JHB also the same I guess.
Installed 1.1.1.1 app and switch Tunnel protocol to MASQUE, it will redirect you from SG to JHB, and yes it is fast, but every 30-90s all line no data incoming/outgoing for >20s, unusable.
----
TM Seremban(or Melaka, unsure which one I connected) fiber somehow bursted tonight, hmm.



Upload fine, just download, hmm...
Oversell?
----
After 3 hours of issues, the latency getting a little bit better, jumping in between 70-110ms now.


This post has been edited by BenYeeHua: Aug 20 2025, 11:04 PM

Guess everyone is sleeping, or I perform speedtest repeatly and kicked in QoS to bring me back?
The latency becoming much better and better, jumping in between 11 - 70ms.



And maybe fully recovered, even speedtest at Digi which is IPv6 also fully recovered, hmm.
First time seeing high latency at route #2 100.89.191.254, I guess not my fiber issues, right?

As no one report in Lowyat, I guess only happen to those CGNAT 100Mbps users.


Based on fast.com, the latency still 10-75ms and 50-150Mbps available only(included burst speed), guess more likely issues at TM side.

Yes, my Taman is special, it is drag from another Taman which is freely to sub up to 100Mbps in old time, while my area nothing lol.
Then a few week before covid lock down, they finally finish pulled fiber, and open port for register, which also soft limited to 30M max.
(in before got trigger 100M free 1 month demo, and it did speed up, so plan limit only, lol)

During that lock down period, the modem will get kicked out, and sometimes IPv6 becoming black hole.
(as still got IPv6 assigned, but nothing came out from it, and Google Play update will hang for 30s timeout lol)
After 1 midnight cut off of 1 hours internet, then everything went fine, no more strange cut off issues.

And, thanks to free speed upgrade, it break the soft limit of 30M and allowing 100M as it is the min speed, but unsure can 500M or not, as late to SWU....

So as you can see, the last mile issues is already there in the beginnings, I also observed the PON light flashing during the boot of modem now...
-22.4 dBm if u wonder, nearly reaching the end of signal if got upgraded to XGSPON or higher lol.

This is not the worst, based on my testing on CGNAT, most IP address has been abusing for brute force attack, many services including Microsoft account, are blocking Malaysia IP to login.
(Aliyun also observed, what's made it worst? SMS is blocked by MCMC, as abuse of SCAM disallow them to SMS customer as TAC code!!! Now only phone call is allowed...)
I wonder when next year, GTA6 released, will we faced again the rockstar's socialclub issues again or not.

SocialClub.rockstargames.com is blocked?, problem is still there for TM Unifi user

Based on my Testing, 175.141.x.x, 180.x.x.x and 60.x.x.x all can get blocked by services for login now, if they doing well, all you need to be facing will be 2FA via phone call only.
---
First time login la, if u got cookies proof you are trust client, some of them will open for login, unless you got blocked at the edge server.

Intel: Yes, RING bus, split into small core as solution!
AMD: ?


----(forget I talk about this or not, so just said again la lol)
Based on my observation at China, they did facing the same issues 12 years ago, they oversold the broadband of area, so everynight they will drop speed and packet loss lol.
But now, mostly fixed, by their KPI I guess, as any monitoring warning like signal loss or weak signal causing disconnection shown up, they had to fix it by calling the client, then step up to their house lol.

And, to fill up the hole of money as they are mostly cheaper than us(FYI, different area different plan price, some area paid yearly and 10x cheaper than us), they are collecting money from services side, lol.
(So most of their video is 1-6Mbps video bitrate only, including 4k, yes.)
To fight back, services side used PCDN which is P2P based CDN, then give a lot ppl with NAT1 network free router with SSD connected, which working as peer, so transfer the cost of bandwidth to customer, and give customer some money la.

Then, these 2 years, ISP went crazy because of inter-state bandwidth calculation(problem of big country, big area with different ISP under same name company lol), when they detected customer uploading just to any cloud storage, they will cut their customer's upload speed to 5Mbps only, pull back NAT1(public IP) and put back into CGNAT, then asking they to sign a promise that they will not perform PCDN, which is a trap.
(the correct method is to disagree it as not performing any PCDN, then report to upper level, then repeat again if 5M limit coming back, lol.)

If got upload requirement like hoster/live streamer, then need to sign special contract as well.

So, what's will happen to Malaysia which is small country, time will tell la.

WiFi 6 router, the SkyWorth GN630V, have 2 fault.
1. WPA3 unstable, sometimes it got disabled while running, but still broadcasting as WPA3 supported, when WPA3 client trying connect to it, it will dropped
2. EasyMesh unstable, if you enabled EasyMesh, even without any second mesh connected, you can be drop by any IoT device that nearby the router, lol.
(Yes, got 1 smart socket trigger 2.4G WiFi missing, lol.

