Leaderboard
Popular Content
Showing content with the highest reputation since 09/18/26 in all areas
-
6 points
New 10 Gbit/s server available (SE)
Nikolozik and 5 others reacted to Staff for a post in a topic
Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in Stockholm, Sweden, is available: Formosa. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Formosa supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Formosa Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff -
5 pointsHello! We reluctantly have to announce gloomy news to you all: Spooky Halloween Deals are now available in AirVPN... Save up to 74% on AirVPN longer plans (*) (*) When compared to 1 month plan price Deal will expire on 2026-11-03 UTC Check all plans and discounts here: https://airvpn.org/plans If you're already our customer and you wish to jump aboard for a longer period with this un-boo-lievable deal, any additional plan will be added on top of already existing subscriptions and you will not lose any day. Every plan gives you all the features that made AirVPN a nightmare for snoopers and a scary service for competitors. Just check this frighteningly long list of terrific features if you dare: a clear mission without compromises https://airvpn.org/mission exclusive and comfortable remote inbound port forwarding system flexible, opt-in block lists against malware and other hostile entities. Pick predefined lists, add exceptions or additional blocks, define your own lists, or just use our totally neutral DNS by default improved API functions to let you control and configure VPN features and account settings WireGuard integration AmneziaWG support in Eddie Android edition, with traffic mimicry of real websites (QUIC) to defeat DPI-based VPN blocking. This year our traffic wears a costume too: with AmneziaWG on Eddie Android, your connection goes trick-or-treating dressed up as an ordinary website, and DPI won't recognise who's behind the mask. Security-hardened Eddie Desktop edition Strong infrastructure growth: about 25% more total capacity in one year. Our servers grew by a ghastly 25% this year: more bandwidth to haunt the Internet at full speed. IPv6 support, including IPv6 over IPv4 and IPv4 over IPv6 refined load balancing to squeeze every last bit per second from VPN servers free and open source software for Android, Linux, Mac and Windows offering advanced features easy "Configuration Generator" web interface for access through third party software guaranteed minimum bandwidth allocation GDPR compliance and very high privacy protection standards no log and/or inspection of clients' traffic effective traffic leaks prevention by AirVPN software Tor support via AirVPN software on Linux, Mac and Windows various cryptocurrencies accepted without any intermediary no obligation to use our free and open source software to enter AirVPN infrastructure. Interoperability is an AirVPN priority. perfectly clear and easy to read Privacy Notice and Terms https://airvpn.org/privacy No tricks, only treats! We witch you a spooktacular Halloween AirVPN Staff
-
2 pointsHello! A quick follow-up on the WireGuard session counter issue mentioned above. The cause has been identified and fixed, and the fix is currently being rolled out across our infrastructure. Servers that have already received the update are back to reporting accurate figures, and the remaining ones will follow shortly, so the connection counts shown in the server monitor and in the related statistics will match reality again in the very near future. As previously stated, actual connections and the service itself have never been affected, only the displayed counter was. Kind regards
-
2 pointsThank you all for the valuable feedback. Following this thread, we have identified a bug, most likely introduced on October 7th-8th, which causes the WireGuard session counter on some servers to grow incorrectly over time. As a result, the number of connections currently shown in the server monitor is higher than the real one. The actual connections, and the service itself, are not affected. We are working on a fix and will update this thread as soon as it is in place. On a side note, this also means that our no-overselling commitment is honoured by an even wider margin than the one computed by @fsy Kind regards
-
2 points
New 10 Gbit/s server available (US)
thedragonslove and one other reacted to Staff for a post in a topic
Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in New York City, USA, is available: Hiisi. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Hiisi supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Hiisi Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff Photo by John Dillenbeck (Public Domain) -
2 points
New 10 Gbit/s server available (SE)
HUHHII and one other reacted to Tim Cooks pasta for a post in a topic
Very nice!!! I've had some speed issues with the other Nordic servers, but Formosa speeds are great!!! -
1 pointThank AirVPN team for cheap, stable VPN, another 3 years from me 😉
-
1 pointThat would be great. Even a 10 year plan 😂 You could do that even now. Just stack up the subscription. I agree. Thank you devs!
