Staff

Hello! We regret to inform you that we have been unable to contact one of our providers in Canada since 24 hours ago. All of its servers are down as well as its web sites. Affected servers are the following five: Almach Dheneb Grumium Kraz Rana Spica Luckily infrastructure redundancy is so high in Canada that lack of those five servers will not impact quality of service. We will update this thread with future developments, as soon as we receive any kind of information. Kind regards AirVPN Staff

Hello! On average Vancouver servers are 70% free. Bandwidth peaks do not exceed 50% availability. Demand for Vancouver bandwidth is still well within infrastructure redundancy. Kind regards

Ignore the previous message, we can infer the class of your OS from a line of the crash. Please try this: open a terminal in your Mac type the command sudo rm ~/.airvpn/default.xml run Eddie "default.xml" is Eddie configuration file and from the crash report we suspect it's corrupt. Eddie will re-create a new "default.xml" configuration file at the next run with default settings and the problem should be resolved. Kind regards

Hello, what is your Operating System name and version? Kind regards

Hello! On the server side we run OpenVPN 2.5 to offer ChaCha20-Poly1305 on the Data Channel. OpenVPN 2.5 is still in beta testing, although some key functions are performed by OpenSSL or mbedTLS which are stable, so we mark servers running OpenVPN 2.5 as "Experimental" (you will see them listed with the yellow warning color). OpenVPN 2.4.7 does not support ChaCha20 on the Data Channel so it's a no go (note that OpenVPN 3 is a library with client only, and not server, features). When OpenVPN 2.5 stable version is released, then ALL of our servers will support ChaCha20 on the Data Channel. Estimated release date is November 2019 according to OpenVPN community. In the meantime please feel free to use ChaCha20 on the experimental servers, of course. We can expand the network of experimental servers if we receive requests. Currently the servers in Canada and the Netherlands seem enough to support the traffic of clients using ChaCha20, but please let us have your feedback! Kind regards

Hello! Eddie Android edition 2.4 stable is out! Kind regards

Hello! We inform you that we will replace very soon server "Reticulum" in Singapore. A new server will take its place, in the very same datacenter. Reticulum is expected to stop working around the 1st of August. In the meantime we recommend that you connect to any other Singapore server. We will announce the new server as soon as it is ready. Singapore infrastructure offers a lot of redundancy, therefore we expect no load problems at all before the replacement is completed. Kind regards AirVPN Staff

Hello! Yes: you can change the behavior by un-ticking "Allow ping" in "Preferences" > "Network Lock" window (then click "Save" to store the change). Kind regards

Hello! You are probably trying to run Eddie 64 bit version in your 32 bit architecture Windows, which is impossible. Please download the version for 32 bit architecture. In the download page you have the option to pick 32 or 64 bit and the web server will send you the proper package. Get rid of the current version in your system and install again. Kind regards

@giganerd Oh yes, if one needs to run Windows in a VM and have its traffic outside the host VPN tunnel, then the most logical and probably easiest approach is just using the VM in bridge mode, hands down. In case a VM is not required, as perhaps it might be for Creative CC, then cgroups come handy. The purpose was to inform that traffic splitting on an application basis with OpenVPN is possible not only in Android but in Linux too, with the currently available applications that provide AirVPN integration. Kind regards

Please feel free to ask. See below. You might run Adobe CC in the proper environment and have that environment in the proper cgroup (handled automatically by Qomui). It's easy to run ACC in various Linux distributions, including Debian, Ubuntu and Fedora, but not in all of them. An idea: https://www.maketecheasier.com/install-adobe-creative-cloud-linux/ @giganerd Also, even if OP could not run CC in his Linux distribution, reply was meant to clarify that traffic splitting on an application basis is also possible in Linux. Note that cgroups are Linux kernel specific, not available in FreeBSD and OpenBSD kernels. Once you have traffic splitting on an application basis, in several cases you don't need anymore a whole bridged VM to split traffic of specific apps. Kind regards