And FYI, if customer using EVPAD, the 金星影视 RH app will creating a lot of half-open connection in the background, downloading 1GB of data and upload it to other clients, as it is the only app that supported from EVPAD gen 3-6, a lot of outdated old customer are performing nearly DDoS to the ISP.
If the customer are using Asus router, this TVbox will get auto ban by the router first, lol.

Unsure how many connection open by this app, I am sure it should be over 1000 connections, let's hope it is not 10000 connections.

Anyways, hope TM don't block P2P again la(like old time streamyx lol), not like P2P tech is the fault here, but the EVPAD is, they should fight it back via MCMC as it is illegal lol.

This post has been edited by BenYeeHua: Aug 21 2025, 02:12 PM

Backup the ONU + router + WiFi combo config first, then set it as dial-up/bridge, using old WiFi 5 Asus router as dial-up router la.
RMB disable the WiFi function of this ONU combo router.



Unless you wanna keep WiFi 6 router as another AP, then hmm, I don't think this is a good idea...
---
The ONU part are working fine, just the router part is not, it is not like it got NAT boost etc.
This is a common issues at China, they also prefer give WiFi ONU combo as solution, many area disallow customer to enable bridge/dial-up lol.

Some installer also self-sell their own commission router, and refuse to upgrade your ONU if you disagree on buying their router, lol.
(As china keep upgrading their GPON tech very fast, refusing it means unstable ONU as well, lol.)
---
Yes, during ADSL2 old age time(nah, just 20 years ago lol), I also dial-up using PC instead of ADSL2 modem, this allow me to using any p2p software freely without facing hang problem, because of too many half-open of p2p lol.
----
Forgot 1 thing, the installer that installed this modem at my home, he setup the VoIP incorrectly, @ims.tm.com.my are forgetten to put behind of phone num lol.

This post has been edited by BenYeeHua: Aug 21 2025, 02:09 PM

It is torrent, as it act as p2p server to serves those video, and keep download and upload new resource, 1GB is the cache limit.
Unsure it serves as those burst force attackers or not...

Yes, even Win 11 WinRe don't support WPA3, lol.

https://learn.microsoft.com/en-us/windows/c...ry/?tabs=intune

I tried to use mesh client to convert my LAN device to WiFi, but then found out the latency is sky high even it only using 5Ghz as backbond of EasyMesh lol, guess only useful with ethernet backbond.

I use 1.1.1.1 app + MASQUE(if want JHB server) when I wanna connect to cloudflare server, but it still drop connection sometimes, guess JHB really not prepared for anything, lol.

Nothing?
I also that version since last years installed, the kernal is Compile Time: 2024-10-24 17:22:29.

Yes, factory version.

Ya, in past, if you using Windows PPPoE client at ADSL2 during unifi just got 10Mbps over VDSL, you might get 1 month period of IPv6, during that time, your will bypass the 480kbps speed limit to Google + YouTube via IPv4...

So yes, QoS is there, at that period, only method is get fiber which higher QoS.
---
Yes, blame MCMC, even WeChat and Shopee same issues, but Shopee bypass it by asking TAC from Whatsapp, then broken phone call TAC lol.
(Yes, Shopee phone call TAC is invalid TAC, you can't pass the verify lol)
(WeChat is, if you got kicked out because 1 month inactive, you need to switch out account first, else you will get error for asking sms TAC to relogin)
(For Aliyun, it will phone call TAC sometimes, but like 10% chance lol.)

Kaki run first, then causing a lot of login problem that disabled 2FA system by disabled 99% of sms TAC, lol!!!

Some person asking why not using KUL cloudflare, here is why...
[NextTrace API] preferred API IP - [2605:52c0:2:7f4:f0a9:7aff:fe0e:8b35] - 655.89ms - 🐠 (Relay) → Misaka.LAX
IP Geo Data Provider: LeoMoeAPI
traceroute to 2606:4700:3110::6812:318a, 30 hops max, 52 bytes payload, ICMP mode
1 *
2 2001:e68:402c:8001::ba AS4788 马来西亚 双文丹 tm.com.my
6.84 ms / 7.50 ms / 7.66 ms
3 2001:e68::b:4c AS4788 马来西亚 tm.com.my
10.84 ms / 10.59 ms / 10.02 ms
4 2400:cb00:56:3::a29e:18fd AS13335 马来西亚 吉隆坡联邦直辖区 cloudflare.com
16.96 ms / 15.63 ms / 16.71 ms
5 2606:4700:3110::6812:318a AS13335 Anycast cloudflare.com
90.16 ms / 89.37 ms / 89.20 ms

Second problem is, because too less people using KUL, it need to refetch data from oversea website(if you open those oversea website, it will be cache miss), which taken like 1-2 mins sometimes...
In this case, SG is much better, as more oversea users over there, cache hit rate higher.
---
Wow, packet loss at local server.



