Leaderboard
Popular Content
Showing content with the highest reputation since 10/01/26 in all areas
-
7 points
Spooky 2026 Halloween Deal
dogger123 and 6 others reacted to Staff for a post in a topic
Hello! We reluctantly have to announce gloomy news to you all: Spooky Halloween Deals are now available in AirVPN... Save up to 74% on AirVPN longer plans (*) (*) When compared to 1 month plan price Deal will expire on 2026-11-03 UTC Check all plans and discounts here: https://airvpn.org/plans If you're already our customer and you wish to jump aboard for a longer period with this un-boo-lievable deal, any additional plan will be added on top of already existing subscriptions and you will not lose any day. Every plan gives you all the features that made AirVPN a nightmare for snoopers and a scary service for competitors. Just check this frighteningly long list of terrific features if you dare: a clear mission without compromises https://airvpn.org/mission exclusive and comfortable remote inbound port forwarding system flexible, opt-in block lists against malware and other hostile entities. Pick predefined lists, add exceptions or additional blocks, define your own lists, or just use our totally neutral DNS by default improved API functions to let you control and configure VPN features and account settings WireGuard integration AmneziaWG support in Eddie Android edition, with traffic mimicry of real websites (QUIC) to defeat DPI-based VPN blocking. This year our traffic wears a costume too: with AmneziaWG on Eddie Android, your connection goes trick-or-treating dressed up as an ordinary website, and DPI won't recognise who's behind the mask. Security-hardened Eddie Desktop edition Strong infrastructure growth: about 25% more total capacity in one year. Our servers grew by a ghastly 25% this year: more bandwidth to haunt the Internet at full speed. IPv6 support, including IPv6 over IPv4 and IPv4 over IPv6 refined load balancing to squeeze every last bit per second from VPN servers free and open source software for Android, Linux, Mac and Windows offering advanced features easy "Configuration Generator" web interface for access through third party software guaranteed minimum bandwidth allocation GDPR compliance and very high privacy protection standards no log and/or inspection of clients' traffic effective traffic leaks prevention by AirVPN software Tor support via AirVPN software on Linux, Mac and Windows various cryptocurrencies accepted without any intermediary no obligation to use our free and open source software to enter AirVPN infrastructure. Interoperability is an AirVPN priority. perfectly clear and easy to read Privacy Notice and Terms https://airvpn.org/privacy No tricks, only treats! We witch you a spooktacular Halloween AirVPN Staff -
6 points
[LIFTED] Temporary restrictions on the forum and support tickets: critical PHP vulnerabilities
spinmaster and 5 others reacted to Staff for a post in a topic
Update: restrictions lifted Hello! The PHP project released the fixed versions earlier than scheduled, and we have installed them on every system of our infrastructure. The temporary restrictions described above have now been removed: The forum is writable again: you can post new topics and replies, edit posts, upload attachments,date your profile. The support ticket area works normally: you can open new tickets and reply to existing ones from the website. Password recovery works again. The customer API (https://airvpn.org/api/) accepts multipart/form-data requests again. If you wrote to support@airvpn.org in the meantime, there is no need to open a ticket as well: we will answer you there. If any of the functions above still fails for you, please clear your browser cache and try again; if the problem persists, open a ticket or write to support@airvpn.org. VPN connections, Eddie and the AirVPN Suite were not affected at any time. Thank you for your patience and understanding. AirVPN Staff -
5 points
New 10 Gbit/s server available (US)
Andrew109 and 4 others reacted to Staff for a post in a topic
Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in New York City, USA, is available: Hiisi. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Hiisi supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Hiisi Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff Photo by John Dillenbeck (Public Domain) -
2 points
ANSWERED How Do I Stop This DNS Request Leak?