Update: Eddie Android edition 2.4 Release Candidate 1 is available. Please check the thread updated initial message for changes. Kind regards

Hello! Please check your system DNS settings before and after the issue occurs. It's a trivial yet safest and fastest way to understand what happens. It's important to know that Eddie changes nameservers immediately after the VPN server DNS push. After that, and during the same VPN session, Eddie does not check or alter DNS anymore, so if "you" (your system) changes them on the fly, Eddie will not do anything. Additionally, you must be aware that Eddie may NOT able to handle DNS properly in systems where systemd-networkd AND systemd-resolved run (also important to know: systemd-resolved might run with or without systemd-networkd running). Unless you have on-link DNS (an abomination for DNS leaks, which unfortunately is now available on Linux too) Linux has a global DNS, so DNS leaks simply don't exist (DNS queries are tunneled regardless the DNS server they are sent to). For various complications and combinations involving DNS please cross check: https://wiki.archlinux.org/index.php/Systemd-networkd Kind regards

Hello! Qomui for Linux allows traffic splitting on an application basis, through cgroups. https://airvpn.org/forums/topic/26327-alternative-airvpn-client-with-provider-independent-double-hop-support-gnulinux/?do=findComment&comment=71685 Whether the feature is compatible with leaks prevention (of any traffic not to/from the "out of tunnel" processes) via firewall rules can be clarified by Corrado, Qomui author. Kind regards

Hello! It is not planned at the moment but we can of course keep your suggestion into consideration. What's the purpose? By knowing the scenario we can make better decisions. Kind regards

Hello! Eddie desktop edition is being developed as usual, with somehow a slower pace but you will see news soon. Eddie Android edition and OpenVPN 3 fork are being developed by another small team that does not work in any way on Eddie Desktop editions. Additional software for Linux, FreeBSD and OpenBSD (as well as OpenIndiana under consideration) will also be developed by the same team, after Eddie 2.4 stable is released. Currently the roadmap includes software for both x86 and ARM based Linux. Kind regards

Hello! Yes, definitely. According to our roadmap, "OpenVPN 3.3 AirVPN" based clients will be deployed for Linux (not only x86 but also ARM), OpenBSD and FreeBSD, three systems which are widely used even in various devices (including routers) using CPUs not supporting AES-NI. Kind regards

Hello! We can't reproduce the issue... Please upgrade to Eddie 2.3, or 2.4 beta 1 and test again at your convenience. Also, do not enter custom directive "block-outside-dns": that's a directive implemented only on OpenVPN 2.3.x and higher version for Windows, which is a system with incomplete DNS implementation (lack of global DNS). Kind regards

Hello! You can't at the moment: please generate profiles directly with Eddie Android edition, or use the following directives to connect from different platforms (remember that only OpenVPN 2.5 beta and OpenVPN 3.3 AirVPN support ChaCha20 on Data Channel): ncp-disable cipher CHACHA20-POLY1305 Kind regards

Hello! That's correct. You can start Eddie and have it connected to an experimental server with ChaCha20 during your device bootstrap by using a profile. Remember that you can generate a profile from inside the app, you don't necessarily have to rely on the Configuration Generator. Go to "Settings" > "AirVPN" and make sure that you have selected "ChaCha20-Poly1305" as "Encryption algorithm" Open "AirVPN Server" view Locate your favorite experimental server Long-tap on it and select "Add to OpenVPN profile", then confirm Go to "OpenVPN Profile" view, tap the generated profile and confirm When the connection is established, reboot your device. Eddie will start and connect to that experimental server during your device bootstrap Kind regards

Hello! Message edited properly to show how you can do that. Thank you very much for your remark. Kind regards

