Jump to content
Not connected, Your IP: 34.200.218.187

Clodo

Staff
  • Content Count

    396
  • Joined

    ...
  • Last visited

    ...
  • Days Won

    22

Reputation Activity

  1. Like
    Clodo got a reaction from go558a83nk in Wireguard response from Mullvad   ...
    It is not mandatory to wait for next Debian version: we are already testing up to date WireGuard version.
    When we'll make WireGuard available to customers, it will be on all servers.
     


    Exactly, it's unavoidable.
     


    With OpenVPN that's currently correct.

    However, with WireGuard we need to keep it, because it's written in .conf file generated via Config Generator and stored by users. See below for users' option to change or invalidate it.

     

    Some of our competitors do this. 
    Some accept only their official client software because of the issue. That's neither good nor acceptable for us, as we don't want to lock user into our software.
    Therefore the change you mention might be an Eddie's additional feature but we will try to make Wireguard main branch as secure as Eddie's, whenever possible.
     
     


    Yes, we still use ifconfig-pool-persist in OpenVPN.  It's very different than Wireguard's addresses binary mapping, especially under a legal point of view.

    When a client is connected, OpenVPN daemon necessarily needs to link clients' public and VPN IP addresses. As soon as the client disconnects the link is lost.
    One of WireGuard controversies is that client's real IP address remains visible with 'wg show' even after client's disconnection. The issue is resolved by removing and re-adding the peer after a disconnection (disconnection in WireGuard is basically a handshake timeout).

     


    Some current testing implementation features are:
    Unique WireGuard IPv4 and IPv6 subnets across servers which don't conflict with OpenVPN subnets Assigning a non-conflicting, pseudo-random, local IP address  for each customer's device (for AllowedIPs), similar to remotely forwarded port assignments Users can renew a local IP address for a device anytime. WireGuard .conf manually used in official client would become invalid. Eddie will automatically update. The same happens when a user regenerates OpenVPN client certificate and key pair: the action invalidates any previously stored OpenVPN profile.
    We will offer an API to automate the above, letting users write a script that performs HTTPS calls to change local IP address, download updated .conf, and then wg-quick. 

    An API to obtain a .conf file (Config Generator without UI) is already in production for OpenVPN and it will be of course available for WireGuard too.

    When a device's WireGuard local IP address changes, up to a 10 seconds wait is required. It's the time required to propagate device key onto all VPN servers, in order to update the AllowedIPs peer node.

    No other solution allowing us to let our customers use the official WireGuard client with a simple .conf file and, at the same time, preserve their privacy currently exists.

    Please keep the above information as a proposal: we are currently studying pros and cons and something may change before WireGuard public beta support in our VPN servers is available.
     
  2. Like
    Clodo got a reaction from go558a83nk in WINTUN replacement for Windows TAP driver   ...
    Hi to all, the latest Eddie 2.18.8 experimental released today, works with wintun, please test if interested.

    Go to https://openvpn.net/community-downloads/, at bottom "OpenVPN 2.5_git wintun technology preview", click the "here" link and install.
    If you already have the right "openvpn.exe", use it directly: Eddie will install the wintun driver when needed, and also create the adapter.

    Eddie -> Settings -> Advanced -> OpenVPN Custom Path -> choose your "openvpn.exe" from 2.5, if already installed probably it is "C:\Program Files\OpenVPN\bin\openvpn.exe".

    At this point, Eddie will use OpenVPN 2.5 (but still with standard TUN driver).

    Eddie -> Settings -> OVPN directives -> Custom directives, add "windows-driver wintun".

