go558a83nk

Is there a way to setup SSL VPN on DD-WRT?

yes, with optware and installing stunnel.

 

If the staff are watching, is TCP required for ssh tunnel setup?  sorry if a dumb question.

 

Hello!

 

Yes, it is mandatory, no UDP support by SSH as you can imagine. So you have overhead by additional SSH tunnel and on top of that OpenVPN forced to work in TCP mode (which, for how OpenVPN works, will be slower and less efficient than UDP). You should never use this mode unless you absolutely need it for some reason (for example to bypass OpenVPN disruption or extreme shaping).

 

Kind regards

LOL, so it was a dumb question.  But, I'm no expert....

Here in Thailand they have apparently made VPN usage illegal because they want to monitor heavily.  Thus my attempt to hide my use of openvpn by ssh tunnel.

if my routing to the singapore servers was proper I think the ssh tunnel would work just fine because the latency would be low.  But, the lowest latency server to me is 240ms and up and depends on the time of day.  TCP just doesn't work well at those latencies.

If you can get something like optware installed then you should be able to run it.

I have optware installed on my asus ac68 with merlin firmware onto a USB memory stick.  I had to install bash and openssh with ipkg.  Bash runs the script, openssh is called therein.

So far no problems connecting and with stability, but speeds are much slower than "naked" openvpn run with the same router.  Not slower because of CPU usage but because it's a TCP connection I surmise.

If the staff are watching, is TCP required for ssh tunnel setup?  sorry if a dumb question.

seedboxes.cc

Just want to get an update from those who were having high latency to the new Sg servers.  My problems still exist.  I've sent several emails to my ISP with MTR results.  No reply and no fix as of yet.  The current political and governmental state in Thailand may account for their inactivity.

Just curious what router you are using.

QoS is bandwidth management.  You are safe to just disable it altogether. 

The only time you forward ports on your router is when it is making the VPN connection.  Since you are using a VPN client in mint then you need to leave your router alone.

I don't know what to say for your other questions.

@go558a83nk, I am not very knowledgeable about computer networking. I ran the traceroute command you ran and for both my home ISP connections, it looks like the route first goes to Europe, comes back to India and then proceeds to Singapore. For you, its going to the US and then to Singapore. You mentioned that the local ISP needs to be contacted to resolve this. Could you please explain what should I be telling them? Also, is it normal for such a thing to happen? I mean between you and me thats 3 ISPs that are routing it incorrectly. There seem to be a lot more. Are the users of all these ISP supposed to contact them individually? How does this work? Any idea why your work ISP is routing properly but my home ISPs arent?

I'm not a network expert either when it comes to how all the ISP and major worldwide networks work together.  I have seen an instance in the past where I contacted my ISP to let them know of a similar problem and it was fixed.  Whether or not it was fixed because of my email I'll never know.  It could be that I just caught them at a bad time.

Networks have to work together for internet traffic to flow.  Sometimes that means money has to be exchanged.  Sometimes that means that our ISP may not have rights to pass data onto another network.  The ISP at work obviously has peerage or IP transit rights that take me direct to Antares.

For my home ISP, it may also be a method of censorship.  I've come to this conclusion because there are two other instances of this problem I've had with my ISP and they were both with other VPN providers.  This makes the third.

If you contact your ISP, send them the text of your traceroute.

The instructions that say not to forward ports on your router are for when you are using a client on a computer.  If you are running VPN from your router then you do need to forward ports on the router.

remapping would be to instruct your firewall to forward port 7712 to, for example, internal port 34000.

If the port forwarding web page gives green light and your torrent client seems happy (you have incoming connections) then all is probably well.

I contacted Leaseweb directly about the problems I'm having, just asking them if there's anything they could do about it.

They very quickly replied asking for a bidirectional MTR, which I gave them.  They apologized but said that my ISP needs to look at the matter.  I knew that was the case but figured I'd try. :-)  (It's difficult dealing with Thai ISPs)

 

strideram, it sounds like you're experiencing the same problems I am.  Unfortunately, this is something that we have to talk to our ISP about.

 

Happening here in Japan too.  Leaseweb's Asia datacenter is pretty new.  This could be an issue with linkage.

exactly

strideram, it sounds like you're experiencing the same problems I am.  Unfortunately, this is something that we have to talk to our ISP about.

