Not connected, Your IP: 216.73.217.75
Online: 46807 users - 528981 Mbit/s total BWAll Activity
This stream auto-updates
- Past hour
-
-
-
-
- Today
-
-
-
-
-
-
- Yesterday
-
I found this frustrating a year or so ago. I was trying to use kvm for my virtual machines. The KVMs worked flawlessly without Eddie but that is my VPN. Anytime I mounted Eddie my firewall was dead in the water. My conventional VMs are slower using VBox but they work flawlessly and I got tired of attempting to get the nework lock to play well with KVM. My crappy answer was to go buy major hardware upgrades so the speed difference was made up for by hardware "power". Don't know if I ever want to go back to that soooooooooooooooooo frustrating experience. I even had some great members here PM to offer private customization but the process was freaking beyond crazy. So I just stick with VBox and the simplicity is better for me than the alternative.
-
Which one?
-
Hello! Unable to resolve does not mean unable to send data, though. Also, if the apps can reach their intended destination(s) via IP address their traffic will flow. Even more importantly, those apps with internal DNS resolution (via DNS over HTTPS for example) will keep working fine. Yes, definitely. Kind regards
-
@Staff I have similar issue, since with 2.26 version the "Don't ask privilege escalation every run" option in preferences doens't work no more. Operating System: Debian GNU/Linux 13 KDE Plasma Version: 6.3.6 KDE Frameworks Version: 6.13.0 Qt Version: 6.8.2 Kernel Version: 6.12.57+deb13-amd64 (64-bit) Graphics Platform: Wayland Processors: 4 × Intel® Core™ i5-2500K CPU @ 3.30GHz 💪
-
Janky workaround and untested. But, what if you try switching the Android TV IP assignment to static and in the DNS settings enter some nonsense instead of a DNS server IP? If I'm not mistaken, the whitelisted apps will be using the DNS provided by Eddie while the rest of the apps won't be able to resolve anything...? Does Eddie have the ability to resolve the bootstrap connection without DNS being available? If you have the ability to do selective routing on your router, that would definitely be the correct approach.
-
I'll wake this topic up again regarding libvirt. I have the problem with kvm qemu virtual machines not being able to connect due to the Eddie lock not letting the guest machine connect via NAT. It is suspected the issue lies in the way Eddie uses nft and libvert use ip-tables. I tried setting Eddie to Iptables-legacy then closed Eddie and opened it again, but the problem persisted. Should I have rebooted or logged out of the host machine after making the change to iptables-legacy? -
@Staff Thank you for answer! So, probably my best bet would be to go with NetGuard as VPN on TV and whitelist only 3 apps, and then setup AirVPN on router level.
-
@Mikeyy Hello! Yes, and on any other Android TV 9 and higher version currently available. The previous limitations have been overcome with a few workarounds. All the other apps traffic and the system traffic go to the Internet via "regular" connection. Currently this is not possible with Eddie, we're sorry. You could consider some method based on built-in features, if the manufacturer did not remove them from your Android build. Please see here for details: https://www.airdroid.com/mdm/block-apps-from-internet (method 1). Kind regards
-
Hello, I would like to install Eddie to Android TV, but need few tips. TV is Philips OLED908, I think Android TV version is 11. I didn't update to latest version for my TV, which is 12. 1. Does Eddie support auto-connect VPN (on reboot or shutdown/power on) on that Android version? 2. I see Eddie has option to whitelist or blacklist apps, but didn't find what happens with other apps. If I whitelist only 3 apps on my TV (TV streaming app, SmartTube and Stremio), does that means all other apps have their Internet blocked, or they access Internet via regular connection? 3. I don't think this is possible with Eddie, but who knows. Can I have 1 app access regular Internet (TV streaming app), 2 apps via VPN, and everything else blocked from Internet? Thank you for help.
-
-
I still have this problem Please open a ticket (with the Support > Lifebelt > Upload report link), thanks.
-
Please open a ticket (with the Support > Lifebelt > Upload report link), because i have in lab Fedora44, and 2.27.1 connect with or without NftablesTableOwner, with WG or OpenVPN, i need to understand your issue. Thanks.
-
I have the same issue on macOS 15.17.9. Please, please Clodo... can we get a macOS Eddie that is functional out of the box, without having to faff around changing permissions in the Terminal just to get it to work? I really want to use Eddie for the fastest server selection, and Network Lock, but these permissions issues have been going on for quite some time. See also https://github.com/AirVPN/Eddie/issues/142 which has received no response at all from the developer since January 2025. I can't imagine this would take long to fix?
-
Has anyone tested this? It didn't work for me.
