Leaderboard

Hello! We're very glad to inform you that two new 10 Gbit/s full duplex servers located in Amsterdam, the Netherlands, are available: Dedalus and Felix. The AirVPN client will show automatically the new servers; if you use any other OpenVPN or WireGuard client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. They support OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor : https://airvpn.org/servers/Dedalus https://airvpn.org/servers/Felix Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff

Eddie 2.26.2 Desktop Edition released Hello! We're very glad to inform you that a new stable release of Eddie is now available for Linux (various ARM based architectures included, making it compatible with several Raspberry Pi systems), macOS, Windows. Special thanks to all the beta testers, whose invaluable contributions and suggestions in the last months have helped developers fix several bugs and improve the overall stability of the software. Eddie is a free and open source (GPLv3) OpenVPN GUI and CLI by AirVPN with many additional features such as: traffic leaks prevention via packet filtering rules DNS handling optional connections over Tor or a generic proxy customizable events traffic splitting on a destination IP address or host name basis complete and swift integration with AirVPN infrastructure with OpenVPN and WireGuard white and black lists of VPN servers ability to support IPv4, IPv6 and IPv6 over IPv4 support to Linux systems based on systemd and SysV-style init This version includes bug fixes and security improvements as well as OpenVPN, WireGuard and libraries updates. A new Eddie UI is in the works. We know we’ve been promising that for a long time, but development is well along. Stay tuned. Operating and architectural notes Eddie GUI and CLI run with normal user privileges, while a "backend" binary, which communicates to the user interface with authentication, gains root/administrator privileges, with important security safeguards in place featured in this new version: strict parsing is enforced before passing a profile to OpenVPN in order to block insecure OpenVPN directives fix for CVE-2025-14979 backend hardened authentication of client commands hardened security for sensitive operations client memory usage protection through limitation of client helper replies general cleanup Furthermore: external system binaries which need superuser privileges (examples: openvpn, iptables, hummingbird) will not be launched if they do not belong to a superuser. Eddie events are not run with superuser privileges: instead of trusting blindly user's responsibility and care when dealing with events, the user is required to explicitly operate to run something with high privileges, if strictly necessary Please consult the changelog for a more detailed and exhaustive list. Backend binary is written in C++ on all systems (Windows included), making the whole application faster. Settings, certificates and keys of your account stored on your mass storage can optionally be encrypted on all systems either with a Master Password or in a system key-chain if available. Download Eddie 2.26.2 Eddie 2.26.2 can be downloaded here: https://airvpn.org/linux - Linux version (several architectures and various distribution specific packages for easier installation) https://airvpn.org/macos - Mac version https://airvpn.org/windows - Windows version Eddie is free and open source software released under GPLv3. Source code is available on GitHub: https://github.com/AirVPN/Eddie Complete changelog can be found here. Kind regards & datalove AirVPN Staff

Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in Los Angeles, California, is available: Flegetonte. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Flegetonte supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Flegetonte Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff

Hello! This is an interesting smearing message that occasionally comes out, trying to exploit the forum we keep open for the community, for some hidden purpose or, we guess, just for hate. You can easily verify that every defect mentioned by the OP is either false or distorted. A community moderator provided some corrections that disprove the OP's claim, here we would like to add just three remarks on subjects we care about: interoperability with other VPN services, infrastructure stability and how good our remote port forwarding system is. We also want to quickly make you aware that the OP never opened a ticket for professional support, so he/she was probably not interested in a solution of his/her problems, but maybe only in building a case based on false or fabricated premises. 1. Eddie Android edition, AirVPN Suite and Eddie Desktop edition allow connections to any VPN supporting either OpenVPN or WireGuard through the most standardized method that can exist, the supported profile for each VPN application (much better than any API, especially when it does not exist on most VPN services). 2. Over the past 16 years AirVPN infrastructure constantly evolved toward more stability and speed, it's all in the records. In AirVPN we have had and we have users connected CONTINUOUSLY for SEVERAL MONTHS. Enough for connection stability? 😉 We could have even longer periods, if it wasn't for the necessity to reboot a server periodically for kernel upgrades. 3. Implementing remote inbound port forwarding over a VPN by having the VPN server use UPnP/NAT-PMP/PCP to dynamically open ports on behalf of clients is generally considered a poor architectural choice because: UPnP was designed for trusted, local networks No authentication in classic UPnP IGD exists Race conditions in a large infrastructure like AirVPN's one becomes an architectural problem UPnP would make "hot change" and other interesting features appreciated by AirVPN customers impossible Privilege escalation. UPnP used outside a local network facilitates various exploits including privilege escalation. The VPN server already controls firewall rules, NAT, routing and connection tracking. Using UPnP as an intermediary adds another protocol layer rather than configuring those systems directly. This depends on your design philosophy, but at the moment management does not see favorably functionality duplication. At the end of the day, such a poor choice would pose a bunch of problems for essentially nothing, as selecting a random port with the additional features is a matter of seconds. Kind regards