-
1 pointNew here, just got my subscription. Thank you!
-
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to hanswurst77 for a post in a topic
thanks @pHxaq and @Staff for the info! -
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to pHxaq for a post in a topic
Well, not long ago we were at 40k online users, now we are at almost 70k. If I'm not mistaken, this increase in the userbase happened in a matter of a few months. It is expected to see overloaded servers until they can expand the number of them. -
1 point
High server loads: is the infrastructure lagging behind?
WindscribeSucks reacted to go558a83nk for a post in a topic
Some locations are overloaded, others are not. The guarantee is for bandwidth network wide, not per location. But I certainly wish some locations would get some attention instead of having more servers put in locations that already have plenty of bandwidth. -
1 pointSome reasons: - Hide your real IP address from (small) bad actors (you can't hide from government agencies, but you can hide from random people who wants to bother other people) - Prevent (or make it harder) your ISP from seeing what you do on the internet (what web pages you visit, for how long, etc.) - Reduce the amount of information harvested from your internet activity (though this only works if you do not log in with personal accounts) - Reduce the amount of advertisement you see on the web thanks to the DNS filters provided by the VPN - Access to servers/services from other countries when either someone from your side (ISP/Government) blocks those servers, or when the servers block IP addresses from your country - Help others hide/obfuscate their internet activity by sharing the same exit IP of the VPN server you connect to - Support the infrastructure of the VPN provider - Support others who depend on the VPN provider to do their job (from regular jobs to more dangerous ones like investigative journalism) A VPN is not an invisibility cloak, neither it is a service aimed for wrongdoers. If you are privacy conscious or concerned about it, then it is a nice tool to have, but as with any other tool, you must learn when/how to use it properly.
-
1 point
I was under a rock, new to airvpn
mktux reacted to Tech Jedi Alex for a post in a topic
It's the furthest thing from Arch tech-wise. Arch tracks upstream and is very often up-to-date (only Fedora is a bit ahead), while AirVPN has been on this IP.Board version for almost a decade soon. I'd say, install it from the AUR and check it out yourself – just like Arch compels you to do -
1 point
I was under a rock, new to airvpn
go558a83nk reacted to mktux for a post in a topic
Hello everyone! I recently learned about the airvpn. What i like is the tools are all opensource, aligns with my ethos. I even used ipleak back in the day to check my ip info as well. Later i found out that it was made by air's team as well. What truly surprised me is the availability of a forum. It's quite rare and i like it. The website reminds me of archlinux, simple and functional not following every UI/UX trends. I don't have a active plan right now as i joined-in today. Missed the deal by a day, oh well. I am using linux, and earlier with another vpn service i used to get the openvpn files and set it up inside the kde plasma network-manager then setup a firewall rule as kill switch. Is eddie gui a better way to connect to airvpn on archlinux, instead of the above method? -
1 point
Eddie shows no servers
19990909jp reacted to alrosm@sbcglobal.net for a post in a topic
do not see anything for windows 7 i wish to keep my old computer everything is expensive right now and i would like to use my computer with win7 until it dies thanks in advance -
1 point
Eddie Desktop Edition 2.27 beta released
Aras reacted to scooby0786 for a post in a topic
Hola, Just a quick heads-up, as per posts below: And here: This still seems to be a problem on version 2.27.2 on a Windows 11 laptop/PC. Although, my issue isn't as bad as d3adf1sh's. It connects to the server for me after waking from sleep, but sites don't load unless I double click the server from the Eddie UI list and cycle the connection again which fixes the issue. Sometimes, very rarely, it gets stuck on "checking route to ipv4" where I have to completely close Eddie and relaunch. The longer the sleep, the more prevalent of the above issues happening. A short sleep cycle doesn't too often cause any issue when waking the machine. Please address/investigate this issue before releasing a stable version. A clean install with 2.26.2 or 2.27.2 doesn't fix the issue. A minor inconvenience, but an inconvenience nevertheless. Again, I repeat, salivating. Thanks for all the hard work behind the scenes. -
