Leaderboard

Hello! We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing. This release is mostly about maintenance, security fixes, and compatibility work. It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths. To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta. Eddie 2.26.0 beta is available for Windows, Linux, and macOS. We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI. We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more. They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first. We expect this beta to move to stable soon. Thank you for testing, and as always for your support. Main changelog: Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000) [change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup Kind regards & datalove AirVPN Staff

Hello! We're very glad to inform you that two new 10 Gbit/s full duplex servers located in Amsterdam, the Netherlands, are available: Dedalus and Felix. The AirVPN client will show automatically the new servers; if you use any other OpenVPN or WireGuard client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. They support OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor : https://airvpn.org/servers/Dedalus https://airvpn.org/servers/Felix Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff

Hi guys. I'm going to ask since I haven't heard anything about it in the changelog, do you plan to update Eddie to fully support macOS Silicon? I keep getting the warning in the image attached, I believe Apple will behave as usual and kinda kill whatever is not running on Silicon by the next OS release at the end of this year.

I'm running into the same issue and exception on Arch Linux. Downgrading Eddie back fixed it for me as well. I opened a support ticket yesterday, and the staff mentioned they've passed the ticket along to the Eddie developer.

Name: Multi ultimate Description: Ultimate Sweeper - Strictly cleans the Internet and protects your privacy! Blocks Ads, Affiliate, Tracking (+Referral), Metrics, Telemetry, Phishing, Malware, Scam, Free Hoster, Fake, Coins and other "Crap". License : MIT license A raw URL which our system can fetch from periodically in order to build the list: https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/ultimate.txt You can find more of his List [Even some that dont block so hard here: https://github.com/hagezi/dns-blocklists#ultimate

Hello! Yes, you used it on 2026-07-16 for your order 2be14cc8015b7b8149e71078d07f80c4dd142b1f. You can see it on your "Order" dashboard included on your AirVPN account "Client Area". Now, the order is still "On hold" by Stripe for some problem related to the credit card (you might like to check), so you have not really used the credit so far, as it is inside the order for the activation of a plan whose partial payment has not been approved. Please open a ticket, we'll have the Sales department manage this issue. Kind regards

