Search the Community

Hello! The connection mode with the highest success rate (virtually 100%) according to our reports from China is toward port 443 (destination port not blocked by ISPs in China) of entry-IP address 3 (to have tsl-crypt and therefore full encryption of the Control Channel) in TCP (to bypass UDP blocks). DNS leaks are of course not a problem at all with our software. Kind regards

Hello, In China currently i have issue connecting to America server. Only one working for me is Miami Cursa UDP but netflix is giving me the proxy error message. Is there anyway to make the others servers works from China ? Thx

I've used VPN for years on and off again, mostly because of frequent travel to China. But I've gotten into the habit of using them even when I'm back in the US. I noticed something odd over the last month. My bank's website now, for whatever reason, will simply not load at all if my VPN is on. It was fine for the first few months we used this particular service, but over the last month, we simply cannot access it unless we shut our VPN access off. Now, assuming that this is, as I suspect, something the bank website is doing, disallowing connections from VPN servers, my question is, why on Earth would they do this? It seems that they'd have a vested interest in customers keeping their logins as secure as possible, which is something VPN helps with. But here, it seems that they're requiring customers to login under less than secure customers. I get that they might be worried about identity theft, but surely they realize that most people logging in from a VPN aren't doing so to commit. As for my service, it's supposed to be good enough to fool Netflix's servers, so you can use Netflix services regardless of country. I may have to modify my current settings, and see if they'll be good enough to fool my bank's website. We'll see if that works. I can always drop my VPN connection for as long as it takes to do my transaction, if it comes down to it, but this is a strange development that I thought I'd mention here, and ask you seasoned vets about.

Maybe you could add an experimental server in Japan/Hong Kong to allow for better performance for people in China.

https://arstechnica.com/information-technology/2019/06/bgp-mishap-sends-european-mobile-traffic-through-china-telecom-for-2-hours/ Intersting article. Interested in what others think about this from the view point of Air users and Air themselves. Do Air have the ability to moniter their servers for an instance such as this? I presume it would show as increased ping times. What would be their course of action if a data center that they use were involved in something like this?

Didn't realise Virgin were so bad at throttling, was previously with PlusNet they were fine. I use Windscribe and little bit of tinkering I found a Stealth mode I could set which - Encapsulates OpenVPN in a TLS tunnel via Stunnel. It says to only use is other standard methods fail handy in China they say. So if your VPNs provide a way to Encapsulates the traffic in TLS tunnel it should just look like normal secure traffic to them.

Hello! Wireguard currently supports only UDP so it's a no go at the moment, at least on those networks which severely shape or block UDP. (common practice in China as well as on many mobile providers all over the world). Since 2010 OpenVPN over SSL to port 443 and more recently OpenVPN with tls-crypt in TCP (OpenVPN 2.4 or higher version is required) are the best ways to bypass blocks. Kind regards

Airvpn is not in normal use in China (Mainland) I found that based on the openvpn protocol, there are also ssl, ssh (forget it put in China) Maybe you think about supporting the wiregurad protocol, or participating in support. And consider similar v2ray confusing traffic technology Https://github.com/v2ray/v2ray-core I know that the client can set the pre-agent I prefer a fundamental solution (although it is difficult) The Chinese firewall IPS part is the easiest to prevent too simple "settings" (such as ssh, ssl pre-proxy settings) SSL-SNI full verification promotion has not been seen on the ssl platform recently. Idea: distributed (perhaps blockchian) tcp/udp protocol extension development + ML to handle routing and detection being attacked or blocked (both done at the bottom layer rather than at the application layer, not centralized but decentralized)... Goodluck

I can personally confirm that TCP port 443 works always and UDP as well - but not as always as TCP. We are into 2019 and still Airvpn is working perfectly in China. Connecting via Eddie is a sure way to go.

Hi! I have been trying to get Netflix to work via Nvidia Shield TV Eddie app but it is mostly hit and miss and recently it has stopped altogether. When I watch via my MacOS Eddie app, Netflix is working. Also using Asus-merlin firmware flashed router without any script, Netflix works without issues on US servers. How do I get to watch it via Shield TV? I am asking this because watching via router, here in China, the picture is not very clear and too much of buffering. Watching via Eddie seems to be faster and very little buffering. I have already tried to change the DNS of the primary router at 10.4.0.1 but the problem with Shield TV has not been resolved yet. What can I do to resolve this? Thanks in advance.