1 pointHello! We inform you that all of our VPN servers in Uppsala, Sweden, will cease operations during the night between 30 September and 1 October 2026. This withdrawal is part of our ongoing hardware renewal and connectivity improvement programme. These servers have already been partially replaced by brand-new servers in Northern Europe featuring more powerful hardware and 10 Gbit/s connectivity. Further deployments will complete their replacement. If you currently connect to our Uppsala servers, please select alternative servers before the withdrawal. If you use OpenVPN or WireGuard configuration files pointing specifically to these servers, please generate replacement configurations through our Config Generator in the Client Area. Do not hesitate to contact us for any information or assistance. Kind regards & datalove AirVPN Staff
-
1 pointHello! The sustained change you describe deserves investigation, especially since the same setup previously reached 180–200 Mbps. The plateau alone does not establish an imposed bandwidth cap, and we cannot yet link it to a particular server-side change around September 2. Since you have already tried different servers, Gluetun versions and MTUs, we suggest two controlled comparisons before changing more settings: On the NAS, run the direct and VPN tests one after the other, using the same Speedtest application/version and a manually selected Speedtest server ID. Pause other downloads/uploads and record both download and upload speeds. Please confirm whether your two trackers already use the same test server, and verify that the VPN test shows an AirVPN exit IP. If another computer is available, preferably connected by Ethernet to the same router, test AirVPN with a native WireGuard client outside Docker. Use the same AirVPN server, endpoint port and Speedtest destination as the NAS test. Stop the Gluetun tunnel for this comparison, or use a separate AirVPN device key so the two clients do not share a key while connected. If the second computer reaches approximately 200 Mbps while the NAS remains near 100, that would narrow the investigation toward the NAS/container path. If both show the reduction, we should investigate the shared network path and VPN endpoint further. During the NAS test, please also check CPU usage per core and any CPU limit configured for the container. An overall reading of 60% does not rule out one core reaching its limit, although it does not by itself explain why performance changed. Please share the exact AirVPN server names and endpoint ports tested, the Speedtest server ID, download/upload results, and test times with your time zone. Those details will let us correlate your measurements with the relevant servers. Take care not to post your WireGuard private key or full configuration file. Kind regards
-
1 pointFantastic news! Good to have more servers in the Nordics. Hopefully Baltics would also receive an update soon.
-
1 point
Castula needs help!
Lance Kaufman reacted to Flx for a post in a topic
For now...things back to normal. I'll give it about 6 days to stabilize. Unless others have other "dillemas". -
1 point
Eddie Desktop Edition 2.27 beta released
Staff reacted to lotuslove165 for a post in a topic
This version solved my issues, thanks. -
1 pointNorway's servers are over 60% most of the day. Can you ship a couple of Sweden's unused servers to Oslo? There's like 5 not being used.
-
1 point@klimpix Hello! Thank you for testing 2.27.2 after upgrading and rebooting. The updated reports confirm that the issue persists on your system. The new AVC events directly document SELinux denying nft, running in the iptables_t domain, access to /var/lib/eddie-vpn/state/netlock_nftables_backup.nft. Their timestamps match the backup-file errors in Eddie’s log, during both startup recovery and subsequent Network Lock activation attempts. The helper also encounters separate denials involving DNS restoration and cleanup. This gives us clearer evidence of the SELinux access restrictions affecting the persistent-helper configuration. The exact correction still requires investigation into the helper’s execution context and the state files’ SELinux labels and permissions. We will pass these updated reports to the developers for investigation. For now, please continue using password-based elevation, which you reported works with Network Lock, while keeping SELinux enforcing and firewalld enabled. Thank you also for confirming that the tray issue persists with 2.27.2 on Plasma 6.7.5 under Wayland. We will include that information as a separate issue. Kind regards
-
1 point
Eddie Desktop Edition 2.27 beta released
lotuslove165 reacted to OWild for a post in a topic
eddie 2.27.2 works fine for me (debian 13 trixie / KDE / Wayland) -
1 point
Fedora Linux Errors
klimpix reacted to Tech Jedi Alex for a post in a topic
Please do that, for completeness' sake. Close and reopen Eddie in a state which causes the error and try a connection once, then provide a system report:. -
1 point
Cannot reuse the host VPN connection on a virtual machine with network lock enabled.
