Mullvad is dropping OpenVPN !!

[SpookyAirUser2020 1]

Mullvad is only going to have Wireguard in the new year.

Do most people using Air use WG or Openvpn? Does Air have stats on which protocol is used more?

I hope AirVPN never drops OpenVPN support, there are older devices like routers etc that we can't use WG on.

Mullvd drops port forwarding, then openvpn, hmm something fishy?! 

I notice Air's membership has doubled since Mull and IVPN dropped port-forwarding!!

[Abstain9194 0]

While there indeed plenty of people needing openvpn and port forwarding in their needs, dropping openvpn would probably make mullvad leaner and more compatible. For their typical user just using for privacy etc... who aren't even using the openvpn client in the first place, it would make no real difference.

[calcu007 5]

On 11/8/2024 at 4:49 PM, SpookyAirUser2020 said:

Mullvad is only going to have Wireguard in the new year.

Do most people using Air use WG or Openvpn? Does Air have stats on which protocol is used more?

I hope AirVPN never drops OpenVPN support, there are older devices like routers etc that we can't use WG on.

Mullvd drops port forwarding, then openvpn, hmm something fishy?! 

I notice Air's membership has doubled since Mull and IVPN dropped port-forwarding!!

They will remove OpenVPN January 11, 2026, still more a year.

[iwih2gk 94]

As a regular AirVpn user that uses lots of bandwidth I can say on my end that I never use OpenVPN anymore.  Too slow, and Wireguard comes with too many improvements to miss out on.  Attack surface is dramatically diminished using WG.      My .02

[Air4141841 30]

I still prefer the customization, and actually being able to see logs in openvpn.  It is so much better from a troubleshooting standpoint.
granted I am using wireguard and said I would not.    once I've set it up, I just on the occasion have an issue.

I found workarounds for those exact issues in openvpn.    wireguard.... nope 

[space5 2]

If there is only wireguard, there should be a way to circumvent wireguard censorship.

[ss11 21]

AirVPN has always been as more customizable and advanced in features than other providers. AirVPN seams to target normal / average users that require simplicity (Eddie) as well as power users that want to generate and  tune their own configuration files.

Of coruse Wireguard is faster and eats less resources but OpenVPN has some features, for them I hope and think AirVPN will not drop support:
- OpenVPN can run in TCP mode and can be used with http/https proxies, socks4/socks5 proxies (these support UDP too)
- OpenVPN can emulate HTTP(s) traffic and thus run behind corporate office firewalls or more restrictive firewalls.

Other than this Wireguard is faster, easier to deploy and set-up but is UDP only.

Aslo, there are set-ups that work on OpenVPN (even without its TCP functionality) that will take a lot of time to migrate to wireguard. And OpenVPN is actively and well maintained, I don't see a direct awesome reason to drop support for it. just my regular user humble opinion.

[Stalinium 52]

ss11: Right, there are many that completely block UDP. This leaves OpenVPN over TCP the only option. It gets tough if OpenVPN is specifically targeted by local network DPI, but inability to use UDP is the more common scenario.
The only thing against DPI we have for Wireguard now is the AmneziaWG client (and server too). As a client connecting to a regular WG server it pads initial connection packets with trash to mislead the DPI at the beginning of a new connection. This is only possible due to leniency provided by UDP's statelessness. Otherwise both protocols are set in stone and further censorship circumvention leads us underground, pioneered by Chinese users, who revolt against own state censorship.

[oassQ9w4cbl4AySZhhth%p36x 4]

in addition to the mentions benefits of openvpn, i wanted to add that openvpn also supports AES crypto which wireguard doesn't, preferring ChaCha20-Poly1305. Whilst the wireguard preference works well for mobile users and any device which doesn't have AES instructions, when doing it at the router level if you have an AES-NI supporting router - then the crypto benchmarks show its much faster / less resource intensive. 

It would be nice if Wireguard started to support AES-NI and do SSL / TLS + TCP so that it appears as though you are just browsing any regular website.