StarHub <-> Cloudflare issues?

[kindredSG]

Cloudflare anycast shouldn't be this bad, they'd have a SG presence for sure...

x (192.168.0.9) -> 1.1.1.1 (1.1.1.1)                                 2024-06-13T22:29:10+0800
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                           Packets               Pings
 Host                                                    Loss%   Snt   Last   Avg  Best  Wrst StDev
 1. 192.168.0.1                                           0.0%   202    0.8   0.7   0.6   0.9   0.1
 2. x.starhub.net.sg                                      0.0%   201    4.3   4.0   3.3   9.5   0.8
 3. 183.90.44.189                                         0.0%   201    3.2   6.6   3.1  67.9   9.4
 4. 203.118.7.73                                          0.0%   201    4.0   4.3   3.7  25.4   1.6
 5. 203.118.6.86                                          0.0%   201   24.9  12.5   3.5 108.0  17.1
 6. 162.158.160.230                                      13.4%   201  236.4 389.7 205.0 529.2  85.1
 7. 162.158.160.153                                       8.0%   201  215.0 232.2 192.7 365.6  35.4
 8. one.one.one.one                                       0.0%   201  172.6 172.2 171.6 182.5   1.1

 

[Mach3.2]

perhaps congestion between starhub and cloudflare's private interconnect? in your MTR the ping started to increase a little at Starhub's final hop (hop 5) before spiking all the way to 200+ms at Cloudflare.

I'm on M1 and earlier in the day at around 5PM I also noticed a small spike to ~70ms with cloudflare's warp+ endpoint(162.159.195.2)

 

[windwaver]

It's been bad recently, not sure what's wrong.

 

[kindredSG]

It's been bad recently, not sure what's wrong.

For me when I bounced my SH connection and got a new IP (27.x.x.x, previous 116.x.x.x) it was back to normal. I think that 116.x.x.x IPv4 netblock has asymmetric routing and the return traffic, even though it should be local, is going back via another path, adding latency/packetloss. IPv6 was also okay, so it wasn't the interconnect - definitely seems just bad routing for that netblock.

If anyone has bad latency/throughput to Cloudflare, check your IP and see if its similar. https://speed.cloudflare.com

 

[HiHelloBye]

For me when I bounced my SH connection and got a new IP (27.x.x.x, previous 116.x.x.x) it was back to normal. I think that 116.x.x.x IPv4 netblock has asymmetric routing and the return traffic, even though it should be local, is going back via another path, adding latency/packetloss. IPv6 was also okay, so it wasn't the interconnect - definitely seems just bad routing for that netblock.

If anyone has bad latency/throughput to Cloudflare, check your IP and see if its similar. https://speed.cloudflare.com

so 116.xxx considered jialat with this issue?

if that's the case, let met try to purge this IP...

 

[windwaver]

What DNS you guys using these days?

OpenDNS? Quad9? NextDNS?

Google?

 

[windwaver]

For me when I bounced my SH connection and got a new IP (27.x.x.x, previous 116.x.x.x) it was back to normal. I think that 116.x.x.x IPv4 netblock has asymmetric routing and the return traffic, even though it should be local, is going back via another path, adding latency/packetloss. IPv6 was also okay, so it wasn't the interconnect - definitely seems just bad routing for that netblock.

If anyone has bad latency/throughput to Cloudflare, check your IP and see if its similar. https://speed.cloudflare.com

I'm not getting new IP address even if I renew or turn off router for more than a minute.

Keeps giving me old address.

I have no problems with Google, OpenDNS and Quad9.

 

[hwzlite]

I'm not getting new IP address even if I renew or turn off router for more than a minute.

Keeps giving me old address.

Can try change the MAC address of a router , gd luck.

 

[cyberet]

What DNS you guys using these days?

OpenDNS? Quad9? NextDNS?