plausible0875 and one other reacted to Staff for a post in a topic
@after_lunch Hello! Thank you for the complete report, it shows what is happening. Your Wi-Fi adapter gets its DNS servers from your router: 194.168.4.100 and 194.168.8.100, which are your ISP's resolvers. Eddie 2.26.2 sets the AirVPN DNS (10.128.0.1) only on its own adapter, and in some circumstances its DNS leak protection fails to block queries sent to the resolvers of the other adapters. This is a known bug of 2.26.2, and your report matches it: Network Lock is active and the log says "DNS leak protection with packet filtering enabled", yet Windows still reaches your ISP's resolvers. You can solve it in one of two ways: 1. Stay on 2.26.2 and apply a workaround: open Eddie's Preferences > DNS, enable "Force all network interfaces for DNS", save, then disconnect and reconnect. OR 2. Upgrade to Eddie 2.27.2 beta, which contains the fix: https://airvpn.org/forums/topic/81340-eddie-desktop-edition-227-beta-released/ Then repeat the test on ipleak.net while connected: only AirVPN DNS servers should be listed. If your ISP's resolvers still appear after the workaround, please switch to 2.27.2, and if they persist there too, post a new system report. About hiding long text: the forum does not convert spoiler tags typed by hand. Use the Spoiler button in the editor toolbar and paste the text inside the box that appears, or simply attach the report as a .txt file. Kind regards -
2 pointsBeen a happy member for about 5 years! Thank you for reliable and private service! You guys are a godsend!!! 😁
-
2 pointsHello! A quick follow-up on the WireGuard session counter issue mentioned above. The cause has been identified and fixed, and the fix is currently being rolled out across our infrastructure. Servers that have already received the update are back to reporting accurate figures, and the remaining ones will follow shortly, so the connection counts shown in the server monitor and in the related statistics will match reality again in the very near future. As previously stated, actual connections and the service itself have never been affected, only the displayed counter was. Kind regards
-
2 pointsThank you all for the valuable feedback. Following this thread, we have identified a bug, most likely introduced on October 7th-8th, which causes the WireGuard session counter on some servers to grow incorrectly over time. As a result, the number of connections currently shown in the server monitor is higher than the real one. The actual connections, and the service itself, are not affected. We are working on a fix and will update this thread as soon as it is in place. On a side note, this also means that our no-overselling commitment is honoured by an even wider margin than the one computed by @fsy Kind regards
-
2 points
ANSWERED SOLVED - 10.4.0.1 DNS issue with WireGuard / OPNsense / NL servers
plausible0875 and one other reacted to TheHellSite for a post in a topic
Hi, wow, thank you very much for the incredibly fast and detailed response! CASE CLOSED. That clears things up completely. I will use 10.128.0.1 as the DNS server and DNAT target for my WireGuard setup from now on. Also, thank you for acknowledging that the current Specs page is somewhat misleading regarding 10.4.0.1 and WireGuard. Looking forward to the updated documentation. I also appreciate the additional explanation regarding DNS leak prevention and making sure DNS traffic cannot fall back to WAN. My OPNsense rules are already designed around that principle. Overall very happy with the support and I'll happily renew for another three years when the Cyber Deal becomes available again. 🙂 Cheers! -
2 points
New 10 Gbit/s server available (SE)
Nikolozik and one other reacted to Staff for a post in a topic
Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in Stockholm, Sweden, is available: Formosa. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Formosa supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Formosa Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff -
2 points
I beg for app split-tunneling on Eddie
ZarkBit and one other reacted to greif for a post in a topic
I have been facing a predicament for months, which is that Steam thinks i'm a bot and doesn't let me play any multiplayer games in.. multiplayer, and I can't turn my VPN off to use all 5 ports on it to host numerous servers. The problem is, there isn't a way to IP or domain whitelist Steam, since I don't know any of the ip's it uses to connect, and they change alot. This is where app-based tunneling would shine though, and here is why 1. App based tunelling would most likely save you guys alot of bandwidth, now people can tell the VPN to send web browser connections through their actual internet, and then you won't have alot of traffic taken up by YouTube streams 2. This defeats the need to switch to other clients, which is clunky and complicated. 3. It lets you do everything in one app (Eddie), which is extremely convenient and simple for newcomers to use, probably bringing more subscribers to the VPN too since split-tunneling is a useful feature 4. It straight up lets you split tunnel some stuff in the first place, such as Steam i've already mentioned, which uses a variety of ip's and domains i don't know, and i'm not about to spend a few hours in wireshark getting all the ip's/domains and adding them. So please, 4 good reasons on why app split-tunneling should be added to Eddie. P.S. another thing I noticed was that the split-tunneling already in Eddie didn't seem to work until I reconnected the VPN, is this a limitation, a bug, or just something that isn't added? - Thanks, a pleading CS2 player and server hoster -
1 pointHalloween renewal - Grazie, Eduardo, from New World.
