Hello!

We inform you that the three AirVPN servers located in Manchester, UK, are being migrated to new machines:

• Bubup
• Ceibo
• Chaophraya

• Eddie, the AirVPN Suite and the other software that downloads the server list from us: nothing. The new addresses are picked up automatically.
• Configuration files generated with the Configuration Generator that use host names: nothing, the names will resolve to the new addresses.
• Configuration files that contain IP addresses (for example with the "Resolved hosts" option, or WireGuard files with an IP address in Endpoint): please generate them again after the migration.
• Firewall rules, routers or scripts that allow or refer to the old IP addresses of these servers: please update them.

Hello!

Two critical vulnerabilities in PHP, the language that powers our website, forum and support system, became public before an official fix was available (CVE-2026-109618 and CVE-2026-109619). They affect every PHP version in existence and allow an attacker to run code on a web server by sending a specially crafted request. The PHP project has scheduled fixed versions for today, 21 October, at 14:00 UTC, and attacks exploiting the flaws have already been reported by several security firms.

The flaws are triggered by a specific kind of web request, the one browsers use to submit forms with file uploads, and they act before any application code runs. Until the fix is installed, the only effective protection is to refuse that kind of request at the web server. EDIT: this sentence was not accurate.
We have done so on all our systems.

What this means for you, starting now and until further notice:

• The forum is read-only. You can read and search everything, but you cannot post new topics or replies, edit posts, upload attachments, send private messages or change your profile.
• The support ticket area is read-only as well. You can read your tickets and our replies, but you cannot open a new ticket or reply to an existing one from the website. We keep answering existing tickets, and you will keep receiving email notifications for our replies.
• The customer API (https://airvpn.org/api/) keeps working, but it rejects requests sent as multipart/form-data: if your script posts that way, send the parameters url-encoded or as JSON instead.
• Support remains available by email: write to support@airvpn.org and we will assist you as usual.
• Everything else works normally: VPN connections, Eddie and the AirVPN Suite, login, registration, purchases and the client area.

Hello!

We're very glad to inform you that AirVPN Suite version 2.2.0 is now available for x86-64 and ARM based Linux systems. This is a maintenance and security hardening release focused on the traffic split infrastructure.

The 2.2.0 Suite includes:

• Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN and WireGuard servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the system bootstrap
• Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN and WireGuard servers
• Hummingbird: lightweight and standalone binary for generic OpenVPN and WireGuard server connections
• Cuckoo: traffic split manager, granting full access and functionality to AirVPN's traffic split infrastructure
• airsu: a "run and forget" tool to automatically set and enable the user environment for the X.Org or Wayland based ecosystem without any user input

• NEW: Cuckoo security hardening: namespace directories are now opened with additional ownership and permission checks
• NEW: once root privileges have been dropped, Cuckoo can no longer regain them (no_new_privs is now set)
• NEW: traffic split namespace names are now validated by both Bluetit (trafficsplitnamespace run control directive) and Cuckoo, and are limited to 32 characters
• WireGuard and network namespace runtime directories now use /run/wireguard and /run/netns (legacy /var paths removed)
• improved POSIX compliance of the installation script

Hello!
 

We reluctantly have to announce _gloomy news to you all: _{Spooky Halloween Deals} are now available in _AirVPN... 
 

Save up to 74% on AirVPN longer plans (*)
(*) When compared to 1 month plan price

Check all plans and discounts here: https://airvpn.org/plans

If you're already our customer and you wish to jump aboard for a longer period with this un-_boo-lievable deal, any additional plan will be added on top of already existing subscriptions and you will not lose any day.

Every plan gives you all the features that made _AirVPN a _nightmare for snoopers and a _scary service for competitors. Just check this frighteningly long list of terrific features if you dare:

• a clear mission without compromises https://airvpn.org/mission
• exclusive and comfortable remote inbound port forwarding system
• flexible, opt-in block lists against malware and other hostile entities. Pick predefined lists, add exceptions or additional blocks, define your own lists, or just use our totally neutral DNS by default
• improved API functions to let you control and configure VPN features and account settings
• WireGuard integration
• AmneziaWG support in Eddie Android edition, with traffic mimicry of real websites (QUIC) to defeat DPI-based VPN blocking. This year our traffic wears a costume too: with AmneziaWG on Eddie Android, your connection goes _{trick-or-treating} dressed up as an ordinary website, and DPI won't recognise who's behind the mask.
• Security-hardened Eddie Desktop edition
• Strong infrastructure growth: about 25% more total capacity in one year. Our servers grew by a ghastly 25% this year: more bandwidth to haunt the Internet at full speed.
• IPv6 support, including IPv6 over IPv4 and IPv4 over IPv6
• refined load balancing to squeeze every last bit per second from VPN servers
• free and open source software for Android, Linux, Mac and Windows offering advanced features
• easy "Configuration Generator" web interface for access through third party software
• guaranteed minimum bandwidth allocation
• GDPR compliance and very high privacy protection standards
• no log and/or inspection of clients' traffic
• effective traffic leaks prevention by AirVPN software
• Tor support via AirVPN software on Linux, Mac and Windows
• various cryptocurrencies accepted without any intermediary
• no obligation to use our free and open source software to enter AirVPN infrastructure. Interoperability is an AirVPN priority.
• perfectly clear and easy to read Privacy Notice and Terms https://airvpn.org/privacy

Hello!

