Jump to content
Not connected, Your IP: 216.73.216.157

All Activity

This stream auto-updates     

  1. Past hour
  2. Today
  3. Hello! You could also consider FreeBSD. In certain respects, such as documentation, uniformity, internal consistency, security, and compliance with the Unix philosophy (no systemd here, for example!), it is vastly superior to most Linux distributions. Kernel is in several fields (but not all) remarkably faster than Linux kernel. Think about this: while in Linux we have a kernel that is the foundation for hundreds (or thousands) of different distributions, each with its own standards, package managers, directory hierarchies, and init systems, in FreeBSD we have a unified development model where the kernel and the operating system are developed together by a single, large team, with contributions from the broader community. This ensures a more cohesive and consistent experience across the entire system. For software developers (just in case you will like to develop), it means that releasing applications for FreeBSD is simpler. No need to worry about the variations between different Linux distributions, with differing conventions, package managers, libraries, init systems, directory structures, making FreeBSD a more predictable and streamlined platform for development. However, hardware support is much more limited, and several DRM tools are missing, so you cannot directly enjoy various streaming services, which is paradoxical in a way when you consider that various Internet giants such as Netflix prefer FreeBSD (Netflix also actively contributes back to the FreeBSD project, with over a thousand commits documented, and is committed to upstreaming customizations that have general applicability). Furthermore, we have not yet released dedicated software for FreeBSD but we are seriously thinking about it. FreeBSD is also the 1st and exclusive choice for major gaming platforms by Sony (PS4, PS5), running customized versions of the old FreeBSD 9, and Nintendo (Wii, Switch, Switch 2...). My 2 cents pushed by renewed enthusiasm towards FreeBSD (since 2019 I dropped Linux and I don't run anymore any Linux system on my desktop computers). 😋 Kind regards
  4. My 2 cents: I use and love Manjaro. But within Arch its really more about the desktop environment. I'm a KDE fan. The "stable" branch of Manjaro was WAY too slow moving for me. I'd stay away from the "testing" branch as well given your "safe, stable" goals. That branch is CONSTANTLY breaking (as they warn it will - to be fair). I run the "unstable" branch which sounds spooky but its really just production Arch before the Manjaro team has a chance to meddle with things in the "testing" branch. Honestly if you're running unstable Manjaro the argument is there to just run vanilla Arch / KDE. I like nice installers tho As far as Eddie goes, I just run the version in the AUR. Debian is for stable servers IMO. Arch for desktops, but everyone has their own opinion. Hell, try Hannah Montana Linux if that floats your boat!
  5. Hi Folks, 2 small questions: I have to re-install Eddie again. Which flavor should i use ? Now i have a Manjaro System. Childhood is over. I want to setup up a new, safe, stable system.My Goals: improving networking,security and coding skills. No Disneyland. Do you think Debian would the tight OS for me ? Thank you so much. Jockel
  6. Hello! "Connection timed out" sounds expected and correct, just like it was with the OP, since you don't run any listening program according to your description. The only difference here is that "no port open" message means that the device the port is linked to is not connected to the VPN, or no device at all is connected, if the port is linked to "All devices". Kind regards
  7. Hey AirVPN - Team, not OP, but similar problem. I’ve been trying to figure out an error that I get within my setup and I think, it comes down to AirVPN. I hadn’t tested the forwarded port on the AirVPN - Website but when doing so, I get a „connection timed out (110)“ message, for example for port 55056. (on Desktop!) On mobile (through the website) I just get „no port open“ (when testing the just opened port). The server used for testing is in a capital city in Europe. Is something wrong with port forwarding in general or am I doing something wrong? Thanks and all the best!
  8. Great! I actually managed to grab the stream via the dev console; no 403 errors. Turns out they don't geo-block the live stream link.