This post has been edited by BenYeeHua: Aug 21 2025, 10:21 PM

Yes, JBH less customer, 10ms when I connect it via 1.1.1.1 app, only problem is strange hang/no packet coming in.
Like now when I am typing, speed cloudflare hang while testing downloading, lol.

It really depend, u need IPv6 or not, going to DNS via IPv4/v6 got huge difference, TM can kick you to SG server, which result in SG IP address, sometimes the DNS will give you random country's IPv6 as result.
But, sometimes, IPv6 DNS will be MY server, while v4 going to SG server.

Just hit 100ms again few mins ago, and become jitter 10-60ms, then back to normal now.
Unsure what's TM doing, it is friday 1 PM now, hmm...

From my view, improving those edge case with MCMC, like reducing the abuse of TM ISP which using bot for burst forcing leak account, causing whole IP address getting blocked, will be first priority.
As reducing the DDoS traffic will greatly reducing the congestion at first place, while ensure most Malaysian will not getting blocked for login, and not scaring all oversea company running away.
(Many China website blocking Malaysia a lot of times, because of DDoS... And I don't think you wanna build a server here just open for burst force with higher rate, lol.)

Yes, now if you wanna login Microsoft account, you need to reload a few times to login, even if you using Microsoft Auth, you need to confirm again, again and again xN(I tried like 20 times) to approve any login, lol.
----
And yes, this is different case la, so can be handle at same priority, just MCMC wanna for TM do it, or not.
I guess this is mostly many Malaysian got their PC or TVbox or TV hacked, running as zombie computer/bot for burst force, else why ban SMS TAC and forcing phone call TAC, lol.

This post has been edited by BenYeeHua: Aug 22 2025, 09:15 PM

Buggysoft.
Anyways, I will try that when I facing the same issues again, but the problem is, you can't open any URLs in Microsoft Auth app...

For browser, just F5, but for Auth app or those Windows app login without F5, nah, bet your luck la.

Yes, it is not the engineering don't have the skill, but management issues.

QoS workaround the issues, like in China, they put those important person into VIP list, even HyperOS/MIUI got such "QoS", so they don't saw any ads notification or receiving any ads/scam call like regular users.
As they live unlike normal people, they don't notify that, QoS serve those VIP well and hide the issues.

Remember why we can't receive anymore oversea TAC for login?
I don't think they really got a Taobao account, lol.

Same as opening bank account required you to point it out the BNN rules.

Nope, as we have IPv6, unless you disabled it, which you did...
Secondly, Steam platform got relay to handle that issues, if your friend got IPv6, it will going directly instead of relay.
https://partner.steamgames.com/doc/features...amdatagramrelay

Only old game don't support IPv6 is the problem, but many workaround it by having Hamachi similar product(ZeroTier is the latest, 1.1.1.1 ZeroTrust also able, but nah~), just connect all of your party friend via VPN etc, then you are local at the server side.
This is also why speed booster(game proxy) is often used in China, as it allow speed up by connecting p2p party games at the speed booster's server, which having multi-ISP line connectted.

This post has been edited by BenYeeHua: Aug 23 2025, 10:43 PM

Even small country will faced inter-ISP broadband issues, lol.


Let us go to Digi via SG, lol.

If you depend on p2p like torrent and steam, and you are CGNAT, ipv6 is useful, and it don't required you to enable UPnP which is broken in most router.
(Aiya, most UPnP got a lot of vulnerablility, if not using Updated Router, this is opening back door liao)
Another options is NAT-PMP, but so far qbittorrent is the Windows software that only using it, and most moderm router might not support it, lol.

But yes, most stable connection is seedbox, those having the most stable IPv4 high QoS server, IPv6 is to ensure you got those IPv4 CGNAT with IPv6 user, which is useful for those imfamous torrent, as backup line.
So it kind of depend which type of Internet user you are.


Tested again, 12:30 PM.
I guess because TM user too many, so this routing is to ensure Digi user got better experience?....



----
Hmm, yesterday 4 PM got LOS, today morning 11:40PM got another LOS.

I guess the disconnect is because my Taman upgrading Fiber?
Last time my family member saw TM pulling new fiber nearby house, so they should be doing something.
-----
So this is stable enough?
Is it normal to get FEC disabled?

I asked because, you know:
1. Last year the installer upgraded to Mesh router, it don't config the @ims.tm.com.my for phone line/VoIP, so the phone is down since installation...
2. I just unplug the fiber then replug again, twice, found out the head is not fully plugged in.

So better be safe then, lol.



As only Rx HEC Error Packets there for first few second, so can kind of ignore that error.

