Not connected, Your IP: 216.73.216.102
Online: 49800 users - 716693 Mbit/s total BWAll Activity
This stream auto-updates
- Past hour
-
-
-
-
-
-
-
-
-
-
-
- Today
-
-
-
-
Hello! We're very glad to inform you that the Black Friday weeks have started at AirVPN! Save up to 74% when compared to the one-month plan price Check all plans and discounts here: https://airvpn.org/buy If you're already a customer of ours and you wish to jump aboard for a longer period, any additional subscription will be added on top of already existing subscriptions and you will not lose any day. What's new since last Black Friday OpenVPN 2.7 with Data Channel Offload (DCO) on every server. The whole network now runs OpenVPN 2.7 with the DCO kernel module, which processes encryption inside the kernel for higher throughput and lower CPU load. The Configuration Generator default profile is DCO-ready, with no deprecated directives (details https://airvpn.org/road_to_openvpn26) 17 new 10 Gbit/s full duplex servers in Amsterdam (Netherlands), London and Manchester (United Kingdom), Toronto (Canada), Los Angeles and New York City (USA) and Stockholm (Sweden) United Kingdom infrastructure fully renewed: all the old 1 Gbit/s servers were replaced by six new 10 Gbit/s servers, which raises the UK theoretical peak from 15 to 60 Gbit/s. In Sweden, the older Uppsala servers were retired in favour of new 10 Gbit/s hardware in Stockholm Total infrastructure bandwidth up by about 25%, now over 1.3 Tbit/s Faster uploads and smoother performance under load: a deep rework of server-side routing and firewall rules removed a bottleneck on busy high-speed servers, and network tuning sharply reduced packet drops Eddie Android edition 4.0 and 4.1: full AmneziaWG support alongside OpenVPN and WireGuard. It includes a built-in database of more than 30 real websites whose traffic your connection can imitate, to get past VPN blocking. Login keeps working even when our bootstrap servers are unreachable, and IPv4 and IPv6 can travel over an IPv6 tunnel with WireGuard and AmneziaWG. Version 4.1 brings improved stability, from Android 5.1 to Android 16, Android TV included Eddie desktop edition 2.26.2 for Windows, macOS and Linux (ARM included): OpenVPN 2.7, WireGuard for Windows 1.0, extensive security hardening of the privileged components, and stronger encryption of saved profiles AirVPN Suite 2.1 and 2.2 for Linux (x86-64, AArch64 and ARMv7): reworked network and default gateway detection, a new option to choose whether IPv4 traffic travels over an IPv6 tunnel, improved IPv6 handling and a security-hardened traffic splitting manager. Hummingbird 2.1.0 for macOS runs natively on both Intel and Apple Silicon AirVPN is one of the oldest and most experienced consumer VPNs on the market, operating since 2010. It never changed ownership and it was never sold out to data harvesting or malware specialized companies as regrettably happened to several competitors. Ever since 2010 AirVPN has been faithful to its mission ( https://airvpn.org/mission ). AirVPN does not inspect and/or log client traffic and offers: five simultaneous connections per account (additional connection slots available if needed) state-of-the-art and flexible inbound remote port forwarding ( https://airvpn.org/forums/topic/63545-update-remote-port-forwarding-system-expansion ) active daemons load balancing for unmatched high performance ( https://airvpn.org/forums/topic/48234-speedtest-comparison/?do=findComment&comment=131616 ) - current 'all-time high' on the client side is 730 Mbit/s with OpenVPN and 2000 Mbit/s with WireGuard flexible and customizable opt-in block lists ( https://airvpn.org/forums/topic/49876-new-feature-dns-block-lists ) protecting you from adware, trackers, spam and other malicious sources. You can customize answers or exceptions globally, at account level or even at single device level. powerful API ( https://airvpn.org/faq/api ) Full IPv6 support comfortable management of your client certificates and keys ( https://airvpn.org/forums/topic/26209-how-to-manage-client-certificatekey-pairs ) OpenVPN, WireGuard and AmneziaWG (Android) connections AES-GCM and ChaCha20 OpenVPN ciphers on all servers Perfect Forward Secrecy with unique per-server 4096-bit Diffie-Hellman keys internal DNS: each server runs its own DNS server. free and open source software client-side software support for traffic splitting on an application basis on Android and Linux and on a destination basis on Windows and macOS GPS spoofing in Eddie Android edition AirVPN is the only VPN provider which is actively developing the OpenVPN 3 library with a fork that's currently 379 commits ahead of OpenVPN master and adds key features and bug fixes for a much more comfortable and reliable experience: https://github.com/AirVPN/openvpn3-airvpn AirVPN, in accordance with its mission ( https://airvpn.org/mission ), develops only free and open source software for many platforms, including Android, Linux (both x86 and ARM based systems), macOS and Windows. Promotion due to end on 2026-12-03 (UTC). Kind regards & datalove AirVPN Staff
- ...