  9. Yesterday
  10. With the right QUIC packet from one specific Russian website, even "16 kbyte" blocked servers are successfully working! Thanks for the update and hopefully this can be added to PC Eddie eventually
  11. Hello! Maybe the app is minimized: can you please check your system's tray icon? Eddie's tray icon is a small cloud in a circle. If you find it, by double clicking it (or clicking and selecting "Show Main Window") you should be able to bring up Eddie's main window. Please make sure that you can see hidden tray icons too. Kind regards
  12. @zimbabwe @AG999 @Upre1943 @Stalinium @Nonsense @H12345h12345 Hello! Eddie Android edition 4.0.0 preview implements full AmneziaWG support: https://airvpn.org/forums/topic/77633-eddie-android-edition-400-preview-available/ Feel free to test and report back (bug, glitches...)! Kind regards & datalove AirVPN Staff
  13. Hello! We're very glad to announce that Eddie Android edition 4.0.0 Beta 1 is now available. This is a major update: for the first time Eddie Android edition features AmneziaWG complete support. Eddie Android edition is a fully integrated with AirVPN, free and open source client allowing comfortable connections to AirVPN servers and generic VPN servers offering compatible protocols. Eddie 4.0.0 aims primarily at adding, besides the already available OpenVPN and WireGuard, a thorough and comfortable AmneziaWG support. AmneziaWG is a free and open source fork of WireGuard by Amnezia inheriting the architectural simplicity and high performance of the original implementation, but eliminating the identifiable network signatures that make WireGuard easily detectable by Deep Packet Inspection (DPI) systems. It can operate in several different ways, including a fallback, "compatibility mode" with WireGuard featuring anyway various obfuscation techniques. What's new in Eddie 4.0.0 AmneziaWG support Amnezia WireGuard API updated OpenSSL, OpenVPN3-AirVPN and WireGuard libraries see the complete changelog below AmneziaWG overview From the official documentation: https://docs.amnezia.org/documentation/amnezia-wg AmneziaWG offers: Dynamic Headers for All Packet Types (compatibility with WireGuard: YES) During tunnel initialization, the library generates a set of random constants applied to each of the four WireGuard packet formats: Init, Response, Data, Under‑Load. These constants: Replace predictable WireGuard packet identifiers; Shift offsets of Version/Type fields; Modify reserved bits. As a result, no two clients have identical headers, making it impossible to write a universal DPI rule. Handshake Length Randomization (compatibility with WireGuard: NO) In WireGuard, the Init packet is exactly 148 bytes, and the Response packet is exactly 92 bytes. AmneziaWG adds pseudorandom prefixes S1 and S2 (0-64 bytes by default): len(init) = 148 + S1 len(resp) = 92 + S2 Offsets of the remaining fields are automatically adjusted, and MAC tags are recalculated accordingly. In order to keep backward compatibility with WireGuard, S1 and S2 must be set to 0. Obfuscation Packets I1-I5 (Signature Chain) & CPS (Custom Protocol Signature) (compatibility with WireGuard: partial, with fallback) Before initiating a "special" handshake (every 120 seconds), the client may send up to five different UDP packets fully described by the user in the CPS format. In this way AmneziaWG can mimic perfectly QUIC, DNS and other protocols adding powerful methods to circumvent blocks. QUIC is particularly interesting as HTTP/3 is built on it and currently, from Chrome and other compatible browsers, 50% of traffic to/from Google is QUIC traffic. Therefore, blocking QUIC may have major disruptions for any ISP. Junk‑train (Jc) (compatibility with WireGuard: YES) Immediately following the sequence of I-packets, a series Jc of pseudorandom packets with