtest.

Do you mean speedtest.net?
Speedtest.net auto determine server using the lowest latency.
You can also manually select Malaysia server for speedtest.

It is not recommend to use tunnel broker for IPv6 as it will cause performance issue. Native IPv6 is more recommended.
It is not recommended to disable IPv6 if you didn't experience any issue for your connection.
Disabling IPv6 also not recommended by Microsoft as Windows relies on IPv6 internally.

This post has been edited by michaelkkl: Dec 13 2021, 02:47 PM

Seems fine from your PC to your gigabit switch.
How about your gigabit switch to router?

A quick lookup shows that Unifi IPv4 to Cloudflare HKG is having some packet loss issue.

IPv6 has no issue as Unifi IPv6 take different route to Cloudflare SGP (via Telstra SG).

Kindly enable IPv6 for better performance to Cloudflare sites.

This post has been edited by michaelkkl: Dec 25 2021, 03:12 PM

Seems the site only monitor IPv4 connection.

Yes, can confirm some of the SG CDN server having packet loss.
But still ok for Cloudflare SGP IPv6, at least not much packet loss compared to Cloudflare HKG IPv4.