-
- 3
-
-
-
-
-
Using Eddie I am unable to connect to any server. The connection attempt times out and it begins to attempt to connect to the next server, which also times out, and so on. I have tried renewing the certificate and relogging and also switching to the beta 2.27.2 client, but neither have worked. I have used AirVPN/Eddie for a couple of months now with no issues, so I'm unsure why I all of the sudden can't connect. -
@Staff Please consider adding more servers in these locations if possible. Thank you.
- ...
-
- 1
-
- Yesterday
-
Thank you - that looks just like what I want. I've set it up but will not know until tomorrow. -
.thumb.png.8be84fd39f94c1640ac8c5456fbf3449.png)
When computer shutsdown Eddie's netlock is still active
Staff replied to major4579's topic in Troubleshooting and Problems
Hello! When Windows shuts down, it closes Eddie before Eddie can disconnect and remove its Network Lock rules. With Fast Startup enabled (the Windows 10 default), Shut down does not fully reset the system, so the leftover rules are still active when you power on the computer the next day. When Eddie exits normally, it disconnects and removes the Network Lock by itself, so the solution is to let Eddie exit before Windows shuts down. 1. Add --gui.exit_confirm=False to your launch command, so that Eddie does not ask for a confirmation when it is closed: Eddie-UI.exe --path=home --batch --netlock --connect --netlock.allowed_ips=192.168.1.10 --gui.exit_confirm=False 2. Replace your scheduled shutdown with a scheduled task (Task Scheduler) that runs this batch file: @echo off taskkill /IM Eddie-UI.exe set /a n=0 :wait timeout /t 5 /nobreak >nul tasklist /FI "IMAGENAME eq Eddie-UI.exe" | find /I "Eddie-UI.exe" >nul || goto off set /a n+=1 if %n% lss 12 goto wait :off shutdown /s /t 0 taskkill without /F asks Eddie to close as if you had chosen Exit: Eddie disconnects, removes the Network Lock and exits. The batch file waits up to one minute for Eddie to exit, then shuts the computer down. In the task properties, run it under your own account with "Run only when user is logged on" and "Run with highest privileges", so that taskkill can reach the Eddie window. Please let us know whether the Network Lock is gone the next morning. Kind regards -
Hello! The AirVPN Suite has no graphical interface at the moment: Bluetit runs as a system daemon, while Goldcrest and Hummingbird are command line programs. Their output is shown by your terminal emulator, so the background, text colors and font are decided by the terminal, not by the Suite. To get a dark mode, select a dark theme or profile in your terminal emulator's preferences (GNOME Terminal, Konsole, xterm and so on), and the Suite will be displayed with it. Kind regards
-
Windows 10 Pro computer. I start the VPN with: "Eddie-UI.exe --path=home --batch --netlock --connect --netlock.allowed_ips=192.168.1.10" My computer is set to turn off in the early hours. When it does the netlock action is still active, the next day when I start my computer I have to start Eddie and click on "Deactivate Network Lock" and then I will have internet access. Is there a simple batch file command I can run before the computer shutsdown to Deactivate the Network Lock and cleanly exit Eddie? Sorry for the newbie questions. Thanks, Marc
-
-
Hello, thank you for the report. We checked all exit addresses, IPv4 and IPv6, of our Phoenix servers (Guniibuu, Khambalia, Sheratan) and Chicago servers (Fang, Kruger, Meridiana, Praecipua, Sadalsuud, Sneden, Superba): MaxMind GeoLite2, ipinfo.io and ip-api.com all place them correctly in Phoenix, Arizona and Chicago, Illinois, US. Google and Meta use their own location data for IP addresses, which can differ from those public databases, so they can place a shared exit address in another country even when the public databases are right. We cannot edit their data directly. Google offers a form to report a wrong IP location: https://support.google.com/websearch/workflow/9308722?hl=en Submit it while connected to the affected server; Google says updates can take more than a month. If it happens again, please post the server name and the exit IP shown by https://ipleak.net at that moment, so we can check that specific address. In the meantime, a server in another city or country is the practical workaround. Kind regards
-
-
-
-
ANSWERED US servers strange behavior
SurprisedItWorks replied to pHxaq's topic in Troubleshooting and Problems
Another data point. My daughter on the US west coast uses Air as her primary VPN but uses another firm for a much less used backup VPN. This week she found that on that backup VPN's San Francisco server, youtube addressed her as being in Tehran, a place with which she has never had a connection of any sort. My hypothesis was that some Tehran user on that server got the server's IP address associated with that location in some database. -
-
Not sure if this is the right place to post but this is happening to me: I only used US servers (in Phoenix and Chicago). Recently I've been seeing ads in arabic while using my phone's browser (Chrome). I ignored it. Google's Gemini suddenly stopped working when I tried to use it by saying the service is blocked/not allowed on my country. Last week I've been notified by certain services I use that my logins were triggering alarms due to a "suspicious ip address"(never happened before), though they added that my activity was not unusual. And then, WhatsApp's AI answered me a question with a curious sentence: "if you're in Iran, you can...". I asked back why it said I was in Iran when I am not there, and it replied "Sorry, I got a wrong location signal that you were in Iran's capital". Ipleak shows I use airvpn servers and no DNS leaks either. This is all very weird, but Meta's AI answer shed a light on the possible problem. Just wanted to post it here in the forum so you guys are aware and maybe someone else saw the same behavior. Something's going on with the US servers, and it's worrying. I will switch to servers in other continent and see what happens (so far, the ads are completely normal and Gemini is working again after the switch). Regards.