Just curious why add another server in LA, also with Tzulo like the others, when there's already plenty of bandwidth in that SW region and it provides no redundancy by using a different provider from the others? The Dallas servers are what desperately need an upgrade. 🤠

Yes, it's a known issue already addressed (need testing) please wait the 2.27.0 experimental version the first days of the next week. Thanks.

Hello! First of all please respect the netiquette or you will be moderated. You provided inaccurate information about Castula. Here below a screenshot (from the public real time servers monitor) with the recent history of the problems it had. As you can see, such problems were not critical. Packet loss occurred for a very limited time, a matter of minutes, and sporadically: no events in June, only one event in July, not impacting events on August. Note how solid and reliable Castula is. Also note that the packet loss is recorded as a weighted average of ping from VPN server to various testing servers in different locations, and from those testing servers to the VPN server. Thus, the outcome is reliable but a small probability that the problem affects the testing servers, or any hop in-between, and not the VPN server, remains. The same can be said for each VPN client node: if a client loses packets to or from a VPN server, the problem is not necessarily only on the VPN server side. Uptime is more than 99.5% with Tzulo servers. Flood attacks may happen and can alter the normal uptime, but after 1 year the uptime remains good and the servers are solid. You use AirVPN for self hosted servers, although this is not the purpose of the service. For self hosted servers you may need a dedicated server or your own VPS, especially if you want more than 99.5% uptime and all inbound ports available. Using AirVPN for hosting purposes is possible but questionable. Even if AirVPN offers remote inbound port forwarding, AirVPN is not a hosting provider and you can't expect for the current price the same performance you have with a dedicated or virtual server with business lines that you operate exclusively. Also note that downtime due to server maintenance (especially for kernel upgrades) is another factor that you can't manage by yourself and that makes AirVPN not suitable for hosting purposes if you pretend the uptime of a hosting provider. We can upgrade and reboot the servers when necessary especially for security reasons and best practice. With all the above said, we are constantly striving to improve our service; however, limitations may arise when it is used for purposes for which it was not designed. Kind regards

I don't believe that info is retained. There is no technical reason to do so ad-infinitum. Port is immediately open for forwarding by others if you remove it. Mostly the account to which the port is forwarded to at the time of lookup, I believe, which may or may not be the same account which the request is about, making it nothing you can really hold someone accountable for anything done via that port. And even then, accounts don't hold any personal information, safe for the mail address (which must be valid-looking mail addresses since the forums software requires it, but not valid as in reachable). Well, I had been torrenting over AirVPN in the past for years, only changing the port once in the entire time span, and nothing ever happened. Unless you're not just asking for the purpose of torrenting.

Any idea when a full M-Series Arm client will be released for Mac?

Hello! We do agree and we are planning to implement on our software per app traffic splitting on Windows too. Currently you can enjoy per app traffic splitting on Linux (AirVPN Suite) and Android (Eddie Android edition). If the machine you use for Steam is based on Linux you can already have per app traffic splitting with our software. If you run Windows, in the meantime you can consider WireSock, which offers traffic splitting and reverse traffic splitting (on an application basis) and is fully compatible with our WireGuard servers. The Configuration Generator will generate the profiles you wish. Kind regards

