Staff

Hello! We're very glad to inform you that a new 100 Mbit/s server located in France is available: Fornacis. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Member Area"->"Access without our client"). The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Fornacis supports OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! Sure, it is http://ipleak.net All the external services that we promote, sponsor or directly maintain will be soon organized properly in a dedicated menu item. Kind regards

Hello! We're very glad to inform you that a new 1 Gbit/s server located in the USA (Jacksonville, Florida) is available: Pollux. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Member Area"->"Access without our client"). The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Just like every other Air server, Pollux supports OpenVPN over SSL and OpenVPN over SSH. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! A coincidence, absolutely. Kind regards

Hello! OpenVPN over PPPoE is surely possible. Since you connect, you don't even have a redirect gateway issue. However, your slow speeds might be caused by the overhead that PPPoE introduces (when you connect over OpenVPN over PPPoE, you are in practice establishing a tunnel within a tunnel), so our default MTU size may be too large and this causes packets fragmentation. Please see here http://michael.stapelberg.de/Artikel/mtu_openvpn and if you catch in the logs lines that hint to MTU problems, try to adjust the MTU size on your client configuration file (we're sorry, this option is not currently supported by the Air client for Windows, so if you run Windows please use OpenVPN GUI or OpenVPN directly). Kind regards

Hello! Thanks for the information about the display glitch with Chrome. About the previous issue, we are working to re-enable a grace period similar to the one that was implemented in our previous system. Kind regards

Hello! If you use the Air client for Windows: after you have picked a server from the server list and before connecting, please click on the "Modes" tab and select a port, then click "Enter". If you use any other OpenVPN GUI/wrapper or if you use OpenVPN directly: please select those ports when you generate the files for the connection in our configuration generator after you selected "Advanced mode". Kind regards

Hello! We do both things, although generally renting is our first choice over owning. We do not own datacenters. We are not a tier provider. Renting a server does not increase or lower security over owning it, and vice-versa. Kind regards

Hello! onion.to is a gateway from the WWW to onion. You don't need TOR to access it. Kind regards

Hello! Please feel free to contribute to this: https://airvpn.org/forum/21-database Without a shared IP address an anonymity layer would be seriously weakened. With a shared IP address, abuse by someone can have consequences for everybody. We have to draw a fair balance, but we can't renounce to shared-IP addresses, because one of the most important and basic features of our service is providing a strong anonymity layer. Kind regards

Hello and welcome aboard! The first thing you can try is a connection to ports 53 UDP and 80 TCP to make a performance comparison test. Some ISPs cap bandwidth on some ports. Kind regards

Hello! Does the server have a bind option? If so, can you please check it, just in case it is bound to your physical interface? When the system is connected to the VPN, the rat server should listen to the tun interface (the virtual network adapter used by OpenVPN). In most cases this is done automatically, but several servers and services allow an explicit bind, so it's worth a check. Kind regards

Hello! If the port checker (any port checker) does not receive any reply, it will indicate the port as "stealth" (or "closed"). If it receives a refusal reply it will indicate it as "closed". You need to have your listening service running and replying while you perform the test. Our servers simply forward packets to your OpenVPN client, they never take the liberty to reply in your place. Kind regards

Hello! What service is listening to port 2105? Kind regards

Hello! Can you please try port 53 UDP and report if the problem is the same? The kind of network lock you met is in our experience commonly caused by something that wrongly interprets the normal OpenVPN UDP flow as an attack. When you're connected to the VPN over UDP, all the incoming traffic is UDP, as you know, so this might trigger the security systems of packet filtering tools etc. This would explain also why you don't have problems with TCP. We have noted this behavior with some Internet security suites for Windows, can you please check in your system? Kind regards

Hello! Can you please make sure that the service(s) behind the VPN server are running and listening to the correct ports when the test is performed? Kind regards

Hello! Can you please make an example (an onion site address and an Air VPN server from which you can reach it without TOR)? Kind regards

Hello! Thank you for the suggestion. Can we ask why you would be willing to use a torrent proxy? It's a delicate argument, because there are security risks to consider. Some torrent client, like uTorrent, BitSpirit, and libTorrent, write an IP address directly into the packets sent to the swarm peers. So when they run in a machine where an OpenVPN client has established a tunnel in routed mode all is fine but when they are behind a proxy they write your REAL IP address inside the packets. See also here: https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea Kind regards

Hello! Thank you, we're glad to hear your appreciation about the new system. About the issue, you are right. The system still needs some fine-tuning, we are working on it. Kind regards