Hello! I thought it was time to try and collect some of the wisdom floating around and see if we can't create a single thread for solving some of the most common and annoying repeat-issues. So how about it ! I define "common problems" as: if I'm getting a deja-vu every third time I post . Staff will have broken the Matrix by this point. Each problem will have its own headline and then with any number of solution-oriented links appended underneath. For this reason, this grand list isn't final and is meant to be updated continually. Naturally, the higher the link number for a solution, the more obscure the solutions are probably getting. Warning: solutions aren't guaranteed. As with anything technical, trial and error is a core skill Problem: Bootstrap Failed.Solutions:https://airvpn.org/topic/30824-bootstrap-failed-since-a-week/Problem: No Internet connection after shutting down AirVPN and/or can only use Internet while AirVPN is on.Solutions:https://airvpn.org/topic/14829-can-only-connect-to-the-internet-browser-through-airvpn/?do=findComment&comment=30509 Windows only: https://airvpn.org/topic/13584-connection-problem-when-not-using-airvpn/?p=38800 MacOS only: https://airvpn.org/topic/27993-cant-connect-to-internet-without-using-airvpn/ https://airvpn.org/topic/21194-virtualbox-is-this-air-vpn-also-cant-connect-internet-unless-signed-in/Problem: Cannot connect to any AirVPN server.Solutions:https://airvpn.org/topic/22140-cannot-connect-to-german-servers-anymore/ https://airvpn.org/topic/22066-cant-seem-to-connect-to-any-servers/ https://airvpn.org/topic/21418-new-to-airvpn-installed-avpn-on-surface-wwindows-10-cannot-connect-at-school-can-connect-fine-at-most-other-locations/?p=55515Problem: Issues with Curl.Solutions:https://airvpn.org/topic/27369-cannot-login-curl-is-required/Problem: Bad packet ID (may be a replay)Solutions:https://airvpn.org/topic/14094-weird-log-entries/Problem: Being censored and/or speeds being throttled/shaped by ISP or Government.Solutions:https://airvpn.org/topic/28847-connections-from-china/ Problem: MacOS client can't connect.Solutions:https://airvpn.org/topic/18251-airvpn-mac-client-problems/ Problem: Checking route IPv6 Failed.Solutions:https://airvpn.org/topic/29401-checking-route-ipv6-failed-cannot-connect-to-vpn-server-using-eddie/ Problem: Waiting for TUN/TAP to come up.Solutions:https://airvpn.org/topic/26072-route-gateway-is-not-reachable-on-any-active-network-adapters-10401/?do=findComment&comment=70761 Windows only: https://airvpn.org/topic/17440-guide-fix-for-tap-adapter-in-windows/ Windows only: https://airvpn.org/topic/30043-taptun-interface-wont-come-up/ Problem: Experiencing slow and/or fluctuating speeds in general.Solutions:https://airvpn.org/topic/30739-every-vpn-is-slow-for-me-despite-the-well-reviewed-vpns-im-trying-is-it-possible-my-isp-is-causing-this-i-feel-like-someones-playing-a-joke-on-me/?p=80014 https://airvpn.org/topic/18635-looking-for-fast-server-eu-that-goes-beyond-30-40mbit/?p=44998 For online gaming: https://airvpn.org/topic/30135-frequent-spikes-lag-on-videogames/?p=79046 https://airvpn.org/topic/1947-for-those-wondering-about-speed-performance/?p=1967 https://airvpn.org/topic/26157-airvpn-slowing-down-other-machines-in-network/ https://airvpn.org/topic/26117-slow-speed-sort-of/?p=70906 https://airvpn.org/topic/20812-very-very-slow-dns-lookup/ https://airvpn.org/topic/23743-download-speeds-dropping-to-zero-and-going-up-and-down/ Problem: Slow torrent speeds and/or disconnects.Solutions:https://airvpn.org/topic/28082-torrent-on-airvpn-speed-is-very-poor/ https://airvpn.org/topic/26218-slow-torrent-speeds/ https://airvpn.org/topic/23936-repeatedly-getting-disconnects-while-torrenting/ https://airvpn.org/topic/23499-slow-torrenting-speed/ https://airvpn.org/topic/23070-solved-p2p-slow-over-udp-and-fast-over-tcp/ https://airvpn.org/topic/22716-poor-torrenting-connection/Solutions are in link form without any explanatory text - at least not yet - so that the thread OP stays looking simple and uncluttered, where it's easy to find out what your problem is . Feel free to contribute with your own helpful links. The more feedback this thread gets, the quicker it can be improved and hopefully made useful.

