Search the Community

Hello! On your Android or iOS device you need to re-generate a configuration file and import it as a profile in your application (openvpn-connect, OpenVPN for Android...). Try the following settings: - click "Advanced Mode" in the Configuration Generator - select protocol TCP, port 443, entry-IP address 3 - proceed as usual to download / import the profile On entry-IP addresses 3 and 4 of our VPN servers you have OpenVPN working with "tls-crypt". It means that the whole Control Channel of OpenVPN is encrypted. This connection mode has showed great abilities to bypass a wide variety of blocks. In this case we also suggest TCP because, according to the reports we have been receiving from China in the last years, it is not uncommon that UDP gets entirely blocked on mobile lines. UPDATE: with our software Eddie Android edition, you will not need the Configuration Generator anymore in Android. Eddie will try by itself anti-blocking connection modes. If you don't wish to wait (Eddie may need up to 1 minute to find the proper way to circumvent China blocks). go to the "Settings" view and please set: Custom protocol option to TCPCustom port to 443Custom TLS mode to tls-cryptQuick connection mode to Use custom settingsEddie will connect to port 443, with protocol TCP, using tls-crypt. Kind regards

Thanks for the help. I've been in China (Guangzhou) for over a year and have had little trouble using AirVPN with the default settings. Since Friday I haven't been able to connect at all however. (Incidentally the BBC News is blocked now too which it hasn't been for years.) Changing to protocol UDP port 443 I'm now able to connect on my computer. I'm still having trouble with my mobile connection however. I'm not sure how to change these settings in the OpenVPN app (not very technically literate I'm afraid...) but it seems I was already using UDP 443 and now that's not working.

@hugomueller Please see here: https://airvpn.org/topic/28153-ipv6-support-and-new-smart-features/page-3?do=findComment&comment=75733 The same thread can be taken as a reference. Simply, tls-crypt is supported and mandatory on entry-IP addresses 3 and 4. OpenVPN 2.4 or higher is required. https://airvpn.org/topic/28153-ipv6-support-and-new-smart-features tls-crypt encrypts the whole Control Channel and has been reported as effective in bypassing blocks in China and Iran at the moment (to port 443 preferably, otherwise you could experience a generic, not OpenVPN related, outbound port blocking). Kind regards

You were lucky you did not need anti-blocking techniques earlier. They have been enforced since many years ago in wide areas of China. Do not hesitate to open a ticket if you have still troubles after you have applied the recommendations in this thread. Kind regards

indeed, my GF in china also suddenly cant connect since yesterday, and she has tried various ports in Eddie, its down on her mobile as well.

Hello! Nothing new, same situation since 2012 at least. From China you need "OpenVPN over SSL" to port 443 (you can configure it with a few clicks in Eddie) or connect over tls-crypt to entry-IP addresses 3 and 4 in TCP (preferably to port 443 to avoid some outbound port block which could be sometimes enforced), when you find a line that's blocking OpenVPN and UDP. Connecting with "tls-crypt" saves you the pain to configure "OpenVPN over SSL" in Android. Currently about 80 Air VPN servers support tls-crypt The fact that you could connect successfully in UDP is a lucky event according to the reports we have. In most cases that's not possible at all from residential, fixed lines, and from mobile lines. Restrictions anyway seem less stringent in tourist and business towns. This looks like a bug, it's under investigation, thanks. Thank you for the report. Kind regards

China is blocking VPNs. Go to preferences and protocols. Choose a different entry IP (ip 2,3 or 4) and try to connect. If this does not help use entry ip 4 and ssl.

I am currently in China and like to share my experience with airvpn. Findings Every Hotel Wifi blocks VPN differently Tor (orbot) always works fine Airvpn is a pain on Android stunnel is complicated to install the own android app does not come with predefined profiles the config generator is not mobile friendly I tried to use stunnel on Windows -> eddie has a problem with usernames with a vowel mutation and fails to establish a connection Protocols and IPs Some IPs from AirVPN Servers seem to be completely blocked. E.g. Zuben: IP1 fails completly (tested on UDP 443 / SSH 22) IP2 on UDP 443 works fine IP2 on UDP 1194 works fine Ping to Zuben IP1 fails Ping to IP2 works fine The weired thing is that I am running 2 VPN servers in my home network. In the actual hotel both are blocked entirely. What I do not get is why zuben on 1194 works but my VPN in the home network (on 1194 and also on 1195) fails. I can't even ping my IP (dyndns). The DNS resolution works fine but no connection is possible. It can only be explained if all private network IPs are blocked. I tried a second private IP to connect to and this also failed. For the second ip a ping was possible but VPN on tcp/443 failed. There is no real consistent image I get.... The second IP was never used in china before. Some thoughts about Eddie A feature which detects blocked servers (by a ping test?) would be great. Eddie should be capable of choosing the best IP and protocol by itself. The chinese Firewall is able to detect openVPN connections it would be a could idea to reserve one IP (nr. 4?) only for stunnel and ssh connections. In the actual situation I am able to connect via 1194/udp to IP4. If the chinese firewall can detect a VPN it will block the whole IP4 and also stunnel and ssh is not possible any more. It is a very good idea to develop eddie for android. it should be able to use ssl/ssh connections and all possible IPs and protocols should be available without manual download

