Anyone is also using the StarHub UltraSpeed (10Gbps)? I am so frustrated. (Solved by upgrading ONR firmware.)

[xiaofan]

Can anyone let me know what is the model of ONT that Starhub provides for the 10gbps plan?

Does it matter? Your router matters but not really the XGS-PON ONT.

Based on the reports here.
Starhub/MR: Nokia XS-240X-A or XS-250X-A.

Both will perform the same.

Take note ONT is not the same as ONR. The Nokia XS-2426X-A all-in-one XGS-PON ONR (with WiFi 6 AX6000) provided by Starhub for earlier 10Gbps users and current 5Gbps users is not good, but that does not mean the Nokia XGS-PON ONT is bad.

 

[rebornsoul]

Does it matter? Your router matters but not really the XGS-PON ONT.

Based on the reports here.
Starhub/MR: Nokia XS-240X-A or XS-250X-A.

Both will perform the same.

Take note ONT is not the same as ONR. The Nokia XS-2426X-A all-in-one XGS-PON ONR (with WiFi 6 AX6000) provided by Starhub for earlier 10Gbps users and current 5Gbps users is not good, but that does not mean the Nokia XGS-PON ONT is bad.

Thanks for the info, I wanted to know how many SFP+ ports I am getting because it will affect whether I can buy a DAC cable or SFP+ to RJ45 converter for my router.

 

[xiaofan]

Thanks for the info, I wanted to know how many SFP+ ports I am getting because it will affect whether I can buy a DAC cable or SFP+ to RJ45 converter for my router.

I see.

As of now, none of the local consumer ISPs here provide SFP+ port for the ONT/ONR.

 

[Henry Ng]

Thanks for the info, I wanted to know how many SFP+ ports I am getting because it will affect whether I can buy a DAC cable or SFP+ to RJ45 converter for my router.

Their TP-Link router also no SFP+ port. Can only connect using LAN cable.

 

[gyver1985]

For StarHub 5gb, any idea if can request for ONT instead of ONR and maybe i top up to get the TPlink router?

 

[HiHelloBye]

For StarHub 5gb, any idea if can request for ONT instead of ONR and maybe i top up to get the TPlink router?

request for ONT, yes.

top-up for SH's TP-Link, no.
it's only applicable for 10Gbps plan

 

[eggy]

Folks, I stumbled on a real head scratcher:

I've been on SH's 10G plan since March and it's been working fine using the Nokia ONR in bridged mode to a soft router (with 2.5GbE ports) running pfsense v2.6

A couple of days ago I switched to a soft router with 10GbE (and SPF+) ports so that I can get full 10G. Decided to also upgrade and install pfsense 2.7.2.

With this new setup, any connection into anything SH related just didn't work, TV+, logging into starhub.com, android, samsung, iphone TV+ apps all didn't work, can't connect or can't authenticate. On the browser I just get messages like "This site can't be reached" DNS_PROBE_FINISHED_NXDOMAIN etc.

But everything else works, all other sites, steaming etc etc.

Now if I have NordVPN running, then I'm able to connect to SH!

For DNS, I'm using 8.8.8.8 or 1.1.1.1 and I do not allow DNS server list to be overridden by DHCP/PPP on WAN and I'm only on IPv4

any ideas what might be going on?

 

[eggy]

Folks, I stumbled on a real head scratcher:

I've been on SH's 10G plan since March and it's been working fine using the Nokia ONR in bridged mode to a soft router (with 2.5GbE ports) running pfsense v2.6

A couple of days ago I switched to a soft router with 10GbE (and SPF+) ports so that I can get full 10G. Decided to also upgrade and install pfsense 2.7.2.

With this new setup, any connection into anything SH related just didn't work, TV+, logging into starhub.com, android, samsung, iphone TV+ apps all didn't work, can't connect or can't authenticate. On the browser I just get messages like "This site can't be reached" DNS_PROBE_FINISHED_NXDOMAIN etc.

But everything else works, all other sites, steaming etc etc.

Now if I have NordVPN running, then I'm able to connect to SH!

For DNS, I'm using 8.8.8.8 or 1.1.1.1 and I do not allow DNS server list to be overridden by DHCP/PPP on WAN and I'm only on IPv4

any ideas what might be going on?

One more thing, I also have a connection to Viewqwest. If my soft router only has Viewqwest on the WAN, I'm also able to connect to all Starhub sites and TV+ service

 

[kindredSG]

Folks, I stumbled on a real head scratcher:

I've been on SH's 10G plan since March and it's been working fine using the Nokia ONR in bridged mode to a soft router (with 2.5GbE ports) running pfsense v2.6

A couple of days ago I switched to a soft router with 10GbE (and SPF+) ports so that I can get full 10G. Decided to also upgrade and install pfsense 2.7.2.