AIRVPN DOES NOT RECOGNIZE ANYMORE VERISIGN, AFILIAS AND ICANN AUTHORITY. OUR COMMITMENT AGAINST UNITED STATES OF AMERICA UNFAIR AND ILLEGAL DOMAIN NAMES SEIZURES. The United States of America authorities have been performing domain names seizures since the end of 2010. The seizures have been performed against perfectly legal web-sites and/or against web-sites outside US jurisdiction. Administrators of some of those web-sites had been previously acquitted of any charge by courts in the European Union. The domain name seizures affect the world wide web in its entirety since they are performed bypassing the original registrar and forcing VeriSign and Afilias (american companies which administer TLDs like .org, .net, .info and .com) to transfer the domain name to USA authorities property. No proper judicial overview is guaranteed during the seizure. Given all of the above, we repute that these acts: - are a violation of EU citizens fundamental rights, as enshrined in the European Convention on Human Rights; - are an attack against the Internet infrastructure and the cyberspace; - are a strong hint which shows that decision capacities of USA Department of Justice and ICE are severely impaired; and therefore from now on AirVPN does not recognize VeriSign, Afilias and/or ICANN authority over domain names. AirVPN refuses to resolve "seized" domain names to the IP address designated by USA authorities, allowing normal access to the original servers' websites / legitimate Ip addresses. In order to fulfil the objective, we have put in place an experimental service which is already working fine. If you find anomalies, please let us know, the system will surely improve in time. Kind regards AirVPN admins

Hello! This is a problem affecting a few Windows 10 systems that is being actively investigated by the devs. A fixed version is imminent: in the meantime you can try to connect via WireGuard, if it's a viable option in your network. Otherwise, you can consider to momentarily downgrade to Eddie 2.24.2. If you decide to downgrade, please remember to delete the configuration file that can be found here before installing the older version. Kind regards

For Wireguard, try different ports, though if your ISP filters ports it's unlikely either AirVPN's default 1639, Wireguard's default 51820 or the alternative 47107 will work. For OpenVPN.. someone else might step in. I don't use Windows anymore to check that more thoroughly.

I had this error and was able to fix it by changing the owner of the install folder to root sudo chown -R root /Applications/Eddie.app/Contents/MacOS/

I have noticed that the latest days i see less and less servers and countries available. Is there a problem? Is there something i am doing wrong?

2.26.2 re-released on Arch without the "v", other improvement to Arch PKGBUILD in the next release. Thanks.

Hello! I came across a few problems during AirVPN Suite 2.1.0 installation on a custom Linux box caused by the installer script. I had to fix the installation manually. Here my findings and thoughts. 1. read -p is not POSIX-compliant despite #!/bin/sh The install.sh script declares: #!/bin/sh and the documentation instructs users to run it with sh ./install.sh. However, the script uses read -p for interactive prompts, for example: read -p "Do you want to install AirVPN Suite? [y/n] " yn read -p is not part of POSIX sh and is not supported by shells such as Debian/Ubuntu's dash. As a result, running the installer with /bin/sh can produce an error such as: read: Illegal option -p The script does not check the return status of read, so it may continue execution with an empty/unset response. This can cause prompts to be effectively skipped and the installer to proceed with unintended defaults. Possible fix: keep the script POSIX-compatible by replacing read -p with: printf '%s' "Do you want to install AirVPN Suite? [y/n] " read yn The same issue appears in multiple interactive prompts throughout install.sh. 2. Incorrect group membership check The installer checks whether the airvpn user belongs to the airvpn group using: grep ^$AIRVPN_GROUP /etc/group | cut -d: -f4 | grep -q $AIRVPN_USER This is not a reliable way to check group membership. Because grep -q $AIRVPN_USER performs a substring match, it can produce false positives. For example, if the group members contain: someairvpnuser the check can incorrectly consider airvpn to be a member. It also directly parses /etc/group, which bypasses the system's NSS configuration, so it may fail on systems where group information is provided through LDAP, SSSD, NIS, etc. Possible fix if getent is available: getent group "$AIRVPN_GROUP" with proper parsing of the member list. If getent is not available the system's group membership mechanism may be a solution, for example: id -nG "$AIRVPN_USER" | tr ' ' '\n' | grep -qx "$AIRVPN_GROUP" 3. Not bugs but poor design install.sh performs several critical file operations using cp without checking whether they succeed. For example: cp bin/bluetit /sbin/bluetit cp bin/goldcrest $BIN_DIR cp bin/hummingbird $BIN_DIR If one of these commands fail, for any reason, the installer continues executing instead of aborting. There is no global set -e and no explicit error handling around these operations. As a result, the script can potentially reach its final success message even though one or more required components were never installed. This can leave the system in a partially installed and inconsistent state, while giving the user the impression that the installation completed successfully. The same issue should be reviewed for other critical commands such as mkdir, chmod, chown, systemctl, and service-management operations. At minimum, critical operations should check their exit status and warn the user. Seeyabyez