    At this point, Eddie will use the OpenVPN 2.5 with the newest Wintun driver.
  3. Thanks
    Clodo got a reaction from bluesjunior in WINTUN replacement for Windows TAP driver   ...
    Without, "windows-driver wintun" without quotes.
    The stable 2.18 includes the same tapctl.exe of OpenVPN, and runs automatically the "tapctl.exe create --hwid wintun" if no wintun adapter is available.
    But we know there are some issues under investigation.
  4. Like
    Clodo got a reaction from funkoholic in Eddie Desktop 2.18beta released   ...
    I confirm this issue. It doesn't happen every time. When it happens, it's infinite and you need to manually press key N. It will be fixed soon, sorry.
  5. Haha
    Clodo got a reaction from bluesjunior in Eddie Desktop 2.18beta released   ...
    Cannot reproduce. Maybe you clicked the "Name" column header? Try to click the "Score" column header.  If the issue still occurs, please provide a screenshot to understand, it's the first time we see this issue. Thx.
  6. Like
    Clodo reacted to kiwi in Eddie Desktop 2.18beta released   ...
    Thank you very much, Clodo for your great work (especially under these shocking circumstances).

    All the best to you and your country
    kiwi
  7. Like
    Clodo got a reaction from jeuia3e9x74uxu6wk0r2u9kdos in Eddie Desktop 2.18beta released   ...
    We updated the Windows build (without changing version number) to identify better the following issues (Windows only):
    - Unable to find driver path 'C:\WINDOWS' - Fixed
    - VCRUNTIME140.dll (reported by @rdbrn) - Fixed
    - Options error: Unrecognized option (reported by @Telos , @kiwi, @blaHbluBB) - Fixed
  8. Like
    Clodo got a reaction from go558a83nk in WINTUN replacement for Windows TAP driver   ...
    Hi to all, the latest Eddie 2.18.8 experimental released today, works with wintun, please test if interested.

    Go to https://openvpn.net/community-downloads/, at bottom "OpenVPN 2.5_git wintun technology preview", click the "here" link and install.
    If you already have the right "openvpn.exe", use it directly: Eddie will install the wintun driver when needed, and also create the adapter.

    Eddie -> Settings -> Advanced -> OpenVPN Custom Path -> choose your "openvpn.exe" from 2.5, if already installed probably it is "C:\Program Files\OpenVPN\bin\openvpn.exe".

    At this point, Eddie will use OpenVPN 2.5 (but still with standard TUN driver).

    Eddie -> Settings -> OVPN directives -> Custom directives, add "windows-driver wintun".

    At this point, Eddie will use the OpenVPN 2.5 with the newest Wintun driver.
  9. Like
    Clodo got a reaction from go558a83nk in WINTUN replacement for Windows TAP driver   ...
    Hi to all, the latest Eddie 2.18.8 experimental released today, works with wintun, please test if interested.

    Go to https://openvpn.net/community-downloads/, at bottom "OpenVPN 2.5_git wintun technology preview", click the "here" link and install.
    If you already have the right "openvpn.exe", use it directly: Eddie will install the wintun driver when needed, and also create the adapter.

    Eddie -> Settings -> Advanced -> OpenVPN Custom Path -> choose your "openvpn.exe" from 2.5, if already installed probably it is "C:\Program Files\OpenVPN\bin\openvpn.exe".

    At this point, Eddie will use OpenVPN 2.5 (but still with standard TUN driver).

    Eddie -> Settings -> OVPN directives -> Custom directives, add "windows-driver wintun".

    At this point, Eddie will use the OpenVPN 2.5 with the newest Wintun driver.
  10. Like
    Clodo got a reaction from stupid are cocksure in Eddie Desktop 2.18beta released   ...
    You are right, we know the cause. No manual intervention will be required in future, this will be fixed before the next release. Thx.
  11. Like
    Clodo got a reaction from Chino in Eddie Desktop 2.18beta released   ...
    There was a bug in Windows Installer. We just fixed the current 2.18.7 Windows Installer to avoid this kind of issue for new beta users. Thanks to all for the report.
     