With this new setup, any connection into anything SH related just didn't work, TV+, logging into starhub.com, android, samsung, iphone TV+ apps all didn't work, can't connect or can't authenticate. On the browser I just get messages like "This site can't be reached" DNS_PROBE_FINISHED_NXDOMAIN etc.

But everything else works, all other sites, steaming etc etc.

Now if I have NordVPN running, then I'm able to connect to SH!

For DNS, I'm using 8.8.8.8 or 1.1.1.1 and I do not allow DNS server list to be overridden by DHCP/PPP on WAN and I'm only on IPv4

any ideas what might be going on?

Not 100% sure, but something I noticed which may be related - for some reason, SH do not let their broadband IP range query their external DNS servers, e.g. I can't run dig -4 @pricus.cyberway.com.sg. starhub.com a
Could your DNS configuration on pfSense somehow be trying to query SH (iteratively) rather than asking 1.1.1.1/8.8.8.8 for recursive answer? Or is DNSSEC causing issues with it requesting info from SH DNS (facing above issue etc)? Could try toggling that.

 

[xiaofan]

Folks, I stumbled on a real head scratcher:

I've been on SH's 10G plan since March and it's been working fine using the Nokia ONR in bridged mode to a soft router (with 2.5GbE ports) running pfsense v2.6

A couple of days ago I switched to a soft router with 10GbE (and SPF+) ports so that I can get full 10G. Decided to also upgrade and install pfsense 2.7.2.

With this new setup, any connection into anything SH related just didn't work, TV+, logging into starhub.com, android, samsung, iphone TV+ apps all didn't work, can't connect or can't authenticate. On the browser I just get messages like "This site can't be reached" DNS_PROBE_FINISHED_NXDOMAIN etc.

But everything else works, all other sites, steaming etc etc.

Now if I have NordVPN running, then I'm able to connect to SH!

For DNS, I'm using 8.8.8.8 or 1.1.1.1 and I do not allow DNS server list to be overridden by DHCP/PPP on WAN and I'm only on IPv4

any ideas what might be going on?

Just for troubleshooting, do not use 8.8.8.8 or 1.1.1.1 and then use Starhub DNS to see if you still have issues or not.

If using Starhub DNS is okay, probably it is related how you configure pfSense.

You can use tools like dig or nslookup to troubleshoot DNS related issues.

I am using Singtel and pfSense CE 2.7.2 has no issues.

1) System: general setup

2) No special settings in Services -- DNS Resolver --General Settings, all default settings (DNSSEC enabled by default).

3) I am also using pfBlockerNG-devel

 

[xiaofan]

Not 100% sure, but something I noticed which may be related - for some reason, SH do not let their broadband IP range query their external DNS servers, e.g. I can't run dig -4 @pricus.cyberway.com.sg. starhub.com a
Could your DNS configuration on pfSense somehow be trying to query SH (iteratively) rather than asking 1.1.1.1/8.8.8.8 for recursive answer? Or is DNSSEC causing issues with it requesting info from SH DNS (facing above issue etc)? Could try toggling that.

Interesting that there is such a public DNS server from Starhub. It is not in the list below.
https://public-dns.info/nameserver/sg.html

That being said, I wonder who would want to use Singtel/Starhub/M1 external public DNS servers...

I understand some people may want to use ISP's internal DNS servers for some reasons.
https://support.aceperipherals.com/kb/faq.php?id=124 (not so sure if outdated or not).

M1 primary DNS server
Primary DNS: 203.211.152.66
Secondary DNS: 210.193.2.66

StarHub primary DNS server
202.156.1.38
202.156.1.48
218.186.1.58
202.156.1.68
203.116.1.78 (Popular)
218.186.1.88
203.116.1.94 (Popular)
203.116.254.150

SingTel primary DNS server
Primary DNS: 165.21.83.88
Secondary DNS: 165.21.100.88

ViewQwest
202.73.37.3
202.73.37.11
202.73.51.98
202.73.51.99

 

[kindredSG]

Interesting that there is such a public DNS server from Starhub. It is not in the list below.
https://public-dns.info/nameserver/sg.html

It's only their standard authoritative server for the starhub.com domain, just like any domain has. It's not a public recursive server - you can't query it for any random domain, just domains its authoritative for (probably any Starhub related ones). The oddness is that they don't let Starhub sourced networks query it full stop.

 

[xiaofan]

It's only their standard authoritative server for the starhub.com domain, just like any domain has. It's not a public recursive server - you can't query it for any random domain, just domains its authoritative for (probably any Starhub related ones). The oddness is that they don't let Starhub sourced networks query it full stop.

