Leaderboard

Hello! We're very glad to inform you that two new 1 Gbit/s full duplex servers located in Miami, Florida, are available: Gudja and Kang, The AirVPN client will show automatically the new servers; if you use any other OpenVPN or WireGuard client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637 and 47107 UDP for WireGuard. Gudja and Kang support OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor: https://airvpn.org/servers/Gudja/ https://airvpn.org/servers/Kang/ Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

1/ 10G servers. What is this 2009..? Nearly all your servers should be 10G by now. I can't get more than 400-600Mbit from the least loaded severs. 2/ The WireGuard files names are *horrible*. WireGuard .conf files should conform to linux interface naming specs as best practice is to name the tunnel interface after the .conf file name. air-{2 digit country code}-{2 or 3 digit region code}{number}.conf example: air-us-va4.conf DONE 3/ WireGuard conf download should just give me every server config as a zip file. I can pick which one later. These are all basic table stakes best practices that many competitors(Mullvad, iVPN, etd) have had for years. 4/ The port forwarding setup is pretty good. Really no complaints there. Overall I give AirVPN D+ or C- (Honestly if not for port forwarding there would be no reason at all to choose AirVPN over its competitors)

I have no opinion on the compression method. Just anything standard. tar.gz whatever... Another thing about WireGuard that I really should not have overlooked. Config gen, gens the private and public key. This is an enormous no no. Perhaps the number one violation of best practice. Either the customer should hand a pubkey to config gen or, as many due, local script does it without the privkey ever leaving your browser. I am also unsure what the deal with generating a preshared WireGuard key. I have never seen this done anywhere else. It seems like another divergence from best practice of never passing non-pubkeys. It's not really "a small number". There are *zero* in all of North America. No 10G servers in at least the largest US subsea cable points (NY, Seattle, and LA) is just not meeting par. Ashburn, VA (AWS East) would also be good as it's some ungodly percent of US web in one place. Also with gobs of express paths to subsea cable systems.

After WeVPN shut down for liquidity problems and OVPN was sold low priced to a big group, after PIA accumulated a stratospheric 35 M USD debt in less than 5 years and was saved only by the huge monetary availability of Crossrider/Kape, after the bankruptcy of additional small and independent VPN in the fresh past, it's reassuring to see that your infrastructure keeps expanding and you stay independent. Way to go! 😍

I use AirVPN for both work and personal. I use it directly on my routers (those that support Wireguard configs) and even use the Eddie client on both Mac and PC when I'm not on my protected router. From basic browsing, to even taking video conference meetings, AirVPN always delivers. If a connection isn't fast, there are so many others that I can connect to. Couldn't be happier.