lengths varying between Jmin and Jmax is sent. These packets blur the timing and size profile of the session start, significantly complicating handshake detection. Under‑Load Packet (compatibility with WireGuard: YES) In WireGuard, a special keep-alive packet (“Under-Load”) is used to bypass NAT timeouts. AmneziaWG replaces its fixed header with a randomized one, the value of which can be set manually. This prevents DPI from filtering short ping packets, ensuring stable tunnel connections, especially on mobile networks. How to use Eddie with AmneziaWG To enable AmneziaWG mode, just tap the connection mode available in the main and other views. It will rotate between WireGuard, AmneziaWG and OpenVPN. Set it to AmneziaWG. In its default AmneziaWG mode, Eddie will use all the possible obfuscation, except protocol mimicking, that keeps WireGuard compatibility, thus allowing connections to AirVPN servers. The default settings choice was possible thanks to the invaluable support of persons living in countries where VPN blocks are widespread. Such settings have been tested as working and capable to bypass the current blocking methods in various countries. You may consider to modify them if they are ineffective to bypass "your" specific blocks. In Settings > Advanced, you will find, at the bottom of the page, a new "Custom Amnezia WG directives" item. By tapping it you will summon a dialog that will let you customize any possible AmneziaWG parameter. You can maintain backward compatibility with WireGuard in the dialog WireGuard section, or enable the full AmneziaWG support in the Amnezia section, which is not compatible (at the moment) with AirVPN WireGuard servers. This mode will be mostly valuable in a not distant future, when AirVPN servers will start to support AmneziaWG natively. You may also enable QUIC or DNS mimicking for additional obfuscation efficacy. In order to maintain WireGuard backward compatibility, with or without QUIC or DNS mimicking, you must set: S1 = S2 = 0 Hn ∈ {1, 2, 3, 4} H1 ≠ H2 ≠ H3 ≠ H4 Furthermore, do not exceed the valid limit of the J parameters (anyway Eddie will not let you do it). In this preview version, Eddie's formal control of the input data is based on the following document. We strongly recommend you read it if you need to modify manually parameters: https://github.com/amnezia-vpn/amneziawg-linux-kernel-module?tab=readme-ov-file#configuration Please do not modify In parameters if you don't know exactly what you're doing. Eddie implements QUIC and DNS mimicking and random obfuscation packets for each specific "I" parameter (by using the corresponding "Generate" button). You can enable them with a tap on the proper buttons. You may mimic QUIC and DNS even to connect to WireGuard based servers. When you enable QUIC mimicking and you maintain WireGuard backward compatibility, you add a powerful tool against blocks, because the first packets will be actual QUIC packets. AmneziaWG will fall back to WireGuard compatibility very soon. However, when DPI and SPI tools, and demultiplexers in general, identify the initial QUIC flow, most of them will be unable to detect a WireGuard flow for several minutes. This has been tested thoroughly with deep packet inspection on Linux and FreeBSD based machines by AirVPN staff. Therefore, in different blocking scenarios the QUIC mimicking increases likelihood of successful block bypass. NOTE: the same does not happen with DNS mimicking. In this case DPI / SPI tools identify the stream initially as DNS, but are much quicker (just in a few dozens of packets) to identify the stream as WireGuard's, after the initial DNS identification. If you decide to test, please report at your convenience any bug and problem in this thread. If possible generate a report from the app in a matter of seconds: by tapping the paper