-
1 point
how to set a fixed local port for OpenVPN and WireGuard?
schwede reacted to Tech Jedi Alex for a post in a topic
Eddie silently ignores all changes to the base directives if in Append mode, and uses Base + Custom in Custom mode, so remove nobind from there and add your custom directives on the left, then set it to Custom mode. Little tip: To check the OpenVPN config Eddie would use to connect to a server, in the Servers/Countries tab right click on an entry and select More. -
1 point
eMudhra CA compromise
robertblue reacted to Staff for a post in a topic
Hello! AirVPN is not affected. All our websites and web services (airvpn.org and our other domains) use Let's Encrypt certificates, which chain to ISRG Root X1. No eMudhra root or intermediate certificate is part of any of our certificate chains. The VPN connections do not depend on public certificate authorities at all: OpenVPN: your client authenticates our servers only against AirVPN's own private CA, which is included in your configuration file. A certificate issued by any public CA, eMudhra included, is rejected. WireGuard: there are no certificates. The server is authenticated by its public key, which is also in your configuration file. Eddie: it communicates with our infrastructure through a channel encrypted and authenticated with an RSA key built into Eddie itself, so it does not rely on the certificate store of your system. Since the tunnel is authenticated this way, someone on your local network or at your ISP cannot use a forged public certificate to get between you and our VPN servers. The remaining risk is the general one that applies to every website: a person who holds one of the compromised intermediate keys could forge a certificate for any domain, and a browser or operating system that has not received the block could accept it. Mozilla, Google, Apple and Microsoft have already revoked and blocked the affected certificates, thus upgrade asap. Kind regards -
1 pointI had to reinstall Eddie client for several times and setting it up is always a quest for the whole evening. Had lost my evenings with 2.26.2 - 2.27.1 version update and ovpn-dco failure on win 10, thx experimental version managed to be here again. So many users have ISP blocks and it's always a great problem to recieve server list, for me I had to search for some free VPN, download, connect and retrieve airvpn server list, though Eddie app loggs in without any problems even with isp blocks. Imagine how you can simplify life of common users if app would have some servers in memory or kind of random test servers to connect to get info.
-
1 point@Nitrox Hello! Thank you for the report, it shows the cause. Your system has two Eddie tunnel adapters, "Eddie" and "Eddie 1". "Eddie 1" was left behind by an earlier session that did not close properly (the log starts with "Recovery. Unexpected crash?"): even after Eddie has disconnected, it is still up with a VPN address and it still holds the VPN routes 0.0.0.0/1 and 128.0.0.0/1. When Eddie connects, the new tunnel itself works (the WireGuard handshake succeeds), but Windows answers that the VPN routes "already exist", so your traffic goes to the stale adapter instead of the new tunnel. The route check then times out, Eddie disconnects and tries the next server, which is the loop you see. After Eddie gives up, those leftover routes still capture all your traffic, which is why the internet stays blocked until you restart: the restart removes the stale adapter. To fix it: 1. Close Eddie completely. 2. Restart Windows using Start > Power > Restart, not Shut down followed by powering on. With Windows Fast Startup enabled (the default), a shutdown does not fully reset the system, while Restart always does. 3. If the problem comes back, close Eddie, open Device Manager, select View > Show hidden devices, expand "Network adapters" and uninstall every "Eddie Tunnel" entry (for example "Eddie Tunnel" and "Eddie Tunnel #2"). Then restart Windows (Restart, as above) and start Eddie, which will create a new adapter when it connects. If the problem persists after these steps, please attach a new system report generated right after a failed connection attempt, before closing Eddie or restarting Windows. Kind regards
-
1 pointHello! Please ignore our previous message in this thread: it was meant for another topic. Deleted. This error is caused by a bug of Eddie 2.26.2 (and earlier) on macOS. To check the application's integrity, Eddie stores a small file in the system folder /Library/PrivilegedHelperTools. On Macs where that folder does not exist yet, because no other application has created it, the file cannot be saved and Eddie refuses to start with exactly this message. The bug is fixed in Eddie 2.27.2 beta. Please download it from here: https://airvpn.org/forums/topic/81340-eddie-desktop-edition-227-beta-released/ Select the right package for your Mac (Apple Silicon or Intel), quit Eddie, copy the new Eddie into your Applications folder replacing the old one, then open it from Applications. Your settings are kept. If the error still appears with 2.27.2, please post the complete message: this version also prints the reason of the failure in parentheses, which tells us what is going wrong. Kind regards