Hey Guys, since yesterday all airVPN servers in Beijing (China) are down. I'm subscribed to two VPN providers and right now only 2 servers are working, none from airVPN. All servers went offline at the same time. Can't connect through my phone either. Just me? Thanks for quick responses!

Hi, sorry for the slow response, so busy! I cant instal from the AUR Preparing... Building qomui... Cloning into 'qomui'... remote: Enumerating objects: 4, done. remote: Counting objects: 100% (4/4), done. remote: Compressing objects: 100% (4/4), done. remote: Total 4 (delta 0), reused 4 (delta 0) Unpacking objects: 100% (4/4), done. ==> Making package: qomui 0.5.1-1 (Sun 15 Jul 2018 08:18:00 BST) ==> Checking runtime dependencies... ==> Checking buildtime dependencies... ==> Retrieving sources... -> Downloading v0.5.1.tar.gz... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 124 0 124 0 0 202 0 --:--:-- --:--:-- --:--:-- 202 100 2866k 100 2866k 0 0 292k 0 0:00:09 0:00:09 --:--:-- 427k ==> Validating source files with sha256sums... v0.5.1.tar.gz ... Passed ==> Extracting sources... -> Extracting v0.5.1.tar.gz with bsdtar ==> Starting build()... running build running build_py creating build creating build/lib creating build/lib/qomui copying qomui/update.py -> build/lib/qomui copying qomui/qomui_service.py -> build/lib/qomui copying qomui/qomui_gui.py -> build/lib/qomui copying qomui/mv_config.py -> build/lib/qomui copying qomui/latency.py -> build/lib/qomui copying qomui/firewall.py -> build/lib/qomui copying qomui/bypass.py -> build/lib/qomui copying qomui/__init__.py -> build/lib/qomui running egg_info creating qomui.egg-info writing qomui.egg-info/PKG-INFO writing dependency_links to qomui.egg-info/dependency_links.txt writing entry points to qomui.egg-info/entry_points.txt writing requirements to qomui.egg-info/requires.txt writing top-level names to qomui.egg-info/top_level.txt writing manifest file 'qomui.egg-info/SOURCES.txt' reading manifest file 'qomui.egg-info/SOURCES.txt' reading manifest template 'MANIFEST.in' writing manifest file 'qomui.egg-info/SOURCES.txt' ==> Entering fakeroot environment... ==> Starting package()... running install running build running build_py running egg_info writing qomui.egg-info/PKG-INFO writing dependency_links to qomui.egg-info/dependency_links.txt writing entry points to qomui.egg-info/entry_points.txt writing requirements to qomui.egg-info/requires.txt writing top-level names to qomui.egg-info/top_level.txt reading manifest file 'qomui.egg-info/SOURCES.txt' reading manifest template 'MANIFEST.in' writing manifest file 'qomui.egg-info/SOURCES.txt' running install_lib creating /tmp/pamac-build-user/qomui/pkg/qomui/usr creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6 creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/__init__.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/bypass.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/firewall.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/latency.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/mv_config.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/qomui_gui.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/qomui_service.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui copying build/lib/qomui/update.py -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/__init__.py to __init__.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/bypass.py to bypass.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/firewall.py to firewall.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/latency.py to latency.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/mv_config.py to mv_config.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/qomui_gui.py to qomui_gui.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/qomui_service.py to qomui_service.cpython-36.pyc byte-compiling /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui/update.py to update.cpython-36.pyc running install_data creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/applications copying resources/qomui.desktop -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/applications/ creating /tmp/pamac-build-user/qomui/pkg/qomui/etc creating /tmp/pamac-build-user/qomui/pkg/qomui/etc/systemd creating /tmp/pamac-build-user/qomui/pkg/qomui/etc/systemd/system copying resources/qomui.service -> /tmp/pamac-build-user/qomui/pkg/qomui/etc/systemd/system/ creating /tmp/pamac-build-user/qomui/pkg/qomui/etc/dbus-1 creating /tmp/pamac-build-user/qomui/pkg/qomui/etc/dbus-1/system.d copying resources/org.qomui.service.conf -> /tmp/pamac-build-user/qomui/pkg/qomui/etc/dbus-1/system.d/ creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons/hicolor creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons/hicolor/scalable creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons/hicolor/scalable/apps copying resources/qomui.svg -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons/hicolor/scalable/apps/ copying resources/qomui_off.svg -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/icons/hicolor/scalable/apps/ creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui copying resources/Airvpn_config -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/PIA_config -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/default_config.json -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/firewall_default.json -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/Mullvad_config -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/ssl_config -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/qomui.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/hop.sh -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ copying resources/hop_down.sh -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/ creating /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags copying resources/flags/Viet Nam.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Unknown.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/United States.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/United Kingdom.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/United Arab Emirates.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Ukraine.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Turkey.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Tunisia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Thailand.