If by that logical sense, according to smart and sifu guy ,you must be at extraordinary level then.

If you already have that hardware setup, then yes of course it makes sense to use that full capacity of mikrotik. I don't think you are using any of those consumer grade router with fancy GUI Pairing to your mikrotik right ?

I prefer a more straightforward approach by using home consumer grade gui , don't want manual coding
More like how many people will start bombarding tm customer service how come suddenly no internet connection while not realising dns getting blocked. on tm fb group the post about dns not working is slowly surfacing but they are doing their best to not approve any post about dns.

best saver of the day. Everything running and working well. even has adguard filter list built into the dns.

Just registered an account with them, link the IP with my account and whole network has inbuilt ad filtering as well..no need private dns.

By the way, just out of curiosity, do you use external "device" to filter like how EVERY SIFU does in here?? Because according to one wizard here, EVERY SIFU MUST HAVE pihole.

Is this, https://www.facebook.com/groups/tmunifimembers, the fb group you're referring to?

Just a rookie knows how to change DNS in each devices. I just change plaintext nextdns in each device included my router it's sufficient 

Max i can do is install Openwrt in tm stock router DIR-842 and apply DoH in the router, but due to hardware limitation the speed isn't ideal.

Nextdns setup and UI is simple, i set diff profile for each device, can check the logs in each device, btw i registered 2 accounts so i can have 600k queries

is this just unifi ? or will implement on all ISP in Malaysia eventually.

Just a rookie knows how to change DNS in each devices. I just change plaintext nextdns in each device included my router it's sufficient 

Max i can do is install Openwrt in tm stock router DIR-842 and apply DoH in the router, but due to hardware limitation the speed isn't ideal.

Nextdns setup and UI is simple, i set diff profile for each device, can check the logs in each device, btw i registered 2 accounts so i can have 600k queries

Edit: enable "cache boost" in setting - NextDNS cache boost

Nextdns setup and UI is simple, i set diff profile for each device, can check the logs in each device, btw i registered 2 accounts so i can have 600k queries

Edit: enable "cache boost" in setting - NextDNS cache boost

used to use nextdns, but recently it just give me message " Private dns are not accessible" , switch to controld dns so far so godd.

https://controld.com/free-dns

used to use nextdns, but recently it just give me message " Private dns are not accessible" , switch to controld dns so far so godd.

https://controld.com/free-dns

Is Controld has limited queries/features like Nextdns ?

well that works also xd 
https://www.privacytools.io/privacy-vpn

mullvad caps it to 5 devices. other vpn may allow no limit devices, or not. depends on their policy

fyi mullvad isn't for netflix geo unblock. it doesn't work well for that purpose. so you need to look at a different vpn if you are using for that. i think expressvpn supports that for netflix last time? not sure now.

some vpn depending on your broadband subscription speed, may reduce your dl and ul speed. but using mullvad for 100-300 mbps dl, works fine. You don't see the reduced speed to throttle your max dl/ul.

Another issue with using vpn, you are more prone to get cloudflare bot challenges. So that is an annoyance 

Do not trust fully trust privacytools.io!! The owner sold out and now is a NordVPN affiliate. You might be able to find useful knowledge from members on the forum section, but If you truly care about privacy you be wary of the main site’s recommended services. If privacy isn’t your main concern and you simply want to get past regional blocks, then it is fine. Fyi, the old contributors moved and created privacyguides.org.

Also fwiw, Mullvad’s Singapore, Thai, Hong Kong and Indonesia nodes have been unusable on Unfi from 9pm-2am for the past few weeks, and honestly had been hit and miss since MCO days. This is more TM’s fault than Mullvad’s. Japan (jp-tyo-wg-001,002,003) is the closest location with stable packet flow during those times, at the expense of higher latency). Sincerely speaking, Mullvad isn’t the best choice for Unifi hostages.

out of curiosity, dnscrypt is blocked too I presume?

Do not trust fully trust privacytools.io!! The owner sold out and now is a NordVPN affiliate. You might be able to find useful knowledge from members on the forum section, but If you truly care about privacy you be wary of the main site’s recommended services. If privacy isn’t your main concern and you simply want to get past regional blocks, then it is fine. Fyi, the old contributors moved and created privacyguides.org.

Also fwiw, Mullvad’s Singapore, Thai, Hong Kong and Indonesia nodes have been unusable on Unfi from 9pm-2am for the past few weeks, and honestly had been hit and miss since MCO days. This is more TM’s fault than Mullvad’s. Japan (jp-tyo-wg-001,002,003) is the closest location with stable packet flow during those times, at the expense of higher latency). Sincerely speaking, Mullvad isn’t the best VPN for Unifi hostages.

i use controld too with redirect feature 

youtube redirect to russia for ads free expirience

google tv redirect to US for google live free channel

wow SO MANY 'SIFU' sharing DNS now , according to wizard many using 'pihole' + linux . now seems to be going another way, i see joker also try to join in the fun.

but this nextdns adguard filter damn sensitive like the joker...turn on a bit of the filters even my facebook, shopee app fail to load...True sifu level maybe of filtering .

looks neat intuitive and clean , is this pihole+linux? must be sifu level stuffs

Are you in a location other Klang Valley? TNG55 in Penang not affected. Seems like only certain regions for now.

Anyway for me, Kajang:
dig ml.iherb.com @8.8.8.8
returns
175.139.142.25

Legit IPs should be:
172.64.149.245
104.18.38.11
TM not just hijacking DNS queries though. They're rerouting & NATting 8.8.8.8 to their own server. Go to https://8.8.8.8 and you can see their dns.tm.net.my SSL cert.