Jump to content
Not connected, Your IP: 216.73.216.120

All Activity

This stream auto-updates     

  1. Past hour
  2. Today
  3. Yesterday
  4. Good Morning everyone, I have been experiencing extremely inconsistent network speeds since a few months. Sometimes disconnecting and reconnecting fixes it, but not always. I can't seem to find a correlation. I either connect through wg-quick or use nmcli. Both have the same issue. Any way I could go about solving this issue / providing further logs?
  5. Good news! forbidquickhomecountry was the issue. I can now use the vpn, Thanks! I really appreciate your help. I still have another issue. I want to use cuckoo for traffic splitting. I made allowtrafficsplitting yes in the bluetit.rc as user airvpn I run goldcrest -O After enabling allowtrafficsplitting in bluetit.rc, I no longer have a connection. Everything worked, I enabled allowtrafficsplitting yes, no connection, I disabled allowtrafficsplitting, I still don't have a connection. So allowtrafficsplitting seems to have broke something. I restarted my PC, no change. I disabled firewalld, no change. It's weird that everything was working and allowtrafficsplitting on and off has made it so that I have no connection. 2026-04-01 11:31:22 WARNING: Traffic splitting setup is dirty. Trying to clean and restore settings. 2026-04-01 11:31:22 Successfully deleted 'aircuckoo' namespace 2026-04-01 11:31:22 Successfully restored traffic split settings. 2026-04-01 11:31:22 ERROR: Traffic Split Error: 'ip' execution error: (netns exec IPv6 route add) RTNETLINK answers: File exists I attached the full log files. I really am trying my best bluetit2 cuckoo trafficspli
  6. Last week
  7. I am experiencing a problem with the server Segin (94.185.80.228:1637). I connect using WireGuard with the following configuration: [Interface] Address = xxx.xxx.xxx.xxx/32 PrivateKey = xxxx= MTU = 1320 DNS = 10.128.0.1 [Peer] PublicKey = xxxx= PresharedKey = xxxx= Endpoint = 94.185.80.228:1637 AllowedIPs = 0.0.0.0/0,::/0 PersistentKeepalive = 15 When I connect using endpoint port 1637, the tunnel is established successfully and initially the speed is very good, close to the maximum available from my ISP. However, after approximately 5 minutes, the connection stops working completely. At that point, traffic no longer passes through the tunnel, and even a speed test cannot complete. I also tried connecting to the same server using other endpoint ports, specifically 47107 and 51820. With those ports, the connection remains much slower than expected compared to the bandwidth provided by my ISP. So the behavior is the following: port 1637: very good speed at first, but since Saturday the connection starts dropping after a few minutes; ports 47107 and 51820: the tunnel works, but the speed is very low compared to my normal line speed. At the moment, port 1637 gives the best performance when it works, but since Saturday it has become unstable due to these repeated drops. Could you please check whether there is any issue on the server side with Segin, especially regarding port 1637, or advise what might be causing this behavior? If needed, I can provide additional diagnostics and logs.
  8. Hello! Or that any "Network Lock" mode is disabled by setting "Network Lock" box to "None" in "Preferences" > "Network Lock" window (default: "Automatic"), as it is indeed the case according to the system report (important option not at default: netlock.connection false) and considering that the user's system does have nft and iptables-* installed. Splitting the different cases with different messages and logging them will be suggested to devs. Kind regards
  9. Hello! Please check Network Lock "Mode" combo box in "Preferences" > "Network Lock" window and make sure that it is set to "Automatic". If it's set to "None" or other values, re-set it to "Automatic", click "Save" and verify whether the problem gets resolved or not. Kind regards
  10. win 10, installed the latest version and am now getting this error. uninstalled and reinstalled same error.