Google?

unfortunately, google.
cloudflare/quad9 causes my connection to use non local CDN for some sites.
you need to change and monitor yourself

I try to use ISP's DNS unless its causing issues for better routing to local CDNs

 

[TanKianW]

Cloudflare anycast shouldn't be this bad, they'd have a SG presence for sure...

x (192.168.0.9) -> 1.1.1.1 (1.1.1.1)                                 2024-06-13T22:29:10+0800
Keys:  Help   Display mode   Restart statistics   Order of fields   quit
                                                           Packets               Pings
 Host                                                    Loss%   Snt   Last   Avg  Best  Wrst StDev
 1. 192.168.0.1                                           0.0%   202    0.8   0.7   0.6   0.9   0.1
 2. x.starhub.net.sg                                      0.0%   201    4.3   4.0   3.3   9.5   0.8
 3. 183.90.44.189                                         0.0%   201    3.2   6.6   3.1  67.9   9.4
 4. 203.118.7.73                                          0.0%   201    4.0   4.3   3.7  25.4   1.6
 5. 203.118.6.86                                          0.0%   201   24.9  12.5   3.5 108.0  17.1
 6. 162.158.160.230                                      13.4%   201  236.4 389.7 205.0 529.2  85.1
 7. 162.158.160.153                                       8.0%   201  215.0 232.2 192.7 365.6  35.4
 8. one.one.one.one                                       0.0%   201  172.6 172.2 171.6 182.5   1.1

I also got this problem earlier for MR 10G, esp after 8pm. I lodged a feedback ticket to MR, send them the logs and got it rectified the week after.​

 

[windwaver]

I also got this problem earlier for MR 10G, esp after 8pm. I lodged a feedback ticket to MR, send them the logs and got it rectified the week after.​

Yeah, especially evening period, super lag.

How did they resolve the issue for you?

 

[windwaver]

unfortunately, google.
cloudflare/quad9 causes my connection to use non local CDN for some sites.
you need to change and monitor yourself

I try to use ISP's DNS unless its causing issues for better routing to local CDNs

Ok, so you use Google DNS?

 

[cyberet]

Ok, so you use Google DNS?

first choice ISP, when got issues then i change to google

 

[Mach3.2]

cloudflare/quad9 causes my connection to use non local CDN for some sites.

Cloudflare and the main Quad9 DNS servers doesn't support ECS unlike Google, which may be why you're having some issues with it.

Quad9 have a resolver with ECS turned on so maybe you can try that one.

 

[hwzlite]

Cloudflare and the main Quad9 DNS servers doesn't support ECS unlike Google, which may be why you're having some issues with it.

Quad9 have a resolver with ECS turned on so maybe you can try that one.

Or also can kill two birds with one stone using own AdGuard DNS for anonymized user's IP address & maintaining high DNS cache efficiency using country and subdivision in addition to ASN.

 

[xiaofan]

Or also can kill two birds with one stone using own
AdGuard DNS
for anonymized user's IP address & maintaining high DNS cache efficiency
using country and subdivision in addition to ASN
.

Adguard public DNS is quite slow here in Singapore, better avoid using this.

Personally I use self hosted Adguard Home or Pi-hole.

Upstream for Adguard Home or Pi-hole: I use Cloudflare Family (1.1.1.3, blocking Malware and Adult Content) and Quad 9.

But when I use pfSense (now I am using pfSense for one of the two home networks), I will use pfBlockerNG-devel and local Unbound DNS server (only using upstream DNS 1.1.1.3 and 9.9.9.9 as a backup).

 

[hwzlite]

Adguard public DNS is quite slow here in Singapore, better avoid using this.

Personally I use self hosted Adguard Home or Pihole.

Upstream: I use Cloudflare Family (1.1.1.3) and Quad 9.

For me i just enable Adguardhome's "Enable EDNS Client Subnet" option and running an opportunistic mode in Parallel requests for “fastest” / “best” Upstream DNS server(s)

 

[TanKianW]

Yeah, especially evening period, super lag.

How did they resolve the issue for you?

Magic!……Republic (MR)

 

[cyberet]

Cloudflare and the main Quad9 DNS servers doesn't support ECS unlike Google, which may be why you're having some issues with it.

Quad9 have a resolver with ECS turned on so maybe you can try that one.

ya, i tried quad9 with ECS as well, I still get better results with Google. Best is still ISP's DNS

 

[HiHelloBye]

I also got this problem earlier for MR 10G, esp after 8pm. I lodged a feedback ticket to MR, send them the logs and got it rectified the week after.​

wow, that's nice...

meanwhile i sent an e-mail to SH about this issue and specifically informing them to forward this to their NOC/Network team, but they want me to call them instead...