Staff

Hello!
 
Every peer is peer to any other peer, hence "peer to peer": no node acts as a client only, no node acts as a server only (with a relevant exception for the initial seeder of something). For true p2p, each client must be able to accept incoming packets from the Internet. If all the nodes were unable to receive incoming connection, p2p would completely stop working.
 
 
 
That's correct. Disable UPnP, NAT-PMP and any other auto port mapping when in the VPN, and do not forward any port from the router to the devices connected to it (assuming that it's NOT the router itself to connect to a VPN server by running OpenVPN). That will only expose you to correlation attacks. You don't need your physical network card ports.
 
This FAQ answer may clarify concepts:
https://airvpn.org/faq/what_is
 
Kind regards

Hello!
 
It's harmless, you can safely ignore it.
 
Kind regards

Do you allow p2p? How can I optimize performance of eMule and BitTorrent with AirVPN?

Yes, p2p is allowed, as well as any other protocol. Currently p2p is a set of the most efficient protocols to share and access information on the Internet. We do not discriminate against any protocol.

To obtain the best performance with a BitTorrent client or an eMule client, log your account in our web site and proceed to remotely forward a port from the menu "Client Area"->"Forwarded ports". Pick a port or let the system choose an available one for you. Pick "TCP & UDP". Remember the port number.

Then, configure the "Port used for incoming connections" (also called "Listening port") in your BitTorrent client so that it matches the port number you have just forwarded remotely. On eMule, go to "Options"->"Connection" tab. Write in both fields of "Client ports" the number of the port that you have forwarded. Disable UPnP, NAT-PMP and any possible automatic port mapping feature that can modify the listening port. 
If you run uTorrent or any other software with bandwidth management, make sure to disable such management (such as uTP in uTorrent).

In this way your clients will be able to accept incoming connections from the Internet, enhancing performance in several cases and making initial seeding possible. This procedure can be performed just once and for all, as long as you don't wish to change port(s) on your clients. On BitTorrent clients, make sure to disable the option to pick random ports at every startup.

If you forward a port for a p2p torrent client, do NOT remap it to a different local port and make sure that the torrent client port matches the remotely forwarded port number, otherwise your client will communicate to trackers (if you use them) and DHT the wrong port: torrent clients will communicate to trackers and DHT the port number you have configured in them. As a result, you will get no incoming packets from the swarm and the torrent client network status token will remain yellow.

IMPORTANT: do NOT forward on your router the same ports you use on your Bittorrent or eMule client (or any other listening service) while connected to the VPN. Doing so exposes your system to correlation attacks and potentially causes uncencrypted packets to be sent outside the tunnel from your client.

Hello!
 
We had to remove that option because OpenVPN can't handle configuration files with more than 64 "remote" directives. Now, with the growth of our infrastructure, we now have various areas with more than 64 servers. The only other option we had to generate correct configuration files  would have been to over-complicate the generator, adding warnings for each case exceeding 64 remote directives and stopping the generation in such cases. We have evaluated that this would have caused confusion to a lot of customers. The advanced users who need this option can anyway easily circumvent the problem, as you have noticed. Just remember that with your method, if you build a .ovpn file including more than 64 "remote" directives, you'll end up with a non-usable configuration file.
 
Kind regards

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
Not much, due to good Voxility direct peering https://www.voxility.com/shop/connectivity/internet/voxility-peerings
 
We reputed that is enough to guarantee a comfortable experience to most customers connecting to Ruchbah. Of course the final judgment on the accuracy of our decision will come from our customers.
 
Kind regards

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Romania is available: Ruchbah.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Ruchbah supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Romania is available: Ruchbah.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Ruchbah supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Romania is available: Ruchbah.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Ruchbah supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in the USA is available: Etamin.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Etamin supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that six new 1 Gbit/s server located in Canada are available: Aludra, Chort, Enif, Gorgonea, Rotanev and Sharatan.
 
The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Aludra, Chort, Enif, Gorgonea, Rotanev and Sharatan support OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.
 
Kind regards and datalove
AirVPN Team

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Kitalpha.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server acceptw connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Kitalpha supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team
 

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Kitalpha.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server acceptw connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Kitalpha supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team
 

Hello!
 
Please try to reset Windows Firewall while Eddie is NOT running:
http://windows.microsoft.com/en-us/windows7/restore-windows-firewall-settings
 
Feel free to keep us informed.
 
Kind regards

Hi zhang888 and everybody,
 
disclaimer: this message is written by only one person of the staff, while other persons are still investigating.
 
We confirm that:
- in VPN servers we use Diffie-Hellman 4096-bit keys
- in VPN servers we do not use the same prime numbers used by millions of web sites
- our web site does not support DHE_EXPORT
 
That said, we are still investigating whether a TLS downgrade on the Control Channel is possible and, even if it was, how to affect DHE to force one of the sides to a DHE_EXPORT downgrade up to 512 bit.
 
References which we have started from:
 
Theory:
https://weakdh.org/imperfect-forward-secrecy.pdf
 
Practice:
https://weakdh.org/logjam.html
 
At the moment, we operate from a very conservative/paranoid approach so we are not ruling out 100% anything, but we can at the moment state that:
 
- web site is totally secure on server side
 
About OpenVPN in our setup:
- Attack I is obviously not possible, since it requires weak DH 512-bit primes in the first place
- Attack II (and therefore Attack III) appears infeasible, for different premises which are not met:
"The server, in this case, only needs to support DHE_EXPORT cipher suites or use 512-bit parameters in non-export DHE ciphers. The client must be using the TLS False Start extension; that is, the client sends application data before receiving the server's Finished message in the TLS handshake."
 
The question is whether it's possible to think about a mutant, specific attack form explicitly aimed to OpenVPN Control Channel to affect DH keys for Data Channel encryption. We will keep you updated of course.
 
We are focusing on OpenVPN because even if you use it over SSH or stunnel, TLS+DHE downgrades on them appear to be not essential since your main "defensive" layer remains on the underlying OpenVPN.
 
Kind regards

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Kitalpha.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server acceptw connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Kitalpha supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team
 

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!
 
To comply to our transparency policy we would like to inform you that since Leaseweb NL has been a key provider of our infrastructure in Northern Europe and since Leaseweb controlling company, Ocom, has repeatedly acted in a way that has convinced us that we can't consider Leaseweb a reliable partner anymore for strategic purposes, we have been working to remove Leaseweb from our key providers. It will be downgraded to a "secondary provider" (those providers which are not a key part of the infrastructure).
 
All the infrastructural demands and requirements previously provided by Leaseweb in the Netherlands have been and are being relocated to Sweden and to different Netherlands providers with identical connectivity features, in several cases with superior hardware. This is a very important improvement in our infrastructure and an important step to solve issues of over-dependency from a single provider, according to the golden rule of "de-centralization".
 
Impact on our customers will be positive: infrastructure is getting more robust and resistant. Moreover, hardware is being progressively renovated to satisfy the higher required numbers of simultaneous connections caused by Air significant and important growth in the last four months.
 
Kind regards
AirVPN Staff

Hello!

We're very glad to inform you that ten new 1 Gbit/s servers located in the Netherlands are available: Alrai, Garnet, Gienah, Jabbah, Maasym, Mirach, Miram, Rukbat, Sheliak and Subra.
The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator").

The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP.

Just like every other Air server, Alrai, Garnet, Gienah, Jabbah, Maasym, Mirach, Miram, Rukbat, Sheliak and Subra support OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Together with Sweden servers and other recently added servers in the Netherlands and other European countries, these servers are part of a global replacement of Leaseweb NL servers. A separate announcement about this will follow shortly.
Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team