More tunneling options

[zimbabwe 24]

Please add more tunneling options! Day by day censorship around the world becomes worse and worse, OpenVPN and Wireguard is already completely blocked in many countries because it is easily detectable using DPI. Since the mid 2010's people out there have been working very hard on much more censorship-resilient solutions rather than simple-to-detect SSH and SSL-wrapping. The days of the games of privacy are over, now VPNs are more and more used by the people around the world to break the information bubbles created by their oppressive governments.

Here are some examples of the new tunneling methods that you could add to your services:
https://github.com/erebe/wstunnel
https://github.com/cbeuw/Cloak
https://github.com/v2fly/v2ray-core
https://github.com/XTLS/Xray-core

[Tech Jedi Alex 1513]

I find it very hard to believe that OpenVPN and Wireguard are being restricted "in many countries". The opposite is true in the overwhelmingly vast majority of the world; please don't talk doom and gloom.
 

3 hours ago, zimbabwe said:

now VPNs are more and more used by the people around the world to break the information bubbles created by their oppressive governments.

You will find pretty much everyone else outside the privacy bubble not to care much. You should change your statement to include "in the privacy bubble".
And beware of overusing the word "censorship".

Regarding the protocols, it was suggested in the past, please use the search function first. Example:The gist is that support for any proxy protocol like Shadowsocks or V2ray will not see the light of day in the forseeable future in light of the availability of superior protocols like Tor.

[zimbabwe 24]

Tor is slow for watching the blocked YouTube because it's free. We are at least paying for the services, but they are also slow because of DPI.

[zimbabwe 24]

You know, it's sort of sad to think that you must fall into the darkness just because you are not belonging to the "overwhelming majority of the world". China, Russia, Belarus, Venezuela, Turkmenistan, Egypt, Turkey. Who's next? I know we are all the "third world" but we are people and want the information! If no one will lend us a hand from the greater world, where life is still okay, we won't ever make it out of the darkness.

[zimbabwe 24]

Anyway I understand your position, no problem. Like Russians say "Сытый голодного не разумеет" ("the well-fed does never understand the hungry").

[go558a83nk 380]

38 minutes ago, zimbabwe said:

Anyway I understand your position, no problem. Like Russians say "Сытый голодного не разумеет" ("the well-fed does never understand the hungry").

Last I read the current suite of protocols in use by AirVPN (specifically, tls-crypt or SSL tunnel if needed) allowed AirVPN to work even in the most restricted countries.  Have I misunderstood?

[zimbabwe 24]

34 minutes ago, go558a83nk said:

Last I read the current suite of protocols in use by AirVPN (specifically, tls-crypt or SSL tunnel if needed) allowed AirVPN to work even in the most restricted countries.  Have I misunderstood?

I cannot speak for the rest of the "overboard" countries but from my own experience, in Russia the recently installed DPI boxes from Roskomnadzor called ТСПУ (TSPU) manage to completely block OpenVPN with tls-crypt 1.2, Wireguard and even partially Tor. I cannot connect via OpenVPN or Wireguard since the first days of May. According to the governmental reports by the end of July all the 100% of the Russian ISPs had the TSPU boxes installed. There is no direct access to YouTube in Russia since the 1st of August, but luckily for people there already was a ready-made DPI spoofing tool called GoodbyeDPI to circumvent it, so it was a very good try from the government but they failed. SSL and SSH tunneling of VPN still does work for me but the traffic speed is randomly throttled down to almost complete stall which is cured only by reconnect to another server.

As far as I know the worst situation is in Turkmenistan. Recently people from Turkey reported blocking of many sites in their country. You can read more on the current state of things at ntc.party.

[Tech Jedi Alex 1513]

Mr. Zimbabwe, I can in the same way say that there are tons of other VPN providers which might work better for you than AirVPN. I don't get you people who try to argue about the already accomplished fact that there will be no support coming for any proxy protocols in AirVPN, because AirVPN is not a proxy provider and never will be. Who are you trying to convince here?
The AirVPN team is an advocate for Tor. If Tor does not work for you, well, then so be it – maybe AirVPN is not the best fit for you then? Acknowledge that fact and move on, come on.

Now, we can help you with configuration of either OpenVPN or Wireguard, or any other protocol engulfing those VPN protocols, and try to help you with optimization. If you are willing to try it, please open a thread.
 

On 8/18/2024 at 7:53 PM, zimbabwe said:

Сытый голодного не разумеет

Не злись))

[zimbabwe 24]

Okay, I'll give it one more try, may be it's all just a case of misunderstanding: from the beginning I didn't mean using xray, shadowsocks, etc. as direct proxies but only as the outer layer options for OpenVPN and Wireguard, in addition to the current options of SSL and SSH. Still no?

