EMULE

These are the AmneziaWG parameters I use in China. This set of parameters can reliably bypass the GFW. Staff can take a look.
Jc = 20;
Jmin = 50;
Jmax = 1000;
S1 = 0;
S2 = 0;
H1 = 3;
H2 = 1;
H3 = 4;
H4 = 2;

Great!
Eddie finally supports AmneziaWG, and UDP finally has a masquerade protocol. Another protocol has been added to the list of protocols for bypassing China's Great Firewall.

Yes. This is because the ISP has blocked the boot server. Please open the ticket to obtain the private boot server from the staff, or wait for the subsequent Android version update. It is said that in the subsequent version, the login information will be saved locally. Then, there will be no need to log in every time. Just log in once and you can use it as before, just like the computer version.

@Stalinium Yes, the packets you obtain yourself are better suited to your network environment. If you find that troublesome, you can also try other people's parameters. Here are my parameters.

Jc = 8
Jmin = 86
Jmax = 892
S1 = 0
S2 = 0
H1 = 2
H2 = 3
H3 = 4
H4 = 1
I1 = ...
I2 = ...
I3 = ...
I4 = ...
I5 = ...
CPS I1-I5(bing.com-initial QUIC).txt

That's incredible!

It seems the server hardware wasn't that bad; perhaps it was just maintained two days ago? Or maybe the hardware was replaced?

I see that this server only has 280+ users. Could it be a user issue? More users using the Wireguard protocol can indeed bring higher bandwidth usage.

If the AmneziaWG protocol becomes widespread, it would be incredible if even 10G servers could be fully utilized.😄😄😄

I'm also confused.
Perhaps the hardware isn't powerful enough?
A 1Gbps server can handle 100+ users with 80% bandwidth utilization.
This means a 10Gbps server would need 1000+ users to achieve the same 80% bandwidth utilization.
However, in reality, a 10Gbps server experiences a significant speed drop when handling 300+ users, seemingly unable to keep up.
It would be better to label it as a 3Gbps or 5Gbps server, as the actual speed difference from the advertised 10Gbps is substantial.
If that's the case, it would be better to replace one 10Gbps server with ten 1Gbps servers.
Maybe that's the case?
I think AirVPN may have leased a 10Gbps network in the data center, but the servers can't handle that 10Gbps network.
Isn't that a waste of resources?
I think AirVPN can increase the number of 1Gbps servers as much as possible to make full use of network bandwidth, which would also save on server costs for AirVPN, wouldn't it?

Did everyone notice?
The Kornephoros server achieved astonishing speeds today.
As a 10Gbps server, it loaded over 5Gbps of bandwidth.
I've never seen such speeds on any 10Gbps server before.
What makes this server different from other 10Gbps servers?
Is it the unprecedentedly powerful hardware, the data center's network environment, or AirVPN's optimization of the server's kernel?
Staff can take a look and use this information to optimize other 10Gbps servers.
Kornephoros is truly unexpected.

@Stalinium Yes, the packets you obtain yourself are better suited to your network environment. If you find that troublesome, you can also try other people's parameters. Here are my parameters.

Jc = 8
Jmin = 86
Jmax = 892
S1 = 0
S2 = 0
H1 = 2
H2 = 3
H3 = 4
H4 = 1
I1 = ...
I2 = ...
I3 = ...
I4 = ...
I5 = ...
CPS I1-I5(bing.com-initial QUIC).txt

Kornephoros is airvpns better 10gb server in canada. it almost gives me full speeds on my home server(connected via wifi)

funny enough their now decommissioned wurren was a pretty crappy in my experience. i was never able to get more than 80mbit on wurren even though it was also supposedly a 10gbit server...  even regular 1gbit server outperformed wurren

Hello!

We're very glad to inform you that a new 10 Gbit/s full duplex server located in Los Angeles, California, is available: Revati.

The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").

The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard.

Revati supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard.
Full IPv6 support is included as well.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

You can check the status as usual in our real time servers monitor , by clicking the server name. Direct link: https://airvpn.org/servers/Revati

Do not hesitate to contact us for any information or issue.

Kind regards & datalove
AirVPN Staff

 

If you notice that the connection speed drops down again increase the Jc parameter (I recommend values 10-80) and rearrange the H1, H2, H3, H4 values (they should be the numbers from 1 to 4 but their order can be any). ТСПУ is able to detect and throttle AmneziaWG and I personally had this situation twice, and twice I had to pump up the Jc parameter. Don't set it too high though: too much junk is also abnormal and potentially can become a fingerprint.

According to the recent news Roskomnadzor has set a budget of 60 billion rubles (655 000 000 USD) to significantly upgrade their wonderboxes in the next 5 years. So I guess even more fun is coming. I've already bought a cheap VPS and installed Xray (VLESS-TCP-XTLS-Vision-REALITY), sing-box (Shadowsocks with 2022-blake3-aes-128-gcm) and Cloak but don't use it much to keep the IP from prematurely getting into the black lists (if they even currently exist in Russia, but in Iran they already do). May be it's all over the top but who knows the future? For now my main method of accessing the larger data world is still the good old AirVPN.

