Then your traceroute is the weirdest I seen. I suspect there's a misconfiguration somewhere in your BNG. Or TM have new BNG vendor with a different behavior.

BTW is the high latency still there? Seems to be gone now. Very likely to be congestion. If it's hardware failure it won't disappear like that.

I think you did the test too late. I did it earlier when it really is congested.
All packet after the router has high latency.
All packet egress from G-CORE to other ASN don't have problem.

Your screenshot shows only control plane throttling. If I get that output I will agree with your analysis.

I also specifically chose G-CORE because both TM and G-CORE have selective peering policy in SGIX and peer with each other.

BGP output from looking glass shows only one exit.

This post has been edited by kwss: Jul 12 2025, 12:10 AM

Weird right? I cannot believe this kind of setup actually end up in production.

Yes, now if you try again there's no more control plane throttling.

I kind of cheated by not testing Equinix SG because I have workload there with a symmetrical routing (meaning ingress and egress via Equinux SG).
So that itself tells me it's not Equinux SG. 😂

You will still hit packet loss due to control plane policy, but the latency should be very low now, for me it's only 0.6ms.

Yes I have machine there and it is fine now. I remember last year it was terrible.

That could be the reason as well but so thankful I not only get full speed all the time, there's zero packet loss and also almost 0ms of jitter.

Maybe it's the local MPLS circuit that's congested for you? MPLS circuit is hard to diagnose as they are opaque.

TM has this behavior where they will add a 100Gbps port to DE-CIX ASEAN but will not upgrade known congestion path. They will go as far as to burn money with IP Transit link but still refuse to add another port to IX in Singapore.

You would think they hate Singapore right? But they absolutely route everything to Singapore instead of MyIX, sometimes to as far as HK and JP.

They really defy all sort of logical reasoning.

I have a proposal to solve this.
Since both AS4788 and AS199524 selectively peer with each other, and they both have presence in DE-CIX ASEAN, just remove the BGP session in SGIX and set them up in DE-CIX ASEAN.

I don't know why TM didn't proactively review their peering when they connect at DE-CIX ASEAN. These kind of thing really improve user experience.

They still need to fix their SGIX router, whether it's congestion or the router itself reaching it's limit but every step helps.

Seems to be fixed by TM. If it didn't happen for another week then can confirm it's fixed for good. 😂

Want to provide me endpoint information for diagnostic?

Oh okay then.
But if I want to take a guess based on the graph alone, it looks like Forward Error Correction is in action.

So the fiber cable or the module is falling apart but they didn't actually go dead. This won't trigger any monitoring system.

Quite confident this is not a TM problem. It's between Arelion and someone else.

TM did the handoff at Equinix SG. Return route is actually cold potato routed back to Equinix SG

It's all ISP own preference. They might not want to pay other for transit so they cold potato route it.
If the link is settlement free peering then they will hot potato route it since it reduces their cost.

Google Cloud has their more expensive network which is basically cold potato routing over their own submarine and terrestrial fiber. They will put their own SLA and performance guarantee.

AWS always cold potato route if traffic is already inside their network and destinated to another AWS endpoint.

To answer your question, I identified 3 parties:
Arelion
TATA
Hurricane Electric

Salah siapa I don't know.

Since I am heavily involve in AWS stuff, I can give you some high level pointers but they do cost you extra money
1. Use AWS Global Accelerator
2. Use CloudFront.
3. Use Cloudflare CDN or Agro Tunnel
4. Create a jump host or proxy in AWS Malaysia / Singapore so AWS will cold potato route your traffic

You can use t4g.small in Singapore until year end for free. Storage and inter-region egress fee still apply

I thought it's your AWS setup.

Well that's one way to go about it or just use VPN in the meantime.

Different ISP have different transit provider and they might choose different path so as long as you don't hit the problematic circuit then you won't see the problem.

Err... Equipment failure can happen anywhere on the network right? Especially if it's fiber optic.
The graph clearly show pattern of FEC.

Why the fiber can fail in egress but it cannot fail on ingress?
Plus you don't know if they use TX RX on a single fiber. Or TX one fiber, RX another fiber.

It's even more complicated when it comes to MPO connector. If only 1 strand has problem, you can get weird behavior.

Actually when he reported the AWS problem I tested HE SG+SJO. No problem for me.
Arelion ingress no problem too.
TATA also okay ingress from SJO to SG to MY.

So mmm... I cannot reproduce the problem and cannot really tell what is the problem.

So it gotta have something to do with the BGP optimization software used by TM again.
Or some kind of MPLS circuit problem that affects some path.

What's your location anyway?

Singtel is giving TP-Link BE11000 for their 3Gbps plan for SGD40.

TM cannot even give a proper WiFi 7 router for a 1Gbps plan that cost RM100+ more per month, every month, for 2 years.

If you sign up for 2Gbps, you are paying RM150+ more every month to get the same rubbish from Skyworth.

It's not like the router is Made in Malaysia or Made in Singapore, both telco just buy it from someone else.

I zoom in the photo, it says 2.5GE WAN. 2.5GE LAN.
The official spec from Skyworth is 10G LAN port.
Can someone verify cos papa's eye is kind of old.

Maybe yenchenje is right all along, the casing looks like XGSPON but inside it's still GPON crap.

I have a different suggestion for you.
If your condo have TM, bring your bill to TM and ask if they have any promo for jumping ship.

Since someone mentioned they are receiving calls from TM to jump ship, they might have a package for you.

After you move house, get TM to relocate your fiber. It should be free but please double check.

EDIT:
When I say TM, I am referring to those places run by TM, not authorized reseller.

This post has been edited by kwss: Jul 13 2025, 09:12 PM

Ok I tested.
HE route all your packet to France then back to MY.

For my IP address, it goes straight to me.

Test location: Singapore

This is made possible because Ruckus has multiple backdoors that was made public.
I consider hardcoded password, public/private key, JWT as backdoor.

https://www.bleepingcomputer.com/news/secur...gement-devices/

This confirms it. Still GPON. No 6 GHz.
Better just stick to dumb ONU if you are 1Gbps and below.