New technical specifications

[Staff 9972]

Hello!

VPN DNS and "Assigned IP address" technical specifications just changed. All the changes have been reported in the https://airvpn.org/specs page.

The changed section is:

Assigned IP

Servers support both IPv4 and IPv6 tunnels and are reachable over IPv4 and IPv6 on entry-IP addresses.
DNS server address is the same as gateway, in both IPv4 and IPv6 layer.

 

Chosen IPv4 Local Address

OpenVPN: 10.{daemon}.*.*, Subnet-Mask: 255.255.255.0
WireGuard: 10.128.0.0/10

Chosen IPv6 Unique Local Address (ULA)

OpenVPN: fde6:7a:7d20:{daemon}::/48
WireGuard: fd7d:76ee:e68f:a993::/64

The new sections are:

 

DoH, DoT

 

Every gateway/daemon assigned to you acts as a DNS (port 53), DoH (dns-over-http, port 443), DoT (dns-over-tls, port 853).
DoH and DoT don't add any actual benefit, because plain DNS requests are encrypted inside our tunnel anyway.
However, users might need it for special configurations. In such cases, use dns.airservers.org (automatically resolved into VPN gateway address).
Our DNS returns a NXDOMAIN for "use-application-dns.net", for compatibility reasons.

Special resolutions

check.airservers.org - Gateway IPv4 and IPv6 addresses
exit.airservers.org - Exit-IPv4 and exit-IPv6 addresses
use-application-dns.net - NXDOMAIN, for DoH compatibility, ensuring Air DNS will be used (for anti-geolocation features)

Special URLs

https://check.airservers.org - Info about connected server
https://check.airservers.org/api/ - Same as above, in JSON
Use https://ipv4.airservers.org or https://ipv6.airservers.org - Same as above, specific IP layer


Kind regards and datalove
AirVPN Staff
 

[go558a83nk 362]

does check.airservers.org only resolve if we're using AirDNS?

[zombie1982 5]

For me too: Name not resolved if I use dnscrypt-proxy with cloudflare

[OpenSourcerer 1435]

Those links print info about the server you're connected to. Of course they only work with AirDNS – no other resolver even knows you're connected to a VPN when you query it.

[vc5fo 4]

It seems that WireGuard launch is near ... 😕