cheeze reacted to jx35552zza for a post in a topic
Quick add: I'm now using VMs where networking works with Network Lock enabled. I use VMware Workstation, I do not remember what I was using when I wrote my previous comment in 2023. That said, I've only tested NAT mode, I haven't tried Bridged or other setups since I haven't used them recently. One thing to note is that VMware's NAT hands out 127.0.0.1:53 as the DNS server via DHCP for my setup. So I always change it manually on the guest machines that I set up. That said, I’m not entirely sure how solid Network Lock actually is. The Eddie client tends to be pretty unstable for me in a lot of areas. Still, it does display the lock icon when the VPN is active. -
1 point
Non-Deterministic BSOD 0x3B in wireguard.sys on Disconnect
knighthawk reacted to blockchain420 for a post in a topic
Hello AirVPN Support and Development Team, I am writing to report a stability issue regarding a non-deterministic Blue Screen of Death (BSOD) with error code **0x3B (SYSTEM_SERVICE_EXCEPTION)** triggered when disconnecting from a WireGuard tunnel via the Eddie client. Because this crash happens intermittently during the teardown sequence, it strongly indicates a **Race Condition** or **Use-After-Free (UAF)** vulnerability inside the `wireguard.sys` driver wrapper, where memory buffers are accessed after being invalidated by the NDIS subsystem. **System Environment** * **OS:** Windows 10 IoT Enterprise LTSC 2021 (64-bit) * **Build Number:** 19044.7725 * **Eddie Version:** Any version utilizing WireGuard 1.0.0.0 * **WireGuard Driver Version:** WireGuard 1.0.0.0 **Bug Check Details & Stack Trace Summary** * **Bug Check Code:** 0x3B (`SYSTEM_SERVICE_EXCEPTION`) * **Exception Code:** 0xC0000005 (`EXCEPTION_ACCESS_VIOLATION`) * **Faulting Address:** `0xfffff8004f01111e` (Inside `ndis.sys`) * **Trigger Event:** Disconnecting from the WireGuard tunnel using Eddie. * **Key Stack Frames:** Crash manifests inside `ndis!ndisDeviceControlHandler` triggered by concurrent execution paths originating from `wireguard.sys+0x13b02` and `wireguard.sys+0x13844` during an IOCTL-driven shutdown. **Technical Analysis (Race Condition Hypothesis)** The crash signature and call stack point to a synchronization gap during the driver's teardown phase: 1. **Teardown Initiation:** Eddie issues an IOCTL call to halt the adapter. 2. **Memory Invalidation:** NDIS begins freeing `NDIS_MINIPORT_BLOCK` structures and associated packet buffers. 3. **Concurrent Access:** A pending network interrupt or timer event inside `wireguard.sys` simultaneously attempts to process packets using stale pointers. 4. **Violation:** The driver dereferences the invalidated memory, throwing an access violation within `ndis.sys`. **Reproduction Steps** 1. Launch Eddie and connect to any WireGuard endpoint. 2. Maintain the connection for an arbitrary duration. 3. Click **Disconnect**. 4. **Result:** The client intermittently crashes with BSOD 0x3B instead of executing a clean disconnect. The failure is purely stochastic and independent of network traffic load. **Troubleshooting Performed** * Fast Startup: Disabled. * Clean Install: Performed complete purges of Eddie and residual `wireguard.sys` drivers, followed by clean reinstalls. The issue persists. * Traffic Load: Tested under both idle and high-throughput states; failures occur uniformly, confirming a state-dependent synchronization bug rather than a load-dependent fault. **Impact & Request** This issue undermines system stability on Windows 10 IoT LTSC environments. Since the official WireGuard for Windows client utilizes `Wintun.sys` (which manages adapter concurrency and teardown safely in user-space/TUN architecture), the legacy `wireguard.sys` wrapper appears to lack robust reference counting or synchronization primitives (such as proper spinlock implementation) during NDIS miniport halts. Could you please clarify: * Are you aware of this specific race condition in `wireguard.sys`, and is there an updated build or fix available? * Are there plans to transition Eddie toward native `Wintun.sys` utilization to bypass these kernel-level concurrency constraints? Thank you for your time and assistance in analyzing this behavior. A full kernel memory dump (`MEMORY.DMP`) is attached to this message. 091326-9562-01.dmp -
1 point
GUI not opening after upgrading to 2.26.2-1 on the AUR
ByteBuccaneer reacted to PhasecoreX for a post in a topic