  11. UK is becoming a dystopia day by day
  12. @0bacon Hello! Bluetit is correctly forbidding connections to servers of the country you are in. Resolve it by setting forbidquickhomecountry off in /etc/airvpn/bluetit.rc (or build a white list of servers outside your home country). From the manual: From your tests we see that the traffic doesn't flow in the WireGuard tunnel - it could be a block enforced your ISP, but make sure that you disable firewalld first just in case and test again: sudo systemctl stop firewalld If the problem persists let's check with OpenVPN. Try OpenVPN over UDP and over TCP. Kind regards
  13. ping -c 4 8.8.8.8 dig google.com PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. --- 8.8.8.8 ping statistics --- 4 packets transmitted, 0 received, 100% packet loss, time 3108ms ;; communications error to 10.128.0.1#53: timed out ;; communications error to 10.128.0.1#53: timed out ;; communications error to 10.128.0.1#53: timed out ;; communications error to fd7d:76ee:e68f:a993::1#53: timed out ; <<>> DiG 9.18.44 <<>> google.com ;; global options: +cmd ;; no servers could be reached While testing my connection over openVPN, I have this ( I did restart the bluetit service) 2026-03-30 12:35:03 Logging in AirVPN user 0000 2026-03-30 12:35:11 AirVPN user 0000 successfully logged in 2026-03-30 12:35:11 Selected user key: Default 2026-03-30 12:35:11 Auto quick connection mode enabled 2026-03-30 12:35:11 ERROR: Reached end of AirVPN server list. No suitable server found. 2026-03-30 12:35:11 Logging out AirVPN user 000 Then I added the Chicago servers to the whitelist in bluetit.rc and I received the same "no suitable server found" message.
  14. Hello! So, the AirVPN Suite works fine as expected. The problem causing the traffic not flowing in the tunnel must lie elsewhere. First, let's determine whether the traffic is completely blocked is it is only apparently blocked. Try to resolve names and ping destinations without names resolution and let's examine the outcome. Examples: ping -c 4 8.8.8.8 dig google.com Also, can you please test a connection over OpenVPN? Please set airvpntype openvpn on /etc/airvpn/bluetit.rc file, re-start Bluetit and test again a connection. If it fails too, switch to TCP by setting airproto tcp, re-start Bluetit and test again connections. Kind regards
  15. example: https://web.archive.org/web/*/https://en.wiktionary.org/wiki/swain#English will return: 429 Too Many Requests nginx it's been that way on multiple exits for weeks. it is terribly inconvenient. thank you web crawlers. edit: routes shows some exits that still work. none in Japan and Switzerland. https://airvpn.org/routes/?q=https%3A%2F%2Fweb.archive.org%2Fweb%2F*%2Fhttps%3A%2F%2Fen.wiktionary.org%2Fwiki%2Fswain%23English
  16. Ran across this Could this be causing loading issues with some locations (sorry, don't have the last one). Or is this typical of AVPN IPs?
  17. Hi, bsabiston! You can use a special option to set your last chosen server for automatic reconnecting. Please open the Servers tab in Eddie, choose your necessary server and connect to it, then activate a "Lock Current" option at the bottom of a tab. If an option activated, you would reconnect to your server instead of default server(s). Of course, you may change your preferred server, and in the case of disconnection Eddie will reconnect to the last chosen server. You do NOT need to deactivate an option and activate it again if you decided to change your server.
  18. In this fragment of my Docker Compose YAML file for Gluetun, I have a long line for the 'FIREWALL_VPN_INPUT_PORTS=' line which goes off the terminal screen. I'd like to split this line into multiple lines for readability. I've not had any success trying the various YAML line splitting recipes found online, so could anyone suggest whether/how I could do this? Of the various recipes I tried, the YAMLLINT YAML syntax checker doesn't throw any errors but the docker parser/checker does and Gluetun fails to start. It works fine all on one line. Thanks --- services: gluetun: container_name: airvpn image: qmcgaw/gluetun cap_add: - NET_ADMIN environment: - VPN_SERVICE_PROVIDER="airvpn" - SERVER_COUNTRIES="United Kingdom" - FIREWALL_VPN_INPUT_PORTS=6081,41181,4055,4056,28424,28425,6080,4080,4081,27243,27247,10720,2669,8112,.... - TZ="Europe/London" - UPDATER_PERIOD=24h devices: - /dev/net/tun:/dev/net/tun ports: - 3843:4080 # http (4080) ....