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Taiwan, Province of China.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Switzerland.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Sweden.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Spain.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/South Africa.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Slovenia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Slovakia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Singapore.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Serbia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Russian Federation.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Romania.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Portugal.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Poland.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Norway.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/New Zealand.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Netherlands.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Myanmar.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Moldova.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Moldova, Republic of.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Mexico.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Malaysia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Macedonia, Republic of.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Luxembourg.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Lithuania.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Latvia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Korea, Republic of.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Japan.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Jamaica.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Italy.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Israel.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Ireland.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Indonesia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/India.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Iceland.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Hungary.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Hong Kong.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Greece.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Germany.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Georgia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/France.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Finland.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Estonia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Egypt.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Ecuador.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Denmark.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Côte d'Ivoire.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Czechia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Czech Republic.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Cyprus.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Cuba.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Croatia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Costa Rica.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Colombia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/China.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Chile.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Canada.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Cameroon.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Bulgaria.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Brazil.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Bosnia and Herzegovina.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Belgium.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Belarus.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Bangladesh.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Bahamas.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Azerbaijan.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Austria.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Australia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Armenia.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Argentina.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Andorra.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Algeria.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Albania.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ copying resources/flags/Afghanistan.png -> /tmp/pamac-build-user/qomui/pkg/qomui/usr/share/qomui/flags/ running install_egg_info Copying qomui.egg-info to /tmp/pamac-build-user/qomui/pkg/qomui/usr/lib/python3.6/site-packages/qomui-0.5.1-py3.6.egg-info running install_scripts Installing qomui-service script to /tmp/pamac-build-user/qomui/pkg/qomui/usr/bin Installing qomui-gui script to /tmp/pamac-build-user/qomui/pkg/qomui/usr/bin Running post-install script to fix file permissions error: [Errno 13] Permission denied: '/usr/share/qomui/VERSION' ==> ERROR: A failure occurred in package(). Aborting... When updated to 0.5.1 from Qomui I see the same crashes when trying any connection, all over options seem to function correctly. Heres the output from qomui-gui qomui-gui qt5ct: using qt5ct plugin QLayout: Attempting to add QLayout "" to QWidget "providerTab", which already has a layout qt5ct: D-Bus system tray: no Traceback (most recent call last): File "/usr/lib/python3.6/site-packages/qomui/qomui_gui.py", line 1642, in item_chosen_signal self.create_server_dict(current_dict, 0) File "/usr/lib/python3.6/site-packages/qomui/qomui_gui.py", line 1667, in create_server_dict if self.protocol_dict["Airvpn"][mode]["ipv6"] == "ipv6": KeyError: 'ipv6' Aborted (core dumped) I've down graded back to 0.5.0, no problems here on my machine.

Those are good if you flash OpenWRT on them. Really solid and the OpenWRT on them is stable. We run ~50+ of them without issues for 3 years, in a 3000sqm facility - size of football stadium + exits, in China. But I am talking about these: https://wikidevi.com/wiki/Ubiquiti_Networks_UniFi_AP_AC_(UAP-AC) The regular unit can cover at least 100sqm, with 2.4 and 5 bands: https://wikidevi.com/wiki/Ubiquiti_Networks_UniFi_AP_Pro Cheap and good choice. Mesh them with 802.11s and you can host the next world cup.