I got the same error about mscorlib.dll, however I am using Arch with paru instead of yay. By default I have paru build in a chroot, however when I told it not to use a chroot (paru --nochroot eddie-ui) it now runs correctly. Yay doesn't have chroot support so it also worked without any configuration. I am not sure what the difference is between chroot and non-chroot building, but it would be nice to be able to use chroot when building. Regardless of how I build it, the file /usr/lib/mscorlib.dll doesn't exist, so maybe the chroot build thinks it exists for some reason. -
1 point
What's your Share Ratio? (or Total Upload)
Lance Kaufman reacted to DeepAnger for a post in a topic
I probably started before you were born but know that I have 4 times faster upload since I subscribed here. -
1 pointHello! A few flood attacks caused various problems throughout August but the main problem since one or two weeks ago is the uplink capacity in our opinion. We were expecting maintenance operation in the Zurich DC to increase uplink capacity and improve access switch redundancy by adding a second switch to the rack between Aug 31 and Sep 1, but it was unfortunately re-scheduled to Sep 8. We will evaluate whether the added capacity will be enough to resolve the problems and we will act accordingly. Kind regards
-
1 pointStill waiting on return of Lithuanian servers, or even high bandwidth (20gbps) ones in any Baltic country.
-
1 point
GUI not opening after upgrading to 2.26.2-1 on the AUR
ByteBuccaneer reacted to Tech Jedi Alex for a post in a topic
Last time this came up:In short, try building that package in a clean chroot. Usually, it indicates that some package was built against an older version of Mono. CachyOS keeps coming up as the culprit from time to time as it provides a repo with prebuilt AUR packages, some of which are not meant to be distributed like that, but Manjaro is not without its problems, either. -
1 point
Norway needs more servers
Andrew109 reacted to caffeine0030 for a post in a topic
The norwegian servers were great before they were "discovered"! I used to be able to play games on them. But now they are very often maxed and you have to skip around to find one that is at 90% capacity and not 100%. Cant use them to play anymore :/ Also very low chance to get any decent speeds anymore I see m247 has 10Gbit servers available in Norway.... Just saying -
1 point
Slow download speed
zmicier reacted to robertoohoho for a post in a topic
I try switching servers but I usually get the same slow speed. Right now (it's 21:00 local time), it's particularly slow. I was connected to Matar, the best available server according to Eddie, and the download speed from a kDrive was under 200KB/s. I switched to "Crater", same result. I switched to Albali Uppsala Sweden, this time the download speed stalled under 50KB/s! Also, this happens on both of my systems. A few months ago, the speed were good, sometimes very fast. I can't understand what happened. -
1 point
nifty.org
Apostle9262 reacted to flik232 for a post in a topic
Hello, As of today I can no longer access the website nifty.org. It is a gay story website and where I live it is blocked. Is this a decision that AirVpn made to remove access to anything that is gay story oriented? If so I would like to cancel my account because I have been a customer for nearly 10 years and I am dissapointed. -
1 pointHello everyone, I built Gluetun Companion, a self-hosted web dashboard for people running VPN through Gluetun in Docker/homelab setups (UNRAiD friendly), with dedicated AirVPN options. Its purpose is to make choosing and maintaining VPN servers less manual. It benchmarks configured servers through the VPN tunnel, keeps a history of throughput, latency, jitter, packet loss and DNS latency, then helps select or rotate to the most suitable server. It also includes: - AirVPN server catalogue and live load information, - WireGuard and OpenVPN profile support, - server exclusions, including country exclusions, - automatic switching and rotation pools, - port-forward inventory and optional qBittorrent / rTorrent port synchronization, - tracker reachability checks through the VPN, - Prometheus metrics, Grafana dashboard, and Discord/Apprise notifications. It is still beta software. I use and test it primarily with AirVPN over WireGuard, so feedbacks would be very welcome. Project and installation instructions: https://github.com/Aerya/Gluetun-Companion UNRAiD template: https://ca.unraid.net/apps/gluetun-companion-0uhgrhz0byhtpv A few screenshots are attached below. Thanks! A.