Hello! We're very glad to announce the Eddie Android edition 4.1.0 preview is available UPDATE 2026-07-18 Eddie Android edition 4.1.0 beta 2 is available UPDATE 2026-07-24 Eddie Android edition 4.1.0 beta 3 is available Eddie Android edition 4.1.0 development focuses exclusively on improving stability by introducing a new custom AirVPN library that combines wg-go and amneziawg-go into a single runtime. This architectural change addresses a fundamental constraint of the Go runtime. Go was designed with the assumption that only one runtime instance exists per process and does not support multiple independent runtimes within the same process. Consequently, the runtime assumes exclusive ownership of global resources such as the heap, scheduler, stack management, and other core runtime components. The current production version had been linked against two separate Go-based libraries since support for Amnezia WireGuard was introduced. Despite the precautions implemented, on a small subset of devices, this configuration still resulted in crashes during approximately 1% to 5% of application launches. Analysis showed that all such crashes originated from Go runtime components, most notably the garbage collector. By consolidating both libraries into a single Go runtime, Eddie Android Edition 4.1.0 is expected to eliminate these crashes across all supported devices. Furthermore, Eddie Android edition adheres more strictly to AmneziaWG protocol version 2 real implementations. Specifically: The <c> tag for I parameters has been removed. Although documented for about a year, it was never implemented in the AmneziaWG protocol and any implementation intent was dropped during February 2026. Because, regrettably, it remained in the Amnezia documentation, Eddie 4.0.x still generated this parameter in certain profiles, resulting in the well-known interoperability issues with other clients. Eddie 4.1.0 eliminates this inconsistency. See: https://github.com/amnezia-vpn/amneziawg-go/issues/120 Added support for the <rc> and <rd> tags for I parameters. J parameters must now be ≥ 1. Previous Eddie / Amnezia releases accepted values ≥ 0, making it possible to explicitly configure zero junk packets, thereby allowing users to explicitly configure a logically degenerate state in which the junk-packet mechanism remained enabled while simultaneously instructing it to emit precisely zero junk packets. This is no longer supported; to disable junk packet generation, simply omit the J parameters. WireGuard compatibility now requires the canonical header mapping (Hₙ = n), as packet header identifiers are interpreted in a strict semantic order. Earlier AmneziaWG implementations, including that used by Eddie 4.0.x, internally canonicalized header mappings, allowing any non-repeating permutation of {1, 2, 3, 4} to preserve WireGuard compatibility. Eddie now enforces the canonical mapping whenever interoperability with standard WireGuard peers is required, including connections to AirVPN servers using the default Amnezia configuration. Eddie Android Edition 4.1.0 also includes updated libraries and dependencies. Please refer to the changelog below for additional details. Download link, checksum and changelog https://eddie.website/repository/Android/4.1.0-Beta3/EddieAndroid-4.1.0-beta-3.apk This is a build debug package and side load is mandatory. If you decide to test this new preview version and you had any previous Eddie installed version, please delete all app data and cache from Android settings, uninstall the older Eddie app, and finally side load the new apk. If you decide to test, please report at your convenience any bug and problem in this thread. If possible generate a report from the app in a matter of seconds: by tapping the paper plane icon on the Log view bar rightmost side you will generate a full system report which will include both log and logcat and have it sent to our servers. Then you just need to send us the link the app shows you (open a ticket if you prefer to do it in private). $ sha256sum EddieAndroid-4.1.0-beta-3.apk 1605f596c433ecf6ef81d5a6e97c1d5e4ae3408c358678ff9c808438c4acc179 EddieAndroid-4.1.0-beta-3.apk Changelog 4.1.0 beta 3 (VC 39) - Release date: 24 July 2026 by ProMIND Native Library [ProMIND] libeddiewg: moved to amneziawg-go v0.2.19 AmneziaCPSDatabase.java [ProMIND] loadData(): clear I* values [ProMIND] loadData(): Activity is now sent to the Logger [ProMIND] loadData(): check CPS items with validateCpsSignature() [ProMIND] validateCpsSignature(): new method. Formal check for AmneziaWG CPS signature EddieLogger.java [ProMIND] added methods escapeHtml(), unescapeHtml() and decodeEntity() [ProMIND] log(): convert logMessage to HTML entities with escapeHtml() LogActivity.java [ProMIND] createExportLog(): convert Logger's HTML escaped messages into plain text SettingsManager.java [ProMIND] SYSTEM_OPTION_VPN_RECONNECTION_RETRIES_DEFAULT is now set to 10 VPNProfileDatabase.java [ProMIND] checkWireGuardProfile(): removed CpsPattern. Cps signature check is now done with AmneziaCPSDatabase.validateCpsSignature() VPNService.java [ProMIND] handleConnectionError(): added overloading with VPNEvent type WireGuardClient.java [ProMIND] start(): in case AmneziaWG CPS signature is bad, throw Exception Changelog 4.1.0 beta 2 (VC 39) - Release date: 17 July 2026 by ProMIND Native Library [ProMIND] libeddiewg: moved to amneziawg-go v0.2.18 SettingsActivity.java [ProMIND] ameziaSettingsDialog(): Jc, Jmin and Jmax minimum value is now 1 (awg protocol 2.0) WireGuardClient.java [ProMIND] createCpsQuicInitialSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsQuic0RTTSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsDnsQuerySignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsJunkSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] generateRamdonAmneziaSettingsForWireguard(): Values for H1 H4 are now 1-4 respectively (awg protocol 2.0) [ProMIND] added createRandomAmneziaRTags() method Changelog 4.1.0 beta 1 (VC 39) - Release date: 14 July 2026 by ProMIND Native library [ProMIND] updated to OpenVPN-AirVPN 3.12 (20260714) [ProMIND] updated to OpenSSL version 3.6.3 [ProMIND] Updated to version 4.1.0, API 11 [ProMIND] Removed library libwg-go dependecy [ProMIND] Removed library libamneziawg-go dependency [ProMIND] Introduced library libeddiewg. Custom AirVPN Go library combining wg-go and amneziawg-go [ProMIND] api.h, api.cpp: added functions eddiewgLibraryName, eddiewgLibraryQualifiedName, eddiewgLibraryVersion and eddiewgLibraryReleaseDate, implementing the corresponding calls to libeddiewg, both C and JNI EddieApplication.java [ProMIND] onCreate(): call eddiewgLibraryQualifiedName and log output EddieLibrary.java [ProMIND] Added definitions for native library calls eddiewgLibraryName, eddiewgLibraryQualifiedName, eddiewgLibraryVersion and eddiewgLibraryReleaseDate Kind regards & datalove AirVPN Staff

I bumped into this because of Mac warning for end of support for Rosetta stuff. For anyone that also find this thread, I found the AirVPN Eddie Github code base mention they are working on a "UI 3.x" effort already underway (unreleased on public GitHub): a full native rewrite in C++, Objective-C/Cocoa on macOS see here: https://github.com/AirVPN/Eddie/blob/master/src/readme.coding.md#projects-ui-3x-under-development-not-released-yet-on-public-github So hopefully that development is going well and we will have a native silicon GUI in for Eddie sometime soon.

