go558a83nk

actually, you're connecting just fine. it's the route checking that's failing. if you're using the network lock then you'll be safe to disable the route checking feature. Then it should stay connected.

the other Dallas servers aren't good? Unfortunately, Tonatiuh has just been withdrawn. It had some problems over its short life but for me and many it had the best routing. Sounds like it was best for you too.

Yes. crap. I know it had more problems than usual but it was the only one with good routing for many of us. USA ISPs are horrible.

has Tonatiuh been withdrawn?

if you're testing Toronto speeds no wonder you're not happy. Connect to Tonatiuh, Draco, and one of the others in Dallas (that's three different datacenters) and try things out.

Are you using openvpn client 1? That should be coded to use core 2. But, just make sure that when you are downloading/testing core 1 and 2 are being used. If only one core is being used, switch to the next openvpn client. try other servers and other ports, try TCP too. you don't need to upload a new config each time. Just change the IP address of the server, or just change the port number. then click save. sometimes the closest server doesn't have as good a route to you as other servers. Also, to get 50mbit/s you'll need to overclock it to about 1.2mhz. Stock 800mhz won't do it. https://www.snbforums.com/forums/asuswrt-merlin.42/ See that forum for some help.

download (1).png I've double-checked and I think they are right OK. My setup is different from the guide so I'm not familiar with what rules are suggested. The rule allowing destination "private networks" and "LAN service ports" is what is allowing access to the modem already.

Air only supports openvpn on any platform.

you're still only looking at NAT outbound. I told you I'm concerned about your firewall>rules>LAN (NOT firewall>NAT>outbound.)

I said you'd need a NAT rule and a LAN firewall rule. That is, firewall>rules>LAN and allow outgoing via WAN interface to router. Since it works already I'm concerned that something is wrong with your rules as this guide makes everything go out via VPN interface only if I recall correctly.

you sound like an intelligent person so I'm surprised you'd say something like this. surely you're knowledgeable enough about the internet of things to know that AirVPN can't control anything outside their server. is the server you're connected to overloaded? can you think of any reason whatsoever that they'd slow down and speed up their server at random just to annoy customers? also, many people run pfsense routers and you already have something similar. I don't think you'd convince any of us we're sacrificing security.

you'll need to allow access to the WAN interface for destination 192.168.1.254 in your outgoing NAT rules and in LAN firewall rules.

definitely. I use it.

Yes, UDP 53 is fastest for a good number of people I bet. So the SSL and SSH options were tried and not fast? Frankly, they aren't fast for me either. But, for some, they are the only way to get good speed. I've tried almost every protocol and and 512kb buffer. I am caping out at ~20 Mbps download / upload. I have ~300 Mbps download...that's a huge drop off. Funny enough, my phone over wifi is getting 50-80 Mbps download. How could a phone outdo a high end laptop? Phone is using just plain old OpenVPN app. Any suggestions would be welcomed. I have a strong consumer router that was pushing ~360 Mbps download without VPN. Btw. I am using the speed test on this website. Is it a good test to use? Use fast.com if you want to see actual throughput. Alternatively, I like beta.speedtest.net and/or speedtest.wowway.com I am going to tweak more settings over the weekend, but 120-160Mbps is fine for now. fast.com. What a great minimalist speed test website. But it doesn't capture upload. I just tracked at 60 Mbps while I am downloading stuff...that's a good sign. Have to retest when I am not downloading. I wonder why the speedtest on this website is not accurate if it's directly connected to their servers. Btw, is a router like this (https://www.asus.com/us/Networking/RT-AC88U/) capable of being a client without slowing down the speed drastically? Unfortunately using a router as a client you lose the functionality Eddie provides like connection block when VPN drops off. I think you can count on about 50mbit/s with that router. I do like Asus routers with Merlin firmware. He's built in an option that WILL block things should the VPN drop.

where did protonvpn admit that you cannot trust those servers? the only reply is something about secure core.

Yes, UDP 53 is fastest for a good number of people I bet. So the SSL and SSH options were tried and not fast? Frankly, they aren't fast for me either. But, for some, they are the only way to get good speed. I've tried almost every protocol and and 512kb buffer. I am caping out at ~20 Mbps download / upload. I have ~300 Mbps download...that's a huge drop off. Funny enough, my phone over wifi is getting 50-80 Mbps download. How could a phone outdo a high end laptop? Phone is using just plain old OpenVPN app. Any suggestions would be welcomed. I have a strong consumer router that was pushing ~360 Mbps download without VPN. Btw. I am using the speed test on this website. Is it a good test to use? Don't use the speed test on this site.

That is Air's DNS server for that VPN server. It has nothing to do with your personal settings.

Yes, UDP 53 is fastest for a good number of people I bet. So the SSL and SSH options were tried and not fast? Frankly, they aren't fast for me either. But, for some, they are the only way to get good speed.

take a look at changelogs for each release and determine if you need the update.

I will do this when I get home. It's highly possible my ISP are being douches. However, at work we have a nice healthy pipe, and I am still getting 30-40Mbps on my phone. have you tried Eddie and setting it to the various SSH and SSL options? sometimes those bypass ISP throttling. makes sense that your phone isn't that fast as usually those processors can't crunch openvpn super fast.

have you tried Eddie and setting it to the various SSH and SSL options? sometimes those bypass ISP throttling.

just keep an eye on the network status top users https://airvpn.org/topusers/ and you'll see that Air users aren't throttled to 40mbps. somebody his hitting 374mbit/s as I type this!

you know, the crazy thing is...I live in the USA and I have fewer hops to these NL servers than to the closest USA server.

hmmm, no, ISP's don't treat VPN traffic like other traffic. Used to be that way but not any more. Heavily encrypted traffic like seen on VPN is sent on a different route through the ISP network because it can't be immediately classified, it gets a lower priority and is shunted off through servers in the ISP network that have more limited bandwidth and higher latency b3efore it hits the internet beyond the ISP network thus a person gets lower throughput ('connection speed') on VPN through their ISP network. Burst speed for an ISP applies to normal traffic, not that with lower priority. This is a standard thing in all ISP networks, its designed in. I can partially agree with that as I've felt, for example, that my ISP purposely routes traffic to Air's servers via crazy routes just to be stinky. Let's just say I want to use an Air server in the same state I live in but it routes it halfway across the country then back to my state. I have to keep on my toes to find good routes. But, usually I can get my line max speed over VPN so I can't agree that I get slower speed and whatnot. A good way to test your theory is simply to use SSH, SSL even better perhaps, to test if your ISP gives you better performance. An ISP would have to classify SSL 443 as https traffic - it shouldn't be low priority. But, If plain UDP gives the best performance (as it does for me) then I believe that's proof your ISP isn't treating VPN traffic unfairly. Anyway, the point I was making was that ISPs prefer speed test traffic so that the customer thinks they have fast internet. Do you disagree with that?

Bursting and then leveling out at a slower speed is a common trick of ISPs. I propose that many ISPs actually do what they can to make speed tests look quite speedy: Prioritizing that traffic, allowing full speed always (not bursting and then slowing down). It would be a trivial matter for them. But, since you are using openvpn they can't see what you're doing. Therefore, they'll treat it like other traffic and allow a short burst at your "up to" speed (or max speed allowed by hardware), then slow it down to what they consider acceptable speeds. Keep in mind that openvpn runs on 1 core only. If you've got a dual core CPU, with hyperthreading 4 cores, then it makes sense that you'll see 20% overall CPU usage with 1 core pretty much maxed. Is that what you see?