-
1 pointhello. can you give some screenshots for this two moments? Hello! 1. Go to "Settings" > "Advanced" > "Custom AmneziaWG directives", turn on "Enable CPS" switch, disable "Random Presets" and select a web site from the list appearing after you tap on "Preset". Make sure you tap "OK" at the end to confirm (if you just tap "Back" button, the settings will not be stored). 2. Go back to the main view, select "AIRVPN SERVER", long tap the country or the specific server you want to generate and export a configuration file for, and select "Export AmneziaWG profile" or "Open AmneziaWG profie with..." according to your needs. Kind regards
-
1 point
Personal IPv6 exit IP as alternative to port forwarding
Divinity3372 reacted to CentralPivot for a post in a topic
With IPv6 allowing practically infinite IPs it should be possible to assign a dedicated IPv6 address to each connection, allowing incoming connections to any port to be forwarded. This would be a great way to circumvent the port forwarding restrictions on IPv4 that exist because multiple clients have to share the same exit IP, and I think would make for a nice optional feature. -
1 point
10Gbps Tokyo and Singapore servers
Andrew109 reacted to voxenutu@gmail.com for a post in a topic
+1 -
1 pointMan im tempted to buy more time but I think im covered
-
1 point
We have kept the OP message to show the pervasiveness of the PRC's propaganda lackeys. We consider Taiwan (Republic of China) to be independent and autonomous from the PRC (People's Republic of China), as it is in fact. ipleak uses MaxMind and IANA databases to display results, and we are pleased that these are aligned with an anti-imperialist and democratic vision that is clearly unpalatable to the dictatorial regime of the PRC, which sees it as an obstacle to its expansionist ambitions. -
1 point
-
1 point
Norway needs more servers
Andrew109 reacted to caffeine0030 for a post in a topic
Yes more norwegian servers would be nice. I was going to make the same suggestion. Also one more server in estonia would be great. Good speeds from Alruba when its not at capacity -
1 point
ANSWERED Opinions on Disabling IPv6
Divinity3372 reacted to Staff for a post in a topic
Hello! The paramount IPv6 privacy problem, which was considered by many as a critical or fatal flaw compromising adoption and usage, has been resolved through privacy extensions: https://www.internetsociety.org/resources/deploy360/2014/privacy-extensions-for-ipv6-slaac/ Nowadays, ten years after that article by The Internet Society and 17 (seventeen) years after RFC 4941 virtually all widespread systems have finally adopted the very much needed privacy extensions. However, one bad apple may compromise the whole local network. See for example this paper: https://arxiv.org/abs/2203.08946 where the authors show how a single device at home that encodes its MAC address into the IPv6 address can be utilized as a tracking identifier for the entire end-user prefix. Therefore, it is good practice to verify with care every and each device and making sure that their Operating Systems implement the privacy extensions. Other than that, we can't see any serious hindrance to adopt IPv6 as far as it pertains to privacy. Furthermore, in AirVPN we picked an unorthodox approach, i.e. we implemented NAT66 with ULA, as it is one of those rare cases where it comes handy to strengthen the anonymity layer (a thoughtful analysis of the pros and cons of NAT in IPv6 can be found in the following article for example https://blogs.infoblox.com/ipv6-coe/you-thought-there-was-no-nat-for-ipv6-but-nat-still-exists/ while a pragmatic approach is here: https://blog.ipspace.net/2013/09/to-ula-or-not-to-ula-thats-question/). Switching from privacy to security, probably an informed choice can start by reading this article, that also includes other precious sources, again by the Internet Society: https://www.internetsociety.org/deploy360/ipv6/security/faq/ Kind regards -
1 point
ANSWERED Opinions on Disabling IPv6
Divinity3372 reacted to Tech Jedi Alex for a post in a topic
