Leaderboard

Hello all, I arranged a review for AirVPN and posted in Reddit: https://www.reddit.com/r/AirVPN/comments/13fhoa0/my_very_personal_airvpn_review/ Initially I wanted it to be in r/vpnreviews and I posted there, only to get immediately censored. I leave to you and your intelligence any consideration on the mentioned censorship. MODIFIED 2023 MAY 15: AFTER ALL THIS COMMOTION MODERATORS LIFTED CENSORSHIP RIGHT NOW AND THE REVIEW APPEARS ON THAT SUBREDDIT TOO ✌️ The problems related to fake reviews and reviews censorship against "independent" VPN companies have been elaborated a lot here: https://airvpn.org/forums/topic/56239-full-of-lies-vpn-comparison-table/ Any feedback on the review is appreciated.

After all this commotion Reddit moderators lifted censorship against my review in /r/vpnreviews so the review is visible in that subreddit too! "Victory" against censorship. 😋 ✌️

I am capable of maxing out my line, 250/40 Mbit/s, if I really need it, with carefully selected servers, which for me are currently Kitalpha and Mesarthim, using OpenVPN. In the near future, a Gbit fiber line will be at my disposal, so some more tests and optimizations will be done. I'll try to remember posting about it here afterwards.

I don't know anything significant about OpenWRT, but for dd-wrt, what you are amusingly calling OpenDDT (look up DDT sometime if you don't know that awful chemical), start your education at dd-wrt.com. You cover lots of ground, so I will also, but mostly by giving you pointers on where to look and what to look for in the dd-wrt documentation world. It's a lot of stuff to read and digest, and you can't do this all at once. You can get a WRT3200ACM up, then on a different day, get ether OpenVPN or wireguard going on it. (Wireguard is easier and faster.) First find the router database to look for your Ubiquiti router. Do NOT take its advice on what build to flash, as that info is not updated. All details in the dd-wrt world beyond "Is it supported?" you need to get from the dd-wrt forum, because other "documentation" is neither updated regularly nor timestamped, so if you read it, you'll mostly see obsolete advice. The WRT3200ACM is well supported, and to learn about dd-wrt on that router, find the dd-wrt forum and, within it, the Marvell forum. (The WRT3200ACM has Marvell chipsets inside.) Flashing it with dd-wrt is pretty simple. Look in the Sticky Posts at the top of the Marvell forum for a general orientation thread. Keep an eye out for a "Cliff Notes" post. It is easy enough to have one wifi SSID that routes its traffic through a VPN and another that bypasses VPNs altogether. The topic of extra SSIDs is that of Virtual Access Points (VAPs). The technique of routing things differently for them is called Policy Based Routing (PBR), and IIRC there is a PBR Sticky at the top of the Advanced Networking forum. The Advanced Networking stickies also include a guide for OpenVPN in dd-wrt and a guide for wireguard in dd-wrt. Once you are using PBR, it's possible to set up to have multiple VPN connections simultaneously, but switching servers on the fly, while possible, is more of an advanced topic for someone with coding (bash shell scripting) skills and greater familiarity with the workings of dd-wrt. Better to connect your main computer to the no-VPN ssid and just run Eddie on that computer. Re wired/wireless, it's possible but a bit tricky to set things up to treat the different ethernet ports on the router differently, like having some go through a VPN and others not. The topic is Virtual LANs (VLANs). There's a new GUI-based approach to VLANs just coming online in the most recent dd-wrt builds, but it may not be ready on the WRT3200ACM yet. The older "swconfig" method still works great, but it's again a bit of an advanced topic. Again though, this is more of a new hobby than a new project. My dd-wrt config (on the predecessor to the WRT3200ACM) evolved over about three years, with a new aspect being added every few months as I become interested or happened to think of a way to do it. I have an OpenVPN client and three wireguard clients running, use six SSIDs with PBR, use VLANs to segment the wired part of my network, and even change OpenVPN servers on the fly using my phone. So all is possible with time and patience and bullheadedness. (I have lots of the latter!) I started with dd-wrt shortly after retirement, so exploring/enhancing things in that world became a sort of retirement project for me. Not everyone will have that kind of time, but a basic setup with VPN and PBR is not a huge effort if done a careful step at a time. AirVPN works really well with dd-wrt, both via OpenVPN and via wireguard. Finally, do ignore the naysayers in the dd-wrt forum who are down on the WRT3200ACM and its Linksys relatives. Their wifi drivers are not open source, and that has meant headaches in the past. There was a year or so of unreliable wifi until intrepid volunteers figured out the patches needed, but things are great these days. Good luck to you!

No no, I mean:

A refreshed guide is available here: Prerequisite Install DD-WRT on router go to https://www.dd-wrt.com/ Select "router database", then enter you router model number. Follow the instructions as described and install the DD-WRT *vpn*.bin. Steps Create configuration files from our Config Generator. Select the server location and port you want to connect to, tick "Advanced Mode", tick "Separate certs/keys from .ovpn file", then generate and download the configuration files. Under the router "setup tab" locate your router's local IP address. Go to Specs page of AirVPN website and locate Air VPN DNS for the server you want to connect to, and enter it under Static DNS 1. Navigate to the "Services" tab then select the "VPN" tab. Select "Enable" under OpenVPN Client. Set the Server IP/Name and Port to the Air VPN server you selected (see here to determine VPN server entry-IP address: https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses ). Set Tunnel Device to "TUN" Set Tunnel Protocol to either "UDP" or "TCP" according to the Air VPN server you selected Set Encryption Cipher to " AES-256" Set Hash Algorithm to "SHA1" Put a check mark beside "nsCertType verification" Select "Enable" Advanced Options Select "Enable" LZO Compression Select "Enable" NAT Set Local IP Address to the router's local IP address found earlier. Set TLS Cipher to "TLS-DHE-RSA-WITH-AES-256-GCM-SHA384" or "None" Unzip the AirVPN configuration file you downloaded. Using your favorite text editor - Open up "ca.crt" and copy all of the contents into the CA Cert window. - Open up "user.crt" and copy only and including "----- BEGIN CERTIFICATE----- to the end of ----- END CERTIFICATE----- " into Public Client Cert. - Open up "user.key" and copy all of the contents into Private Client Key. - Open up "ta.key" and copy all of the contents into TLS Auth Key Select "Save" at the bottom of the page then "Apply Setting" Select "Save" at the bottom of the page then "Apply Setting" DD-WRT firewall rules Go to "Administration" tab then select the "Commands" tab. Copy the following firewall rules into the command window (IMPORTANT: check your tun interface name and set it accordingly - some firmware builds will have tun1 and not tun0) iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -I INPUT -i tun0 -j REJECT iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE Click on "Save Firewall" Verification of VPN setup Go to https://airvpn.org and at the bottom of the screen it should show you are connected. Trouble Shooting If you're not shown as connected wait a minute then refresh the web (it could take a minute to make a connection with the VPN and log in). Go to DD-WRT configuration and navigate to the "Services" tab, then "VPN" tab. Once there go to the bottom of the page and click on "Apply Settings". Once completed wait a minute and verify your connection again. If you're still not connected verify the server status you're trying to connect to. Go to Air VPN website and log in, then navigate to "Support" and select "Server Status". If server is down reconfigure DD-WRT to connect to another server. If you are still have difficulties connecting, view the OpenVPN log file in DD-WRT. You can find the log by going to DD-WRT configuration and navigating to the "Status" tab and selecting "OpenVpn". Hopefully the log will give you some indication of why you can not connect. Still having issues Contact Air VPN support, they are quick at responding back to you and very knowledgeable. Another option is to ask on the Air VPN forums.