go558a83nk

But maybe you are right and my text is indeed misleading. I've edited my post and added a warning.

Hello,
 
different world visions. We have enough consideration for our customers to firmly believe that they can understand that a program that's not running can not do anything, even less can it reply to incoming packets. Writing that a program that's not running can't run until it is run is somehow insulting.
 
Of course momentary lapse of reasons are always possible but just like in your case they will be spotted soon and they will be functional to inner growth.
 
Kind regards

That IP is in the range 108.61.64.0/19 the description of which is Choopa, LLC, not vultr http://bgp.he.net/AS20473#_prefixes

@zhang888,
 
check out http://bgp.he.net/AS20473#_prefixes and look for london trust media.  those are PIA servers in choopa London.  vultr is indeed in the description for other IP ranges.
 
http://bgp.he.net/AS60485#_prefixes and http://bgp.he.net/AS57858#_prefixes Seems there are different AS for some of the IPs to which sweden resolves.  185.3.135.x are still shown in AS57858 in Estonia, description netroute.  Could that be an error?  The 5.157.38.0/24 range does say virtual in description
 
To propose that PIA moved in 1 day their servers to Leaseweb's datacenter in Germany just because of this thread is silly.

One point about the client area showing the client's real IP that must be made is in relation to tor.  If the user wants to make sure that Air does NOT see his/her real IP it's VERY nice to have that client area page so that the user can confirm that Air sees a tor IP.
 
Related to that, if a user connects with SSH or SSL tunnel (which PIA does not have) there is no IP address shown on the client area page.  I assume this is because the VPN server sees the connection coming from another Air IP but staff will have to correct me if I'm wrong.

the test is coming from that server, but outside the tunnel.  the point is to prove that the tunnel isn't degrading your speed (much) more than what encryption overhead necessitates.
 
the path to you can be vastly different server to server.  so, no, you should not expect out tunnel speed to be the same for every server.

Hello!
 
You're right, without the option "All servers for area/region" (which we deleted for good reasons) getting all the entry-IP addresses through the CG has become a time consuming task.
 
We need to insert the following information in the "How-To" forum. We apologize for the delay and for any inconvenience.

You can resolve "server_name.airvpn.org" to get a specific server entry-IP address. Server names can be found in the "Status" page of our web site, or in the Configuration Generator.

For example, from a command line interface:
nslookup nihal.airvpn.orgto get entry-IP address of Nihal server.
 
Please resolve country_code.airvpn.org to get all the entry-IP addresses of that country VPN servers. Example:
dig @8.8.8.8 nl.airvpn.org +short(NL is the country code for the Netherlands)

or
nslookup nl.airvpn.orgYou can resolve "continent_name.airvpn.org" as well, to get the full list of entry-IP addresses of VPN servers in a continent.
 
Finally, resolve "earth.airvpn.org" to get ALL the entry-IP addresses of all the VPN servers.
 
Note: dig is not available by default on Windows, you need to install it. Alternatively, you can use nslookup, but the output of dig with the option "+short" could be easier to parse in some cases.
 
Kind regards
 

Hello!
 
Today we're starting AirVPN fifth birthday celebrations!
 
From a two servers service located in one single tiny country providing a handful of Mbit/s, the baby has grown up to a wide infrastructure in 16 countries in three continents, providing now 86000 Mbit/s to tens of thousands people around the world. Quite electrifying for a service initially thought as a small experiment! Well, at least WE are electrified... you know, sometimes creators tend to overrate their creatures.
 
If you're curious to know something about a series of fortunate events which gave birth to AirVPN, have a look here: https://airvpn.org/aboutus
 
To worthily celebrate Air's fifth birthday, we're glad to inform you that starting from now we will offer a 25% discount on all plans. Hurry up, celebrations as well as this special offer will end on June the 6th, 23:59:59 UTC!
 
Kind regards and datalove
AirVPN Staff

Hello!
 
Not much, due to good Voxility direct peering https://www.voxility.com/shop/connectivity/internet/voxility-peerings
 
We reputed that is enough to guarantee a comfortable experience to most customers connecting to Ruchbah. Of course the final judgment on the accuracy of our decision will come from our customers.
 
Kind regards

Alistaro is actually a daughter company of Voxility and are located in the same office
 
Dimitrie Pompei nr. 10A in Bucharest.
 
Voxility changed it's business model to focus on Anti-DDoS protection services, so all the
regular unmanaged services seem to be maintained by AS60118 as of now.
2 of the top 10 Tor exit nodes (Aurora and Chulak) are now using them.
 