plane icon on the Log view bar rightmost side you will generate a full system report which will include both log and logcat and have it sent to our servers. Then you just need to send us the link the app shows you (open a ticket if you prefer to do it in private). Download link, checksum and changelog https://eddie.website/repository/Android/4.0.0-Beta1/EddieAndroid-4.0.0-Beta-1.apk This is a build debug package and side load is mandatory. $ sha256sum EddieAndroid-4.0.0-Beta-1.apk 617269290a0406237646cc0885e5b10f3916252f89fe82ba9ccb947354980fcb EddieAndroid-4.0.0-Beta-1.apk Changelog 4.0.0 (VC 37) - Release date: 26 November 2025 by ProMIND Native Library [ProMIND] updated to version 4.0.0, API 10 [ProMIND] added Amnezia WireGuard API [ProMIND] updated to OpenVPN-AirVPN 3.12 (20251126) AirVPNUser.java [ProMIND] getWireGuardProfile(): added Amnezia support ConnectAirVPNServerFragment.java [ProMIND] showConnectionInfo(): added AmneziaWG logo display [ProMIND] onCreateContextMenu(): added AmneziaWG items [ProMIND] onContextItemSelected(): added AmneziaWG items [ProMIND] added method loadVPNProfile() ConnectVpnProfileFragment.java [ProMIND] added Amnezia support EddieLibraryResult.java [ProMIND] added Amnezia WireGuard API QuickConnectFragment.java [ProMIND] onCreateView(): added AmneziaWG logo display [ProMIND] updateStatusBox(): added AmneziaWG logo display SettingsActivity.java [ProMIND] added "Custom AmneziaWG directives" setting SettingsManager.java [ProMIND] added Amnezia specific settings and methods SupportTools.java [ProMIND] removed method getVPNProfile() VPN.java [ProMIND] added methods enableAmneziaWireGuard() and isWireGuardAmneziaEnabled() VPNManager.java [ProMIND] added method isWireGuardAmneziaEnabled() VPNProfileDatabase.java [ProMIND] added AMNEZIA type WebViewerActivity.java [ProMIND] EddieWebViewClient.shouldOverrideUrlLoading(): it now properly opens android asset files WireGuardClient.java [ProMIND] added WireGuard tunnel node to constructor [ProMIND] added methods for generating Amnezia's junk settings WireGuardTunnel.java [ProMIND] added support for Amnezia WireGuard [ProMIND] added Mode enum [ProMIND] added tunnel node to constructor EddieLibrary.java [ProMIND] added Amnezia WireGuard API Kind regards & datalove AirVPN Staff
  14. Hello, When I try to start Eddie the black Friday sale ad pops up. When I try to close the window or just click OK, the window disappears but Eddie doesn't start up. When I try to restart Eddie it says Eddie is already running. It shows as running in Processes, but it won't give me the option to select a vpn. I have turned off Eddie in task manager, uninstalled and reinstalled, and restarted my computer but nothing works.
  15. Edit sorry I've just seen the other related post about IPv6, I added those lines and it now works. These are my options if it helps others! resolv-retry infinite auth-nocache explicit-exit-notify 5 remote-cert-tls server data-ciphers CHACHA20-POLY1305:AES-256-GCM:AES-256-CBC:AES-192-GCM:AES-192-CBC:AES-128-GCM:AES-128-CBC data-ciphers-fallback AES-256-CBC block-ipv6 pull-filter ignore "dhcp-option DNS6" pull-filter ignore "tun-ipv6" pull-filter ignore "ifconfig-ipv6"
  16. Hi All, I noticed my IP wasn't an AirVPN one and went to investigate on my Router (Asus RT-AC86U with Asuswrt-Merlin) in the logs I see this: Nov 28 13:40:45 rc_service: httpd 1285:notify_rc start_vpnclient1 Nov 28 13:40:45 ovpn-client1[6359]: OpenVPN 2.6.12 arm-buildroot-linux-gnueabi [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] Nov 28 13:40:45 ovpn-client1[6359]: library versions: OpenSSL 1.1.1w 11 Sep 2023, LZO 2.08 Nov 28 13:40:45 ovpn-client1[6360]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Nov 28 13:40:45 ovpn-client1[6360]: TCP/UDP: Preserving recently used remote address: [AF_INET]217.138.195.29:443 