Welcome Guest ( Log In | Register )

Bump Topic Topic Closed RSS Feed

Outline · [ Standard ] · Linear+

Unifi Official TM UniFi High Speed Broadband Thread V42, READ 1ST PAGE FOR RELEVANT WIFI INFO!

views
     
blackbox14
post Sep 8 2024, 09:01 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(kwss @ Sep 8 2024, 08:51 PM)
Social media or not, the tech scene in Malaysia is officially dead. Tech is borderless and money is made borderless too. How do you expect startup to survive without social media?

Malaysia market is way too small and with all the restrictions, it won't be a surprised if we see Shopee or Grab get "quarantined" regularly.

Plus all the Malaysian remote tech worker will looks like pariah now.
*
That's why need to see the public's and businesses' response to that as well, not just this DNS thing.

Just imagine how regularly Youtube alone would have to be quarantined.
blackbox14
post Sep 8 2024, 10:28 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(kwss @ Sep 8 2024, 09:43 PM)
So much news they put out about quarantine and kill switch, no one will want to do business here.
Imagine suddenly sakit hati and you kena quarantine or internet got killed. How to fulfill order?
Say your business involve social network, don't need to reply DM as long as the sakit hati continue?

Best to just move to other country that don't even discuss this kind of things.
Once discussed, reputation and confidence is gone.
*
Damn straight. Ideally, the only thing I want to hear out of MCMC and Digital and Comms Ministry are improved price and/or speed for existing packages. Also kempen kesedaran for parents with young children as well as aunties and uncles to be careful online la. That is still a real concern.

For the sakit hati thing, that one Github example I saw was the best because it affects those kinds of businesses too:

Someone puts up something on Github gomen don't like/found that it infringes copyright, MCMC bans all Github. GG tech companies.
blackbox14
post Sep 10 2024, 07:34 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
Kind of off-topic, but after the recent DNS incident, I'm trying to find a router that can run a VPN.

So far looking at Ubiquiti Ultra Cloud Gateway. Will probably use my old Archer C9 as a wireless AP. Would that be ok?

I'm guessing no issues running it with TM Unifi?

This post has been edited by blackbox14: Sep 10 2024, 07:35 PM
blackbox14
post Sep 10 2024, 07:59 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(PRSXFENG @ Sep 10 2024, 07:54 PM)
Maybe consider GL-iNET Routers as well? They have an official store on Shopee
Consider the Flint 2

their routers are advertised as VPN routers, supporting OpenVPN and Wireguard, their firmware is based on OpenWRT

Otherwise I think the latest Asus routers also support Wireguard

or there are also other routers that could be flashed to run OpenWRT

But since you've mentioned Ubiquiti, consider Mikrotik as well, though not cheap
*
Thanks. Will check them out.

I have a router flashed with OpenWRT serving as my personal Wifi AP for my room, but it's an older TP Link Archer model.
blackbox14
post Sep 10 2024, 09:19 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(yenchenje @ Sep 10 2024, 08:30 PM)
As someone that's running Unifi full stack for my network, it's like a drug to me personally, once I get one thing I want more, that might also applies to you

Considering you are quite technical from your conversation, Mikrotik might be your bread and butter, or even better, use OPNSense as your main and the rest just mix and match and DIY yourself  thumbsup.gif

Also from what I can gather, PPPoE on Ubiquiti is not as fast as maybe even the Archer C9, Unifi isn't that optimized to use PPPoE protocol and it's more suitable for using like iPoE, if you ever want to push more speed, that might also be a limiting factor. Currently my UDM SE can only pull around 850-870, max I've seen is 910-920 on my 1Gbps, but that might just be an OLT limitation on my side and might again DIFFER from you
*
I'm actually more of a set and forget kind of person. tongue.gif I did consider getting into Mikrotik once, then decided against it since I need something that is easier to configure/re-configure in the event of emergencies. Also have a spare old Optiplex that I considered setting up OPNsense on, but it isn't practical to use it with my family members not knowing that much about tech. It might cause them problems serving its role.

The main goal right now is just to get a router that can handle Wireguard and is simple to use and configure if the DNS block returns and affects DoT and DoH again.

The ASUS routers that support Wireguard seem to come with a feature that can separate VPN connection from non VPN connection (VPN Fusion), so I might be looking into those more.
blackbox14
post Sep 10 2024, 09:35 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(PRSXFENG @ Sep 10 2024, 09:23 PM)
Just looked into it, interesting

GL-iNet has more simpler options, you can set it for example so some MAC Addresses bypass it
https://docs.gl-inet.com/router/en/4/interf.../vpn_dashboard/

but no "multiple vpn connections for multiple different devices"
*
I do like the Flint 2 more as a package, but my main issue with it is that the Shopee seller is overseas and not a Shopee Mall certified store.

Mikrotik, Ubiquiti and ASUS are all available locally, making warranty claims much easier in the event of DoA or any other issues.
blackbox14
post Sep 10 2024, 09:46 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(dev/numb @ Sep 10 2024, 09:36 PM)
By “can run a VPN” do you mean server or client? I assume it’s the latter (meaning act a client for a VPN service you’ve subscribed to) since you mentioned the DNS shithousery. Do note that most Ubiquiti gateways don’t have WireGuard client functionality listed in their specs, only WireGuard server. I asked for confirmation in the Ubiquiti thread here, but have yet to get a reply. If true, your VPN provider will need to offer OpenVPN (most do) or IPSec protocols (some don’t).

