Staff

Hello! It's an old golden rule to make correlated wiretapping more difficult. The idea is that a criminal organization, or even some governmental agency, need more work to simultaneously wiretap your line and a node you connect to, when your line and the node are in different countries and different jurisdictions. Quite obvious if you start thinking about it. Kind regards

@NetShadow Hello! With BSD or Linux you can achieve the same purposes with more efficiency (theoretically, without graphic overehead, 512 MB are enough) and you stay in a more secure environment which you really control. Think about it. Being worried about NSA willing to make us incredibly rich while you use Windows is somehow hilarious. We wrote that Windows does not support multiple routing tables, which is a quite different thing. We don't know whether something changed in "Server" editions, but this shameful limitation (as incredible as it may sound) persists in desktop editions. It is different than handling multiple network interfaces, which is a feature supported by most systems since the 70ies, or multiple gateways, which is a common feature since when TCP/IP started to spread out. We don't agree and we want to make clear, for the readers, that we consider such claims very dangerous as well as misleading. Claiming any "awesome security" based on anything coming from a closed source system which has undocumented parts and which has proved in history to be developed over a questionable design must be avoided. Kind regards

Hello! As Windows does not support multiple routing tables, there is no trivial method to have multiple VPN connections in a way that each one is unique to each user, we are sorry. You have a global routing table which must be shared by all users and even if you consider to have multiple tun interfaces and multiple gateways (possible with Windows), you will need to face a lot of problems. If some advanced user can see a solution, any feedback will be welcome. Kind regards

Hello! Eddie Android edition is an original project by AirVPN, currently developed by ProMIND. In the "Information" > "Libraries" view, you find the various libraries which Eddie relies on: OpenVPN, mbed TLS, LZO, LZ4, boost, asio and breakpad. You don't need to update anything but Eddie itself. Kind regards

Hello! Have you also tested connections to port 443 of entry-IP address 3, in TCP? If so, can you please report back? Connections to entry-IP address 3 feature "tls-crypt", which encrypts the whole OpenVPN Control Channel, making OpenVPN fingerprint no more detectable (not even by DPI). OpenVPN 2.4 or higher version is required. Kind regards

Hello! A plausible explanation is that some AOL IP address "geo-location" database has been compiled to wrongly have Gliese exit-IP address in Germany. Kind regards

Hello! It sounds like some crash at some level, do you have the option to send us a logcat? Does it happen with 2.1 beta 2 and not with 2.0.1? What are your exact device model and your Android version? Kind regards

Hello! Each VPN server has its own exit-IP address which never changes. Can you please clarify what you mean? Thanks! To have your packets reach the Internet always from the same IP address, you need to stay connected to a single VPN server. Kind regards

Hello! We're glad to inform you that now you have the option of 2 and 3 years plans, which offer a remarkable lower price per month. We have also lowered the 1 Year Plan price. Check here: https://airvpn.org/plans Kind regards

Hello! Problem has been fixed, can you please test again? Kind regards

Hello! Please see here: https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses Kind regards

Hello! Eddie 2.1 can keep multiple profiles (2.0.1 could handle one profile at a time), so you can import all the profiles you need. For specific usage with other VPN services also contact that VPN service customers' care. Kind regards

Hello! We don't share your point of view. Longer plans imply that we're here to stay. We are one of the oldest VPN services around (check: which VPNs were born before 2010?) so we are confident that the large majority of our customers will gain even more trust by the longer plans. Of course such plans have nothing to do with "lifetime" subscriptions, which are actually impossible to sustain and are a symptom of fraudulent purposes. Kind regards

Hello! A possible workaround would be showing the dialog only when the app is in foreground. It needs an evaluation in the near future. It sounds very invasive and anyway it would be useless for the mentioned reasons: if Eddie can start and connect, it will do it, if it can't, it will not be able to throw any warning because either it's not running or can't evaluate the connection status properly before the boot has completed. We remind you that you can start and connect Eddie automatically at boot with profiles. Check the proper option in the "Settings" view and connect via a profile. If Eddie is running and connected to the VPN through an imported profile, Eddie will automatically start and re-connect through that last profile when you boot or reboot the device. As we explained, this is a best effort procedure: it's Android that decides WHEN to start an application which registered itself to start at boot. Additionally, manufacturers "boot managers" (which may run with high privileges) may cause sensational mess to the whole procedure, as we have ascertained on various Asus devices. A profile can be generated directly from inside Eddie (for AirVPN), you don't need the Configuration Generator. Yes, something to make the whole process more comfortable is under consideration. It's a good way to determine automatically a "good" server for you as we can't rely on ICMP. ipleak.net is anyway completely under the control of AirVPN (server included, of course) and is a general purpose web site, massively used by hundred of thousand nodes. The Android setting you refer to, available in Android 8 and higher versions, is not aimed to traffic leaks prevention even though a side effect is traffic leaks prevention in various circumstances. However leaks are always possible when an error occurs (for example comms to the server are lost) and OpenVPN throws the subsequent, critical error. During the re-connection attempts traffic leaks are possible and may persist until OpenVPN reconnects.. Eddie VPN lock, instead, will prevent those leaks, as you know. It will be considered, thanks. It has been implemented since version 1.0, please find the various options in the "Settings" view. You can split traffic on an app white or black list basis: if you define an applications white list, only the apps in the white list will have their traffic tunneledif you define an applications black list, the apps in the black list will have their traffic NOT tunneled Traffic splitting on an IP addresses basis is currently not planned. Kind regards