-
1 point
Sailfish OS
Tech Jedi Alex reacted to santemilion for a post in a topic
@Tech Jedi Alex I've not yet found someone that has ported Airvpn or Eddie to SFOS. I'll keep looking as I am reluctant to us the AAP on SFOS just yet. Principally because I am trying to avoid the upcoming Google 'shutdown of FOSS (Keep Android open -
1 point
Jellyfin EMBY "dillemas"
plausible0875 reacted to Flx for a post in a topic
An IP from Israel(77.91.71.99) has been casing AirVPN servers on port 8096 over the forwarding service. I was not aware that Mossad was "in dire need" of our video files. Those that have Jellyfin or EMBY running be aware of this. Last attempt: 10/16/26 -
1 point@gtrman Hello! Thank you, the backup file shows the remaining cause. The backup was saved before step 2, so it still shows the old ALL APPLICATION PACKAGES entry (AC) with FA; that is expected. The second entry that blocks Eddie is this one: (A;OICIIO;FA;;;CO) It is the CREATOR OWNER entry, which the normal icacls output shows as CREATOR OWNER:(OI)(CI)(IO)(F). On a default installation it is stored as (A;OICIIO;GA;;;CO). GA (generic all) and FA (explicit full access) grant the same permissions in practice, but Eddie's check reads the stored value as it is: it accepts GA and rejects FA. Because icacls displays both as (F), the difference was not visible in the first output. This entry does not give anyone access to System32 itself, only to files created there later, and only for their owner. Eddie's check does not make this distinction yet, and we will report it to the developers. Please open a Command Prompt as administrator again and run the following commands. 1. Save a backup of the current permissions: icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-backup2.txt" 2. Store the CREATOR OWNER entry in its default form: icacls "%SystemRoot%\System32" /grant:r "*S-1-3-0:(OI)(CI)(IO)(GA)" S-1-3-0 is the fixed identifier of CREATOR OWNER, so the command works with any Windows language. As before, it may take a minute; wait until it reports "Successfully processed 1 files". 3. Save the new permissions to a second file, to check them:Open icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-check.txt" system32-acl-check.txt with your favorite text editor. It should contain (A;OICIIO;GA;;;CO) and (A;OICI;0x1200a9;;;AC), and no entry ending with FA;;;CO or FA;;;AC. Then start Eddie. If it still shows the same error, please post the content of system32-acl-check.txt here. To undo only today's change, you can run: icacls "%SystemRoot%" /restore "%USERPROFILE%\system32-acl-backup2.txt" Kind regards
-
1 point@gtrman Hello! Thank you, the output confirms the cause. This is the entry that blocks Eddie: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(F) It gives Full control of System32 to every Store (UWP) app on the system. On a default installation this group can only read and execute files in System32. The other entries do not need to be changed for Eddie. Please open a Command Prompt as administrator (right-click Command Prompt, then "Run as administrator") and run the following commands. 1. Save a backup of the current permissions of the folder: icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-backup.txt" 2. Replace the Full control entry with the default read and execute permission: icacls "%SystemRoot%\System32" /grant:r "*S-1-15-2-1:(OI)(CI)(RX)" S-1-15-2-1 is the fixed identifier of ALL APPLICATION PACKAGES, so the command works with any Windows language. Please do not simply remove the entry: Store apps, including parts of the Start menu and Settings, need read access to System32. Windows also applies the change to the files and subfolders that inherit from System32, so the command may take a minute. Wait until it reports "Successfully processed 1 files". 3. Run icacls "%SystemRoot%\System32" again. The ALL APPLICATION PACKAGES line should now end with (OI)(CI)(RX). Then start Eddie. If Eddie still shows the same error, please open system32-acl-backup.txt in your user folder with Notepad and post its content here. It is a single line that shows the exact permission values, which the normal icacls output does not show. If you ever need to undo the change, this command restores the saved permissions: icacls "%SystemRoot%" /restore "%USERPROFILE%\system32-acl-backup.txt" Eddie does not check wuauclt.exe and wuaueng.dll, so the ownership change on those two files is not related to this error. And when you move to Linux, Eddie is available there as well. Kind regards
-
1 pointThank AirVPN team for cheap, stable VPN, another 3 years from me 😉
-
1 pointThat would be great. Even a 10 year plan 😂 You could do that even now. Just stack up the subscription. I agree. Thank you devs!