Just want to make AirVPN staff aware of a problem, but I believe it is out of their control.  However, this may affect many users.

I'm connected to Antares via a differnet ISP from the one I use at home.  The routing is just fine.  Above you can see the poor routing from my home to Antares. 

Below is a trace back to a router my traffic from home often traverses, so I use it as a test of routing to my home.  Seabone seems to be having trouble.

Tracing route to ten-gi-0-14-1-0_3005.cwt-core-03.totisp.net [203.114.117.65]
over a maximum of 30 hops:

  1    52 ms    50 ms    51 ms  10.4.0.1
  2    51 ms    51 ms    52 ms  103.254.153.124
  3    73 ms    52 ms    52 ms  xe0-0-1.cr01.sin-11.leaseweb.net [103.254.152.210]
  4    52 ms    52 ms    52 ms  te0-0-0-6.br02.sin-10.leaseweb.net [103.254.152.208]
  5    51 ms    51 ms    63 ms  xe-0-3-3.singapore2.sin.seabone.net [93.186.133.10]
  6   230 ms   227 ms   227 ms  ntt-verio.singapore2.sin.seabone.net [93.186.133.13]
  7   218 ms   218 ms   227 ms  116.51.26.174
  8   263 ms   262 ms   263 ms  ten-gi-0-7-0-6.kkm-core-01.totiig.net [180.180.249.77]
  9   263 ms   262 ms   263 ms  ten-gi-0-0-0-6.kkm-core-01.totiig.net [180.180.249.41]
 10   263 ms   263 ms   265 ms  in-addr.totiig.net [203.190.250.238]
 11   265 ms   262 ms   264 ms  ten-gi-0-14-1-0_3005.cwt-core-03.totisp.net [203.114.117.65]

Trace complete.

at this time my route from Thailand to this server goes to los angeles then back to singapore.  I've seen crap like this before from my ISP so I'll give it time for everything to get squared away.

/tmp/home/root# traceroute sg.vpn.airdns.org
traceroute to sg.vpn.airdns.org (103.254.153.68), 30 hops max, 38 byte packets
 
 5  ten-gi-0-9-4-0_2199.cwt-core-03.totisp.net (203.114.118.213)  2.663 ms  ten-gi-0-9-1-0_2197.cwt-core-03.totisp.net (203.114.118.221)  6.118 ms  6.287 ms
 6  ten-gi-0-14-2-0_2199.kkm-core-03.totisp.net (203.114.118.117)  5.668 ms  4.142 ms  hundred-gi-0-6-0-1.cwt-gw-01.totisp.net (203.114.118.134)  5.024 ms
 7  HUN-gi-0-5-0-1.cwt-core-01.totiig.net (180.180.255.61)  5.202 ms  hundred-gi-0-7-0-1.kkm-gw-01.totisp.net (203.114.118.238)  6.929 ms  5.044 ms
 8  ten-gi-0-1-0-4.knl-core-01.totiig.net (180.180.255.42)  18.804 ms  20.823 ms  HUN-gi-0-4-0-0.kkm-core-01.totiig.net (203.190.251.137)  6.493 ms
 9  *  ten-gi-0-0-0-1.knl-gw-04.totiig.net (180.180.249.154)  19.495 ms  ten-gi-0-0-0-0.knl-gw-04.totiig.net (180.180.249.190)  22.694 ms
10  ten-gi-0-0-0-7.cwt-core-01.totiig.net (180.180.255.37)  22.799 ms  ten-gi-0-0-0-3.knl-gw-04.totiig.net (180.180.249.130)  19.580 ms  ten-gi-0-0-0-2.knl-gw-04.totiig.net (180.180.249.234)  19.415 ms
11  xe-5-0-2.edge2.SanJose3.Level3.net (4.53.210.33)  329.007 ms  ix-11-0.tcore2.SQN-San-Jose.as6453.net (209.58.116.109)  331.413 ms  305.984 ms
12  ix-11-0.tcore2.SQN-San-Jose.as6453.net (209.58.116.109)  305.284 ms  303.240 ms  if-1-2.tcore1.SQN-San-Jose.as6453.net (63.243.205.1)  489.711 ms
13  if-13-2.tcore2.LVW-Los-Angeles.as6453.net (63.243.205.66)  507.363 ms  if-1-2.tcore1.SQN-San-Jose.as6453.net (63.243.205.1)  479.988 ms  492.647 ms
14  *  *  if-13-2.tcore2.LVW-Los-Angeles.as6453.net (63.243.205.66)  503.080 ms
15  *  if-20-2.tcore1.SVQ-Singapore.as6453.net (180.87.96.21)  483.567 ms  476.312 ms
16  180.87.96.34 (180.87.96.34)  340.709 ms  341.714 ms  if-20-2.tcore1.SVQ-Singapore.as6453.net (180.87.96.21)  483.232 ms
17  180.87.96.34 (180.87.96.34)  350.820 ms  te0-1-0-7.br02.sin-10.leaseweb.net (103.254.152.197)  348.713 ms  348.440 ms
18  te0-1-0-7.br02.sin-10.leaseweb.net (103.254.152.197)  359.555 ms  344.193 ms  xe0-0-0.cr01.sin-11.leaseweb.net (103.254.152.209)  338.774 ms
19  et49.ce01.sin-11.leaseweb.net (103.254.152.211)  352.475 ms  xe0-0-0.cr01.sin-11.leaseweb.net (103.254.152.209)  345.937 ms  341.683 ms
20  *^C
 

