Staff

@shortfacedbear Hello! While Eddie Windows edition does not feature traffic splitting on an application basis (i.e. the feature you would need) WireSock for Windows has emerged in the last months as a practical and efficient solution even for your needs. https://www.wiresock.net/ On Windows, WireSock allows per app traffic splitting, per app reverse traffic splitting, per IP address destination traffic splitting, and hybrid traffic splitting with an extremely simple configuration file. According to the new reports we received from some of our Windows customers, it is probably a good solution which will save you from virtualization and from any solution requiring a fairly decent system and networking competence. According to those same reports, WireSock is fully compatible with AirVPN but unfortunately it is not open source software as far as we can see. Kind regards

Hello! Please force Eddie to refresh immediately the server list by clicking the refresh icon on the "Servers" window. If that doesn't work, from the main window uncheck "Remember me", log your account out, then log your account in again. On the iPhone, can you tell us which VPN server(s) you're trying to connect to? Also compare the servers with the current status https://airvpn.org/status Kind regards

Hello! It was a momentary problem which should have been solved. Can you please try again and report back? Kind regards

Hello! If DCO becomes stable and maintains the performance claimed in the OpenVPN Hackathon 2019 yes, we do, as DCO would outperform WireGuard (in real life we don't see much difference though, but we must keep into account that DCO is still highly experimental). On top of multi-threading support, it could be used over TCP too, which would be significant. On the server side it resolves also WireGuard limitation regarding the automatic IP address assignment in place of the moronic static, hard coded and on file key<->address bijection needed by WireGuard. On the other hand, on the Linux universe, we don't foresee DCO included in the mainline kernel, while WireGuard is already there. We'll see. It's a worthwhile test and we're thinking about it. Kind regards

Hello! You have entered the TLS Crypt key for the correct entry-IP address (213.152.162.86 is an entry-IP address "three", where you have support for tls-crypt). Thus the problem is somewhere else. On some firmware, the "static key" field is not the "TLS key" field. If that's the case you need to put the tls-auth.key content in the TLS field, while the static key field must be left empty (it's for an OpenVPN working mode without PFS which we do not support). Also you should make sure that there's no block against UDP in the firewall rules. Kind regards

You could certainly ADD a Wireguard only server, without taking away an OpenVPN server. Hello! The matter for future servers might be different of course. Kind regards

@marcos.machado Hello! Assuming that there is indeed no block at all against OpenVPN or UDP in the network, a possible cause of the problem is a mismatched TLS key. For entry-IP address 1 you need tls-auth key while for entry-IP address 3 you need TLS Crypt key. You deleted the IP address of the server so we can't tell which key you need. Since tls-auth and tls-crypt are mutually incompatible and OpenVPN server can start either in tls-auth or in tls-crypt mode we have been forced to make this distinction on different entry-IP addresses. Your OpenVPN version is also quite old, so consider an upgrade if possible. The Configuration Generator generates the proper key according to the connection mode you have picked. If you need split files (i.e. certificates and keys not embedded in the ovpn file) you can enable "Advanced" mode and then check "Separate certs/keys from ovpn files" option. In this case, the CG names the tls-auth and tls-crypt keys respectively ta.key and tls-crypt.key. You will also need to select "2.4" in the "OpenVPN profile" combo box, because OpenVPN 2.5 and newer versions support directives which are unknown to OpenVPN 2.4. Kind regards

Hello! Yes, it's strictly mandatory to support OpenVPN on every and each existing server, otherwise we would break compatibility with a relevant portion of customers who rely on OpenVPN support for their devices (or even because WireGuard is blocked in their network) on specific server(s). Stopping OpenVPN on existing server(s) would be a huge and serious problem, even without considering the contractual breaches. Kind regards

Hello! So, you turn off the computer without shutting down Eddie first, and when you turn the computer on again Eddie fails to start. At that point you reboot the system and at the next attempt Eddie starts properly. If the above description is correct, it sounds like the typical problem caused by fast startup to many programs. Is "Fast startup" option in Windows enabled? If so, can you please try again with that option disabled? Should the above solve the problem, a concise explanation is due: when fast startup is enabled and you turn off the computer, in reality the computer kills some apps but not some processes and then hibernates. When you turn it on, the system recovers from the hibernation file, it does not perform a startup at all and some processes are woken up while other apps were killed. This will cause problems of all sorts to most programs working on networking from the userspace and more (not to mention the apocalyptic mess it caused with some system updates). When you reboot the system, the system performs a proper shut down and a proper bootstrap, resolving the problems. Kind regards

Hello! Please try again now. Kind regards

Hello! It might be a known Eddie Android edition bug (whose fix is planned on the next release): if your access credentials include the % character the credentials will not be processed properly and you will get an error message (however, the error message you report comes from Eddie Desktop edition, but basically that's the same meaning). Might it be the case? Kind regards