- Last week
-
dark mode would be cool i think and if it already exists let me know kthanksbyeee
-
-
UK: Manchester servers migration to new machines
Staff replied to Staff's topic in News and Announcement
Hello! A correction to our previous update about the migration of the three Manchester servers (Bubup, Ceibo, Chaophraya). The migration to the new machines was completed today, 2026-11-11. The information we had received from the provider turned out to be correct for IPv4 only: - IPv4: the entry and exit addresses are unchanged, as announced. - IPv6: the entry and exit addresses have changed. What you need to do: Eddie, the AirVPN Suite (except Hummingbird) and the other software that downloads the server list from us: nothing. The new IPv6 addresses are picked up automatically. Configuration files generated with the Configuration Generator that use host names: nothing. Configuration files that contain the IPv6 addresses of these servers (for example with the "Resolved hosts" option, or WireGuard files with an IPv6 address in Endpoint): please generate them again. Firewall rules, routers or scripts that refer to the IPv6 addresses of these servers: please update them. Configuration files and rules that use only the IPv4 addresses of these servers remain valid. We apologize for the inaccurate information in our previous update. Kind regards & datalove AirVPN Staff -
Hello! @thecoachchen, thank you for your patience and for all the logs and tests you provided. As promised, here is the outcome. After investigating with the user, we could not confirm a single root cause for the WireGuard handshake failure on that system, and the investigation is now closed without a definitive fix. Some of the findings are useful for anyone with the same symptoms: Bluetit reports "Connected", then "WireGuard handshake failed to resume" and reconnects about every minute, with no Internet access and no name resolution. 1. Upgrade to AirVPN Suite 2.2.0, the current release, before anything else. The first line Bluetit writes to the log shows the version in use ("Starting Bluetit - AirVPN WireGuard/OpenVPN3 Service 2.2.0"). Version 2.2.0 also changes how the keys of a WireGuard configuration are read. In 2.1.0 and older a key beginning with "+" is read incorrectly, and the tunnel cannot complete a handshake with any server. If you must stay on an older version, create a new device in the Client Area and use it, so that it gets new keys. 2. Do not run two VPN clients at the same time (for example Eddie and Bluetit on the same computer), and never use the same device in two places at once (for example the Suite on two computers). Each device has its own WireGuard key and VPN address, so two simultaneous sessions with the same device conflict with each other. Exit Eddie completely before you start Bluetit, and create a separate device in the Client Area for each computer. 3. If names do not resolve even before the tunnel is up, check which DNS servers the system uses while no VPN is connected: cat /etc/resolv.conf resolvectl status If they still list the VPN DNS, for example 10.128.0.1, a previous session did not end cleanly and did not restore the DNS settings. That address can be reached only inside the tunnel, so name resolution fails outside of it. The comment at the top of /etc/resolv.conf tells you which program wrote the file and where it saved the original. To restore the settings left by Bluetit, with the Bluetit service running, use: goldcrest --recover-network To restore the settings left by Eddie, start Eddie and exit it normally. 