-
This has been an issue for years. A kvm/qemu guest using NAT (default) to connect to the internet via the host does not work because Eddie network lock prevents it. Can or will AirVpn whitelist libvirt's virtual interfaces by default in Network Lock. Thank you
-
Thanks, that MacOS warning also prompted me to do some searches to see if there was an update. hopefully it will be released soon.
-
-
-
DNS-Leaks with latest version Eddie
Fly AirVPN replied to RemyKerjean's topic in Eddie - AirVPN Client
MS Windows users who upgraded Eddie to 2.26.2 may have no idea they may be leaking DNS. I ran an online DNS check today on a wi-fi connected laptop to find my Win 11 Pro system using Eddie was leaking my provider's DNS; apparently for several days before it was discovered. Unfortunately, I didn't check for a leak when I upgraded but trusted AirVPN to have fully tested this version before releasing it to public. AirVPN needs to get a patched version out soon; possibly resolved by hard coding the " Force all network interfaces for DNS" in the Windows only section to be checked at install. - Last week
-
-
@lexsilico Did you try the tip I send the 01/26/2026 (the last sentence) ?
-
Feature request: an event that fires whenever the Network Lock (re)applies its firewall rules This is a feature request for Eddie — VPN Tunnel (Desktop edition), repo AirVPN/Eddie. Summary Add a new Eddie event (visible in Preferences → Events) that fires whenever the Network Lock finishes applying or re-applying its firewall rules — in any scenario, including mid-session recoveries of the elevated service that do not involve a full tunnel reconnection. The goal is to let users run a custom hook after the Network Lock is settled (for example /etc/ufw/after.init) to restore firewall rules that the Network Lock overwrote, such as outbound NAT for Docker containers. Environment Eddie 2.26.2 (eddie-ui), GNU/Linux (Linux Mint), OpenVPN over tun0. Network Lock mode: linux_iptables_legacy (see ~/.config/eddie/Recovery.xml😞 <Recovery> <netlock mode="linux_iptables_legacy" /> </Recovery> Problem Eddie's Network Lock works by writing strict firewall rules (on Linux it can use nftables / iptables-nft / iptables-legacy). Those rules replace/clean part of the existing chains. If an application (e.g. Docker) or the user has inserted its own NAT/FORWARD rules on top of the Network Lock, a later re-application of the lock silently removes them. The existing events do not cover every moment the lock is (re)applied: Event When it fires (from the source) Does it run after the lock is settled? app start / app end Engine start / shutdown (Engine.cs, RunEventCommand("app.start" / "app.stop")) No session start / session end Beginning of the connect flow / end of session (Engine.SessionStart() → OnSessionStart() → RunEventCommand("session.start"), before the tunnel exists) No vpn pre Just before launching the tunnel (Session.cs, before m_connection.OnStart()) No vpn up Tunnel fully established, after NetworkLockManager.OnVpnEstablished() and Provider.OnVpnEstablished(), right before SetConnected(true) (Session.ConnectedStep()) Yes, but only on a normal connect vpn down Tunnel down detected (Session.cs, RunEventCommand("vpn.down")) Not relevant The gap: the vpn up event only fires during a normal connection flow. When the elevated service (eddie-cli-elevated mode=service) crashes and recovers mid-session — Eddie writes a Recovery.xml and re-applies the Network Lock without a tunnel reconnection — no event fires at all. Any custom rules the user had layered on top of the lock are wiped and are not restored. Real-world impact Concrete case observed (Eddie 2.26.2, Linux): A host runs Docker containers. Outbound connectivity for containers relies on user firewall rules (/etc/ufw/after.init, chains SETUP-FW-* in iptables/iptables-legacy/nft) applied after the Network Lock is active. The vpn up event was configured to re-apply those rules on every normal connect, and that worked. After a recovery of the elevated service (a Recovery.xml appeared with a timestamp between the VPN connect and the failure), the containers lost outbound Internet with no event having fired. Only a manual sudo /etc/ufw/after.init start restored connectivity. Result: a container running an application that calls an external HTTPS API could not reach that endpoint; HTTP requests hung until the reverse proxy timed out. Zero bytes were returned to the client. Proposed solution Add a new built-in event, for example netlock.up (UI label suggestion: "Network Lock applied"), that is executed after the Network Lock has finished (re)applying its rules in ANY of these situations: Normal connect (as vpn up today, after NetworkLockManager.OnVpnEstablished()). Manual toggle of the Network Lock on/off. Settings/allow-list changes that re-apply the lock (NetworkLockManager.OnUpdateIps() and similar). Recovery of the elevated service that re-applies the lock mid-session (Recovery.cs / Recovery.xml), with or without a tunnel reconnection. It should be exposed through the existing event mechanism so users can configure it in Preferences → Events with event.<name>.filename, event.<name>.arguments, event.