Ah I see. Thanks for the clarifications.

Edit to add, hmm, it seems that I can access it from Singtel network. The following is from my Asus TUF-6500 with Entware installed.

xiaofan@TUF_6500-5020:/tmp/home/root# dig -4 @pricus.cyberway.com.sg. starhub.com a

; <<>> DiG 9.18.19 <<>> -4 @pricus.cyberway.com.sg. starhub.com a
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6197
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1220
; COOKIE: 6c204487bc9458c9218c961f66762975c2ad33c76d46b0a0 (good)
;; QUESTION SECTION:
;starhub.com.                   IN      A

;; ANSWER SECTION:
starhub.com.            600     IN      A       45.60.79.198
starhub.com.            600     IN      A       45.60.76.198

;; Query time: 20 msec
;; SERVER: 203.116.1.93#53(pricus.cyberway.com.sg.) (UDP)
;; WHEN: Sat Jun 22 01:31:33 UTC 2024
;; MSG SIZE  rcvd: 100

 

[kindredSG]

Ah I see. Thanks for the clarifications.

Edit to add, hmm, it seems that I can access it from Singtel network.

Exactly - you should be able to - it's meant for everyone on the internet to be able to query records for starhub.com - but for whatever reason (maybe split-view, they want customers to get different records for whatever reason) Starhub networks CAN'T query that server:

% dig -4 @pricus.cyberway.com.sg. starhub.com a

; <<>> DiG 9.10.6 <<>> -4 @pricus.cyberway.com.sg. starhub.com a
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

BUT if I was to use SH's broadband DNS resolvers (not actually sure what gets given to you via DHCP - I overwrote the DNS entries), it would work.

 

[xiaofan]

Exactly - you should be able to - it's meant for everyone on the internet to be able to query records for starhub.com - but for whatever reason (maybe split-view, they want customers to get different records for whatever reason) Starhub networks CAN'T query that server:

% dig -4 @pricus.cyberway.com.sg. starhub.com a

; <<>> DiG 9.10.6 <<>> -4 @pricus.cyberway.com.sg. starhub.com a
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

BUT if I was to use SH's broadband DNS resolvers (not actually sure what gets given to you via DHCP - I overwrote the DNS entries), it would work.

Thanks. This makes sense.

Maybe they want Starhub users to have a different experience of Starthub.com. Probably Starhub.com may provide more stuff to Starhub users than outside users.

 

[Henry Ng]

Thanks. This makes sense.

Maybe they want Starhub users to have a different experience of Starthub.com. Probably Starhub.com may provide more stuff to Starhub users than outside users.

Better to ask Starhub to change ONR to ONT, may be can go Starhub customer service outlet to ask for it. I suggested to SH to do away with this Nokia ONR.

 

[hwzlite]

Exactly - you should be able to - it's meant for everyone on the internet to be able to query records for starhub.com - but for whatever reason (maybe split-view, they want customers to get different records for whatever reason) Starhub networks CAN'T query that server:

% dig -4 @pricus.cyberway.com.sg. starhub.com a

; <<>> DiG 9.10.6 <<>> -4 @pricus.cyberway.com.sg. starhub.com a
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

BUT if I was to use SH's broadband DNS resolvers (not actually sure what gets given to you via DHCP - I overwrote the DNS entries), it would work.

Great finding on that dodgy starhub.com NS!

In that case bro @eggy can try Enable Forwarding mode under DNS Resolver > DNS Query Forwarding setting.


Ref:

 

[eggy]

Great finding on that dodgy starhub.com NS!

In that case bro @eggy can try Enable Forwarding mode under DNS Resolver > DNS Query Forwarding setting.


Ref:

wow good stuff! I set the Enable Forwarding mode under DNS Resolver and it works!

Thanks! and also thank you to the others for all the suggestions! you guys are awesome!

 

[evildoctor]

Better to ask Starhub to change ONR to ONT, may be can go Starhub customer service outlet to ask for it. I suggested to SH to do away with this Nokia ONR.

hi bro, did you managed to change to ONT? Should we all feedback to IMDA about their stand? Because having an ONR, I believe it means that the responsibility of the security of the network lies with the ONR.

 

[Henry Ng]

hi bro, did you managed to change to ONT? Should we all feedback to IMDA about their stand? Because having an ONR, I believe it means that the responsibility of the security of the network lies with the ONR.

No point writing to IMDA because after i email them, they reply that user should work with the ISP directly and nothing to do with IMDA or it is not under their purview. That day Public Holiday i went down to Starhub Shop at Tampines and the CSO said can apply to change to ONT. I suggest you go down and ask them.