Nov 28 13:40:45 ovpn-client1[6360]: Socket Buffers: R=[524288->524288] S=[524288->524288] Nov 28 13:40:45 ovpn-client1[6360]: UDPv4 link local: (not bound) Nov 28 13:40:45 ovpn-client1[6360]: UDPv4 link remote: [AF_INET]217.138.195.29:443 Nov 28 13:40:45 ovpn-client1[6360]: TLS: Initial packet from [AF_INET]217.138.195.29:443, sid=a9e4ee30 6de459b1 Nov 28 13:40:45 ovpn-client1[6360]: VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Nov 28 13:40:45 ovpn-client1[6360]: VERIFY KU OK Nov 28 13:40:45 ovpn-client1[6360]: Validating certificate extended key usage Nov 28 13:40:45 ovpn-client1[6360]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Nov 28 13:40:45 ovpn-client1[6360]: VERIFY EKU OK Nov 28 13:40:45 ovpn-client1[6360]: VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Betelgeuse, emailAddress=info@airvpn.org Nov 28 13:40:45 ovpn-client1[6360]: Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bits RSA, signature: RSA-SHA512, peer temporary key: 253 bits X25519 Nov 28 13:40:45 ovpn-client1[6360]: [Betelgeuse] Peer Connection Initiated with [AF_INET]217.138.195.29:443 Nov 28 13:40:45 ovpn-client1[6360]: TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1 Nov 28 13:40:45 ovpn-client1[6360]: TLS: tls_multi_process: initial untrusted session promoted to trusted Nov 28 13:40:46 ovpn-client1[6360]: SENT CONTROL [Betelgeuse]: 'PUSH_REQUEST' (status=1) Nov 28 13:40:46 ovpn-client1[6360]: PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.11.214.1,dhcp-option DNS6 fde6:7a:7d20:7d6::1,tun-ipv6,route-gateway 10.11.214.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:7d6::1015/64 fde6:7a:7d20:7d6::1,ifconfig 10.11.214.23 255.255.255.0,peer-id 2,cipher CHACHA20-POLY1305,protocol-flags cc-exit tls-ekm dyn-tls-crypt,tun-mtu 1500' Nov 28 13:40:46 ovpn-client1[6360]: OPTIONS IMPORT: --ifconfig/up options modified Nov 28 13:40:46 ovpn-client1[6360]: OPTIONS IMPORT: route options modified Nov 28 13:40:46 ovpn-client1[6360]: OPTIONS IMPORT: route-related options modified Nov 28 13:40:46 ovpn-client1[6360]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Nov 28 13:40:46 ovpn-client1[6360]: OPTIONS IMPORT: tun-mtu set to 1500 Nov 28 13:40:46 ovpn-client1[6360]: GDG6: remote_host_ipv6=n/a Nov 28 13:40:46 ovpn-client1[6360]: net_route_v6_best_gw query: dst :: Nov 28 13:40:46 ovpn-client1[6360]: net_route_v6_best_gw result: via :: dev lo Nov 28 13:40:46 ovpn-client1[6360]: TUN/TAP device tun11 opened Nov 28 13:40:46 ovpn-client1[6360]: TUN/TAP TX queue length set to 1000 Nov 28 13:40:46 ovpn-client1[6360]: /usr/sbin/ip link set dev tun11 up mtu 1500 Nov 28 13:40:46 ovpn-client1[6360]: /usr/sbin/ip link set dev tun11 up Nov 28 13:40:46 ovpn-client1[6360]: /usr/sbin/ip addr add dev tun11 10.11.214.23/24 Nov 28 13:40:46 ovpn-client1[6360]: Linux ip addr add failed: external program exited with error status: 2 Nov 28 13:40:46 ovpn-client1[6360]: Exiting due to fatal error When I ssh onto the router and issue that last ip addr command I get this admin@RT-AC86U-44E0:/tmp/home/root# ip addr add dev tun11 10.11.214.23/24 RTNETLINK answers: File exists ip addr show shows 21 entries but only 1 for tun11: 21: tun11: <NO-CARRIER,POINTOPOINT,MULTICAST,NOARP,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000 link/none inet 10.11.214.23/24 scope global tun11 valid_lft forever preferred_lft forever admin@RT-AC86U-44E0:/tmp/home/root# Strangely the pid of the openvpn process keeps ramping up as though it's constantly failing and restarting? admin@RT-AC86U-44E0:/tmp/home/root# ps | grep openvpn 22350 admin 3332 S grep openvpn admin@RT-AC86U-44E0:/tmp/home/root# ps | grep openvpn 22456 admin 3332 S grep openvpn admin@RT-AC86U-44E0:/tmp/home/root# Any ideas? I've not changed anything to cause this, I've just updated to the latest firmware. Rebooted loads of times etc. Cheers!