I left NordVPN because they offered poor service, particularly, they didn't protect things the way they claimed to. This was a long time ago, you could probably find a link to a story about it. Many VPNs do a shoddy job of vetting their partner servers, a process AirVPN claims to do well but is still a complete mystery to me. Their clients are also poorly maintained or simply do not patch the holes in your traffic they claim to, as was the case with Nord, if I recall correctly. Airvpn offers superior service and I genuinely believe that the ideology expressed by its devs is real and not just another VPN-facade/money grab. It actually doesn't matter if nord is based in Panama or not, because this doesn't stop bad things from happening to people. Just look at the recent Panama Papers controversy. Even though protonmail is based in Switzlerland (by the way: NOT NEUTRAL), they have servers in China, yet they are still greatly admired in the privacy advocate sector. Tor is based in Seattle. Many of its nodes are operated by the NSA itself. I will still use Protonmail, AirVPN and Tor, because I have to, and overall, I believe that money is not the chief motivation in at least the latter two, because there are easier ways to get rich if you are a great coder than starting a non-profit.

Hello! The "public" bootstrap servers have been recently blocked in China (only in some limited areas at the moment). We have ways to circumvent the block. Currently you can connect because Eddie can retrieve the servers info from your HDD. In the future, you might need to re-bootstrap Eddie. In such a case: 1) if you have followed LZ1 advice, restore the option to the previous settings, so that you get again the prompt for the bootstrap server 2) open a ticket to receive a random, secret bootstrap server URL to enter in the prompt Kind regards

Hello, I got a "bootstrap failed" error when starting Eddie. The error occurred roughly a week ago. Eddie is still connecting to servers, but the error remains. I haven't changed anything (nor Eddie, Windows or wifi/internet settings). Also, I want to add, that I am in China (but that wasn't a problem before). Anybody know why this error occurs? Thank you very much, Best regards

As we discovered, the sale made a return. But with the added twist that Staff listened to the community suggestion of adding a 2-year plan, which has consequently proved very popular. I am sorely tempted into inserting the <one does not simply...> meme here. Eddie is one of the best VPN clients for circumventing restrictions, as this is a core feature. Blocking these sorts of technologies is very complex work and not necessarily for very much reward. It may be instructive to look at countries like China, where the environment for VPNs is quite a bit more hostile than even the Australian government is willing to venture into and yet VPNs continue to be used - even if sometimes with difficulty. Air also prides itself on being able to help those who live in countries with extremely strict censorship laws - so despite what are the presumably best efforts on behalf of the Australian government, they're not quite number one in that department yet .So I don't think you'll waste a year for nothing, by any means. Besides, where there's a will there's a way . But I'm biased regarding this question - so I'll say if you're unsure, then by all means wait. Sales will come again later and then you can simply renew then, when and if you wish. It all gets added to your total number of days anyway. AirVPN sales are never on for just one day. Until Staff confirms the end date for this particular sale, I've previously stated that it'll likely end on the 30th, give or take a few days, like last year. As this thread has served its purpose and we don't want to clutter the forums more than necessary, I'll be locking this thread. Please direct any other sale-related questions in the Black Friday sale thread itself. Thank you.

Airvpn works in Iran and China, it 100% works in the Gulf, you just have to setup Eddie right ( in the Settings go to Protocols, Uncheck Automatic and try UDP 443 IP 3 or try TCP 443)