Hello! We're glad to inform you that infrastructural power up in Sweden will take place, probably throughout September and October. We're glad to know it! Kind regards

Hello! The GUI is mainly managed by Mono and this problem is not reproducible on our and our customers' Linux systems. Specifically, one of our testing systems is Debian 13 with KDE Plasma 5, and we don't see any problem at all. However, our DEs run on X.Org server, not on Wayland. Eddie and Mono may have various problems with Wayland on Debian 12, just like a lot of other applications have. You can consider to switch to X.Org. Can you also tell us which compositor is used in your Plasma environment (in Plasma, this is typically KWin)? Next Eddie GUI will not need Mono anymore and Wayland compatibility will be improved, but probably not on systems with archaic packages like Debian 12 (see below). But you can consider to upgrade to Debian 13. Debian 12 Wayland support was not ready for everyday use, while things improved on Debian 13. Also, Debian 12 regular security support ended on June 2026 and its kernel is very old, therefore upgrading to Debian 13 is in any case a good idea if possible. Also consider that Debian 13 is now the main development platform for Eddie Linux edition. Kind regards

Hello! @Flexion informed the support team that the problem was caused by the specific configuration of a private tracker limiting downloads for new users for a certain period of time. Therefore, "non-priority user" will have trouble in seeding. 🙄 Case closed. 😁 Kind regards

Hello! It's expected, unfortunately. Eddie includes the latest WireGuard version which requires macOS 12 Monterey or higher versions. The privacy protection offered by OpenVPN, anyway, is slightly higher than that offered by WireGuard. Furthermore there is no WireGuard kernel module for macOS so the performance gain you have on other systems from saving kernel space↔userspace crossing and packet-buffer movements is lost. Kind regards

@bilis @riotamus @Harold99_0 @sebalpatine @zeedatrup @Veep Peep Hello! A plausible explanation is that you're running an obsolete Eddie Desktop edition version. Eddie filters out servers whose connection mode is not compatible with your system setup. For example, as DCO support is completed throughout the whole infrastructure, an old Eddie version not supporting WireGuard and running an OpenVPN version 2.3.x will be unable to find a suitable server. Please upgrade your Eddie Desktop edition and report back at your convenience. If you are not running Eddie Desktop edition, please specify the software you're running. Kind regards

t's all good; I uninstalled and reinstalled the eddie tool. I have access to all the servers again. You can close the topic. good night

Open a support ticket ASAP!

Install LuLu firewall and get to know it. The builtin firewall only blocks incoming traffic, while LuLu manages your outgoing traffic. The rest is up to you. @Staff or one of the moderators will have to assist you going further.