  19. Display issue: an IPv6 Public Exit IP is displayed in Overview although "Networking > Layer IPv6" is set to "Block". Note: this is not a new issue.
  20. Hi, I'd like to suggest a feature that lets user to use a hostname that resolves to the best server from a user-defined list of servers. It will be similar to *.vpn.airdns.org but only resolves to one of the servers in the user-defined list. Eddie has a feature that works similarly by adding servers to allowlist. However, when Eddie can't be used, it is inconvenient. I hope you consider this suggestion. Thank you and have a nice day. Regards,
  21. Previously, connecting to a server took a few seconds. As of today, Eddie gets stuck on the authorisation step of the process for around 15 seconds before connecting. This is persistent when connecting through a Wiresock client as well. I have not updated anything or changed any settings from before this issue started happening. The only two things I can think of that may be the issue are my ISP or airVPN itself having an issue, though the latter seems unlikely. Any ideas of what can be done about it? Here's some information that may be helpful: OS = Windows 11 version 25H2 Eddie version = 2.24.6 Wiresock version = 2.4.11.1 ISP = YouFibre I have port forwarded via the VPN and set the relevant ports on each program to match. Thanks in advance for any help. If more information is needed, please ask.
  22. Hello! Welcome aboard. 1. Yes, correct. 2. Yes, correct. 3. With a port linked to "All devices" this is not possible, because you create an unsupported case in forwarding rules, i.e. the same packet to a specific VPN server public IP address port should be forwarded to the port of multiple VPN IP addresses. This is not implemented and also poses a technical challenge in our infrastructure that's not trivial. To overcome this situation you must use unique key pair for each device and take care to link each port to a single device. Alternatively, a simpler solution is just connecting each device to a different VPN server (your 2nd scenario). Kind regards
  23. Hello! In this case there's something wrong in setup. The configuration file is correct: AllowedIPs = 0.0.0.0/0, ::/0 This line tells WireGuard to tunnel the entire IPv4 and IPv6 address space. Any leak is caused by wrong binding or bad routing table together with absence of "network lock" leaks prevention. Use the AirVPN Suite to get rid of these problems, but it would be interesting to investigate further, if you don't mind. We could start by examining the routing table, the network interface settings and the firewall rule set during a connection, while the problem is occurring. Tracing IPv6 routes can provide valuable clues too. This is what I do, and while it does hide my ISP-provided IPv4 perfectly, the situation is different for IPv6, where my ISP-provided IPv6 is leaked to the tracker and my peers. This is a symptom hinting at a serious mis-configuration (or some previously un-detected qBittorrent bug, but it's unlikely as something so important would have been immediately noticed). Network Lock would prevent this situation but your case is very interesting and in our opinion deserves further investigation. In this case your setup is plausibly the source of the problem. Traffic splitting on an application basis requires some care to avoid those very leaks that you are experiencing. Consider running the AirVPN Suite for a safe traffic splitting on an application basis. AirVPN Suite resources: https://airvpn.org/forums/topic/79336-airvpn-suite-resources/ Kind regards
  24. I don't get it. If I omit --interface, then curl does not uses the wireguard tunnel, so my ISP-provided IPv6 is not hidden at all. nicoco@tour ~> curl ip.network -6 2a01:e0a:f09:XX:XX:XX:XX:XX # My ISP IPv6 > Binding qBittorrent to the VPN interface is a perfect solution This is what I do, and while it does hide my ISP-provided IPv4 perfectly, the situation is different for IPv6, where my ISP-provided IPv6 is leaked to the tracker and my peers. I think there is a confusion in your reply. My setup may be somewhat unusual because I do not want all traffic router through the wireguard interface. I only want certain software to specifically bind on this interface. For eg, web browsing, I'm fine not hiding my IP.