Do you think you should disable 5 GHz WiFi? Do you think you should disable LTE on your phone? Do you think you should disable all USB-C ports? That's the kind of question it is. The answer to all of them is another question: Why would you ever think about preferring older tech if you've got the option to use newer? And no, I don't want to hear arguments like "I disable 5G because of radiation" – the only thing irradiated is that thought, irradiated by some web page, probably served on a v4 IP address over an ADSL line (which, interestingly, emits more radiation and consumes more power than a Fiber line and associated infrastructure). v4 is ossified and does not meet today's needs. It's a pain to maintain for people, organizations and everyone and everything in between. The only reason people still use and maintain it is purely out of conveniece. But that's humanity for you, I guess.. Now, let's analyze this, taking the aforementioned convenience into consideration specifically.. Disabling v6 won't do a thing to your connectivity. There are tiny, tiny freckles in the face of the whole internet talking v6 only, but if you disable v4, half of that face will be gone. If you leave both enabled, v6 will be preferred, but through Happy Eyeballs v4 will be tried and preferred itself if v6 was too slow. Doesn't really up the connectivity, it's just a temporary measure while we all transition to v6, but ooh, the convenience.. and also because there are ISPs in the world still assigning v4 only to their customers. Honestly, v6 is almost 30 years old itself and some parts of the world still treat it as the New Hot Shit™. Talking configuration, OpenVPN's config options differ from those for v4 (--route != --route-ipv6, for example), so for some use cases you will find v4 easier to configure than v6. For Wireguard, I suppose it doesn't really matter since it was written in a time where v6 was actually in use (while OpenVPN was written when Tyrannosaurus Rex was still the apex predator, I believe. Small dino hacking away at a miniature keyboard at the foot of some volcano or the other; times were as wild as this imagined picture). v4's got the leg up here because four numbers up to 255 delimited by a dot are both easier to write and easier to memorize than eight freaking groups of four hexadecimals in each, so you are dependent on DNS more or less.. (as if you're not dependent on DNS with v4, though; care to test yourself? Just name all v4 addresses of, I don't know, YouTube. Oh, do I spot you nslookuping youtube.com? You've fallen into my trap.) So, should you disable v6? No, you should not. You are effectively prolonging the life of v4 by this; a protocol which is finished, both in the literal (as in, finished being developed) and metaphorical (as in, End Of Life) way. If you are insistent on not using v6, pay attention to your config and simply route it via VPN as you would route v4. The OpenVPN v6 options might not have absolute parity with v4, but OpenVPN does route v6 just fine. Route them both. And if you've got v6, connect via v6 (barring the case of v6 availability but the Providers' Piss-Poor Performance® of it; then you are excused if you formally complain to your ISP. It's not even a joke: Complain about shabby v6 treatment of your service providers, to those service providers). Thank you for reading my sermon. May the Elders of the Internet protect you. Or the Admins of the AirVPN, whichever is closer to your heart. -
1 point
ANSWERED AirVPN does not recognize ICANN authority anymore
cipherecho reacted to Staff for a post in a topic
AIRVPN DOES NOT RECOGNIZE ANYMORE VERISIGN, AFILIAS AND ICANN AUTHORITY. OUR COMMITMENT AGAINST UNITED STATES OF AMERICA UNFAIR AND ILLEGAL DOMAIN NAMES SEIZURES. The United States of America authorities have been performing domain names seizures since the end of 2010. The seizures have been performed against perfectly legal web-sites and/or against web-sites outside US jurisdiction. Administrators of some of those web-sites had been previously acquitted of any charge by courts in the European Union. The domain name seizures affect the world wide web in its entirety since they are performed bypassing the original registrar and forcing VeriSign and Afilias (american companies which administer TLDs like .org, .net, .info and .com) to transfer the domain name to USA authorities property. No proper judicial overview is guaranteed during the seizure. Given all of the above, we repute that these acts: - are a violation of EU citizens fundamental rights, as enshrined in the European Convention on Human Rights; - are an attack against the Internet infrastructure and the cyberspace; - are a strong hint which shows that decision capacities of USA Department of Justice and ICE are severely impaired; and therefore from now on AirVPN does not recognize VeriSign, Afilias and/or ICANN authority over domain names. AirVPN refuses to resolve "seized" domain names to the IP address designated by USA authorities, allowing normal access to the original servers' websites / legitimate Ip addresses. In order to fulfil the objective, we have put in place an experimental service which is already working fine. If you find anomalies, please let us know, the system will surely improve in time. Kind regards AirVPN admins -