EDIT: Looked once again at my first message and I think it was obvious. So it's obviously "no". For some reason Tor will help anyone in the world, although its exit nodes has zero monetization, in contrast to VPN services.

[Tech Jedi Alex 1513]

5 hours ago, zimbabwe said:

Okay, I'll give it one more try, may be it's all just a case of misunderstanding: from the beginning I didn't mean using xray, shadowsocks, etc. as direct proxies but only as the outer layer options for OpenVPN and Wireguard, in addition to the current options of SSL and SSH. Still no?

I've done a bit of research and it seems possible to do both, at least technically. Now we just need to talk about the merits of offering it. What I can definitely say is that it's not going to be a high priority thing right now.

[alekas 0]

Traveling to Uzbekistan. I cannot connect to any AirVpn server anymore. It worked fine in USA.
Any protocol available in Eddie UI do not work.
Unfortunately I paid for the whole year of AirVPN service. Looks like the XRay or something similar is the way to go...

[Staff 10381]

8 minutes ago, alekas said:

Traveling to Uzbekistan. I cannot connect to any AirVpn server anymore. It worked fine in USA.
Any protocol available in Eddie UI do not work.
Unfortunately I paid for the whole year of AirVPN service. Looks like the XRay or something similar is the way to go...

Hello!

We have a report that makes us suspect that in Uzbekistan it's the IP addresses of various VPN servers (not only AirVPN, other VPN too), to be blocked "unconditionally". Anyway AmneziaWG is worth a test, with and without QUIC mimicking, toward all the wg ports of our servers. It has an incredibly high rate of success in Russia and China (higher than OpenVPN over SSH and shadowsocks) so it's definitely worth a test. Please keep us posted as we have literally three reports only from Uzbekistan including yours...

If you need some parameters to test check here:
https://airvpn.org/forums/topic/77633-eddie-android-edition-400-preview-available/?do=findComment&comment=258644

and here:
https://airvpn.org/forums/topic/59479-block-vpn-in-russia/?do=findComment&comment=237288

If you need some suggestions for the parameters I_n in order to mimic QUIC connection to some specific web site known to be not blocked in countries controlled by VPN hostile regimes, please contact our support team in private by opening a ticket.

Kind regards


 

[alekas 0]

AmneziaWG  may be a good idea, but will require time.. 
It seams like AirVpn needs to follow these DPI and other restrictions and make sure that customers can just pay and use the service.

I am using AirVPN for years and for the first time I was not able to connect to ANY server using ANY available protocol withing Eddie UI.. From Uzbekistan.


 

[Staff 10381]

9 minutes ago, alekas said:

AmneziaWG  may be a good idea, but will require time.

Hello!

It's available right now if you can edit the generated file. An integration with the configuration generator will require time so we suggest that you test by editing your own file (generated by the CG for WireGuard). Integration with Eddie Android edition is already available in the 4.0.0 beta version. ~100% success at the moment comes from reports from Russia and China. It would be good to have an additional report from Uzbekistan. 😋

Kind regards
 

[alekas 0]

I am just installing Eddie UI and using it. If you provide steps - I am in to test. I am currently on windows 11...
Where should I edit [Interface] section? I cannot find any file with that in AirVpn installation folder.
 

[Staff 10381]

9 minutes ago, alekas said:

I am just installing Eddie UI and using it. If you provide steps - I am in to test. I am currently on windows 11...
Where should I edit [Interface] section? I cannot find any file with that in AirVpn installation folder.
 

Thank you!

Please use the Configuration Generator. Turn on the "Advanced" switch. Generate a file with the Configuration Generator for WireGuard for the server or country you want to test. Download the file and edit it with any text editor. To begin with, add these parameters in the [Interface] section:
 

Jc = 20
Jmin = 50
Jmax = 1000
S1 = 0
S2 = 0
H1 = 3
H2 = 1
H3 = 4
H4 = 2 

Import the file into your PC AmneziaWG client, or use it with the AirVPN Suite component Hummingbird, and even in Eddie 4.0.0 (you can do it in the "VPN profiles" view once the file is in your Android device) and use it to test a connection in Amnezia mode.

If it fails please try a connection directly from Eddie, without profile, in Amnezia WG. If it fails too enable QUIC mimicking in "Settings" > "Advanced" > "Custom AmneziaWG directives" and test again a connection.

Keep us posted!
Kind regards