Hello! I thought it was time to try and collect some of the wisdom floating around and see if we can't create a single thread for solving some of the most common and annoying repeat-issues. So how about it ! I define "common problems" as: if I'm getting a deja-vu every third time I post . Staff will have broken the Matrix by this point. Each problem will have its own headline and then with any number of solution-oriented links appended underneath. For this reason, this grand list isn't final and is meant to be updated continually. Naturally, the higher the link number for a solution, the more obscure the solutions are probably getting. Warning: solutions aren't guaranteed. As with anything technical, trial and error is a core skill Problem: Bootstrap Failed.Solutions:https://airvpn.org/topic/30824-bootstrap-failed-since-a-week/Problem: No Internet connection after shutting down AirVPN and/or can only use Internet while AirVPN is on.Solutions:https://airvpn.org/topic/14829-can-only-connect-to-the-internet-browser-through-airvpn/?do=findComment&comment=30509 Windows only: https://airvpn.org/topic/13584-connection-problem-when-not-using-airvpn/?p=38800 MacOS only: https://airvpn.org/topic/27993-cant-connect-to-internet-without-using-airvpn/ https://airvpn.org/topic/21194-virtualbox-is-this-air-vpn-also-cant-connect-internet-unless-signed-in/Problem: Cannot connect to any AirVPN server.Solutions:https://airvpn.org/topic/22140-cannot-connect-to-german-servers-anymore/ https://airvpn.org/topic/22066-cant-seem-to-connect-to-any-servers/ https://airvpn.org/topic/21418-new-to-airvpn-installed-avpn-on-surface-wwindows-10-cannot-connect-at-school-can-connect-fine-at-most-other-locations/?p=55515Problem: Issues with Curl.Solutions:https://airvpn.org/topic/27369-cannot-login-curl-is-required/Problem: Bad packet ID (may be a replay)Solutions:https://airvpn.org/topic/14094-weird-log-entries/Problem: Being censored and/or speeds being throttled/shaped by ISP or Government.Solutions:https://airvpn.org/topic/28847-connections-from-china/ Problem: MacOS client can't connect.Solutions:https://airvpn.org/topic/18251-airvpn-mac-client-problems/ Problem: Checking route IPv6 Failed.Solutions:https://airvpn.org/topic/29401-checking-route-ipv6-failed-cannot-connect-to-vpn-server-using-eddie/ Problem: Waiting for TUN/TAP to come up.Solutions:https://airvpn.org/topic/26072-route-gateway-is-not-reachable-on-any-active-network-adapters-10401/?do=findComment&comment=70761 Windows only: https://airvpn.org/topic/17440-guide-fix-for-tap-adapter-in-windows/ Windows only: https://airvpn.org/topic/30043-taptun-interface-wont-come-up/ Problem: Experiencing slow and/or fluctuating speeds in general.Solutions:https://airvpn.org/topic/30739-every-vpn-is-slow-for-me-despite-the-well-reviewed-vpns-im-trying-is-it-possible-my-isp-is-causing-this-i-feel-like-someones-playing-a-joke-on-me/?p=80014 https://airvpn.org/topic/18635-looking-for-fast-server-eu-that-goes-beyond-30-40mbit/?p=44998 For online gaming: https://airvpn.org/topic/30135-frequent-spikes-lag-on-videogames/?p=79046 https://airvpn.org/topic/1947-for-those-wondering-about-speed-performance/?p=1967 https://airvpn.org/topic/26157-airvpn-slowing-down-other-machines-in-network/ https://airvpn.org/topic/26117-slow-speed-sort-of/?p=70906 https://airvpn.org/topic/20812-very-very-slow-dns-lookup/ https://airvpn.org/topic/23743-download-speeds-dropping-to-zero-and-going-up-and-down/ Problem: Slow torrent speeds and/or disconnects.Solutions:https://airvpn.org/topic/28082-torrent-on-airvpn-speed-is-very-poor/ https://airvpn.org/topic/26218-slow-torrent-speeds/ https://airvpn.org/topic/23936-repeatedly-getting-disconnects-while-torrenting/ https://airvpn.org/topic/23499-slow-torrenting-speed/ https://airvpn.org/topic/23070-solved-p2p-slow-over-udp-and-fast-over-tcp/ https://airvpn.org/topic/22716-poor-torrenting-connection/Solutions are in link form without any explanatory text - at least not yet - so that the thread OP stays looking simple and uncluttered, where it's easy to find out what your problem is . Feel free to contribute with your own helpful links. The more feedback this thread gets, the quicker it can be improved and hopefully made useful.

Thanks for your answer. Ok, I'll do that in a couple of days. I've read somewhere that a similar situation turned OK by itself after 2/3 days. Let's wait a while and see... 🤞

Please open your own thread and give as much info on your setup as you can: OS, software, logs, what you tried, etc.