So far the connectivity is good
 

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Romania is available: Ruchbah.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Ruchbah supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

freedom and liberty do not mean anarchy, yet people these days tend to think they do.
 
freedom can only go so far until it infringes on the rights of others.  here, for example, think of the personal drone of today.  more and more we hear of people flying their drones in ways that infringe on the rights of others.  a story out of the USA talks about a woman living in high-rise building seeing a drone outside her window.  this is too far.
 
no, freedom and liberty only work for the good of everybody if people are civil and ethical, if they do unto others what they would have done unto them.
 
that said, lack of freedom and liberty, because of an overbearing government, is no better.  the government are no doubt strongly lacking civlity and ethics and think of the common man as nothing more than bugs to be squashed or votes to be bought.

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!

We're very glad to inform you that six new 1 Gbit/s server located in Canada are available: Aludra, Chort, Enif, Gorgonea, Rotanev and Sharatan.
 
The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Aludra, Chort, Enif, Gorgonea, Rotanev and Sharatan support OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Kitalpha.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server acceptw connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Kitalpha supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team
 

We owe you a lifetime supply of the finest non-industrial beers.
 
Kind regards

A small update:
 
MaxMind, ip2location, and domaintools (3 largets GeoIP DB providers used on the internet) already changed the country accordingly.
 
 
 

 
 

 

 
 
 
The next natural thing would be a little more patience, until the sites that have GeoIP discriminations will update their
IP databases. Normally it is a proccess that happens monthly (with a cron scheduled task).
 
 
I guess you guys owe me a beer

Hi zhang888 and everybody,
 
disclaimer: this message is written by only one person of the staff, while other persons are still investigating.
 
We confirm that:
- in VPN servers we use Diffie-Hellman 4096-bit keys
- in VPN servers we do not use the same prime numbers used by millions of web sites
- our web site does not support DHE_EXPORT
 
That said, we are still investigating whether a TLS downgrade on the Control Channel is possible and, even if it was, how to affect DHE to force one of the sides to a DHE_EXPORT downgrade up to 512 bit.
 
References which we have started from:
 
Theory:
https://weakdh.org/imperfect-forward-secrecy.pdf
 
Practice:
https://weakdh.org/logjam.html
 
At the moment, we operate from a very conservative/paranoid approach so we are not ruling out 100% anything, but we can at the moment state that:
 
- web site is totally secure on server side
 
About OpenVPN in our setup:
- Attack I is obviously not possible, since it requires weak DH 512-bit primes in the first place
- Attack II (and therefore Attack III) appears infeasible, for different premises which are not met:
"The server, in this case, only needs to support DHE_EXPORT cipher suites or use 512-bit parameters in non-export DHE ciphers. The client must be using the TLS False Start extension; that is, the client sends application data before receiving the server's Finished message in the TLS handshake."
 
The question is whether it's possible to think about a mutant, specific attack form explicitly aimed to OpenVPN Control Channel to affect DH keys for Data Channel encryption. We will keep you updated of course.
 
We are focusing on OpenVPN because even if you use it over SSH or stunnel, TLS+DHE downgrades on them appear to be not essential since your main "defensive" layer remains on the underlying OpenVPN.
 
Kind regards

I thought we are talking about blocked trackers here...
 
Also, are you thinking this feature is disabled because Deluge can't forward ports automatically? Won't work here, with AirVPN you need to forward them manually. And I think with any other provider, too.
 
(Sent via Tapatalk - this generally means I'm not sitting in front of my PC)

merlin asus 378.51 on AC68 with entware-arm installed.  stunnel is available in the entware-arm repository.

we need to see the log

One other thought - if you are using Windows, check OpenVPN buffer sizes.  What I had always attributed to Comcast throttling (always happy to blame anything on them), was not.  Speeds on UDP went from 8 Mbps to 51 Mbps with a more appropriate buffer size.  Seeing that many of your speed tests looked like mine did (6-8 Mbps), I thought I would mention it.
 
See my results here and discussion of the topic in the few posts above it.  https://airvpn.org/topic/13652-eddie-udp-443-on-windows-vs-linux/?p=27134

two more in Sweden??

Hello!

We're very glad to inform you that a new 100 Mbit/s server located in Ukraine is available: Theemim.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Theemim supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that two new 1 Gbit/s server located in Canada are available: Alhena and Tegmen.
 
The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Alhena and Tegmen support OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team