Maximum of 7.3 Gb/s on Terebellum. I think most users are probably not using that much bandwidth to push the 10 Gb/s servers to their max.

I think so. My VPN functions the same as before, and I'm able to connect to blocked websites.

Hello!

Great news!

I captured the first QUIC packet accessing bing.com using Wireshark and used that packet to create a complete CPS, with I1-I5 parameters in the following file.

Using this CPS, I successfully connected to a US server and achieved good speed and stability. In my network environment, this was more effective than random CPS packets.

Everyone can test this set of parameters (it needs to be accessible without a VPN to bing.com). I welcome any better optimization suggestions from everyone.

Jc = 8
Jmin = 86
Jmax = 892
S1 = 0
S2 = 0
H1 = 2
H2 = 3
H3 = 4
H4 = 1
I1 = ...
I2 = ...
I3 = ...
I4 = ...
I5 = ...
CPS I1-I5(bing.com-initial QUIC).txt

I must commend the AI here – I wouldn't have thought of asking you whether you installed Eddie from scratch or copied over the profile.
Most of the times those AIs catch mentions of one or two words in contexts of other words and hallucinate about the rest of the meaning, but this one was a good answer.

Okay, I'll listen to you.
You're more professional than me.😊😊😊

Hi Archaon1,
I'm glad I could help you.
Six months ago, I was just a newbie, but thanks to the community's help, I grew rapidly.
Now, I can finally help others too.
That's the meaning of a community.
Haha, it's really satisfying to help others.
🎉🎉🎉

I'll look into it, thank you

Emule,

I'm glad to see that this side of internet isn't dead!

Little question if i may : i used unlocker to get rid of the files. Windows was saying that i needed the authorisation of ThrustDLL or something like that.
How would you have granted yourself a higher authority...on your own pc?
(The classic windows "I bought you, I assembled you...I OWN YOUUUU")

Hi Emule,

Hard to follow someone with 35 posts but it worked out!
I was a bit suspicious when you asked about deleting system32's files but my VPN is working fine now ^^

Thanks a lot, I wouldn't have found it on my own.


For the data : i did the suppression of all the files and the reboot of the network

For the sake of so-called security, Windows' system permission design can sometimes be quite annoying.
When I installed Windows, I configured Huorong Security Software with the highest privileges, locking the core Windows processes from being tampered with.
For any operations requiring high privileges, I use Huorong Security Software's toolbox, which can solve the problem with a single click, saving me a lot of trouble.
 

Hi Archaon1,
I'm glad I could help you.
Six months ago, I was just a newbie, but thanks to the community's help, I grew rapidly.
Now, I can finally help others too.
That's the meaning of a community.
Haha, it's really satisfying to help others.
🎉🎉🎉

Hello!

After a year of using AirVPN I'm very happy with the product. Website has no bloat whatsoever and it's super easy to find what you are looking for. A huge plus goes out for having an active forum available! Much better option compared to social media idiocies. Also port forwarding has been executed greatly - many other VPN services miss that altogether but even those which support it can't match AirVPN's easy-to-use robust system. Config generator is a great plus too since I'm using both WireGuard app and WireSock depending on the situation and needs. Both run just fine and very few VPN's could match this level of usability.

I sometimes have dissapointing speeds with P2P, but usually a simple server change fixes it.

Overall very happy customer. Please have a beer AirVPN staff, you've deserved it!

Yes, the addition of the AmneziaWG protocol can solve the connection problems for most people at present, and I hope that AmneziaWG can be used for a long time. If in the future, when the existing protocol can no longer connect, I believe that AirVPN will add a new protocol to solve the connection problem. I will always believe in your technology and capabilities, and I believe that you will always let us breathe real internet. I will always love you, AirVPN. Keep it up!😘😘😘

Hello!

Not anymore, and even less in the near future. HTTP/3 is quickly spreading. Today, HTTP/3 is used by 36.5% of all the websites, including major web sites inside countries that enforce blocks against VPN. Furthemore, blocking UDP as such is no more realistic, not even in China, where UDP has become an instrumental protocol for many companies in any sector (video streaming, video conference, VoIP, marketing, social media marketing, regime propaganda and more), for regime aligned or regime owned activities.
 
In China you have a near 100% success rate and no shaping (apart from the normal shaping for anything outside China) with the current Amnezia "weak obfuscation" (no CPS) implementation, i.e. at the moment you don't even need QUIC mimicking (which is anyway available and very effective). Currently, bypassing blocks via UDP than via TCP is more efficient in China.
 
At the moment there is nothing more effective than mimicking QUIC with the signature / fingerprint of an existing web site that's not blocked, and you have this option right now. We see > 95% success rate, which is better than the success rates of SSH (not exceeding 75%), shadowsocks and XRay, V2Ray etc (but a lot faster!). The success rate is similar to any VPN protocol over HTTP/2, but, again, dramatically faster.
 
We're glad to know it. It is also very flexible. Thanks to CPS, you may mimic any transport layer protocol built on UDP, for example DNS, QUIC, SIP.

Kind regards