New Services And Features

[Staff 9772]

Hello!

Today we're very glad to introduce native support for OpenVPN over SSL and OpenVPN over SSH, and a completely re-designed configuration generator which includes exciting, additional AirVPN services and features. Our service becomes more censorship resistant and easier to use with a wide range of OpenVPN GUIs and wrappers.

NEW SERVICES: OPENVPN OVER SSL - OPENVPN OVER SSH

OpenVPN over SSL and OpenVPN over SSH will allow you to bypass OpenVPN connections disruption. Known ISP countries where the disruption takes place are China, Iran, Syria, Egypt. The connection disruption is possible because OpenVPN connections have a typical fingerprint which lets Deep Packet Inspection to discern them from pure SSL/TLS connections. Connecting OpenVPN over SSL or OpenVPN over SSH will make your connection undiscernable from pure SSL or SSH connections, rendering DPI fingerprint identification powerless.

OpenVPN over SSL/SSH is included in every Premium subscription without any additional payment.

Use OpenVPN over SSL/SSH only when necessary: a slight performance hit is the price to pay. The performance hit is kept as low as possible because the "double-tunneling" is performed directly on our servers without additional hops.

NEW FEATURES

A new system for host resolution (not available for Windows) and dynamic VPN server choice is available. This will let you have OpenVPN configuration files which will try connections to various servers (according to your preferences) if one or more servers are unavailable.

A new connection port (2018) is now available on all Air VPN servers.

A new, alternative entry-IP address is now available on all Air VPN servers.

NEW CONFIGURATION GENERATOR FEATURES

- You can now select servers by countries, continents and planets (currently only one planet) or any combination between single servers and countries.

- You can now select an alternative entry-IP address. Each Air server has now an additional entry-IP address to help you bypass IP blocking.

- You can now choose a wide variety of compressing options: zip, 7zip, tar, tar & gzip, tar & bzip2.

- You can now choose not to compress the files and download them uncompressed one by one

NEW CONFIGURATION GENERATOR "ADVANCED MODE" FEATURES

- Total connection ports range available, including new port 2018 in addition to 53, 80, 443 and (for SSH) 22.

- Option to generate non-embedded configuration files, mandatory if you use network-manager as OpenVPN wrapper under Linux or just in case you use any wrapper that does not support embedded with certificates and keys OpenVPN configurations.

- Option to generate files and scripts for OpenVPN over SSL/SSH connections by clicking on "Advanced Mode"

- Option to select "Windows" or "Linux and others". Make sure you select the correct option according to your OS, because connections over SSL/SSH in Windows require different files than those required for Linux, *BSD and Unix-like / POSIX compliant systems such as Mac OSX.

- New options to generate configuration files that support proxy authentication for OpenVPN over a proxy connections, particularly useful if you're behind a corporate or college proxy which requires authentication

Instruction page for OpenVPN over SSL: https://airvpn.org/ssl

Instruction page for OpenVPN over SSH: https://airvpn.org/ssh

Please do not hesitate to contact us for any additional information.

Kind regards & Datalove

AirVPN admins

[pj 72]

Hello all,

just a quick note from an Air co-founder. As you may have seen OpenVPN over SSL and OpenVPN over SSH are not yet supported by our client. Since OpenVPN over SSL/SSH is fundamental for people living in human rights hostile countries, where both TOR and OpenVPN are disrupted, and for people who have no other option than using a bad ISP that throttles or disrupts OpenVPN connections, we have preferred to launch a fully usable and tested service as soon as the beta testing phase was over, even though a client to support the feature is not ready.

Kind regards,

pj

[azmo 14]

Thank you guys - making a great service even better (and more secure in certain scenarios). I have used quite a lot of VPN services before settling with air and am extremely satisfied. Keep up the great work.

[Guest amdou]

any of these new features will be available on ddwrt?

[azmo 14]

Really, really digging the new configuration generator functionality - removes a lot of clutter to just package the servers by country into one/several profile(s) and letting them randomly cycle. Too bad the iOS/Android OpenVPN apps do not support remote-random yet. But one can hope that might be implemented someday by the developers.

[Shippy 8]

"A new connection port (2018) is now available on all Air VPN servers."

that doesn't seem to be correct serpentis and cygni doesn't seem to accept connections on port 2018

while connecting i just get stuck at

Thu Mar 21 19:34:58 2013 MANAGEMENT: >STATE:1363890898,WAIT,,, when im trying to connect to ether serpentis or cygni, all other servers seem to work fine though

please check to see if you can confirm this issue

here is the complete connection log

Thu Mar 21 19:34:58 2013 OpenVPN 2.3.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Jan 8 2013

Thu Mar 21 19:34:58 2013 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25350

Thu Mar 21 19:34:58 2013 Need hold release from management interface, waiting...

Thu Mar 21 19:34:58 2013 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25350

Thu Mar 21 19:34:58 2013 MANAGEMENT: CMD 'state on'

Thu Mar 21 19:34:58 2013 MANAGEMENT: CMD 'log all on'

Thu Mar 21 19:34:58 2013 MANAGEMENT: CMD 'hold off'

Thu Mar 21 19:34:58 2013 MANAGEMENT: CMD 'hold release'

Thu Mar 21 19:34:58 2013 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Thu Mar 21 19:34:58 2013 Socket Buffers: R=[8192->8192] S=[8192->8192]

Thu Mar 21 19:34:58 2013 UDPv4 link local: [undef]

Thu Mar 21 19:34:58 2013 UDPv4 link remote: [AF_INET]178.248.30.131:2018

Thu Mar 21 19:34:58 2013 MANAGEMENT: >STATE:1363890898,WAIT,,,

[Staff 9772]

Really, really digging the new configuration generator functionality - removes a lot of clutter to just package the servers by country into one/several profile(s) and letting them randomly cycle. Too bad the iOS/Android OpenVPN apps do not support remote-random yet. But one can hope that might be implemented someday by the developers.

Hello!

We were looking for an alternative solution. Luckily two days ago OpenVPN Connect for Android was updated and now supports every necessary feature to use all the options of our service.

Kind regards

[azmo2 0]

Thanks for letting me know, that slipped under my radar. Just tested with Openvpn connect on android and it works great! Now to clean up all those old profiles... :-)

[azmo 14]

OpenVPN over SSL just saved me trying to establish a VPN Tunnel in a very restrictive network - glad you guys have that. Awesome work.

[drhany215 0]

now it may work in egypt ?

i am egyptian