-
1 pointHello! The problem seems completely resolved. Kind regards
-
1 point@gtrman Hello! Thank you for the detailed list of checks. The error comes from a security check in Eddie, not from netsh.exe itself. Eddie runs netsh.exe and other Windows tools with administrator privileges, so before running them it verifies that neither the executable nor its folder can be modified by an account other than SYSTEM, Administrators or TrustedInstaller. Otherwise a non-administrator could replace the tool and have it run with elevated privileges. The empty text after "not allowed:" in your screenshot indicates that netsh.exe itself passed the check, but its folder, C:\Windows\System32, did not: some other account is allowed to create files in it. This is not the default Windows configuration. It is usually left behind by a "take ownership" or "grant full access" tweak or tool applied to system folders in the past. This also explains why sfc, DISM and reinstalling Eddie, portable or installer, did not help: they do not reset the permissions of the System32 folder. To confirm, please open a Command Prompt and run the following command. It only displays the permissions and does not change anything: icacls "%SystemRoot%\System32" Then post the output here. If you prefer, you can replace your computer name and user name with placeholders, but please leave the rest unchanged. On a default installation only NT SERVICE\TrustedInstaller, NT AUTHORITY\SYSTEM and BUILTIN\Administrators can write to that folder. An additional entry with (F), (M), (W) or (WD) for your user account, Users, Authenticated Users or Everyone is the likely cause. Please do not take ownership of System32 or change its permissions recursively in the meantime. Once we see the output, we will tell you how to remove only the extra entry. Kind regards
-
1 pointHi AirVPN team, First of all, congratulations on the excellent service and on remaining a truly independent VPN, still faithful to its original values. That is becoming increasingly rare and deserves to be appreciated. The current three-year offer is great! But since some of us are planning to stay aboard for a very long time, how about a five-year package with an extra-special discount for your most loyal customers? Then I could pay now and not think about renewing again until after 2030! :-) Just asking on behalf of the AirVPN faithful… you never know! Thanks again for the excellent service. Keep up the great work! Kind regards & datalove
-
1 pointNew here, just got my subscription. Thank you!
-
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to hanswurst77 for a post in a topic
thanks @pHxaq and @Staff for the info! -
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to ASiC666 for a post in a topic
I would prefer to see some new locations added outside the 5/9/14 Eyes Alliance (Iceland, Panama..). Especially Iceland would be a good candidate; they have loads of bandwidth and I will assume low datacentre bills thanks to the geothermal power. Also some locations seem to favor more/slower servers instead of less/faster. My assumption would be that this is legacy infrastructure and Air is moving towards the latter, as recently done in the UK..? -
1 point
ANSWERED All LA servers keep having issues
Staff reacted to SurprisedItWorks for a post in a topic
So far a day each on the new, improved versions of Xamidimura and Flegetonte, with excellent performance and no problems at all. -
1 point
High server loads: is the infrastructure lagging behind?
spinmaster reacted to iwih2gk for a post in a topic
I find the newer hardware is simply fast as hell and can handle a bunch more traffic than the older hardware. Today I am on a server with over 1000 folks at the same time and I get over 1 Gig download. How much better does a person need? For me the AirVpn world has never rocked better than now. Sure a few crappy days here and there but this provider gets attacked here and there. Very happy with what I experience. Its not always about the client numbers that matter but what my throttle sees when using the service. Translation: its full speed almost always. -
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to pHxaq for a post in a topic
Well, not long ago we were at 40k online users, now we are at almost 70k. If I'm not mistaken, this increase in the userbase happened in a matter of a few months. It is expected to see overloaded servers until they can expand the number of them. -
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to go558a83nk for a post in a topic
Some locations are overloaded, others are not. The guarantee is for bandwidth network wide, not per location. But I certainly wish some locations would get some attention instead of having more servers put in locations that already have plenty of bandwidth. -
1 pointSome reasons: - Hide your real IP address from (small) bad actors (you can't hide from government agencies, but you can hide from random people who wants to bother other people) - Prevent (or make it harder) your ISP from seeing what you do on the internet (what web pages you visit, for how long, etc.) - Reduce the amount of information harvested from your internet activity (though this only works if you do not log in with personal accounts) - Reduce the amount of advertisement you see on the web thanks to the DNS filters provided by the VPN - Access to servers/services from other countries when either someone from your side (ISP/Government) blocks those servers, or when the servers block IP addresses from your country - Help others hide/obfuscate their internet activity by sharing the same exit IP of the VPN server you connect to - Support the infrastructure of the VPN provider - Support others who depend on the VPN provider to do their job (from regular jobs to more dangerous ones like investigative journalism) A VPN is not an invisibility cloak, neither it is a service aimed for wrongdoers. If you are privacy conscious or concerned about it, then it is a nice tool to have, but as with any other tool, you must learn when/how to use it properly.