  17. Sag Bescheid, wenn du Hilfe benötigst. (Give us a holler if you need help.)
  18. That's because the AirVPN team didn't write a forums software from scratch, they picked an existing software and adapted it to the special needs of their infrastructure. A gender field in users' profiles is not a special need, given that 98% of people around here don't bother changing profile settings, let alone edit their profile. IP.Board is a "generic" forums software which can be used in many environments. In some of them contact info, birthdays and genders make sense. In some of them, including airvpn.org, they don't.
  19. Please relog in Eddie to fetch the current list of key pairs and try again.
  20. Please open your own thread. This is the help thread for @grapefruit88.
  21. Hello! Can you please try to delete Eddie's configuration file while Eddie is NOT running? At the next run, Eddie will re-create the configuration file with default settings (you will need to re-enter your AirVPN account credentials). In order to locate Eddie's configuration file please see here: https://eddie.website/support/data-path/ If the problem is caused by a corrupt configuration file, the above procedure will solve it. Kind regards
  22. From the ticket, problem solved after a check on Windows Defender and any other tool blocking entirely Eddie's traffic. Kind regards
  23. Hello! Yes, definitely, we have a problem at the custom, 3 powerful servers which will be connected to 10 Gbit/s lines at still at the custom since the 23rd of October. These 3 servers are meant to replace Wurren which is being decomissioned at the end of November. We did not expect that the USA/Canada custom border could be so slow, we're terribly sorry. The final destination is Toronto datacenter, the same one where Kornephoros is working in. Kind regards
  24. Hello! Holy moly whack a moly, from you description the outcome seems correct and expected, apparently (again from your description) you missed entirely to configure and run any listening program, can you clarify? Kind regards
  25. Hello! Thank you for your choice in the past years. The servers are continuously updated and added and the average performance in the last year has either remained the same or improved, notably in the USA and Europe. Currently there's more available bandwidth per user than there was one year ago. In the last 13 months AirVPN added about 230,000 Mbit/s on its infrastructure and also renewed hardware. We're talking about bare metal servers with dedicated ports and full duplex lines, no tricks with multiple addresses, shared lines or virtual machines. The outcome is remarkably good: if you compare the top hundred user speed of now with the table of one year ago, you will see an improvement of the average speed, in spite of the dramatic user base increase. https://airvpn.org/topusers/ It is even more important to note that the average speed of users after the 50th place (51-100) has increased of more than 20% if you compare it with a table of October 2024, This is due to the increase of the available bandwidth, software optimization, and hardware replacements behind the scenes. Therefore, we would focus especially on possible bottlenecks on your side, because while the infrastructure is providing better and better performance, you experience exactly the opposite. The paramount cause of the slow performance is this: Each time you get this error, the packet must be re-transmitted in its entirety. This is the apparent cause, but it must in turn be caused by something underlying, so this conclusion: is dubious, and probably wrong. It may very well be the consequence of the same aforementioned cause. Everything is wrapped in the UDP tunnel, including ICMP with WireGuard, so the continuous need to re-transmit packets severely affects the round trip time too. This hints at a problem affecting your end (either your local network, or some section of your ISP network). It is indeed strange that your 1 Gbit/s line provides only 300 Mbit/s on average without VPN. This is another clue suggesting that a problem unrelated to AirVPN is ongoing. Please repeat the tests with 1280 bytes MTU and check whether the "invalid nonce" packet error quantity disappears, decreases or remains the same. If it remains the same the problem must be investigated carefully as different anomalies can cause it: dirty line, Ethernet cable problems, WiFi interference, router firmware are the most important examples. If you're interested to go deeper in this issue and you are ready to take into consideration the idea that the problem could be on your side, the support team is available 24/7 to support you and provide you with suggestions which could resolve the issue. Or you can continue here too concurrently, so you can get community's help as well Please include more relevant information such as your Operating Systems names and versions (on top of the Windows 11 machine you already mentioned) and the software you run to connect to AirVPN servers on each system. Kind regards
  26. Ich hatte noch nicht mal Zeit, mich da voll reizufuchsen. Egal wird schon hinhauen😎 2 Jahre.
  27. Renewed for another 3 years
  1. Load more activity
×
×
  • Create New...