1 pointBeen using Eddie with no problems but for some reason when trying to run it, it will appear as a background process but won't display the main Eddie window. Can't think of anything major that's been installed in the mean time. Tried uninstalling and re-installing and running as admin all with no success. Have disabled virus and firewalls and stopped other processes but it still won't display the main Eddie window. Win10 is up to date and besides a couple of games (now uninstalled) nothing else has been installed. Something has obviously changed but I wondered if there was any way of finding out what the conflict is to cause the main window to not display. Or if there were any known issues with other programs that could stop Eddie displaying. Thanks. Update: Fixed this. Restored back to an earlier Windows creation point a few days old. Thinking it through I can see where the problem was - I'd installed an update to an app which played with the Windows UI and played with the toolbars - so Eddie was there I just couldn't see the icon and display the main window because it was hidden. Simple stuff and a bit daft of me to not spot this.
-
1 point
ANSWERED AirVPN does not recognize ICANN authority anymore
cipherecho reacted to GMPSQ for a post in a topic
The United States is an enemy of the Internet. More and more our technology and communications are captured illegaly and stored for many years and then used against us in court. The government seems to sincerely believe that it owns the Internet and regulary hacks into foreign servers to retrieve data, seizes domain names, etc. and any citizen who can be considered a hacker under broad laws will be thrown in prison. My warning as a US citizen is to watch out, encrypt, keep everything secure, keep data offshore, and avoid any US-influenced entities such as ICANN. Thank you AirVPN for the great continued service. I've been using multiple VPN connections almost constantly for the past year everywhere and as far as I can see that will continue -
1 point
ANSWERED Stop running Tor servers behind AirVPN
Nikolozik reacted to Tech Jedi Alex for a post in a topic
Yes, it's annoying. I know your thinking, unknown TOR exit runners, you want to help the TOR network by providing one more exit node, because kind of I am afraid of possible legal consequences running a TOR exit node over my ISP line but now I'm behind a VPN and I want to help; it's okay so far. But it's not okay to not take into consideration that some of us use services and websites which constantly try to prevent TOR exit IPs from viewing them (not limited to TOR, some try to block all anonymizer services). A TOR server will be listed on a TOR exit servers list even after you shut it down and as long as it's there we suffer from blocks. Blocks we are trying to circumvent; that's what a proxy service is good for, right? In addition, AirVPN run two exits themselves. Given the bandwidth of these servers (100 MBit/s) I don't think your contribution is a great gain in overall TOR performance as your internet connection is most probably not that fast and not that stable (I assume you use your internet to watch Netflix, play games online and the like, creating traffic which lowers performance of the node). Third, you expose AirVPN and yourself to attacks from the internet by those who want to literally destroy TOR. Attacks on AirVPN's servers will cause line problems, line problems harm the user's experience. You as a TOR exit runner (although behind a VPN) expose yourself to attacks, too: It's not the AirVPN server who gets infected because a vulnerability in the TOR software is being abused; it's your computer. Your computer gets infected, and it's most probably your personal computer with your personal information on it. Your antivirus software is just a bunch of algorithms, too, it's not supposed to detect 100% of vulnerabilites in software and prevent their abuse. And: It's you who will be marked an extremist. If you think it's easy these days to help TOR you are mistaken. Maybe installation and setup is easy, to preserve your own security by running this piece of software sadly is not. So, before you start that TOR software again, think twice. Thank you.