-
1 point
ANSWERED SOLVED - 10.4.0.1 DNS issue with WireGuard / OPNsense / NL servers
plausible0875 reacted to Staff for a post in a topic
Hello! For AirVPN WireGuard connections, the IPv4 gateway and DNS server address is 10.128.0.1. WireGuard uses a single IPv4 subnet, and this address remains the same regardless of which AirVPN server you connect to. Please keep 10.128.0.1 as your DNS DNAT target. 10.4.0.1 is an OpenVPN DNS address, and its availability through some WireGuard connections should not be relied upon. Your observation that it works through a German endpoint does not change the address to use with WireGuard. The reported difference alone does not establish a DNS outage on Dutch servers. You are also right about the documentation: our Specs page describes 10.4.0.1 as reachable from any virtual subnet without explicitly restricting that statement to OpenVPN. That wording is misleading for WireGuard users, and we apologize for the confusion. We will assess the situation and either clarify the Specs page or make 10.4.0.1 consistently reachable for DNS queries through WireGuard on all servers (not recommended anyway, see below). In any case, we recommend using the VPN gateway address as the DNS server address, as AirVPN supports this configuration, with both OpenVPN and WireGuard. We recommend using 10.128.0.1 for WireGuard DNS and ensuring that DNS traffic can only leave through the VPN tunnel. Route-injection attacks on hostile networks can otherwise divert DNS queries outside the tunnel, exposing the requested domain names and potentially enabling forged DNS replies. This class of attack can also affect WireGuard deployments, depending on the operating system’s routing and firewall configuration. For your OPNsense setup, redirect the selected clients’ DNS traffic, both UDP and TCP port 53, to 10.128.0.1, ensuring that the redirected traffic is routed through the WireGuard tunnel. Firewall rules should prevent those clients from falling back to WAN when the VPN is unavailable. Port 53 redirection alone does not control applications using DNS over HTTPS or DNS over TLS. Your interpretation of the successful dig @10.4.0.1 test with DNAT targeting 10.128.0.1 is correct: it does not demonstrate that 10.4.0.1 itself answered. Kind regards -
1 point
I was under a rock, new to airvpn
mktux reacted to Tech Jedi Alex for a post in a topic
It's the furthest thing from Arch tech-wise. Arch tracks upstream and is very often up-to-date (only Fedora is a bit ahead), while AirVPN has been on this IP.Board version for almost a decade soon. I'd say, install it from the AUR and check it out yourself – just like Arch compels you to do -
1 pointHello! Thank you for the detailed suggestion. The main reason for this design is privacy. Sharing public exit IP addresses among many customers is one of AirVPN's foundational privacy features, and we deliberately preserve that property for IPv6 as well. Assigning a unique public IPv6 address to each customer or tunnel would make that tunnel's traffic distinguishable by its source address. Websites and other observers able to see multiple connections could use that address to correlate activity belonging to the same tunnel, even without knowing the customer's real identity. With a shared exit address, the address alone does not provide that distinction between customers. Changing the address on each OpenVPN reconnect, or rotating it periodically through Eddie, would reduce the time window for this correlation. However, throughout each address lifetime it would still identify one tunnel rather than be shared by many customers. Rotation therefore does not preserve the same privacy property. We understand the appeal of globally routable tunnel addresses and the compatibility concerns you raise. However, the availability of IPv6 addresses does not resolve this privacy tradeoff: assigning an exclusive public address to each customer would remove a fundamental characteristic of our service. If you have a specific application or reproducible IPv6 issue with the current setup, please share the details so we can examine that separately. Kind regards
-
1 point
New 10 Gbit/s server available (SE)
HUHHII reacted to Tim Cooks pasta for a post in a topic
Very nice!!! I've had some speed issues with the other Nordic servers, but Formosa speeds are great!!! -
1 pointHello! We inform you that all of our VPN servers in Uppsala, Sweden, will cease operations during the night between 30 September and 1 October 2026. This withdrawal is part of our ongoing hardware renewal and connectivity improvement programme. These servers have already been partially replaced by brand-new servers in Northern Europe featuring more powerful hardware and 10 Gbit/s connectivity. Further deployments will complete their replacement. If you currently connect to our Uppsala servers, please select alternative servers before the withdrawal. If you use OpenVPN or WireGuard configuration files pointing specifically to these servers, please generate replacement configurations through our Config Generator in the Client Area. Do not hesitate to contact us for any information or assistance. Kind regards & datalove AirVPN Staff