<name>.waitend (see ProfileOptions.cs, method EnsureDefaultsEvent). An acceptable alternative would be to re-fire vpn up after a recovery that re-applies the Network Lock while the session stays connected. Implementation hints (based on reading the master branch) src/Lib.Core/ProfileOptions.cs — EnsureDefaultsEvent(name) already registers the three per-event options; a new event name would only need to be registered there (and exposed in the Events UI). src/Lib.Core/Engine.cs — RunEventCommand(name) reads event.<name>.* and runs SystemExec.ExecForUserEvent(filename, arguments, waitEnd). Where the rules are actually (re)applied: src/Lib.Core/NetworkLockManager.cs (Activation/Deactivation, OnVpnEstablished, OnUpdateIps) and the Linux platform plugins (src/Lib.Platform.Linux*), plus the elevated-service recovery path. Firing the event right after the rules are written, from a single choke point, would make the event reliable. The docs for Network Lock already warn: "if you change firewall rules yourself after activating Network Lock, Eddie will not detect that." A user-hook-friendly event is the natural companion to that behavior. Thank you very much in advance. -
AirDash is a native iOS dashboard for AirVPN, built with SwiftUI and the iOS 26 Liquid Glass design. Free and open source software. MIT license. Disclaimer: this is an independent project with no affiliation to AirVPN development teams. It uses the public AirVPN API with your personal API key. Resources GitHub repository: https://github.com/zlimteck/AirDash License: https://github.com/zlimteck/AirDash?tab=MIT-1-ov-file Author: zlimteck https://github.com/zlimteck Landing page: https://airdash-landing-page.vercel.app/ AirVPN community forum: https://airvpn.org/forums/forum/48-airdash/ Privacy policy: https://github.com/zlimteck/AirDash/blob/main/PRIVACY.md User's manual or readme file: https://github.com/zlimteck/AirDash?tab=readme-ov-file Main features of the full version Network: full server list with load, users, health, ping latency, sort (load / name / ping), continent filter, search and favorites (scoped per account) Best Server: automatically picked from live ping and load, weighted so a congested server can't win purely on a low ping; instantly shows the previous session's result while the fresh ping sweep is running Server history & trends (opt-in, off by default): load and connected-users charts per server over 1h/24h/7d/30d, a reliability breakdown (healthy vs warning/error) also surfaced as a badge on favorite servers and in Trends, a peak-hours chart highlighting the quietest 3-hour window from 7 days of history, and a Trends screen ranking servers by average load over a rolling window; all powered by a companion history service, not the official AirVPN API. See the Privacy Policy for exactly what that service sees. Server comparison: long-press any server to add it to a comparison (up to 3); tap the toolbar button to view them side by side, including bandwidth and (if the history feature above is enabled) an overlaid load-history chart across the compared servers. Native VPN (WireGuard): connect and disconnect straight from the app via NetworkExtension, no external VPN app required; live tunnel status card on the Dashboard with swipe to disconnect, one profile saved and reused (regenerated only on explicit action). Only available in the full build; see Full vs Lite build below Dashboard: account info (current IP, VPN status, expiration, credits, sessions, member since); swipe left on a session to disconnect (also stops the native tunnel if it's this device's own session), tap a session to jump to its server detail Server detail: WireGuard or OpenVPN profile generation, direct import into the system VPN app, share and QR code (WireGuard) in a ··· menu; a direct Connect button for WireGuard (native build only), skipping the generate/share step; recent profiles per server with one-tap reimport, shown with the protocol's logo Recent profiles page: dedicated list of all generated profiles with search, sort, filter by protocol, quick import, QR code and delete; profile history is stored securely in the Keychain Spotlight search: favorite servers and recent profiles are indexed and searchable from the system search; tapping a result opens the app directly on the right screen and many more. Find the complete list of features on the manual / README.md.
-
-
People should know more about AirVPN
hardy_nomad24 replied to sundi's topic in General & Suggestions
I think keeping it on the Buy page makes sense, especially if the home page is already crowded. People seriously considering the service will usually end up checking plans and payment methods anyway, so that’s a natural place to see the trial option. Maybe the wording could simply be made very hard to miss there, or mentioned briefly in a FAQ/getting started area. I’d avoid turning the front page into the usual “FREE TRIAL!!!” marketing banner style, because that is exactly the kind of thing many of us like AirVPN for not doing. -
GUI not opening after upgrading to 2.26.2-1 on the AUR
stoner replied to ByteBuccaneer's topic in Eddie - AirVPN Client
I use arch (btw), and didn't have that problem after updating using yay. maybe your issue was manjaro related idk -
I probably started before you were born but know that I have 4 times faster upload since I subscribed here.