@ms2738 @ScanFarer Hello! DCO would resolve any problem and would not require this relevant waste of resources with the infrastructure split into "WireGuard only" and "all the rest" servers. As the "kernel acceleration module" which then became "DCO" project was announced in 2019 we thought the split you suggest would have been unnecessary. Five years have passed since that announcement and DCO is still "under heavy development, therefore neither its userspace API nor the code itself is considered stable and may change radically over time." so we might review our plans. Let's see anyway whether this first quarter of 2024 brings news on DCO development. Kind regards

Hello! OpenVPN directive "data-ciphers" is supported in OpenVPN 2.5 and newer versions while OpenVPN 2.4 does not support it. You may either upgrade OpenVPN (recommended: 2.4 is becoming too old) in your system or force the Configuration Generator to generate configuration files compatible with OpenVPN 2.4. To do so, in the CG web page enable "Advanced" mode and then set the "OpenVPN configuration" combo box to "2.4". Finally generate and download as usual. Kind regards

Hello! Do you get any improvement with WireGuard? In order to switch to WireGuard: from Eddie's main window please select "Preferences" > "Protocols" uncheck "Automatic" select any line with WireGuard. The line will be highlighted. click "Save" and re-start a connection to apply the change please make sure to test a few servers in different locations around your node Kind regards

Hello! Provided that exit confirmation prompt is disabled (please confirm, you can verify in "Preferences" > "UI" window) that's unexpected. What are your Windows and Eddie versions? Kind regards

@John Gow Thanks, we ignore the Linux Mint policy hostile to AirVPN and their reasons to act in this way after we supported the open source community so much in the last 13 years, but as far as it pertains to Reddit that's part of their policy enforced ever since years ago. Please note that it is in no way a block against AirVPN and that you can enter Reddit anyway from all the AirVPN servers. For a full description please jump here: https://airvpn.org/forums/topic/56980-vpn-servers-mostly-blocked-by-reddit/ It is, but it's not against AirVPN specifically. An important reason for which all VPNs tend to get blocked (but of course this can't be the reason for Linux Mint web sites) is that their usage has exceeded a critical threshold worldwide and it's now threatening businesses based on profiling, personal data harvesting and reselling. For other reasons, see also: https://airvpn.org/forums/topic/57171-no-specific-report/?do=findComment&comment=228533 Kind regards

Hello! According to the message pkexec file is not found. You should be able to resolve the problem by installing pkexec and making sure it is in the command path. Eddie uses it to run the backend process needing root privileges, but pkexec pre-installation is not granted in some distributions. Please let us know whether the problem gets solved. Kind regards

Hello! So the listening program runs Hello! So the device running the listening program is also the device connecting to the VPN. In this setup you must not forward the port on the router and you must not add VPN rules on the router. Please check here first: https://airvpn.org/faq/port_forwarding/ If the listening program is a torrent program also read here: https://airvpn.org/faq/p2p/ Kind regards

Hello! If the listening program runs behind the Fritz!Box router and it's the router the one device that connects to the VPN, then you need to forward packets properly from the Fritz!Box VPN interface to the final destination, because the VPN server forwards to your node, i.e the F!Box, and doesn't know anything about other devices behind the connected node, of course. This is an example of what you need to do in systems where iptables is available: https://airvpn.org/forums/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/ The above is not necessary if the listening program runs in the same device which also connects to the VPN. Kind regards

Hello! OK, "Automatic" always picks OpenVPN + UDP and never changes, so you need WireGuard or OpenVPN + TCP, and you need to select them manually once and for all to circumvent the block. This seems different from the problem of OP anyway. Kind regards

@firefox4dawin Hello! That's most unfortunate. We see that even OpenVPN over TCP with tls-crypt fails. As a last attempt please try OpenVPN alone, without Eddie, with TCP connection to port 443 of entry-IP address three. Instructions are here: https://airvpn.org/windows/openvpn/terminal/ Probably it will fail but it's worth a test just in case the problem starts from Eddie (for example if it gets blocked by any tool such as an antimalware program). Kind regards

I have no antivirus installed and I have windows defender turned off Hello! Please also make sure that the torrent program binds to the tun interface (if a bind option is available) and that uTP or any other equivalent traffic shaping option is disabled. UPnP and NAT-PMP must be disabled too, while DHT must be enabled. Kind regards

Hello! You should be able to avoid the password request by ticking "Don't ask [for] elevation [at] every run" in "Preferences" > "General" window. Eddie 2.23.2 is required, as this feature might not work properly in Eddie 2.21.8 on Fedora 38 and 39. Kind regards

Hello! Not entirely, because we aim at maintaining approximately the current redundancy. The reason is that for redundancy considerations and non linear CPU load on amount of connected clients we cannot deem one 3 Gbit/s server as equivalent to three 1 Gbit/s servers and even less so 10 Gbit/s server equivalent to ten 1 Gbit/s server. In this specific case four servers have been replaced by four servers (if you add up the other 10 Gbit/s server in Los Angeles) and more should come in Florida. Kind regards

Hello! Excellent, please keep us posted (moderators will keep the thread open for the readers and your valuable information on the test). Let us know whether you need help in order to build Gluetun in Raspberry OS 64 bit. Kind regards