4. If, with "allowprivatenetwork yes" (the default), you can reach the devices in your own subnet but not other private subnets behind the same router (for example 192.168.1.0/24 works, 192.168.2.0/24 does not): Network Lock already allows 192.168.0.0/16, 10.0.0.0/8 and 172.16.0.0/12, but Bluetit sends traffic into the tunnel with a 128.0.0.0/1 route, which also covers 192.168.0.0/16. Only the subnet your computer is directly connected to keeps its own route. Add a more specific route to the other subnets through your LAN gateway, for example: sudo ip route add 192.168.0.0/16 via 192.168.1.1 Replace 192.168.1.1 with your gateway. To make the route persistent on Ubuntu, add it to your Netplan configuration under the interface: routes: - to: 192.168.0.0/16 via: 192.168.1.1 If the problem persists with 2.2.0, please post here: - distribution and version, and AirVPN Suite version - your DNS setup: the output of "ls -l /etc/resolv.conf" and whether you use systemd-resolved, resolvconf or NetworkManager - any other software that manages the firewall or the network on the same system (ufw, firewalld, Docker, Tailscale, another VPN) - the Bluetit log of a whole failed attempt, from the start of the connection to the first "handshake failed" line. Bluetit writes to the system log with the tag "bluetit", for example: sudo journalctl -t bluetit -b - whether the Bluetit service terminated unexpectedly, as shown by: systemctl status bluetit Kind regards
-
I use Gluetun docker connected to AirVPN for various things. Its great. Is it allowed in the T&C for me to set up a squid docker to proxy other browsers through the Gluetun docker itself, giving me airvpn protected browsing from multiple desktops on my LAN (home, not office) Just curious as it could essentially be hundreds of users (it wouldn't be, I don't have that many people living in my house, but theoretically) Thanks, uwu
-
UK: Manchester servers migration to new machines
Staff replied to Staff's topic in News and Announcement
Hello! An update about the migration of the three Manchester servers (Bubup, Ceibo, Chaophraya) to new machines. We have been informed by the provider that the servers can keep their current IP addresses. After the migration Bubup, Ceibo and Chaophraya will keep the same entry and exit IP addresses, both IPv4 and IPv6. This means that no action is required on your side, whatever software or configuration you use: - Eddie, the AirVPN Suite and the other software that downloads the server list: nothing to do, as before. - Configuration files generated with the Configuration Generator, with host names or with IP addresses (including "Resolved hosts" and WireGuard files with an IP address in Endpoint): they remain valid, no need to generate them again. - Firewall rules, routers or scripts that refer to the IP addresses of these servers: no need to change them. Each server might still be unavailable for a short time during the switch. Remote port forwarding is not affected: your forwarded ports stay the same. Please ignore the previous instructions about new IP addresses. We apologize for any inconvenience if you have already started preparing for the change. Kind regards & datalove AirVPN Staff -
I think a big advantage AirVPN has is the port forwarding feature. I don't know any other VPN providers that support that.