Hello! You have even to consider that: the One Month plan still exists with the same price since 2011the Three Months plan still exists with the same price since 2011the Six Months plan still exists with a lower price (30 EUR in 2011, 29 EUR now)the One Year plan still exists with a lower price (54 EUR in 2011, 49 EUR now)If we wanted to lock you in, we wouldn't have lowered prices of shorter term plans and/or we could have scratched some plan types. About the longer term commitments, in a sense you bet that the quality of service will remain high and that the service will still exist, in exchange of a remarkable discount. That's a bet that at the end of the day you must decide on your own, but anyway we have left exactly the same freedom of choice you had in 2011, so you are free to just ignore the new 2 and 3 Years Plans. Therefore we hardly see a truly rational explanation for your complaints, we are sorry... Kind regards

Sadly this is never going to happen due to the master password. Hello! That's correct, and we would dare to say "gladly", and not "sadly". Since when additional security is such a sad thing? By the way, starting from version 2.1, you can fall back to the lower security level offered by OpenVPN for Android. Be aware that such settings will allow traffic leaks outside the VPN tunnel in a variety of circumstances. Starting from version 2.1, in Eddie you can disable the VPN lock to have the identical behavior you have with OpenVPN for Android or openvpn-connect. However, such OpenVPN for Android and openvpn-connect settings are recommended only for those persons who don't care about traffic leaks and are happy to remain unaware of them (for example for a moderate/low risk threat model). Kind regards

Hello and thank you very much for your great feedback! This is entirely up to Android, anyway Android systems provide a dismiss all notifications button. Yes, this is by explicit design and meant to prevent unintended disconnections. What you want requires an additional, persistent notification even when you are not connected to the VPN. We will consider similar features in the future. There is no network lock and it's impossible for any app to provide a network lock, unfortunately. Reason is that you, Eddie and any other app (including of course OpenVPN for Android) are not in control of your device at root level, so you, Eddie and any other app can't modify anything on the system packet filtering table. Eddie implements an exclusive, best effort leaks prevention, which operates once the connection is established. This method is much more effective than any other one implemented by any other OpenVPN based application. We can reproduce leaks with OpenVPN for Android or openvpn-connect which are successfully prevented by Eddie. Exactly. This is a very important security feature. You can anyway operate at a lower security level, just like you do with OpenVPN for Android, by working with profiles which remain unencrypted. Starting from Eddie 2.1, you also have the option to export the settings for each VPN server or country in a profile, so you don't even need the Configuration Generator. Also remember that, just like it happens with OpenVPN for Android, starting and connecting at boot is a best effort whose outcome can not be guaranteed 100% in Android (and any other system which is out of your control, obviously). Anyway after a massive amount of tests we see that wherever Eddie fails, OpenVPN for Android fails too. We have plans to even improve the current procedure but always remember that you operate a device which is not under your control. So far such features have been explicitly ruled out, we're sorry. You have anyway a lot of other stats you can see at a glance in 2.1. Many thanks from ProMind! Kind regards

Hello! We're very glad to inform you that a new 1 Gbit/s server located in New York City (NY, US) is available: Gliese. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). Just like every other "second generation" Air server, Gliese supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.2 and tls-crypt. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.. You can check the server status in our real time servers monitor: https://airvpn.org/servers/gliese Gliese will replace Miaplacidus while Rasalas will be replaced by Dimidium. Rasalas and Miaplacidus failed to meet our technical requirements since a couple of months ago. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Thank you very much! Under investigation. Kind regards

Hello! Choosing a country different than your own is an old "golden rule" to operate in different jurisdictions to decrease the likelihood of wiretapping and correlations. The choice is up to you. In mobile devices we can't rely on ICMP (ping can be unavailable, terribly slow or very misleading) so we have a set of rules between countries and continents which become a new variable in the equation to compute the rate of a server (all the other parameters for the calculation are handled outside Eddie). Kind regards

Hello! We're very glad to inform you that for the first time in 8 years we have decided to modify our prices to encourage and reward longer terms commitments. While the shorter term plans remain basically unaltered, we have remarkably lowered prices of the long term plans and we have also added a brand new 3 Years plans for those who like to take greatest advantage from long commitments. Check out the new price list here: https://airvpn.org/buy Kind regards and datalove AirVPN Staff

As far as we can see Netflix USA (but only USA, note) is accessible from all of our VPN servers. Currently we have no clue about why you can access it for 2 or 3 hours and then nothing. When the problem occurs, are you still connected to the VPN and using the VPN DNS? Kind regards

Hello! Log is necessary. Please take it while the problem is taking place. In the "Log" view you have a share icon which allows you to share the log in a varitey of ways including e-mail. Kind regards

Hello! To all of those running Android 9, can you please test the new 2.1 beta 2 and verify whether the issue has been resolved? Thank you! Kind regards

Hello! Yes, it will be available soon! The name is Gliese. Kind regards