Hello! Thank you very much for your tests and report. We can reproduce similar problems and we are investigating. In the meantime, please try this: from Android application settings, delete Eddie data (both data and cache) uninstall Eddie re-install Eddie and report back The above procedure can mitigate one of the problems we detected thanks to your report, but we have found other problems (when using Eddie in Amnezia mode) and a thorough investigation is going on. We will keep you posted. Kind regards

Hello! We're very glad to inform you that Eddie Android edition 4.1.0 beta 2 is now available. Please refer to the original message for important updates and details. Kind regards

I installed that version (4.1.0 beta 1), and I am still having the same error, i.e., I open it and it immediately closes.

I've made a Linux shell script for batch-conversion of WireGuard .conf files making them AmneziaWG (awg) compatible: https://github.com/zimbabwe303/awg_conf_patch When patching it shuffles the H1..4 parameters; to re-shuffle you can just re-run it over the same files again. It also can shorten .conf file names generated with the AirVPN config generator to facilitate their usage with the 3rd-party smartphone WireGuard clients such as WG Tunnel (which uses AmneziaWG instead of the vanilla WireGuard).

@robertoohoho Hello! You have set either a Master Password or system key wallet password protection to encrypt Eddie's configuration file. If you can't remember the password, you have no choice but to delete Eddie's configuration file while Eddie is not running. At the next run Eddie will create a new configuration file with default settings and no password-led encryption. To delete Eddie's configuration file on macOS, from a terminal opened by the same account that installed Eddie: rm ~/.config/eddie/* Kind regards

Version 2.26.2 (Thu, 09 Jul 2026 11:19:55 +0000) [fix] [linux] Fix elevated startup on distros without systemctl (e.g. Devuan/sysvinit) [fix] [all] Emit disable-dco in generated OpenVPN config when startup options are incompatible with data channel offload [fix] [windows] Harden elevated named pipe against pipe-name squatting (FIRST_PIPE_INSTANCE, single instance) [change] [all] Misc fixes and general cleanup

Related:Also all the links inside, though the analysis I made is now 5 years old

Hello! Black list enabled: all traffic inside the VPN tunnel except the traffic of the black listed applications which goes outside the tunnel. White list enabled: all traffic outside the VPN tunnel except the traffic of the white listed applications which goes inside the tunnel. When you define a whitelist with a single app for per-app traffic splitting purposes, only that app traffic will be tunneled. The system process traffic will not be tunneled, and any other non-white listed app traffic will not be tunneled. So the behavior you observe seems just fine, but please feel free to elaborate if we misunderstood. Kind regards

@moejoe Hello! Configuring DNS blocks through the app is currently not possible, we're sorry, but you can have different profiles by using the option to link specific DNS block settings to each key ("device"). Then you can easily switch between devices to switch DNS blocks, although a re-connection is required for each switch. Kind regards

Eddie-ui 2.26.1 works well now here. thanks

For now, we ask you to ignore that message. It is caused by the fact that the current macOS UI is written in Xamarin, which does not support arm64 compilation. One of our goals is to release a new modern UI, natively compiled for arm64, before this restriction becomes a problem.

Version 2.26.1 (Sat, 04 Jul 2026 17:30:39 +0000) [fix] [linux] Fix nftables netlock ipv4 mangle OUTPUT chain priority typo [change] [linux] Store network lock rule backups in root-only state directory [fix] [all] Fix TOCTOU race [fix] [linux] Sanitize VPN DNS addresses written to /etc/resolv.conf [change] [all] Misc fixes and general cleanup [fix] [linux] Fixed connection on Arch (no SysV service command) [change] [all] Improved security of how the VPN configuration is handled by the privileged helper [fix] [all] Block OpenVPN directives that write files as root

This version will not connect on Arch Linux and tries multiple times exceeding the account connection limit. There is a notification "Exception: Executable 'service' not found" . I reverted to 2.25.1 for now. Using either the Arch package from the Eddie website or the eddie-ui-git AUR package is the same.

surveillancewatch.io Very cool open and interactive database of the surveillance and spyware industry: who builds the tools, who funds them, and how the companies, subsidiaries, and investors all connect. Looks like it was built by privacy advocates, several of which were personally harmed by the tools it tracks. That's reason enough for it to belong here. Their data is open too. Kagi search already pulls the API to flag surveillance linked companies right in search results. Exactly the kind of resource you'd want to read from behind Air anyway. Clear fit for the forum, and maybe something Air would consider supporting.