Hello, I'm developing an app called AirDash, it's an AirVPN dashboard that uses the API. It requires at least iOS 26 and iPadOS 26, built-in Swift 6. Notes: I don't have a paid apple developer account, so my only way to offer you a try is either to build the project via Xcode or to use the .ipa of the latest release available (currently v.1.0.4) via your preferred sideloading method. See details in the project readme. Features: Network: Full server list with load, users, health, ping latency, sort (load / name / ping), continent filter, search and favorites Server comparison: Long-press any server to add it to a comparison (up to 3); tap the toolbar button to view them side by side Dashboard: Account info (current IP, VPN status, expiration, credits, sessions, member since); swipe left on a session to disconnect Server detail: WireGuard or OpenVPN profile generation, direct import into the system VPN app, share and QR code (WireGuard) in a ··· menu; recent profiles per server with one-tap reimport Profile history: Recently used server profiles shown in Dashboard and in each server detail; supports one-tap reimport by protocol Biometric lock: Face ID / Touch ID protection, toggleable in Settings App icon: 8 variants: Auto, Classic, Light, Purple, Green, Red, Minimal, Minimal Dark Settings: API key rotation, light/dark/system theme, app icon picker, changelog, credits Notifications: Subscription expiration alerts 7 days and 1 day in advance (delivered by the OS even when the app is closed) Siri Shortcuts: VPN Status, My IP Address, Open Server (navigates directly to a specific server) Widget: Current IP, VPN status and active sessions on the home screen; configurable with a favorite server picker showing load, users and latency (Small, Medium and Large sizes) Quick Actions: Long-press the app icon to jump directly to Dashboard or Network Links: Repositorie Github: https://github.com/zlimteck/AirDash Releases Github: https://github.com/zlimteck/AirDash/releases If any members try it, don't hesitate to give me feedback, and suggestions for improvement. thank you in advance. GrimZ.

Pretty cool, keep at it

I often encounter the same problem, my not so good solution is just to generate another config with different servers and switching between the two when one does not work

This is curious, maybe this is what I've been experiencing? I've jumped around between Revati, Sarin, Xamidimura, and Maia. I went ahead and bought a new router this week, over $300, got tired of the old router's limitations/issues and wanted to get something future proof. Unfortunately even on this one, I dropped downstream connection again yesterday evening, and even just now a few minutes ago. I also want to add that I am using two STP Cat6a cables, one between my modem/router and one between my router/desktop. They are pretty new too. Despite the above though I still seem to only experience issues with AirVPN only. I don't have issues with other VPN services.

They will be lifted automatically after a certain small amount of approved posts, just keep posting.

I bumped into this because of Mac warning for end of support for Rosetta stuff. For anyone that also find this thread, I found the AirVPN Eddie Github code base mention they are working on a "UI 3.x" effort already underway (unreleased on public GitHub): a full native rewrite in C++, Objective-C/Cocoa on macOS see here: https://github.com/AirVPN/Eddie/blob/master/src/readme.coding.md#projects-ui-3x-under-development-not-released-yet-on-public-github So hopefully that development is going well and we will have a native silicon GUI in for Eddie sometime soon.

Hello! Yes, please do it. Currently the software is in public beta testing and is already quite solid. No, we can re-assure you that it doesn't. All the vulnerabilities (including, but not limited to, the one you mention on macOS) have been fixed, see the changelog: https://airvpn.org/forums/topic/80641-eddie-desktop-edition-226-beta-released/ A stable version is expected very soon. Kind regards

Hello! Of course. Eddie offers a GUI with a one-click connection button, but the case of firewalld is so special to be a very rare exception requiring manual intervention by the system administrator. We can't allow Eddie to manipulate your system in such a profound way. Note that Eddie will work anyway, but you can't use Network Lock to prevent leaks, because firewalld takes exclusive ownership of the firewall rules (Network Lock is based on firewall rules). And after all, do not underestimate yourself. The steps to fix the situation are very simple and "once and for all". Let's break the steps down: 1. Open a terminal (aka shell or Console or Konsole) from your Desktop Environment 2. Type the following command: sudo nano /etc/firewalld/firewalld.conf 3. You are now inside the "nano" editor, editing the firewalld configuration file with administrator (root) privileges. Move with the cursor arrow keys between the options and enter the following line: NftablesTableOwner=no make sure you press ENTER at the end of the line (so the line stays alone between all the other options, anywhere). 4. Save the file by pressing CTRL + O (keep CTRL pressed, and type O) 5. Exit the editor by pressing CTRL + X 6. Restart firewalld with the command (on the terminal): sudo systemctl restart firewalld Kind regards