@serenacat Here the reports we have: China: tls-crypt always works in TCP and only sometimes in UDP (due to the fact that in mobile lines UDP is blocked by itself, we presume). OpenVPN over SSL works. tls-crypt is faster. Iran. same as China UAE: same as China Egypt: OpenVPN over SSL works. No reports about tls-crypt so far, unfortunately. Saudi Arabia: same as Egypt Kind regards

I noticed this, but have not chased the details, was doing a bit of curious googling of "tls-crypt". "Dunno about China, but there are reports that tls-crypt doesn't work in Egypt. I'm unsure what method they're using for detection. They're doing a protocol agnostic packet sequence and size variation match with whitelists for big-business to reduce false-positives." https://www.reddit.com/r/VPN/comments/856zlp/how_effective_is_tlscrypt_at_bypassing_isp_vpn/ so I guess the next step up would be to fuzz the initial protocol with random chatter packets. In places like Egypt, Turkey, etc using https:443 might be less likely to attract attention, but presumably also a problem with up to date database(s) of detected commercial VPN entry IP addresses when dealing with SS.

Just some personal experience: I am in China for a year now (and using Airvpn for the whole time). You don't need another service. Works without a problem (via SSL or tls-crypt) on windows, android and ios.

Hello! We can gladly confirm that according to the first reports tls-crypt (only on TCP) works in China and it is faster than OpenVPN over SSL. tls-crypt with UDP also works in some networks and this is the maximum OpenVPN performance. In some other networks tls-crypt with OpenVPN in UDP does not work but not because of tls-crypt in itself, but because UDP is unconditionally blocked. Kind regards

I'll be in Asia for a while and most of you have heard of the Chinese efforts to monitor internet activity. Last time I was there, I had some problems with AIR (though it's been a while so that might have changed). Astrill was recommended to me by an acquaintance as an alternative in case of trouble but I have no experience with them. Do you guys know more about this particular VPN service?

People here in Australia with some techo capability, and help through an online forum, have been setting up an OpenVPN server on their home network, similar to how a business can secure VPN access to office systems from offsite staff. This is usually to get out through the Great Firewall of China, and allows private emails and video calls etc, but also reuse of home geolocation and subscriptions etc. One use for older laptops etc if better on a dedicated machine, just works via the wifi router. This has the "fun" of running "guerrilla"/"peoples" information war with The Government, as well. The use of a residential IP address defeats the IP address database problem, and there seems an ability to avoid packet inspection, possibly because the Firewall is aimed at citizens rather than expats doing business and maybe using corporate VPN. But Air style SSL or tls-crypt sheathing would help. With the increase in 100Mbps and unlimited data deals with ISPs, there is a possible AirBnB model for such VPN server hosting for geolocation access to US, UK, France etc sources, with limited privacy (but still https), and transfer of payment. Not expected to take major income from Air, but another challenge for the Internet.

Hello Weasel, the encryption key is, to my knowledge, not stored in a way that it could be exploited. And with Perfect Forward Secrecy, there is a new key for every session. No, the traffic between you and the VPN server is encrypted (too). This is true with UDP and TCP - the encryption is based on OpenSSL. The goal of SSL and SSH is NOT to give you more security in terms of encryption in our case, but to hide from your ISP or from a firewall the fact that you are using a VPN. This is done by encapsulating the OpenVPN traffic in an extra layer that looks like normal SSL or SSH. This may help users from China or some other countries that try to block VPNs. But if you have nor need for them, SSL and SSH will just take some extra CPU power without giving you any significant advantage. While SSL and SSH add an extra layer of encryption, this is not necessary, because anyone who could crack the (very strong) encryption used by AIR with UDP and TCP could probably also crack this extra layer.

Is there are a solution, yet? I have to switch to an Iphone and I am living in China. I need to get ssl/ssh working without jailbreak!