@theradgrad Hello! The fact that the host is sending a RST strongly suggests the packet is making it through PF and reaching the TCP stack, where no matching listening socket exists for that specific destination IP and port. The port tester does not test UDP, only TCP. Please ascertain whether the listening program is really listening to all interfaces with: netstat -an -f inet Look specifically for something like 0.0.0.0:YYYYY or VPN_IP:YYYYY If instead it shows 127.0.0.1:YYYYY or LAN_IP:YYYYY then the kernel will immediately send RSTs for packets addressed to the VPN IP. Also, please send the output of the following commands: sudo sockstat -4 -l sudo netstat -rn Finally, a simultaneous packet capture while reproducing the issue: sudo tcpdump -ni tun0 tcp port YYYYY Kind regards

Same question. There's about a year until macOS 28, Rosetta 2 won't be present in that version.

@Tech Jedi Alex Hello! Just to point out that age verification should have nothing to do with identity check. Various countries, the European Commission and some Italian bodies are studying methods of age verification that don't force the citizen to show his/her ID card at any step, and surely not to private entities they don't even know. If the UK wants to implement age verification through identity verification we don't know, but it would be a giant mistake that would allow potentially shady entities to steal and build highly reliable ID databases with huge monetary value on the black market. The Discord Hack catastrophe is a useful reminder https://www.404media.co/the-discord-hack-is-every-users-worst-nightmare/ Then of course you can debate ad nauseam about whether it is right or wrong that a person younger than 21, 18 or 16 should be forbidden to connect to a virtual private network, Tor, proxy, etc. For the readers, our position is close to EFF position, see here: https://www.eff.org/issues/age-verification We were with EDRi and EFF as usual, how can you not know?! Check our mission and endorsement page. The same must be said of some other VPNs to be honest. Kind regards

Actually, I find this to be a reasonable thing, but pretty much all political endeavors came quite a few decades too late for that party. Now, every implementation of such user verification will have so many holes in it, you'd wonder whether it's got enough substance to even be called swiss cheese. Probably more like some bits of cheese dangling in the air. At least as long as single countries still try to do crap themselves while the internet as a whole simply continues defying political borders. The principle is very easy: You do have a government-provided ID, a proof of your citizenship, you're required to have offline, so the idea that the online world is somehow excluded from that requirement defies simple logic. It's not a different world, it's an extension of the offline world. The fact that we didn't have such ID all this time simply shows that technology got politics beat in speed by orders of magnitude. And still can't catch up, as UK and other jurisdictions are so kindly demonstating. When something started as a research network, an implementation of some sort of ID is the farthest thing from being the next feature to be implemented – doesn't help the tech, after all – and by the time that research network reached a certain size it was already too late to implement anything like that. Those who grew up with the internet will consequently see the absence of ID as the norm there. Authorities don't have a choice but to cling to the technical data implemented by those engineers for technical reasons and declare it PII, personally identifiable information, so that their offline authority can be somewhat applied in the extention that is the online world.. but this is so imperfect that by simply changing said PII, especially the IP address, you can evade responsibility for your actions. It's why people use VPNs and proxies – never met a person in my life who enjoyed being fined. Something that is quite difficult to do offline, though. You've been responsible for your actions ever since you can remember, so why is it supposed to be different online? Remember, it's not another world, it's an extension of the world you actually live in. Offline rules should apply. So any and all attempts to apply offline policy to the wild west that is the internet today will elicit, of course, reactions like yours. Which are understandable, you grew up with that standard. You've never known anything else. If we really think about it, the internet is the centerpiece of early 21st century society – everything revolves around it. It drastically impacts the offline world. And to prevent that online wild west to swap over to the offline world, the offline world must take measures to reign in its extension. It is only natural. Of course, this requires a proper execution… So, nothing dystopian with online age verification when we've been having this for maybe hundreds of years offline. It's high time, really. Unless you think offline age verification (as in, owning a citizen ID) is also dystopian… It's exactly why UK's endeavor will not show the desired results. A UK law won't force an Italian website to verify the visitor's age, even if said website is a VPN provider. It's outside their jurisdiction. As long as single jurisdictions do things in a single fashion, the internet will remain as it was. And AirVPN will remain as it was. There'd be a higher impact if UK would suggest such a law to the European Commi..ssion.. oh. Guess, that ship has sailed. ¯\_(ツ)_/¯