  25. I've just moved from another VPN service because I'm sick of their servers going AWOL. One thing they did OK at though was port forwarding. It was configured a little different (choose a server IP address & choose a port... if available I got it) to how it's done here. Am I correct in the following understanding: 1. When I reserve ports, they are available to me from any VPN server's exit IP address that I connect my VPN client to? Not sure how you work that magic if it's correct but it makes life very easy. For example: if I connect to Kornephorus, and have port 10001 forwarded to me, then disconnect and reconnect to Capricornus, port 10001 at Capricornus' exit-IP now comes to me with no config changes required? 2. Again with port 10001 forwarded and set to "all devices"... If I have two client devices (on the same LAN so same public IP address from here) connected to different VPN servers, Say Client A connected to Kornephorus and Client B to Capricornus: Client A will receive traffic forwarded from Kornephorus's port 10001 and Client B will receive traffic forwarded from Capricornus' 10001? 3. If I want to connect multiple clients to the same VPN server, with multiple forwarded ports, then I either leave the port forwarding on "all devices" and let my client devices choose what to listen to, or I could opt to pass only a particular port to a particular device by selecting that in the port forwarding for each forwarded port? (the first option would not be so good I guess if there's a lot of incoming traffic, since it would be flooded to all devices on the VPN whether they listen to that port or not). I'm asking to confirm the above because it seems too good to be true. I've done a bit of reading of past posts here though and it does seem to be correct.
  26. I don't close the terminal window. I enter goldcrest -O and it says that it is connected but I can't reach anything. I send kill command after I confirm that I have no connection. Ive given it at least 30 seconds before the kill command, maybe something is causing it to quit after a few seconds?
  27. Hello! Note the discrepancy. Goldcrest may read both ~/goldcrest.rc and ~/.config/goldcrest.rc, no problems, but be aware that you might have two different files. Very well, this is essential to allow network lock to work properly. That's fine, it means that Network Lock blocks the traffic to your system DNS. In this case it's not really true because the system DNS has the same gateway IP address, whose traffic will be allowed in any case (you can verify by pinging 192.168.1.1 for example). About the log, we would like a clarification, we see that, multiple times, soon after a connection you order a disconnection, for example:  9:11:45 AM bluetit: Requested method "bluetit_status -> Bluetit is connected to VPN (WireGuard)"  9:11:45 AM bluetit: Requested method "stop_connection"  9:11:45 AM bluetit: Stopping WireGuard synchronous connection Why do you order the disconnection immediately (or just a few seconds) after the connection was established? Note (just in case) that you're running goldcrest in synchronous mode, so if you destroy the window of goldcrest terminal emulator parent, it will receive a SIGTERM and in turn will require Bluetit to disconnect. So, is the disconnection ordered by you voluntarily? If so, is it because you see that no traffic flows? As a side note, you have defined a white list of only one server. If this is intentional it's fine, but please test more, different servers, just in case there is a problem that's specific between you and Fang. You can define a white list of servers through a list of comma separated server names in the air-white-server-list option in your goldcrest.rc file. Kind regards
  28. Hello! We're very glad to announce that Eddie Android edition 4.0.0 Release Candidate 1 is now available. New CPS QUIC database: now Eddie features a CPS database of more than 30 real web sites allowing accurate QUIC + HTTP/3 mimicry of real services through AmneziaWG. Each database entry is identified by a clear label for immediate selection in the app's settings. Eddie will take care to compile AmneziaWG In parameters accordingly: no need for manual input, which anyway remains an available option. This addition significantly bolsters Eddie's arsenal against blocks. New: IPv4 and IPv6 traffic can now be wrapped over an IPv6 tunnel with WireGuard and AmneziaWG too. Minor bug fixes The original message of this thread has been updated accordingly. You will find on it the new download link and checksum, as well as detailed Amnezia description. If you decide to test, please report at your convenience any bug and problem in this thread. If possible generate a report from the app in a matter of seconds: by tapping the paper plane icon on the Log view bar rightmost side you will generate a full system report which will include both log and logcat and have it sent to our servers. Then you just need to send us the link the app shows you (open a ticket if you prefer to do it in private). Kind regards & datalove AirVPN Staff
  1. Load more activity
×
×
  • Create New...