Leaderboard

Well… after a couple of days digging deeper into the source code, I was able to make hummingbird 1.1.2 compile and run in a Docker container with working network lock. Clone my fork from https://gitlab.com/fschaeckermann/hummingbird.git and read instructions in README.md I made it compile under Alpine Linux as well, but iptables seems to misbehave in some breaking way. Therefore the Alpine image is not really usable yet. @whiteowl3: I shamelessly copied your work and incorporated it in the Dockerfile - tini and entrypoint.sh and healthcheck.sh including. The client is actually issuing modprobe and iptables commands to create the network lock (using iptables-legacy, maybe that was the reason you couldn’t see any rules?). I haven’t tested with nftables or pf. That might even work under alpine… Also, if ipv6 gets in the picture, things go haywire! But ipv6 and Docker is an altogether different can of worms…. Have fun! And post your results here if you like.

That is a difficult thing to do because it may not be their fault entirely. If they want to use OpenVPN bundled with Synology because it's what they can reasonably do with their skillset, they are locked to OpenVPN 2.3, believe it or not. Synology doesn't seem to be updating much on their Linux-based NAS boxes.

These results are from the Speedtest.net CLI. You can find installation instructions here: https://www.speedtest.net/apps/cli. I use the Debian package, which is available here: https://packagecloud.io/ookla/speedtest-cli

https://www.speedtest.net/apps/cli

Looks like speedtest run from LInux CLI: https://www.speedtest.net/apps/cli FWIW here's what I'm getting with 4 cores dedicated to my VPN VM. I've seen higher numbers with different servers. Server: Cox - Wichita - Wichita, KS (id = 16623) ISP: Quintex Alliance Consulting Latency: 25.00 ms (0.32 ms jitter) Download: 635.78 Mbps (data used: 698.7 MB ) Upload: 570.65 Mbps (data used: 577.7 MB ) Packet Loss: 0.0%

Hover over that little pictogram with your mouse, will you? Default = "The air to breathe the real Internet" Customized = "The air to breathe the filtered Internet" I do admit that at the very first I asked myself what it exactly means, too, but it quickly occured to me that it's used in the same way as other boolean values on the website, on IPLeak, in Eddie. Its meaning is therefore unambiguous.

If the above solution does not work try checking ALL of your Windows adapters in Windows Network and Internet. Jog the adapter settings (Disable/Enable) and make make sure they are enabled, especially the "Wintun Userspace Tunnel" adapter that (on mine) shows the red x as "Unplugged" but when right clicked is still enabled.....strange. This has solved my occasional connection issues with the Eddie Client set to : "Inside Tunnel if supported, otherwise blocked" (Layer IPv6 in networking). Hope this helps some folks.