Opinions alone, no offense meant to anyone. Wireguard has some nice features (IP roaming, easy to set up) But also a lot of hype surrounding it. Does not work in many corporate environments which does not allow UDP No obfuscation support (AFAIK) and hence will be easy to block in countries like UAE and China if it becomes popular There is definitely a limited case use for it however I believe that any VPN designed in 2016 or later should have obfuscation as a major design goal. Early days for sure and all the best to the developers

Sometime last year (or it could've been two years ago now..) WhatsApp turned on end-to-end encryption for everyone (unlike Facebook messenger that implemented the protocol as well but force users to "create a secret/private chat" in able to use it. You're right; I forgot you don't need a phone number with Signal anymore. However, in the Netherlands they give away SIM cards for free (a bit suspicious if you ask me...) and so I just cycle a new signal # every month without dishing out any $ for said SIM. Signal has the option of a "Registration Lock," so you can set a password that's associated with your phone number. This prevents others from re-registering the same phone number as you (which would give a third party access to all your messages in real time without your knowledge). Signal also has the option of relaying call's through their server which would mask your IP address to the person you're calling. Awesome feature. Signal just implemented Censorship Circumvention as well- which is pretty self explanatory and a handy feature for authoritarian regime such as China where Signal is currently blocked. 5 Stars for Signal

It's worth noting that SSL Tunnels work on non-rooted android. If i were in China I'd use SSL Tunnel 24/7, the obfuscation of the OpenVPN layer provided by SSL Tunnels may keep it unblocked longer than your traditional OpenVPN counterpart.

Hey guys, just thought I'd provide some detail of my experiences using Airvpn in mainland China. Disclaimer: I'm in IT Platform: Nexus 6P, Oreo 8.1 April security patch, *not* rooted Client: OpenVPN for Android Location: Nanning, Guangxi I was last in mainland China in Oct 2017. We visited Guangxi and Guangdong, and I was forced to use the Hong Kong UDP-Altentry as nothing else worked. This was quite unreliable and whilst some places we visited were remote and rural, they still had good broadband speed for the locals. This time around everything works. Everything in the screenshot. I find that strange. The Chinese government officially cracked down *more" in Feb 2018, so why would these now all work? One thing I have noticed is in one hotel, only Hong Kong UDP-Altentry would work. This was sometimes the case in public free WiFi hotspots also. Everyone in IT security knows that layers are important, so I can only assume that large enough public WiFi (large hotel chains etc.) are required by law to have a level of filtering (perhaps dropping all UDP on 80 and 443, as sometimes only TCP would work) Presumably the Chinese government may look at forums like these in order to bolster their security, but perhaps they have relaxed VPN access in order to "catch" more nationals in the act. A friend lent us a SIM card, which is China Telecom and not only is the LTE *fast*, but again, all VPN tunnels in the screenshot here worked. Perhaps OpemVPN have upgraded their termination points, but either way this is both good and worrying news. On the plus side, there's no need for me to consider an alternative (nonsense chameleon marketing aside), and the speed is just as good as I've experienced when at home. On the down side, I'm convinced they are monitoring in order to create more filtering policies to block VPNs by allowing them to run more freely. I hope the cynic in me is wrong.

Hello! Yes, but it's not recommended. "europe2.vpn.airdns.org" for example is resolved to the highest rated server at the moment of the generation, if you force resolution you will always connect to the same server. As explained in the tooltip, that's useful in case of DNS poisoning (China for example). Previous versions of Config Generator had an option to dump all servers with many "remote" directives, to allow OpenVPN to pick (randomly) a server, but the option was disabled because OpenVPN doesn't accept more than 64 "remote" directives. if necessary, you might anyway emulate that option by editing the file with a text editor (with "remote-random" and then a maximum of 64 " remote" directives, see also https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses for this purpose). Anyway, europe2.all.vpn.airdns.org contain all IP servers of the picked region, as explained here: https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses Kind regards

1) I have an Asus router and you do need to upload configuration files. Simple way is to go to the Config Generator, make the selections, download the .ovpn files to your computer, and then upload them to the router. There are tutorials here that take you through step by step. One note: being in China you will need the servers' IP addresses in the .ovpn files. There is an option in the Config Generator, resolve hosts in the .ovpn files, to do this. If you don't do this you will not be able to connect to the server from the router. This is also true for devices, such as phones, etc. The Eddie client will work if you choose an SSL connection. Not sure about SSH because I never tried it. 2) AirVPN works, at least where I am. Whether one works or not, and how well it works, depends on where you are. For example, ExpressVPN worked when I tried it, but it was extremely slow. I tried the one my brother uses. It works for him in other areas of China, but not where I am. Sorry, but I don't remember which one it was. Another note: the airvpn.org website is blocked if you use a non-vpn connection. airvpn.info is not currently blocked. One last note: my bank will not allow me to use a VPN to login to their website. I don't know if other banks have a similar restriction.