 

and .sg is gone.

 

hello ~250ms latency

any updates?

 

i just subscribed because of the .sg servers...

 

Hello!

 

We're glad to inform you that we're finalizing agreements for a 1 Gbit/s server in Singapore in a network neutral datacenter.

 

Kind regards

Welcome and happy news!  Can you give an estimate of when it'll be ready for use?

The AirVPN web interface for port forwarding gives you a little button to check that the port forwarding is working properly.

teredo is a service to allow IPv6 capability for IPv4 connections.  It's coming from your computer, not the router.  That screenshot is showing that the teredo service on your computer has opened up a lot of ports on your router via UPnP communication.

for bittorrent with AirVPN using the AirVPN software on your computer, disable UPnP and NAT-PMP in your bittorrent client (qbittorrent).  Then when you open a port via the AirVPN web page, put the port number it give you in to your client's section regarding port used.  I'm not sure what that looks like for qbitorrent.  For utorrent it's "port used for incoming connections".

When using the AirVPN software on your computer, the router does not need to be configured for port forwarding.  UPnP has nothing to do with what you're trying to accomplish here.  People disable UPnP for safety reasons and probably most do not need the router to have UPnP enabled.

very bad news for me too.  Living in Thailand, the singapore servers were only 30ms ping and could max out my bandwidth.  They were the reason I bought another 6 months over my initial 3 months.

connection to HK for me has poor speed (not Air's fault) so isn't an alternative.

Malaysia may have good datacenters but I think they have restrictive laws that would not allow for the service that Air wants to provide.

web browsers may leak your location directly.  I know firefox has a switch to turn it off.  about:config, geo.enabled, set to false.

not sure how to edit this function in other browsers.

I have the Asus ac68 and I can max my 25mbit line with AirVPN.  I've read others saying they can get up to 50mpbs with this router.

it comes stock with 800mhz dual core ARM but I've overclocked mine to 1000mhz.

It's a great router with merlin asus firmware, but will cost about $200

I usually connect to singapore servers and have to resort to using google dns because if I use AirDNS youtube streams from Europe instead of the nearest cache.  But, actually, even with using google DNS, youtube streams from a server in USA.  This is faster than if streaming from Europe, but not ideal.

Note: I'm ping/tracing route to the streaming server, not the web site.  Easy to quickly see using resource monitor.

I ran into a problem today with simultaneous connections to the singapore servers.

I'd connected with my home desktop to one of the singapore servers with the usual udp 443.

Then on the road via cellular I made a connection to sg.vpn.airdns.org udp 443 assuming it would put me on a different singapore server following the rule that same server and port isn't possible.

However, this action bumped my home desktop off the singapore servers.  My home desktop ended up on hadar (hong kong).

Must I activly choose another server to avoid conflict?  Just hoping a connection to sg.vpn.airdns.org would automatically sort it out.