hello. can you give some screenshots for this two moments? Hello! 1. Go to "Settings" > "Advanced" > "Custom AmneziaWG directives", turn on "Enable CPS" switch, disable "Random Presets" and select a web site from the list appearing after you tap on "Preset". Make sure you tap "OK" at the end to confirm (if you just tap "Back" button, the settings will not be stored). 2. Go back to the main view, select "AIRVPN SERVER", long tap the country or the specific server you want to generate and export a configuration file for, and select "Export AmneziaWG profile" or "Open AmneziaWG profie with..." according to your needs. Kind regards

In case anyone is interested I found a couple obfuscation generators for I1-I5 Using wireshark I can see the quic protocol being used. So I know this works. https://sketchystan1.github.io/payloadGen/ From bivlked https://sageptr.github.io/mini_quic_generator/ https://valokda-amnezia.vercel.app/

Slight necro, but had the same issue & the DNS suggestion in here fixed it, thanks Alex!

Got this message today on Tahoe. I know it could be a while before they shut down Rosetta but this message may alarm some Mac users.

This happened to me, but that was eons ago and on Windows host. Eddie typically backs up the current system DNS configuration on startup and replaces it with AirVPN’s DNS servers for the duration of the VPN session. Under normal conditions, the original DNS settings are restored when the session ends. However, if the client or system shuts down unexpectedly, this restoration step may not complete. As a result, the system can be left using AirVPN DNS servers. On subsequent launches, Eddie may then back up this already-modified state instead of the original configuration, effectively losing the previous (likely DHCP-assigned) DNS settings. To resolve the issue, reset your DNS configuration [while Eddie is not running, Staff]. Go to your network settings and set IPv4 DNS to Automatic (DHCP). This will restore your system’s default DNS behavior. Regards Viktor23596

@Bohdan Kushnirchuk Hello! How to solve: To grant Terminal full disk access (except some specific critical directories) on macOS, follow these steps: Open System Settings (or System Preferences): On macOS Ventura and later, click the Apple menu at the top-left of your screen, then choose System Settings. On macOS Monterey or earlier, choose System Preferences. Go to Privacy & Security: In System Settings (Ventura and later), select Privacy & Security in the left-hand menu. In System Preferences (Monterey and earlier), click Security & Privacy, then go to the Privacy tab. Select Full Disk Access: In the Privacy & Security or Security & Privacy tab, scroll down and click Full Disk Access in the left menu. Unlock Settings: At the bottom-left of the window, you might need to click the lock icon and enter your admin password to make changes. Add Terminal: Once the lock is open, click the + button beneath the list of apps with Full Disk Access. In the file chooser window that pops up, go to Applications > Utilities, and select Terminal. Click Open to add it to the list. Restart Terminal: Close the Terminal app if it’s open, then reopen it to apply the changes. 2. Open the terminal and change ownership of the relevant files: sudo chown root /Applications/Eddie.app/Contents/MacOS/* Kind regards

I've been a happy customer for a long time now. And I have a long time commitment to AirVPN too, with my plan not expiring for four more years. In the past few months the situation with servers load has gone from bad to worse. It's become noticeable in all applications. P2P above else, where I have a pretty firm idea of what the performance can be. This is my current performance under AirVPN. This is my current performance outside the tunnel. Before the recent influx of new users the situation was far better. Sad state of affairs and I'd like to understand if AirVPN is planning to so something to remedy the situation or if I have to look elsewhere in order to properly use my connection. Thank you. Even though the message might not sound like it, I'm a big fan of AirVPN and of their overall mission.

In what way would this be equivalent to using the same password in multiple places? You are not sharing your private key with the wireguard server like you would be with a password, you only share a public key. It's literally a feature of Wireguard to have multiple peers on the same tunnel. For this to happen you would be using the same wireguard tunnel (therefore the same key) to connect to both peers (in my case AirVPN and my home network). But I cannot use this feature because I do not trust the safety/security of my AirVPN-generated key pair. So yeah, currently I am doing what you are advising (two different tunnels therefore two different keys) but the experience is much worse than it could be, since you cannot have both tunnels active at the same time on Android. I need to choose whether I want to be able to access my home network or have my traffic tunneled through VPN.