-
1 point
nifty.org
Apostle9262 reacted to flik232 for a post in a topic
Hello, As of today I can no longer access the website nifty.org. It is a gay story website and where I live it is blocked. Is this a decision that AirVpn made to remove access to anything that is gay story oriented? If so I would like to cancel my account because I have been a customer for nearly 10 years and I am dissapointed. -
1 pointHello everyone, I built Gluetun Companion, a self-hosted web dashboard for people running VPN through Gluetun in Docker/homelab setups (UNRAiD friendly), with dedicated AirVPN options. Its purpose is to make choosing and maintaining VPN servers less manual. It benchmarks configured servers through the VPN tunnel, keeps a history of throughput, latency, jitter, packet loss and DNS latency, then helps select or rotate to the most suitable server. It also includes: - AirVPN server catalogue and live load information, - WireGuard and OpenVPN profile support, - server exclusions, including country exclusions, - automatic switching and rotation pools, - port-forward inventory and optional qBittorrent / rTorrent port synchronization, - tracker reachability checks through the VPN, - Prometheus metrics, Grafana dashboard, and Discord/Apprise notifications. It is still beta software. I use and test it primarily with AirVPN over WireGuard, so feedbacks would be very welcome. Project and installation instructions: https://github.com/Aerya/Gluetun-Companion UNRAiD template: https://ca.unraid.net/apps/gluetun-companion-0uhgrhz0byhtpv A few screenshots are attached below. Thanks! A.
-
1 pointHello! In the early stages, the names were taken from the constellations. A little later, from constellations and stars, and finally only from stars. We have exceptions in Tokyo: two servers are named after imaginary planets from Space Battleship Yamato and UFO Robot Grendizer. Kind regards
-
1 point
ANSWERED AirVPN Suite > Bluetit worked once. Then I rebooted...
Cthulu_007 reacted to ltwally for a post in a topic
Apologies if I have been unclear - this happens every time after the initial connection. Every single time. I have uninstalled and reinstalled the Suite three times now, with identical results: After configuring Bluetit, it works on the first reboot. Every reboot afterwards results in the above scenario. I have used the following methods for shutdown & rebooting: LXQt menu > shutdown, LXQt menu > restart, terminal/CLI> poweroff, terminal/CLI > reboot. These are not "unclean" shutdowns as far the operating system is concerned. If Bluetit requires some form of manual disconnect prior to shutting down or rebooting, that would seem to be a flaw in Bluetit. Likewise, even if there were an "unclean" exit, Bluetit should be able to recover on restart. Respectfully, in either of these scenarios, I believe this is a developer issue. In its current condition, Bluetit appears to be broken and unusable. Regards -
1 point
Integration for 3rd party DNS services
LastGoodNameLeft reacted to f4tctf34v4wyf54 for a post in a topic
Would it be possible to have added the ability to use 3rd party DNS services which support DNS over TLS or DNS over HTTPS? I'd love the option to paste in the NextDNS DNS-over-HTTPS link ( https://dns.nextdns.io/xxxxx) and funnel all DNS requests for a certain devices through it. There's a lot of added functionality/logging available through such a service and it would be a good addition I think. -
1 point
ANSWERED AirVPN does not recognize ICANN authority anymore
cipherecho reacted to Staff for a post in a topic
AIRVPN DOES NOT RECOGNIZE ANYMORE VERISIGN, AFILIAS AND ICANN AUTHORITY. OUR COMMITMENT AGAINST UNITED STATES OF AMERICA UNFAIR AND ILLEGAL DOMAIN NAMES SEIZURES. The United States of America authorities have been performing domain names seizures since the end of 2010. The seizures have been performed against perfectly legal web-sites and/or against web-sites outside US jurisdiction. Administrators of some of those web-sites had been previously acquitted of any charge by courts in the European Union. The domain name seizures affect the world wide web in its entirety since they are performed bypassing the original registrar and forcing VeriSign and Afilias (american companies which administer TLDs like .org, .net, .info and .com) to transfer the domain name to USA authorities property. No proper judicial overview is guaranteed during the seizure. Given all of the above, we repute that these acts: - are a violation of EU citizens fundamental rights, as enshrined in the European Convention on Human Rights; - are an attack against the Internet infrastructure and the cyberspace; - are a strong hint which shows that decision capacities of USA Department of Justice and ICE are severely impaired; and therefore from now on AirVPN does not recognize VeriSign, Afilias and/or ICANN authority over domain names. AirVPN refuses to resolve "seized" domain names to the IP address designated by USA authorities, allowing normal access to the original servers' websites / legitimate Ip addresses. In order to fulfil the objective, we have put in place an experimental service which is already working fine. If you find anomalies, please let us know, the system will surely improve in time. Kind regards AirVPN admins -
