go558a83nk

Have you modified anything to do with MTU or mssfix?

Re VPS usage, PIA staff have commented that all their servers are bare metal. I can't explain why the previous commentor has evidence to the contrary. https://www.privateinternetaccess.com/forum/discussion/comment/27828/

Who, what, when, where are all lost once the VPN session is over if there is indeed no logging. However, real-time monitoring occurs in every VPN network, no doubt. No reputable VPN company wants their IPs to be involved in heinous things such as child porn.

how did you solve it?

right, iptable usage to block whatever is certainly not novel. but, looks like zorro is trying to make it easier for people to manage automatically with their script.

The only linux I've used for VPN is that on my router and it has its own coding to manage policy routing and block clients if the VPN tunnel is down... I don't know if the following is a real problem, especially for those who use the Eddie client. However, I thought I'd share. https://zorrovpn.com/articles/linux-iptables-vpn-only which leads into the manpage for the script they've made The script is free to share and edit under GNU GPL. There is a section dealing with allowing access (of course) to VPN server IP. By default that section is geared towards zorrovpn since they are the maker. However, I'm sure it can be edited by somebody who knows what they are doing to work for Air.

This new server is in AS60118 if the information I see is correct. http://bgp.he.net/AS60118 I'm a little concerned about the connectivity of this new server. They have basically 1 connection, voxility. Are you not at all concerned about this?

hmmm..Maintenance taking longer than expected?

freedom and liberty do not mean anarchy, yet people these days tend to think they do. freedom can only go so far until it infringes on the rights of others. here, for example, think of the personal drone of today. more and more we hear of people flying their drones in ways that infringe on the rights of others. a story out of the USA talks about a woman living in high-rise building seeing a drone outside her window. this is too far. no, freedom and liberty only work for the good of everybody if people are civil and ethical, if they do unto others what they would have done unto them. that said, lack of freedom and liberty, because of an overbearing government, is no better. the government are no doubt strongly lacking civlity and ethics and think of the common man as nothing more than bugs to be squashed or votes to be bought.

Ok, great! What is your firmware? Did you compile stunnel by yourself for your router or is it an already available version? Kind regards merlin asus 378.51 on AC68 with entware-arm installed. stunnel is available in the entware-arm repository.

Please re-read my post. I'm using stunnel on my router. edit: anyway, I got it. I just added a line to the ssl file "ciphers = DHE-RSA-AES128-SHA256" and it works. noticibly less CPU usage and still a TLS1.2 cipher.

Thanks. I'd love to hear from staff an answer to my actual question. I can pull 50mbit/s with my setup but just trying to get every bit I can.

I'm running stunnel 5.14 with openssl 1.0.2a on my router. It seems the cipher that's negotiated is probably a little stronger than it needs to be (ECDHE-RSA-AES256-GCM-SHA384). The config, AirVPN*.ssl, only has a NO_SSLv2 option which is fine, of course. But, are there any other options I can input that will get stunnel to negotiate a cipher suite that's less CPU intensive? thanks for the help

just enable DHT and peer exchage and go. you don't need the public trackers. that said, get a grip man. port forwarding and public trackers access are no where near related.

one VPN service I've used has some servers that drop out like this with UDP connections. But others of their servers work just fine. It happens to me just using downthemall! extension for firefox with several segments enabled. really weird. Other VPN providers (including Air) along very similar routing have no problems at all.

I just tested it on my iOS8 iphone. openvpn connect with TCP 443 profile. connected right up, no problem, on both home internet (wifi) and cellular data. I also tried same profile in guizmovpn and it worked as well.

we need to see the log

I'm not sure how much this issue can be pushed onto Air staff. They can't control what routing a datacenter has but they can set standards for what datacenters they use so that routing is most likely good for everybody. Examples of datacenters that VPN companies use in Singapore Leaseweb Singapore - http://bgp.he.net/AS59253#_peers Softlayer Singapore - http://bgp.he.net/AS36351#_peers Digital Ocean Singapore - http://bgp.he.net/AS133165#_peers 8 to Infinity Singapore - http://bgp.he.net/AS45470#_peers (only two real peers, but iptransit and Telin are enough)

If user and password are used isn't ca.crt the certificate that's needed? Is that type of connection even possible with Air?

will there be another Dallas server eventually? Your post in the USA servers cancellation thread said "a couple" Dallas servers were on the way.

I just checked out Antares (Singapore) and Hadar (HK) 5 minute average charts for today. Earlier today Antares reached a peak of about 240mbit/s inbound and outbound (480mbit/s total) while Hadar is barely used. They are 1000mbit/s servers. I don't know if that's 1000mbit/s total or in each direction. Staff will have to answer that. If total, then that would mean that the 240mbit/s peak on Antares was still only half capacity (240 inbound + 240 outbound). If 1000 each way then it's only 1/4 capacity. So, I don't think any slowness can be blamed on Air.

two more in Sweden??

nice!

those are just basic iptables. if those don't work in the latest tomato then the whole router shouldn't work

Im on windows 7 Virgin Media SuperHub (100Mb Connection) Connected using the Airvpn Eddie 2.8.8 Connected Via Wireless as i never use the Ethernet wire. SSH Tunnel Port 22 using Eddie 2.88 Any help guys? is your superhub in modem only mode as suggested to try?