Hello! We're very glad to inform you that AirVPN Suite version 2.1.0 is now available for x86-64 and ARM based Linux systems. Our deepest gratitude is extended to the members of the outstanding testing community, whose generous support and discerning feedback have proved invaluable in identifying and resolving numerous issues. The 2.1.0 Suite includes: Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN and WireGuard servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the system bootstrap Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN and WireGuard servers Hummingbird: lightweight and standalone binary for generic OpenVPN and WireGuard server connections Cuckoo: traffic split manager, granting full access and functionality to AirVPN's traffic split infrastructure airsu: a "run and forget" tool to automatically set and enable the user environment for the X.Org or Wayland based ecosystem without any user input WHAT'S NEW NEW: extensive rewrite and improvement of network availability and default gateway detection NEW: option to tunnel or not IPv4 traffic over an IPv6 tunnel with air4to6 client option and airvpn4to6 run control directive (check the updated user's manual for details) NEW: cuckoo does not require libxml2 anymore updated libraries bug fix: Bluetit doesn't crash anymore with very large routing tables bug fix: IPv6 addresses parsing and management don't fail anymore in specific circumstances bug fix: airsu bash script doesn't fail anymore when the shell of the user starting it is not bash AirVPN Suite 2.1.0 is free and open source software released under GPLv3. Source code is available on GitLab: https://gitlab.com/AirVPN/AirVPN-Suite AirVPN Suite 2.1.0 is available for x86-64, AArch64 (ARM 64 bit) and armv7l (ARM 32 bit) architectures. Legacy versions are also available. https://airvpn.org/linux/suite/ AirVPN Suite resources, links and forum: https://airvpn.org/forums/topic/79336-airvpn-suite-resources/ Kind regards & datalove AirVPN Staff

Hi, I have noticed for quite a few weeks now the Estonia server is under very high load for a lot of the time. It would be great if the bandwidth could be improved or if an extra server could be added. Thanks.

Hello. Please add new 10G Montreal server(s); the current ones are all 1G and are always fully utilized. It is hard to get good speeds from East Canada. Toronto and NY are good but not perfect. Thank you so much.

well i've only done it twice but the second ip keeps on downloading like normal. so they're still getting the file. if i noticed it kicked both i wouldn't do it any more because i don't want to be a d*ck, but at the same time like i said i only have a limited amount of upload slots, so when things are busy, it's just what i did. if he was the only one downloading or i'm not monitoring it then i guess he just gets his files twice as fast as everyone else so be it. no big deal on that.

Any idea when a full M-Series Arm client will be released for Mac?

Hello! We're very glad to inform you that Eddie Android edition 4.0.1 is now available. This is a patch release to fix a bug affecting AmneziaWG and WireGuard profile generation by Eddie. When generating a profile for WireGuard or AmneziaWG, Eddie 4.0.0 omits the MTU option and the IPv6 address space (even when it's necessary) in AllowedIPs option arguments. We strongly recommend that you upgrade immediately. Eddie Android edition 4.0.1 is available on our web site and the Google Play Store. Any other feature is described by the 4.0.0 version announcement, available here: https://airvpn.org/forums/topic/79743-eddie-android-edition-400-available/ Kind regards & datalove AirVPN Staff

Hello! We do agree and we are planning to implement on our software per app traffic splitting on Windows too. Currently you can enjoy per app traffic splitting on Linux (AirVPN Suite) and Android (Eddie Android edition). If the machine you use for Steam is based on Linux you can already have per app traffic splitting with our software. If you run Windows, in the meantime you can consider WireSock, which offers traffic splitting and reverse traffic splitting (on an application basis) and is fully compatible with our WireGuard servers. The Configuration Generator will generate the profiles you wish. Kind regards