Hello!

We inform you that all of our VPN servers in Uppsala, Sweden, will cease operations during the night between 30 September and 1 October 2026.

This withdrawal is part of our ongoing hardware renewal and connectivity improvement programme. These servers have already been partially replaced by brand-new servers in Northern Europe featuring more powerful hardware and 10 Gbit/s connectivity. Further deployments will complete their replacement.

If you currently connect to our Uppsala servers, please select alternative servers before the withdrawal. If you use OpenVPN or WireGuard configuration files pointing specifically to these servers, please generate replacement configurations through our Config Generator in the Client Area.

Do not hesitate to contact us for any information or assistance.
Kind regards & datalove
AirVPN Staff
 

Hello!

Hello!
 

We're very glad to announce a special promotion on our long term Premium plans for the end of Summer or Winter,
according to the hemisphere you live in.

You can get prices as low as 2.06 €/month with a three years plan, which is a 70% discount when compared to monthly plan price of 7 €.

If you're already our customer and you wish to stay aboard for a longer period, any additional subscription will be added on top of already existing subscriptions
and you will not lose any day.

Please check plans special prices on https://airvpn.org and https://airvpn.org/buy
 

Promotion expires on 2026-09-28 09:00 AM UTC.

Kind regards & datalove
AirVPN Staff

This release mainly focuses on fixing several issues reported by some users in the stable 2.26.2 release.

We hope to promote 2.27.1 to stable soon, once we have confirmation that these issues have been resolved.

• Go to the download page for your operating system.
• Click “Switch to EXPERIMENTAL”.
• Download and install Eddie 2.26.0 beta.

Version 2.27.0 (Tue, 01 Sep 2026 13:00:44 +0000)

• [fix] [linux] Create service unit on systemd in some circumstances
• [fix] [windows] Use tap-windows6 when ovpn-dco cannot offload cipher
• [fix] [windows] SSH key permissions applied by SID
• [change] [all] SSH stops with error if key file is unreadable
• [fix] [windows] DNS leak: auto DNS covers all physical adapters
• [fix] [windows] Adapter install fail: match by creation id, not name
• [change] [windows] Log tapctl details on adapter creation failure
• [change] [linux] Arch Linux PKGBUILD improvements
• [change] [all] Removed legacy TCP transport of the elevated helper
• [fix] [all] Misc fixes and cleanup

Version 2.27.1 (Thu, 03 Sep 2026 11:00:44 +0000)

• [change] [all] Updated OpenVPN to 2.7.6
• [fix] [windows] DNS Lock regression
• [change] [windows] DNS Lock applied even without DNS from the VPN
• [change] [linux] Network Lock refused if nftables tables owned
• [fix] [linux] Elevated finds sbin tools under cron PATH

This release mainly focuses on fixing several issues reported by some users in the stable 2.26.2 release.

We hope to promote 2.27.1 to stable soon, once we have confirmation that these issues have been resolved.

• Go to the download page for your operating system.
• Click “Switch to EXPERIMENTAL”.
• Download and install Eddie 2.26.0 beta.

Version 2.27.0 (Tue, 01 Sep 2026 13:00:44 +0000)

• [fix] [linux] Create service unit on systemd in some circumstances
• [fix] [windows] Use tap-windows6 when ovpn-dco cannot offload cipher
• [fix] [windows] SSH key permissions applied by SID
• [change] [all] SSH stops with error if key file is unreadable
• [fix] [windows] DNS leak: auto DNS covers all physical adapters
• [fix] [windows] Adapter install fail: match by creation id, not name
• [change] [windows] Log tapctl details on adapter creation failure
• [change] [linux] Arch Linux PKGBUILD improvements
• [change] [all] Removed legacy TCP transport of the elevated helper
• [fix] [all] Misc fixes and cleanup

Version 2.27.1 (Thu, 03 Sep 2026 11:00:44 +0000)

• [change] [all] Updated OpenVPN to 2.7.6
• [fix] [windows] DNS Lock regression
• [change] [windows] DNS Lock applied even without DNS from the VPN
• [change] [linux] Network Lock refused if nftables tables owned
• [fix] [linux] Elevated finds sbin tools under cron PATH