-
For anyone here on a Mac: I hit the same wall and built a workaround. VPNonly uses a WireGuard config from AirVPN's Config Generator and sends only the apps you pick through it. Everything else on the Mac stays on your normal connection, and if the tunnel drops, those apps are blocked instead of leaking. - Free and open source (command line, via Homebrew): https://github.com/kanishkdan/vpnonly - Menu bar app, $19 once: https://vpnonly.app/guides/airvpn-split-tunneling-mac.html?ref=airvpn-forum Disclosure: It doesn't help on Windows or Linux, so per-app split tunneling in Eddie itself is still worth asking for.
-
Hello, Thank you for checking again and for the detailed reports! I wasn't expecting the response to be sooo positive and helpful. Hope we will make Wave VPN one of the best ways to interface with AirVPN on supported platforms! Android 0.1.5 addresses all four points: cached reconnects can proceed when account refresh fails or times out, timed-out bootstrap endpoints back off, invalid optional bootstrap data no longer discards valid servers, retained traffic blocking is shown with a recovery action, and “Only selected” now refuses to connect until at least one app is checked. Also I'm going to test the desktop version with VMs of all supported distros extensively soon. Please let me know if you spot anything else. Best regards -
ANSWERED Eddie VPN Main Window not visible
Narshwrangler replied to Narshwrangler's topic in Eddie - AirVPN Client
This worked for me! I didn't know about the keyboard shortcuts to adjust the window positions and so trying this worked almost immediately! I still have zero idea how the window vanished so far off screen to begin with but I appreciate the help tremendously! Thank you! -
ANSWERED Eddie VPN Main Window not visible
Staff replied to Narshwrangler's topic in Eddie - AirVPN Client
Hello! Thank you for the screenshots, they help a lot. Windows still lists the Eddie window ("Eddie - Ready" in the taskbar preview and in Task View), so Eddie is running and its main window exists: most likely it is placed outside the visible area of your screen. Eddie restores the last saved window position at startup and checks it only roughly against the screen size, so a position saved with a different display setup (another monitor, a TV, a dock, a change of resolution or scaling) can put it where you cannot see it. Please try these steps in order: 1. Right-click the Eddie tray icon and look at the item above "Exit". If it says "Show Main Window", click it. If it says "Hide Main Window", Eddie believes the window is already shown, so go to step 2. 2. Click the Eddie button on the taskbar so that the window gets the focus, then press Win+Up, or Win+Shift+Left / Win+Shift+Right. Alternatively, with the window focused, press Alt+Space, then M, then one arrow key, and move the mouse: the window follows the mouse until you click. When it is back, exit Eddie normally from the tray icon, so that the good position is saved. 3. If that does not work, reset the saved position from the command line. Exit Eddie from the tray icon, check in Task Manager that no Eddie-UI.exe is left, then press Win+R and run: "C:\Program Files\AirVPN\Eddie-UI.exe" -path=home --gui.window.main= The window should open centred on your main monitor. Exit once from the tray icon to save that position. If you installed Eddie in another folder, adjust the path. About the config files: Eddie keeps its settings in %LOCALAPPDATA%\Eddie (C:\Users\<your name>\AppData\Local\Eddie), not in the installation folder, and uninstalling Eddie does not remove them. If default.profile is deleted while Eddie is still running in the tray, Eddie writes it back when it exits, with the same window position. So if you want to try a clean profile, exit Eddie from the tray first (you will have to log in again and set your preferences again). If none of this helps, please tell us the Eddie version (tray icon > About), whether your display setup or Windows display scaling changed about two weeks ago (new monitor, TV, dock, remote desktop or game streaming software), and send us a system report (tray icon > About > System Report), as explained here: https://airvpn.org/forums/topic/50663-youve-been-asked-for-a-support-filesystem-report-–-heres-what-to-do Kind regards -