    Do you still have this problem? "Driver installation failed" isn't related to the elevation service. 
  12. Like
    Clodo got a reaction from Chino in Eddie Desktop 2.18beta released   ...
    Fixed, please retry. Thx.
  13. Like
    Clodo got a reaction from jeuia3e9x74uxu6wk0r2u9kdos in Eddie Desktop 2.18beta released   ...
    Previously we compiled ourselves OpenVPN, but for a problem (that I don't remember exactly now, sorry), for this release we bundled the same OpenVPN 2.4.8 you can find right now here: https://openvpn.net/community-downloads/ , OpenVPN Inc. linked against OpenSSL 1.1.0l.
    As soon as possible we will return on this issue and try to compile with 1.1.1 branch.
  14. Like
    Clodo got a reaction from keikari in Eddie Desktop 2.18beta released   ...
    Fixed.
  15. Like
    Clodo got a reaction from airnoob in Has Air given up on Eddie for desktop?   ...
    About Eddie 3.x : we are still working on that, but we can't give out right now 'screenshot', as the UI is in draft/debug stage, sorry.
    Development of 3.x depends on some core-changes that we made directly in 2.x series in the latest months.

    We have released a beta version of the new 2.X series here: 
    Still under testing in different OS and configs due to a lots of internal changes.
    We hope to improve the reactivity and feedback with this release, promote it as a stable version as soon as possible, and restart with frequent releases.
  16. Like
    Clodo got a reaction from X7iGmXYQBrnz in Eddie Desktop 2.18beta released   ...
    Yes thx, i checked it, Eddie 2.18.4 use a syntax accepted by Win10 but not by Win7 (the space after the option-name...), it will be fixed in 2.18.5,
    anyway the solution you write it's correct, thx.
  17. Like
    Clodo got a reaction from X7iGmXYQBrnz in Eddie Desktop 2.18beta released   ...
    Issues under investigation.
    I confirm that service installation works on Windows 10 but not on Windows 7, it will be fixed in the next release if possibile. Thx.
  18. Like
    Clodo got a reaction from harold.lewis in Eddie Desktop 2.18beta released   ...
    The .tar.gz contains a script "eddie-ui" (the right launcher) and a directory "bundle" with other files.  So the one in the main folder is the right executable.
  19. Thanks
    Clodo got a reaction from giganerd in Eddie Desktop 2.18beta released   ...
    Resolved in 2.18.3.
    Now Eddie detect the legacy presence of iptables in Debian10. In future Eddie version we will implement a native nft network lock.
  20. Thanks
    Clodo got a reaction from giganerd in Eddie Desktop 2.18beta released   ...
    Resolved in 2.18.3.
    Now Eddie detect the legacy presence of iptables in Debian10. In future Eddie version we will implement a native nft network lock.
  21. Thanks
    Clodo got a reaction from BlueBanana in Eddie Desktop 2.18beta released   ...
    Please report something: message error, log...
      Fixed in 2.18.2.
      Fixed in 2.18.2. In any combination of IPv6 disable: sysctl or grub.
      Fixed in 2.18.2
      Cannot reproduce. In 2.18.2 we also improved some layout, but in any test System notifications are showed, in our Notifications area of the sidebar too. Please recheck.
      Cannot reproduce. Sometimes, if you close the window with the X button, menu takes some seconds to update, but works coherently. If we use the minimize button, it looks always fine. Please recheck.
      Quick: Yes, now it's default.
      Yes: Profile file (~/.config/eddie/default.profile) now can be encrypted with OS keyring or a custom master password.
      I don't remember the specific forum topic, I think you can try Automatic.
      This need more investigation. Please report OS of the laptop, connection info (what servers) etc.
      Windows resize: Cannot reproduce. Please recheck. Does anyone else have this issue?
    Yes, if you use the installer, it's automatic. Otherwise check in Preferences the installation of the service, to avoid password input every time.
    In Preferences you can enable Network Lock at startup.
      Absolutely, there was a bug.
    Fixed in 2.18.2.
    Please download the .xz edition for Arch, install with  "pacman -U xxx.xz".  Official AUR repo will be updated soon, for this beta stage download manually from Download page.
      This is IMPORTANT.
    We cannot reproduce the issue on our labs, on "10.15 Beta (19A4871) - macOS Catalina".
    We added some logs lines to identify the issues.
    If the problem occurs again with 2.18.2, please open a ticket with the full support log (Logs -> Support icon).
    Thanks.
      Correct, now UI is totally separated from an executable/daemon (launchd) that performs elevated actions.
    With launchd daemon, it's not expected anymore the prompt every time.
    Please report any issue.