There’s also the matter of hardware acceleration for various protocols to consider. I’ve not dug deep enough yet. I know Mikrotik routers have IPSec acceleration built in. Mediatek processors in GL.iNet and Asus routers support multi-threaded hardware acceleration for WireGuard. The Broadcom chips in higher end Asus (the models compatible with Merlin firmware) have WireGuard acceleration capped to a single core, from what I’ve read on SNB forums. Hope this helps.
*
Yup meant VPN Client not server.

That info helps a lot, thanks. I can narrow down the choices based on that and my budget now.

QUOTE(yenchenje @ Sep 10 2024, 09:39 PM)
Then you can consider using Unifi. currently I have 8 VPN connected on my UDM SE and just using routing policy to route specific devices through certain VPN (Sometimes I route my own devices through VPN on router level to bypass TM's horrible routing), but UCG-Ultra probably can't handle that much OVPN/WG session at once, I'd say maybe 2-3 sessions at once and use policy to route

user posted image
user posted image
*
UDM-SE is way over my budget, haha.

Now as per what dev/numb said I need to make sure UCG-Ultra can even act as a Wireguard client. Otherwise it's ASUS for me.
blackbox14
post Sep 10 2024, 10:30 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(dev/numb @ Sep 10 2024, 10:02 PM)
Fwiw, I ordered an Asus AX59u yesterday for around RM430 (including delivery) via Shopee 9.9 sales. It’s for my mum’s home (I reckon she doesn’t need Merlin, lol) which I’ll be spending more time at over the next few weeks (she’s recovering from surgery), so I should be able to test out the WireGuard (using Swedish Mole provider, not mentioning the name because TM bastids are voyeurs here) performance. May take some time though since I am switching her ISP to Maxis and have yet to get the transfer ID. Earliest I can share results might be next week. Also, I edited my previous post a bit, so the alternative I added to the end might interest you.
*
Do let me know how your testing goes. AX59U was one of the models I was looking at because I have limited space where my network equipment is placed. Standing also helps dissipate heat better there.

QUOTE(PRSXFENG @ Sep 10 2024, 10:14 PM)
fair enough

it is their official store despite not being mall (ps, shopee preferred/mall sellers have to pay more fees)
and yeah it is coming directly from them from HK so it will take some time
you can see it is linked to from https://www.gl-inet.com/where-to-buy/
*
Yeah I understand.

If they had a local rep I would be willing to try them out. But without easy way to get a replacement, I had to think twice.
blackbox14
post Sep 11 2024, 09:04 AM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(simmarjit @ Sep 11 2024, 01:47 AM)
You can just use ubiquiti teleport which is their own wireguard, pretty sure even Unifi Express has it.
*
Teleport is to set up a VPN Server, right?

My use case would be as a VPN client, as in whatever existing VPN account I have I will apply it on router level.
blackbox14
post Sep 11 2024, 11:18 AM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(yenchenje @ Sep 11 2024, 09:28 AM)
Yeah then Ubiquiti can do that, with how many client with the UCG Ultra unsure but it definitely can’t do 8 simultaneously like my UDM SE
*
Is there some way to filter the devices using the VPN client by MAC address or something similar for your UDM SE?

Asus has the VPN Fusion feature for their TUF AX4200 that lets you decide which device goes through VPN.

This post has been edited by blackbox14: Sep 11 2024, 11:19 AM
blackbox14
post Sep 12 2024, 01:52 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(Epic_winner091 @ Sep 12 2024, 10:18 AM)
Not surprised. Probably some bigwigs (probably large companies) have complained it's affecting their ops.

My workplace use OpenDNS apparently.
*
This is what I've been trying to tell some people I know, but now they insist that companies use VPNs more than 3rd party DNS for security. So this whole fiasco is just foreign agenda to corrupt our morals and whatnot.

But funny thing is that even some of these people admit Secure DNS hijacking the way TM did was too much. They are ok with just hijacking/blocking port 53/naked DNS. I guess it's like the gatekeeping 'difficult video games' issue where people who complain games are too easy only do so if it's not difficult enough for most people.

QUOTE(simmarjit @ Sep 12 2024, 01:10 AM)
Its their own wireguard server and client. Either way even Express has VPN Server and Client capabilities.
*
Thank you. I need to look this up. I thought it was just their own proprietary VPN Server feature and didn't know it could serve as a client as well.

This post has been edited by blackbox14: Sep 12 2024, 01:52 PM
blackbox14
post Sep 12 2024, 07:54 PM

Casual
***
Junior Member
349 posts

Joined: Jul 2012
QUOTE(axxer @ Sep 12 2024, 07:41 PM)
What a stupid argument. Tech giant biased against palestine > we ssl mitm our country network. Whataboutism at its best. The "Think about the kids!" argument are also as old as any tyranism regime everywhere, and the sheeps that lack critical thinking just ate it as it is, " Yes we cared about our kids!". What a shitshow this country has gone into.
*
The fact that they did it and thought everyone including the tech industry would take it lying down shows a disconnect with the populace. They're still living in 1990s~2000s.

5 Pages « < 3 4 5Top
Topic ClosedOptions
 

Change to:
| Lo-Fi Version
0.1369sec    0.76    7 queries    GZIP Disabled
Time is now: 19th December 2025 - 04:58 PM