Hello! We're glad to inform you that Eddie can work with additional SSL tunnels as usual but you don't need them with tls-crypt. tls-crypt already encrypts the whole OpenVPN Control Channel. Combining tls-crypt with TCP, you will have the same result without the additional burden of the SSL tunnel and in some cases you will not even need TCP (making OpenVPN more efficient). This has been tested from China by a dozen of users living there (we thank them for their thorough tests and reports) and tls-crypt to port 443 in TCP is able to bypass blocks always. That said, failure to connect to an established SSL tunnel to our VPN servers may be caused by some misconfiguration that deserves to be investigated (a trivial example, you generated an UDP config), but in any case you might like to get rid of the additional SSL tunnel which only adds burden to your Android device without adding any significant security layer. Remember that any obfuscation is weaker than real encryption of the whole Control Channel. We have chosen a stronger method than simple obfuscation and that's the reason for which our VPN service works where most other competitor VPNs fail. A special note on the remark you made: "VPN immediately fails upon connecting to my SSL tunnel profile, and then proceeds to leak all of my traffic anyway instead of warning me and keeping the network locked.". First of all, you ARE notified, because Eddie sends a notification of "Disconnected". Second, if no VPN tunnel has ever been established there's no way to pause or lock the VPN or the network (at least on an un-rooted device). This is an obvious limitation on ALL systems in which the app does not have root access and you will find the exact same limitation on any other OpenVPN based app for Android. The huge difference between Eddie and, say, OpenVPN for Android you mention, is that Eddie can prevent leaks in many situations under which OVPN for Android fails to do so. For example, test Eddie under the condition of an ongoing VPN failure for KEEPALIVE_TIMEOUT or TCP EOF. You can simulate this condition (which will occur when communications to the VPN fail definitively for any reason, a common situation in mobility) by revoking your client certificate/key pair and then forcing a disconnection from your account "Client Area". You will see that Eddie will properly lock, and prevent leaks, while OVPN for Android will not. Kind regards

Hello! Please try the following connection mode (you can see it in the Configuration Generator after you have ticked "Advanced Mode"); - entry-IP 3 - protocol TCP - port 443 Connections to entry-IP address 3 will enable "tls-crypt" which is effective in bypassing the OpenVPN general block in China and other countries. TCP will get rid of UDP blocks, if any. Kind regards