Hello! AirVPN is very proud to introduce for the first time ever OpenVPN 3 support for ChaCha20-Poly1305 cipher with Eddie Android edition 2.4. The new implementation means remarkably higher performance and longer battery life for your Android device. CPUs that do not support AES New Instructions, typically ARM CPUs mounted on most Android devices, are much faster to encrypt and decrypt a stream of data with ChaCha20 than AES. At the same time, ChaCha20 offers the same security when compared to AES. https://en.wikipedia.org/wiki/Salsa20#ChaCha_variant You can test right now the new cipher. We have prepared four test servers running OpenVPN 2.5 and supporting ChaCha20 in Canada, the Netherlands and Singapore. When you pick ChaCha20 as cipher in Settings, Eddie will filter properly Air VPN servers to let you connect to them. The outstanding feature has been made possible by AirVPN implementation on "OpenVPN AirVPN" of new directives, never supported before by OpenVPN 3, as well as a brand new, rationally re-engineered class for AEAD ciphers, which currently includes both AES-GCM and ChaCha20. Development of OpenVPN 3 will go on during the next months. Here's the current status: Eddie Android edition available languages are: Chinese (simplified), Chinese (traditional), Danish, Dutch, English, French, German, Italian, Portuguese, Spanish, Russian, Turkish. Eddie for Android is free and open source software released under GPLv3. We invite you to check from independent 3rd parties lack of trackers code signatures, for example here: https://reports.exodus-privacy.eu.org/en/reports/search/org.airvpn.eddie You can download Eddie Android 2.4 apk directly from our repository: https://eddie.website/repository/eddie/android/2.4/org.airvpn.eddie.apk You can also download it from the Google Play Store: https://play.google.com/store/apps/details?id=org.airvpn.eddie and in Amazon Appstore: https://www.amazon.com/Eddie-AirVPN-official-OpenVPN-GUI/dp/B07KTD6DH9/ref=sr_1_1?keywords=eddie+airvpn Source code is available in GitLab: https://gitlab.com/AirVPN/EddieAndroid/ How to enable ChaCha20 on the Data Channel Open "Settings" view, then open "AirVPN". Locate "Encryption Algorithm", tap it and set "CHACHA20-POLY1305", then tap "OK". New in version 2.4: Updated native library to OpenVPN 3.3 AirVPN ChaCha20-Poly1305 support on both OpenVPN Control and Data channels Support by OpenVPN 3 AirVPN of ncp-disable directive integrated in the app according to the cipher suite picked by the user For new features complete list, please see the changelog at the bottom of this post Main features: Free and open source OpenVPN GUI based on "OpenVPN 3.3 AirVPN" Complete ChaCha20, AES-GCM and AES-CBC support The only Android application officially developed by AirVPN Robust, best effort prevention of traffic leaks outside the VPN tunnel Battery-conscious application Low RAM footprint Ergonomic and friendly interface Ability to start and connect the application at device boot Option to define which apps must have traffic inside or outside the VPN tunnel through white and black list Localization in simplified and traditional Chinese, Danish, English, French, German, Italian, Portuguese, Russian, Spanish, Turkish Full integration with AirVPN Enhanced security thanks to locally stored encrypted data through master password Quick one-tap connection and smart, fully automated server selection Smart server selection with custom settings Manual server selection Smart attempts to bypass OpenVPN blocks featuring protocol and server fail-over Full Android TV compatibility including D-Pad support. Mouse emulation is not required. Enhancements aimed to increase accessibility and comfort to visually impaired persons AirVPN servers sorting options Customizable "Favorite" and "Forbidden" servers and countries OpenVPN mimetype support to import profiles from external applications Multiple OpenVPN profile support. The app now imports and manages multiple OpenVPN profiles Support for custom bootstrap servers Support for favorite and forbidden countries AirVPN broadcast messages support User's subscription expiration date is shown in login/connection information The app is aware of concurrent VPN use. In case another app is granted VPN access, Eddie acts accordingly and