Hello! Thank you, we are aware of the problem and we're working to fix it. [EDIT: fixed] Kind regards

Hello! The selection is governed by randomness (remote-random OpenVPN directive). For additional information please see here (search for "remote-random"): https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage Kind regards

Why don't you add many more servers locations? A new server location must comply to every AirVPN requirement. Contrarily to some of our competitors, we don't add locations just to have "one more country flag", in disrespect of service quality and customers' security. We take every care in order to provide high quality of service and high security. The servers datacenters must comply to our requirements for privacy, bandwidth, traffic, peering, net neutrality and usage policy. All these factors together restrict significantly the range of viable choices. The privacy requirements alone cuts out entire countries, while several other countries are discarded because they have an insufficient infrastructure. This is the only way to keep the service in line with our vision and our quality and security standards. Under a security point of view, picking a server outside the country you live in is a superior choice: an adversary with the ability to monitor your Internet line will have more difficulties in re-building your connections paths and enlarge its monitoring powers into different jurisdictions. Under a performance point of view, geographical proximity does not always imply network proximity. Also, we can't ensure 1 Gbit/s for every and each location. A better way to select a server to get higher performance is determining, through our servers monitor, the servers with the lowest relative latency and pick, between them, those not at capacity. If you need a particular location to bypass geo-IP-location based restrictions, first have a look here. If the service you're interested in is included in our anti-blocking system, you will probably get higher comfort and performance from a connection to the network-nearest server to you. An example: if you are in Europe and you wish to access Hulu, it is likely that connection to an European server, instead of a connection to an USA server, will result in a better performance (especially if your ISP is not a tier1) and at the same time will allow you to access European services more swiftly. If the service is not included in our anti-blocking system and/or it is in a country where we do not have servers, ask for it: routing anti-geo-IP-location based restrictions servers are not bound to our requirements for privacy legal framework etc., so we will evaluate your request without prejudice deriving by our strict requirements.

Do you accept Bitcoin? Yes. Just select "Bitcoin" at the checkout to pay with Bitcoin. No intermediary is involved in the transaction: you will pay directly to us. Note: you can significantly increase privacy and also add a strong anonymity layer if you always run your Bitcoin client behind Tor.

How many simultaneous connections can I establish from a single account? Each account can establish up to 5 (five) connections to different VPN servers. Additionally, if all the devices are on the same network, you can use a Tomato / DD-WRT / pfSense / Fritz!Box router or a computer configured to act as a "gateway/host" through connection sharing to access a VPN server from all of your devices with a single account. If you need more than 5 connections simultaneously from different networks, you need additional accounts subscriptions.

Do you allow p2p? How can I optimize performance of eMule and BitTorrent with AirVPN? Yes, p2p is allowed, as well as any other protocol. Currently p2p is a set of the most efficient protocols to share and access information on the Internet. We do not discriminate against any protocol. To obtain the best performance with a BitTorrent client or an eMule client, log your account in our web site and proceed to remotely forward a port from the menu "Client Area"->"Forwarded ports". Pick a port or let the system choose an available one for you. Pick "TCP & UDP". Remember the port number. Then, configure the "Port used for incoming connections" (also called "Listening port") in your BitTorrent client so that it matches the port number you have just forwarded remotely. On eMule, go to "Options"->"Connection" tab. Write in both fields of "Client ports" the number of the port that you have forwarded. Disable UPnP, NAT-PMP and any possible automatic port mapping feature that can modify the listening port. If you run uTorrent or any other software with bandwidth management, make sure to disable such management (such as uTP in uTorrent). In this way your clients will be able to accept incoming connections from the Internet, enhancing performance in several cases and making initial seeding possible. This procedure can be performed just once and for all, as long as you don't wish to change port(s) on your clients. On BitTorrent clients, make sure to disable the option to pick random ports at every startup. If you forward a port for a p2p torrent client, do NOT remap it to a different local port and make sure that the torrent client port matches the remotely forwarded port number, otherwise your client will communicate to trackers (if you use them) and DHT the wrong port: torrent clients will communicate to trackers and DHT the port number you have configured in them. As a result, you will get no incoming packets from the swarm and the torrent client network status token will remain yellow. IMPORTANT: do NOT forward on your router the same ports you use on your Bittorrent or eMule client (or any other listening service) while connected to the VPN. Doing so exposes your system to correlation attacks and potentially causes uncencrypted packets to be sent outside the tunnel from your client.