I just bought Xiaomi AI from China, which is a Chinese version of Amazon Alexia. I’m based in London, my iPhone 6 doesn’t connect it by Bluetooth initially. After using Airvpn in Hong Kong the phone connects the AI system by Bluetooth but not WiFi. I wonder if it’s because the server in Hong Kong is blocked by China or I missed something. Any help is highly appreciated. The log for the connection, which is fine, is attached. Hi 2018-09-02 13:50:09 1 2018-09-02 13:50:09 ----- OpenVPN Start ----- OpenVPN core 3.2 ios arm64 64-bit PT_PROXY built on Aug 17 2018 09:49:39 2018-09-02 13:50:09 Frame=512/2048/512 mssfix-ctrl=1250 2018-09-02 13:50:09 UNUSED OPTIONS 3 [resolv-retry] [infinite] 4 [nobind] 5 [persist-key] 6 [persist-tun] 7 [auth-nocache] 8 [verb] [3] 9 [explicit-exit-notify] [5] 2018-09-02 13:50:09 EVENT: RESOLVE 2018-09-02 13:50:09 Contacting [103.10.197.186]:443/UDP via UDP 2018-09-02 13:50:09 EVENT: WAIT 2018-09-02 13:50:09 Connecting to [hk.vpn.airdns.org]:443 (103.10.197.186) via UDPv4 2018-09-02 13:50:10 EVENT: CONNECTING 2018-09-02 13:50:10 Tunnel Options:V4,dev-type tun,link-mtu 1558,tun-mtu 1500,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA1,keysize 256,tls-auth,key-method 2,tls-client 2018-09-02 13:50:10 Creds: UsernameEmpty/PasswordEmpty 2018-09-02 13:50:10 Peer Info: IV_GUI_VER=net.openvpn.connect.ios 3.0.0-712 IV_VER=3.2 IV_PLAT=ios IV_NCP=2 IV_TCPNL=1 IV_PROTO=2 IV_LZO=1 IV_LZO_SWAP=1 IV_LZ4=1 IV_LZ4v2=1 IV_COMP_STUB=1 IV_COMP_STUBv2=1 IV_AUTO_SESS=1 2018-09-02 13:50:10 VERIFY OK : depth=1 cert. version : 3 serial number : 8C:D8:43:EF:E4:5F:20:03 issuer name : C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org subject name : C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org issued on : 2014-04-11 10:15:45 expires on : 2024-04-08 10:15:45 signed using : RSA with SHA1 RSA key size : 4096 bits basic constraints : CA=true 2018-09-02 13:50:10 VERIFY OK : depth=0 cert. version : 3 serial number : 5B issuer name : C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org subject name : C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org issued on : 2014-05-07 11:06:02 expires on : 2024-05-04 11:06:02 signed using : RSA with SHA1 RSA key size : 4096 bits basic constraints : CA=false cert. type : SSL Server key usage : Digital Signature, Key Encipherment ext key usage : TLS Web Server Authentication 2018-09-02 13:50:12 SSL Handshake: TLSv1.2/TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 2018-09-02 13:50:12 Session is ACTIVE 2018-09-02 13:50:12 EVENT: GET_CONFIG 2018-09-02 13:50:12 Sending PUSH_REQUEST to server... 2018-09-02 13:50:13 Sending PUSH_REQUEST to server... 2018-09-02 13:50:13 OPTIONS: 0 [comp-lzo] [no] 1 [redirect-gateway] [def1] [bypass-dhcp] 2 [dhcp-option] [DNS] [10.18.64.1] 3 [route-gateway] [10.18.64.1] 4 [topology] [subnet] 5 [ping] [10] 6 [ping-restart] [60] 7 [ifconfig] [10.18.64.134] [255.255.255.0] 8 [peer-id] [0] 9 [cipher] [AES-256-GCM] 2018-09-02 13:50:13 PROTOCOL OPTIONS: cipher: AES-256-GCM digest: SHA1 compress: LZO_STUB peer ID: 0 2018-09-02 13:50:13 EVENT: ASSIGN_IP 2018-09-02 13:50:13 NIP: preparing TUN network settings 2018-09-02 13:50:13 NIP: init TUN network settings with endpoint: 103.10.197.186 2018-09-02 13:50:13 NIP: adding IPv4 address to network settings 10.18.64.134/255.255.255.0 2018-09-02 13:50:13 NIP: adding (included) IPv4 route 10.18.64.0/24 2018-09-02 13:50:13 NIP: redirecting all IPv4 traffic to TUN interface 2018-09-02 13:50:13 NIP: adding DNS 10.18.64.1 2018-09-02 13:50:13 Connected via NetworkExtensionTUN 2018-09-02 13:50:13 LZO-ASYM init swap=0 asym=1 2018-09-02 13:50:13 Comp-stub init swap=0 2018-09-02 13:50:13 EVENT: CONNECTED hk.vpn.airdns.org:443 (103.10.197.186) via /UDPv4 on NetworkExtensionTUN/10.18.64.134/ gw=[/]

Yes, in fact only method of entries '3' and '4' work well and consistently within China. The simple fact is that most servers are based geographically far away from China, so latency is something of an issue for China users. The solution would be more Japan-based servers. The Japan server is pretty damn quick due to the distance, but is the only one which is (in my experience) - I'm only talking about latency here though, not overall connection speed. Purely the latency of the connection. The point is - that It would be nice to have more than one good-latency server for those connecting from China. To get something below 100ms on a consistent basis, the only and sole Japan server is the only way of doing this (AirVPN).

Hi, when, if ever will there be more Japan servers? (Question to staff) At least another one would be nice. It's the ONLY server which gives a good latency when connecting from China. For example, the Japan based Iskandar server can achieve 79ms whereas all the others start at 190ms + when connecting from China. Can other China users verify this is the case for them, too? (All China users reading this please comment about your latency!....)

hello, i am using linux version of airvpn (ubuntu, x64) and it doesnt work in china. i was trying to fix it myself checking the forum. someone recommended to use IP addresses 3 and 4 tls-crypt which is not avalible in my version. how can we the problem be solved?

Hello! We have now multiple confirmations from various mainland China towns according to which simply connecting to exit-IP addresses 3 and 4 with protocol TCP is perfect to bypass blocks without any additional tunnel. Port 443 is recommended but it looks like connections to port 80 work fine as well. Kind regards

Hello! Please make sure to connect to entry-IP addresses 3 and 4 (tls-crypt is also active and it will bypass China block). OpenVPN 2.4 or higher is required. If in doubt please open a ticket to receive all the details. Kind regards

hi I found that AirVPN does not work in china from last week,may be blocked by "The Great Wall"，would u fix it pls? thank u very much