     
  22. Thanks
    Clodo got a reaction from BlueBanana in Eddie Desktop 2.18beta released   ...
    Please report something: message error, log...
      Fixed in 2.18.2.
      Fixed in 2.18.2. In any combination of IPv6 disable: sysctl or grub.
      Fixed in 2.18.2
      Cannot reproduce. In 2.18.2 we also improved some layout, but in any test System notifications are showed, in our Notifications area of the sidebar too. Please recheck.
      Cannot reproduce. Sometimes, if you close the window with the X button, menu takes some seconds to update, but works coherently. If we use the minimize button, it looks always fine. Please recheck.
      Quick: Yes, now it's default.
      Yes: Profile file (~/.config/eddie/default.profile) now can be encrypted with OS keyring or a custom master password.
      I don't remember the specific forum topic, I think you can try Automatic.
      This need more investigation. Please report OS of the laptop, connection info (what servers) etc.
      Windows resize: Cannot reproduce. Please recheck. Does anyone else have this issue?
    Yes, if you use the installer, it's automatic. Otherwise check in Preferences the installation of the service, to avoid password input every time.
    In Preferences you can enable Network Lock at startup.
      Absolutely, there was a bug.
    Fixed in 2.18.2.
    Please download the .xz edition for Arch, install with  "pacman -U xxx.xz".  Official AUR repo will be updated soon, for this beta stage download manually from Download page.
      This is IMPORTANT.
    We cannot reproduce the issue on our labs, on "10.15 Beta (19A4871) - macOS Catalina".
    We added some logs lines to identify the issues.
    If the problem occurs again with 2.18.2, please open a ticket with the full support log (Logs -> Support icon).
    Thanks.
      Correct, now UI is totally separated from an executable/daemon (launchd) that performs elevated actions.
    With launchd daemon, it's not expected anymore the prompt every time.
    Please report any issue.

     
  23. Thanks
    Clodo got a reaction from Air4141841 in Eddie Desktop 2.18beta released   ...
    Confirmed: it manage the deactivation with sysctl, but not detect the deactivation via Grub.
    Will be fixed in next release, expected in few days (based on other feedbacks).
    In the mean-time if you want, disable ALSO with sysctl (net.ipv6.conf.all.disable_ipv6=1) to bypass the issue above.
    Thanks
  24. Like
    Clodo got a reaction from airnoob in Has Air given up on Eddie for desktop?   ...
    About Eddie 3.x : we are still working on that, but we can't give out right now 'screenshot', as the UI is in draft/debug stage, sorry.
    Development of 3.x depends on some core-changes that we made directly in 2.x series in the latest months.

    We have released a beta version of the new 2.X series here: 
    Still under testing in different OS and configs due to a lots of internal changes.
    We hope to improve the reactivity and feedback with this release, promote it as a stable version as soon as possible, and restart with frequent releases.
  25. Like
    Clodo reacted to Grindle222 in Eddie Desktop 2.18beta released   ...
    It works great for me so far on my Ubuntu 19.04 machines.  My Windows10 machine not so well: after installing it and opening it, it was unable to connect to a server, but wouldn't let me close it, either.  After a reboot it worked better, although it threw an error at me when I was closing it (but still closed).

    "Please feel free to be specific on those texts: fixing errors is the main purpose of beta testing!"

    Okay, then.  The Public Exit IP addresses, with IPv4 above IPv6 on the Overview screen, don't quite fit into the space allocated (on Ubuntu; I didn't notice with Windows): the IPv6 address is sort of cut off on the bottom.  Otherwise, great!
     
×
×
  • Create New...