releases VPN resources Optional local networks access. In such case, local network devices are exempted from the VPN and can be accessed within the local devices Localization override. User can choose the default language and localization from one of the available ones Favorite and forbidden lists can be emptied with a single tap VPN Lock can now be disabled or enabled from settings VPN reconnection in case of unexpected OpenVPN disconnection. (It requires VPN Lock to be disabled) User can generate an OpenVPN profile for any AirVPN server or country and save it in OpenVPN profile manager Server scoring algorithm implementing the latest AirVPN balancing factors in order to determine the best server for quick connection Network name and extra information are shown along with network type Device network status management Kind regards & datalove AirVPN Staff Changelog 2.4 (VC 26) - Release date: 30 July 2019 by ProMIND [ProMIND] Production release Changelog 2.4 RC 1 (VC 25) - Release date: 26 July 2019 by ProMIND [ProMIND] OpenVPN 3.3 AirVPN fork synchronized to master OpenVPN branch [ProMIND] Native library dependencies updated to the latest releases [ProMIND] Minor bug fixes ConnectAirVPNServerFragment.java [ProMIND] connectServer(): pendingServerConnection is now properly cleared. This prevents a double call from onAirVPNLogin event (user login + user credentials loaded from AirVPN server) in case of a pending server connection going on Changelog 2.4 beta 1 (VC 24) - Release date: 19 July 2019 by ProMIND [ProMIND] Updated native library to "OpenVPN 3.3 AirVPN" supporting CHACHA20-POLY1305 cipher and ncp-disable profile option (forked from OpenVPN:master 3.2 qa:d87f5bbc04) [ProMIND] Updated default manifest to V256 airvpn_server_listview_item.xml [ProMIND] added a new layout for showing server's warning_open field AirVPNServerProvider.java [ProMIND] Added cipher filter according to user settings AirVPNServerSettingsActivity.java [ProMIND] Added encryption algorithm option for AirVPN servers AirVPNServer.java [ProMIND] Added class members to comply to Manifest V256 AirVPNServerGroup.java [ProMIND] New class for manifest V256 handling AirVPNUser.java [ProMIND] getOpenVPNProfile(): profile generator uses "cipher" and "ncp-disable" according to the user settings [ProMIND] getPasswordDialog(): soft keyboard is shown by default [ProMIND] loginDialog(): soft keyboard is shown by default CipherDatabase.java [ProMIND] New class for manifest V256 handling ConnectAirVPNServerFragment.java [ProMIND] Show a warning in yellow in case server has a warning_open status [ProMIND] Servers are now filtered according to selected encryption [ProMIND] searchDialog(): soft keyboard is shown by default ConnectionInfoFragment.java [ProMIND] Added cipher name and digest to info box OpenVPNTunnel.java [ProMIND] Added method getProtocolOptions() QuickConnectFragment.java [ProMIND] Show user selected encryption in status box SettingsActivity.java [ProMIND] Added encryption algorithm option for AirVPN servers SettingsManager.java [ProMIND] Added methods getAirVPNCipher() and setAirVPNCipher() SupportTools.java [ProMIND] Changed AIRVPN_SERVER_DOCUMENT_VERSION to 256 [ProMIND] editOptionDialog(): soft keyboard is shown by default VPN.java [ProMIND] Added class members cipherName and digest

Hello! On server side, we use OpenVPN 2.5 to support ChaCha20 on the Data Channel, so any server with OpenVPN 2.5 will be marked as "Experimental", to make clear that the OpenVPN running in it is a beta version. As soon as OpenVPN 2.5 stable is released, all the servers will be upgraded to support ChaCha20 on the Data Channel without the "Experimental" warning. Our next, imminent step is releasing Eddie Android edition with OpenVPN 3 supporting ChaCha20-Poly1305 to allow immediate testing from those devices based on Android that need ChaCha20 most, for performance and load reasons (such as any Android tablet, smart phone, Amazon Fire TV and any other Android based mediacenter using a CPU that does not support AES-NI). Kind regards

Hello! In addition to what HannaForest wrote, use end-to-end encryption in any case. Kind regards

@prebrov Please see also here to avoid conflicts: https://airvpn.org/forums/topic/26209-how-to-manage-client-certificatekey-pairs/ Kind regards