1 pointBeen using Eddie with no problems but for some reason when trying to run it, it will appear as a background process but won't display the main Eddie window. Can't think of anything major that's been installed in the mean time. Tried uninstalling and re-installing and running as admin all with no success. Have disabled virus and firewalls and stopped other processes but it still won't display the main Eddie window. Win10 is up to date and besides a couple of games (now uninstalled) nothing else has been installed. Something has obviously changed but I wondered if there was any way of finding out what the conflict is to cause the main window to not display. Or if there were any known issues with other programs that could stop Eddie displaying. Thanks. Update: Fixed this. Restored back to an earlier Windows creation point a few days old. Thinking it through I can see where the problem was - I'd installed an update to an app which played with the Windows UI and played with the toolbars - so Eddie was there I just couldn't see the icon and display the main window because it was hidden. Simple stuff and a bit daft of me to not spot this.
-
1 point
ANSWERED AirVPN does not recognize ICANN authority anymore
cipherecho reacted to GMPSQ for a post in a topic
The United States is an enemy of the Internet. More and more our technology and communications are captured illegaly and stored for many years and then used against us in court. The government seems to sincerely believe that it owns the Internet and regulary hacks into foreign servers to retrieve data, seizes domain names, etc. and any citizen who can be considered a hacker under broad laws will be thrown in prison. My warning as a US citizen is to watch out, encrypt, keep everything secure, keep data offshore, and avoid any US-influenced entities such as ICANN. Thank you AirVPN for the great continued service. I've been using multiple VPN connections almost constantly for the past year everywhere and as far as I can see that will continue -
1 point
ANSWERED Stop running Tor servers behind AirVPN
Nikolozik reacted to Tech Jedi Alex for a post in a topic
Yes, it's annoying. I know your thinking, unknown TOR exit runners, you want to help the TOR network by providing one more exit node, because kind of I am afraid of possible legal consequences running a TOR exit node over my ISP line but now I'm behind a VPN and I want to help; it's okay so far. But it's not okay to not take into consideration that some of us use services and websites which constantly try to prevent TOR exit IPs from viewing them (not limited to TOR, some try to block all anonymizer services). A TOR server will be listed on a TOR exit servers list even after you shut it down and as long as it's there we suffer from blocks. Blocks we are trying to circumvent; that's what a proxy service is good for, right? In addition, AirVPN run two exits themselves. Given the bandwidth of these servers (100 MBit/s) I don't think your contribution is a great gain in overall TOR performance as your internet connection is most probably not that fast and not that stable (I assume you use your internet to watch Netflix, play games online and the like, creating traffic which lowers performance of the node). Third, you expose AirVPN and yourself to attacks from the internet by those who want to literally destroy TOR. Attacks on AirVPN's servers will cause line problems, line problems harm the user's experience. You as a TOR exit runner (although behind a VPN) expose yourself to attacks, too: It's not the AirVPN server who gets infected because a vulnerability in the TOR software is being abused; it's your computer. Your computer gets infected, and it's most probably your personal computer with your personal information on it. Your antivirus software is just a bunch of algorithms, too, it's not supposed to detect 100% of vulnerabilites in software and prevent their abuse. And: It's you who will be marked an extremist. If you think it's easy these days to help TOR you are mistaken. Maybe installation and setup is easy, to preserve your own security by running this piece of software sadly is not. So, before you start that TOR software again, think twice. Thank you.