-
Thank you. However, I think it is not possible to upgrade to OpenVPN 2.4 on DSM6 which can only stick to OpenVPN 2.3. Also I'm not able to install Wireguard client as tailscape package is not compatible with my Synology model DS413 because of CPU restriction. So it seems I don't have any solution anymore to connect my DS413
-
Hello! Please upgrade to OpenVPN 2.4 or higher version, or switch to WireGuard alternatively. The OpenVPN version you're running doesn't support AES-GCM (or CHACHA20) on the Data Channel. Due to remarkable demand for DCO (Data Channel Offload kernel module to speed up OpenVPN throughput and make it more scalable through multiple threads) AirVPN servers, ever since migration to DCO was completed, do not support AES-CBC because its activation, even as a fallback cipher only, would cause global OpenVPN daemon Data Channel Offload de-activation. Kind regards
-
I use DSM 6.2.4 which is the latest avail for my hardware. Also I get some more logs trying to connect from command line : Sat Sep 5 11:00:03 2026 OpenVPN 2.3.17 powerpc-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Mar 2 2021 Sat Sep 5 11:00:03 2026 library versions: OpenSSL 1.0.2u-fips 20 Dec 2019, LZO 2.09 Sat Sep 5 11:00:03 2026 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts Sat Sep 5 11:00:03 2026 PLUGIN_INIT: POST /lib/openvpn/openvpn-down-root.so '[/lib/openvpn/openvpn-down-root.so] [/usr/syno/etc.defaults/synovpnclient/scripts/ip-down]' intercepted=PLUGIN_UP|PLUGIN_DOWN Sat Sep 5 11:00:03 2026 WARNING: file 'client_key_o1788116283.key' is group or others accessible Sat Sep 5 11:00:03 2026 WARNING: file 'ta_o1788116283.key' is group or others accessible Sat Sep 5 11:00:03 2026 Control Channel Authentication: using 'ta_o1788116283.key' as a OpenVPN static key file Sat Sep 5 11:00:03 2026 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Sep 5 11:00:03 2026 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Sep 5 11:00:03 2026 Socket Buffers: R=[112640->112640] S=[112640->112640] Sat Sep 5 11:00:03 2026 UDPv4 link local: [undef] Sat Sep 5 11:00:03 2026 UDPv4 link remote: [AF_INET]37.46.199.83:443 Sat Sep 5 11:00:03 2026 TLS: Initial packet from [AF_INET]37.46.199.83:443, sid=e7d2db9f d9647ba7 Sat Sep 5 11:00:03 2026 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Sat Sep 5 11:00:03 2026 Validating certificate key usage Sat Sep 5 11:00:03 2026 ++ Certificate has key usage 00a0, expects 00a0 Sat Sep 5 11:00:03 2026 VERIFY KU OK Sat Sep 5 11:00:03 2026 Validating certificate extended key usage Sat Sep 5 11:00:03 2026 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Sat Sep 5 11:00:03 2026 VERIFY EKU OK Sat Sep 5 11:00:03 2026 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Fuyue, emailAddress=info@airvpn.org Sat Sep 5 11:00:06 2026 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1550' Sat Sep 5 11:00:06 2026 WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher AES-256-GCM' Sat Sep 5 11:00:06 2026 WARNING: 'auth' is used inconsistently, local='auth SHA1', remote='auth [null-digest]' Sat Sep 5 11:00:06 2026 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Sat Sep 5 11:00:06 2026 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Sep 5 11:00:06 2026 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Sat Sep 5 11:00:06 2026 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Sat Sep 5 11:00:06 2026 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Sat Sep 5 11:00:06 2026 [Fuyue] Peer Connection Initiated with [AF_INET]37.46.199.83:443 Sat Sep 5 11:00:08 2026 SENT CONTROL [Fuyue]: 'PUSH_REQUEST' (status=1) Sat Sep 5 11:00:08 2026 SYNO_ERR_AUTH Sat Sep 5 11:00:08 2026 AUTH: Received control message: AUTH_FAILED,Data channel cipher negotiation failed (no shared cipher) Sat Sep 5 11:00:08 2026 SIGTERM received, sending exit notification to peer Sat Sep 5 11:00:13 2026 SENT CONTROL [Fuyue]: 'PUSH_REQUEST' (status=1) Sat Sep 5 11:00:13 2026 PLUGIN_CLOSE: /lib/openvpn/openvpn-down-root.so Sat Sep 5 11:00:13 2026 SIGTERM[soft,exit-with-notification] received, process exiting Seems to be a pb with cipher but don't know where exactly
.thumb.png.8be84fd39f94c1640ac8c5456fbf3449.png){kind=avatar}