In my case, that would not be the sole purpose of the key. The key would also be used to authenticate myself against my own wireguard server, which is the reason I want to remain in control of this key. If I were to do this setup currently, I would have to put complete trust in AirVPN to keep this key safe. Anyone with the key could authenticate against my own wireguard server, which is where the risk comes from. Keeping my private key stored locally and only providing the public key would definitely be preferred.

I also would like to see this option. For an example use case -- I have a wireguard tunnel set up between my home network and offsite devices. I already have generated keys, and can provide the public key (which should be all that is needed on AirVPN side). If I had this option, I could use the same wireguard key on my offsite devices with 2 peers (home network and AirVPN, only allowing local traffic to home network). Currently, the only option would be to use the private+public key pair combo generated by AirVPN, and allow that on my tunnel at home which would not be acceptable security wise. In that case then AirVPN or anyone who obtained the key would be able to VPN into my local network. It would be better to never have the private key stored anywhere else.

This is such a ridiculous reason to not get an audit. Anyone who thought AirVPN would do this would not be a customer regardless. It also assumes that it would be reasonable for AirVPN to take the time to get its infastructure ready for an audit and pass the audit, just to dismantle it. Audits can be expensive and time consuming to prepare for and pass, there would be no point in getting an audit if the plan was to just change after. It would be much easier, and accomplish the same thing to just not get an audit and make up excuses. If the point of an audit was just for marketing then AirVPN would of already done something akin to PureVPN and their always-on audit by KPMG. The audit is about upholding the values AirVPN claims to have by showing their customers that, like their peers, they can prove time and again they are who they say they are. Again, this is also ridiculous. There are legit auditors out there. Do you really believe that Mullvad and Proton are significantly more at risk then AirVPN is? The only risk comes to the costumers who have to provide an extra level of trust to VPN providers who are not willing to undergo an audit. Totally understand that but none of these excuses hold up at all under scrutiny. Obviously audits are not the only way AirVPN can show it does what it says. Reputation matters, and AirVPN has had a great one for years and years. BUT.... It is concerning that they seem so against audits when the consensus, especially in the privacy and security community, is that regualr audits are a benefit.

Hello! We have no plans to operate VPN servers in France (and in Italy) for the mandatory data retention framework still enforced in disdain of three different legally binding decisions of the CJEU (see below). France is in breach and Italy is too, but the Commission hesitates to open infraction procedures. Since the decisions pertain to the the preservation of a fundamental human right enshrined in the EU Charter of Fundamental Rights and in the European Convention on Human Rights, it does not seem inappropriate to consider that both France and Italy are committing one of the worst breaches a EU Member State can be guilty of. We might challenge with a casus belli the (il)legal framework in France, but we are already committed in other EU countries and we can't open potentially multiple legal battle fronts. The Court of Justice declares the Data Retention Directive to be invalid https://curia.europa.eu/jcms/upload/docs/application/pdf/2014-04/cp140054en.pdf The Members States may not impose a general obligation to retain data on providers of electronic communications services https://curia.europa.eu/jcms/upload/docs/application/pdf/2016-12/cp160145en.pdf The Court of Justice confirms that EU law precludes national legislation requiring a provider of electronic communications services to carry out the general and indiscriminate transmission or retention of traffic data and location data for the purpose of combating crime in general or of safeguarding national security https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-10/cp200123en.pdf Kind regards

Not only the internet. They give themselves the right to invade any country in the world who doesn't play under their rules.

The United States is an enemy of the Internet. More and more our technology and communications are captured illegaly and stored for many years and then used against us in court. The government seems to sincerely believe that it owns the Internet and regulary hacks into foreign servers to retrieve data, seizes domain names, etc. and any citizen who can be considered a hacker under broad laws will be thrown in prison. My warning as a US citizen is to watch out, encrypt, keep everything secure, keep data offshore, and avoid any US-influenced entities such as ICANN. Thank you AirVPN for the great continued service. I've been using multiple VPN connections almost constantly for the past year everywhere and as far as I can see that will continue