I have been fighting this for a couple of weeks now and at this point I am at a loss. Nobody else seems to have this issue that I can see so I am left no other option. No, the application is not starting minimized. Yes, the icon is visible in my tray. I am able to open the preferences window and adjust as needed from the tray icon, but the main window continues to illude me. As such, I am unable to choose what server to connect to or really get most of the functionality out of the application. I tried updating the app, nothing. Uninstall and reinstall, nothing. Checked the forums, nothing. Deleted the config files associated with the app, nothing. I have attached images to show that the screen ought to be visible, but alas, nothing. It is not hiding on another monitor as best I can tell, nor is it hiding on another desktop. I simply is not appearing and I have no idea why. Please help.
-
@VesselWave Hello! Thank you for the quick update. We checked 0.1.3 and the three points are addressed on both platforms. While checking the Android version we noticed a few bugs, which you might like to cross-check. References are to wave-vpn-mobile v0.1.3 (commit 2a406b6). 1. Connecting can stay blocked after a failed handshake After a connection attempt without a handshake, the next Connect first refreshes the account, with a 3 second timeout (Connection.kt:162). When the timeout expires, the TimeoutCancellationException is rethrown as a cancellation (Connection.kt:247-250), so the status stays "Connecting..." with no attempt running until the user cancels. recoveryNeeded stays true (SessionWork.kt:52), so every later Connect needs that refresh to succeed within 3 seconds first, and a retry within the 60 second budget fails at once with "Wait N seconds". Also, a request cut by the timeout does not count as a failure for its URL, because the cancellation check comes first (Protocol.kt:174), so the next attempt does not move away from a URL that silently drops packets. Where our bootstrap servers are slow or blocked, users may be unable to reconnect at all. If this problem is confirmed, you might like to consider not making Connect depend on that refresh, and counting a timed-out request as a failure of its URL. 2. The whole manifest is rejected if its bootstrap part does not validate When the manifest arrives, Documents.kt:75-86 checks the bootstrap URLs and the RSA key. If any of them is missing or invalid, the whole manifest is discarded, including the server list, which may be perfectly fine. As a result, sign-in and server list refresh fail. In the same case the desktop version ignores only the bootstrap part: it keeps using the previous bootstrap URLs and key, and still accepts the new server list. Doing the same on Android would make it more robust. 3. No connectivity after a failed connect, while the app says "Disconnected" When bringing the tunnel up fails, the blocking interface is put back and the service keeps running (Connection.kt:257-264). The app shows "Disconnected" with "Couldn't connect" and the only action offered is Connect, so the device has no connectivity and the app gives no way to release the block other than a successful connection. If the block is intentional and this behavior is confirmed, it would help to say so clearly on that screen and offer an action that removes it. 4. "Only selected" with no app checked With split tunnelling set to "Only selected" and no app checked, no IncludedApplications line is written (Wireguard.kt:38-39), so all traffic goes through the VPN, while the screen says "Only checked apps use the VPN. Everything else connects directly." (AppsScreen.kt:88). This fails in the safe direction, but the text is misleading. If we find the time, we will also have a closer look at the desktop version and let you know. Thank you again for your work. Kind regards
-
-
- Earlier
-
-