If you have any friends inside the US with a residential IP willing to help out, you can perform a reverse VPN connection as follows: 1. On your AirVPN account, forward any UDP Port from the Client Area>Ports(Let's just call it x for the sake of this guide). 2.On your machine, set up a wireguard server with the following parameters: [Interface] PrivateKey=(Insert your own wg privatekey here) ListenPort=x Address=192.168.181.2/24 [Peers] PublicKey=(Insert your friend's publicKey here) AllowedIPs=192.168.181.1 PresharedKey=(Insert presharedkey here) 3.Give your friend a wireguard conf like this: [Interface] PrivateKey=(Insert your friend's wg privatekey here) Address=192.168.181.1/24 [Peers] PublicKey=(Insert your own publicKey here) Endpoint= (Insert Your AirVPN Exit IP here):x AllowedIPs=192.168.181.2 PresharedKey=(Insert presharedkey here) PersistentKeepalive=10 4. Get your friend to install shadowsocks server on their machine. Their config file should look something like this: { "server": "192.168.181.1", "server_port": 8388, "password": "(Insert your own password here)", "method": "chacha20-ietf-poly1305" } 5.Get them to start ssserver with the config.json I specified 6. Install shadowsocks on your own machine, and configure it as follows: { "server": "192.168.181.1", "server_port": 8388, "password": "(Insert same password you gave your friend here)", "method" : "chacha20-ietf-poly1305", "local_address": "127.0.0.1", "local_port": 9500 } Run sslocal on your side 7. If you haven't already, install mozilla firefox or one of its many forks on your machine. 8.In your Firefox, go to Settings>General>Proxy Settings>Configure proxy, and set up as follows: 9. Go to ipleak.net on your firefox to verify that you are using your friend's residential IP. 10. You may now connect to handshake AI in Firefox

Honestly, if I was in your position, I would assume you have a place / friends at home in the USA. I would set up your VPN server there and remote in to that connection, rather than going through something like AirVPN. Thousands of people are using these sorts of services and it will be a constant game of whack a mole. Having your own, private, connection will save you so many headaches. I personally have a VPN Server which is "home" to do anything local which I need, while travelling. AirVPN is used for when I do not want to be "home".

Figured it out. Configuration must have changed at some point and had to set env variable of “VPN_AUTO_PORT_FORWARD” from false or true, to the port number itself in the docker compose file. This is based on the documentation here https://hotio.dev/containers/qbittorrent/#wireguard. Port is now recognized as open. Silly lil mistake on my end for not reading further into the docs

Please add more selectable genders in account setting, for example, I need to choose "non-binary" or at least a gender alternative than male/female, but there is no such a selection. The only one I see is "not telling" (or blank).

This logic isn't sound. 'Not telling' is not the same as identifying as non-binary. As unimportant as this might be to you and I, for some folks including the OP, this is an important differentiation and your statement risks trivialising what is an important data point for some.

I have always supported Windscribe but this time I can't. Pretty sure that if Windscribe was in the EU it would have been heavily fined for deceptive advertising at the very least. 10 TB/month is not unlimited traffic in legal terms and in common language and if you read the links you will see that it's not only 10 TB/month the amount triggering a ban, but also 1-2 TB in 3 days, which does not infringe the 10 TB/month limit by itself. Seems clear to me that Windscribe is in serious confusion on this argument. In one of the official statements linked by OP, in order to stubbornly maintain “unlimited traffic” plain lie in their deceptive advertising, they are willing to grasp at straws, by writing that they will update their ToS with vagueness: It's the first time I read that a contract "has to be vague". Terms of Service are a legal contract. A contract must not and can not impose vague terms, on pain of its nullity and vulnerability to legal challenges. Huge embarrassment that they could have avoided by turning on their brain and studying a little more. What a disappointment, Windscribe.

Hello! Multi-hopping is a client side feature. And yes, in 2012 a special "OpenVPN over Tor" mode was implemented in the Eddie AirVPN software for Desktop systems. The main "alien entity" used to multi-hop in a way that really enhances the anonymity layer strength is the Tor network as usual, as it provides a very balanced solution between usability, reliability and effectiveness. In the near future we could implement a double-hop support inside the same AirVPN network on the AirVPN Suite for Linux. It's not the most effective method to enhance the anonymity layer (because both hops belong to AirVPN) but it could be appreciated as a small additional comfort according to the feedback we have. DAITA is currently overkill because in real life AIs fail miserably. The high success rates comes out only when you have a limited sample of very few services, such as 10 pre-agreed web sites, and the target browses only those 10 with no other protocol complications, quite an unrealistic assumption. However, AI abilities can become relevant in the future to harm privacy and understand, with no needs to break encryption, which web sites a user visits, thus we don't rule out that we will implement specific techniques (especially on WireGuard) in due time. Kind regards

I have been using AirVPN for years for online gaming. But I choose my server closest to the game megaservers

Seconded. I'm using the pro++ https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/pro.plus.txt as it seems a better compromise for my usage.