Based on my Aug 21 post, it is -22.4 at that night, now it got lower to -21.7 dBm at morning, guess something is going on la.(still need confirm the signal dbm at night)
I guess, should not be my side issues, but TM performing upgrade?

Or lower signal at night is normal, as other customer online?

Anyways, for LOS issues, guess need to see how for next few days la, as just replug fiber get it lower to -21.5, then it back up to -21.7 after 30 mins.

PS: posted here also as future reference, lol.

This post has been edited by BenYeeHua: Aug 26 2025, 12:47 PM

Yes, this is why mine jump to 100ms that night, because oversold.

You can save a bit cost on the GPON, just by selling more speed and hope all customers are not running 100% usage, lol.

Still, as long as there is a guarantee 50Mbps per customer with 30ms, I am sure I will not found out this issues, sadly it don't.

This post has been edited by BenYeeHua: Aug 26 2025, 12:57 PM

colo=MRS
colo=MRS
colo=MRS

Marseille, France - (MRS)
https://www.cloudflarestatus.com/


Ya, As most customer moved to IPv6 follow the default of Fiber Modem, it means most traffic is on IPv6, lol.
But at least, TM trying to moving KUL, instead of kicking ppl around HKG, MRS, SG, anywhere you think, lol.
----
I guess HTTP/3 is over UDP, right?

ISP hate it, in China, if you dare to use UDP without having good agreement with ISP, lol.

Later I try disable http/3 in firefox, see how la lol.

This post has been edited by BenYeeHua: Aug 26 2025, 09:18 PM

Well, my whitebox is open, I tried to close it, but too high lol.
As 2 day ago got raining, so unsure this LOS caused by water or not, lol.

If got LOS again, then just call them la.

Unless wanna save budget, Asus always is the better choice, including kicking out abnormal tvbox lol.
TPlink kind of depend on their mood to get update, for fix the vulnerability or not, which is....

Yes, loadbalance is hard.

Like I said, if default most customer to DNS with safety filter on, I am fine.
It also can filter adult content like the MCMC want, lol.

https://one.one.one.one/family/
Malware Blocking Only
Malware and Adult Content Blocking Together

For me, I will only said, so far the problem is TVbox abusing the line by p2p anywhere, then there is ppl keep burst forcing leak account and causing many TM's IPv4 banned.

Anyways, I hope they reallow verified business to send their SMS TAC, it is stupid to cut off all SMS TAC for protection of Malaysian, just because link is not allowed in SMS...
As they already moving on fishing old people in WhatsApp, SMS is not their main target liao.

CloudFlare via HTTP/3 is designed around packet loss, as long as it is not too high, the internet will be fine.
Theory.

Yes, it is kind of unstable for KUL and JHB(should be, unsure which one is), just like old Aliyun 8 years ago, the connection is there, but it is blackhole, any traffic can't send through, until your browser timeout and creating a new connection.
Unsure how Aliyun fixed the issues, I think they fix it by having server at MY and HK, so, packet loss too much might be the issues, or there is issues at cloudflare side.

---

Yes, confirmed slow start issues over HTTP/1.1 la, as too high latency, and TCP window algorithm for Windows is crap.
(unsure why, they move to HTTP/1.1, lol.)




kek, it is http/1.1, so the speedtest is kind of useless, for web browsing, it is http/3, for speedtest, it is http/1.1.
Test over TCP, browsing over UDP.

Now, browsing lowyat can kick me to MRS, KUL and SG, and yes, depend on mood of TM routing.

I guess it depend on location, the IPv4 prefix is different for where you are connected.
So if your area got less 500M, sure high class.

Who know, politics is not my strength, just blocking oversea SMS TAC is enought stupid liao, now a lot of oversea account failed to 2FA login, because of this blocking...
Blocking people with knowledge always the bad choice, it is always better to modify the default to protect the most, while open for professional to do what's their need.

Unless you wanna becoming China, most port getting blocked, just to "Protect" stupid customer from all those vulnerable, like opening SMB port over Internet instead of Intranet, while using old Windows with Update disabled etc.

And yes, funny case, Tunetalk disallow me, SMS to China's phone number, lol.
(So yes, my case with not receiving SMS TAC, might be the TuneTalk doing it by blindly follow MCMC.)


Like the debit/credit card, it is disabled for unsecure oversea payment without using 3D Secure(TAC via app/sms), while open for customer to enable it for oversea payment(Steam/Google etc) when they need it.

This post has been edited by BenYeeHua: Aug 26 2025, 10:00 PM

DNS?
If you using certain secure DNS, the IP provided might not be local server or SG server, which caused the regular UniFi oversea connection, lol.

By testing homepage(Sorry, no Netflix or Prime account), Netflix and Epic fine, only Prime gaming failed with slow loading of JS files.(while having fast picture server, lol )

So yes, F12 on your browser, and see where it get stuck, then ping the domain to see how la.