Hello! We inform you that the three AirVPN servers located in Manchester, UK, are being migrated to new machines: Bubup Ceibo Chaophraya The servers keep the same names, configuration, hardware and 10 Gbit/s port. Their IP addresses change, both entry and exit, IPv4 and IPv6. Planned date: 2026-11-09, between 8 AM and 7 PM UTC. Each server might be unavailable for a short time during the switch. What you need to do after the switch: Eddie, the AirVPN Suite and the other software that downloads the server list from us: nothing. The new addresses are picked up automatically. Configuration files generated with the Configuration Generator that use host names: nothing, the names will resolve to the new addresses. Configuration files that contain IP addresses (for example with the "Resolved hosts" option, or WireGuard files with an IP address in Endpoint): please generate them again after the migration. Firewall rules, routers or scripts that allow or refer to the old IP addresses of these servers: please update them. Remote port forwarding is not affected: your forwarded ports stay the same. Kind regards & datalove AirVPN Staff
-
Thank you for the review! Android 0.1.3 and Linux 0.1.3 address all three points: verification at connection time, bounded and cached latency sampling with no probes while connected, and saved bootstrap URLs/RSA keys with failover and backoff. Please let me know if you spot anything else. I hope Wave attracts enough users and contributors to warrant its own subforum eventually. Best regards
-
-
Hello! First of all, thank you for writing free and open source software dedicated to AirVPN. We had a quick look at both repositories. The code is careful and we did not find any telemetry and/or third-party endpoints. The client identifies itself honestly and the documentation describes our protocol accurately. We appreciate it. There are three points that affect our infrastructure, which you might like to take into account for the next releases. References are to wave-vpn-desktop at commit ce9a15fd and wave-vpn-mobile at commit 64a2be1b. 1. Periodic tunnel verification (desktop) verify_tunnel() in src/platform/linux.rs runs every 60 seconds for the whole session: the tun check for each IP family and the dns check on https://<server>_exit.airservers.org:89/check/, plus a checkdns.airvpn.org query. Any failure tears the tunnel down. Eddie runs these checks only once, right after connecting. With a 60 second loop, a short outage of the check service would disconnect every Wave VPN user at the same time, and they would all reconnect together. You might like to consider running the checks only at connection time, or much less often with some random jitter, and not disconnecting on a single failed check. 2. Latency measurement (desktop and Android) The "ping" is a TCP connection to port 443 on the first entry IPv4 of every server (src/gui.rs on desktop, vpn/Connection.kt on Android), so about 250 connections are opened and closed at every login, launch and refresh. The desktop refresh can go down to 15 seconds from the command line, and the Android manual refresh has no rate limit. A lighter probe such as ICMP echo, fewer probes in parallel, cached results with a minimum interval between refreshes, and no probes while connected (they go through the tunnel and skew the ranking anyway) would help a lot. Also, on desktop an unreachable server currently counts as 0 ms (src/documents.rs), so "Best server" ends up preferring servers that do not answer. 3. Bootstrap servers (desktop and Android) The desktop client always uses the bootstrap URLs and the RSA key from the AirVPN.json compiled into the binary and ignores the ones in the manifest (src/lib.rs, src/documents.rs). If we change bootstrap addresses or rotate the key, older builds would stop working. It might be worth storing and using the bootstrap URLs and key from the latest manifest, and keeping the embedded ones only as a first-run fallback. On Android, Protocol.kt and Session.kt send user and manifest at every refresh, always to the first URL, with no backoff while the bootstrap servers are unreachable. Trying the other URLs when one fails, with an increasing delay between retries, would make the client more robust and lighter on our side. Thank you again for your work. Feel free to ask here if anything about the protocol is unclear. Kind regards
