Search the Community

For context, I'm running qBittorrent in a Docker container on Unraid. I've got it setup with port forwarding using a "Earth" config... I thought I way as well see them all in case the server moves around (I travel a lot), and assumed I'd be able easily change the server - or have it automatically choose the fastest. Right now it seems I'm stuck on the Cepheus server in Oslo, Norway and I'm getting about 800 kb/s downloading an image of linux mint to my US location. Can this be done, or do I need to download a new config every time I want o change servers? (Is it as easy as swapping out the wg0 file?) Thanks!

Connection attempts to us3.vpn.airdns.org (generated config AirVPN_United-States_UDP-443-Entry3) are timing out consistently. This started happening yesterday (time zone America/New York). 5/14/24 5:08 PM nm-openvpn TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) 5/14/24 5:08 PM nm-openvpn TLS Error: TLS handshake failed My network connectivity is fine. I can connect to america3.vpn.airdns.org (generated config AirVPN_America_UDP-443-Entry3), which connects me to Canada servers. === I was just able to connect to US servers, so this isn't an issue now.

We all know, all VPNs, have most of their servers rented from or stationed at 5, maybe 7 major data-center companies (the number is true if one excludes US & UK). When one goes to the client area or to the server's list, there's all sort of statistics about the server EXCEPT who is that provider. Of course, this is easily found out, but it would be of great help everyone, I imagine, if on both the client area (before generating configs) and the server list pages you'd make it explicitly clear which ASN the endpoint or, rather, the entrypoint, to be precise, server is rented from / located at. It would, of course, also be useful to know the same for the potential exit points, but that may harder to predict and implement. So for example, AirVPN, from what I can tell, has a much greater number of M247 endpoints -- a lot more, it seems, than other providers. Now one has to check every IP-address one connects to, or intends to connect to, to merely find out if it is M247 or not. I, for one, love M247: it is a wonderfully transparent global company, collecting information on all of us for what I can only imagine, could be, the greater good of humanity, but the point still remains: it'd be lovely to avoid other non-friendly-ministry-of-truth-approved ASN and their endpoints and only use M247. Hence my request. Do you think it's possible to display, as I explained, the ASN information (and perhaps other related info for each server, which usually comes with ASN databases)? Other VPNs show this, and, I imagine, it'd be splendid if you implemented this feature as well. Wouldn't you agree? Thank you. Otherwise, great service. Design doesn't matter, I like your featureful interface (no sarcasm).

One thing I have noticed with the Polis server is that there are somewhat consistent speed dips that happen for me every 20-25 seconds, and they last for at least 1 second. It's definitely a first-world problem, but it occurs when I am uploading at gigabit speeds, and the speed drops by at least 500Mbps. I haven't noticed such an occurrence on other servers I've tried. However, I still use Polis because it provides the best average upload speed for me. It really isn't an issue at all for me, though; I just wanted to mention it and see if this is the case for others using the server or if @Staff sees that this is occurring. It might just be some routing bottleneck, but I don't know for sure. I feel kind of dumb posting this because, like I said, it is such a first-world problem.

I'm curious about whether users can truly max out the operational capacity of the 10G Full-Duplex Servers. In my experience, the Haedus server in New York rarely surpasses 3.5G out of its 10G bandwidth rating, and this observation holds true for other 10G servers as well. Even at its peak, when I employ multiple connections for seeding or torrenting, the speeds don't seem to reach their full potential or remain consistent. I'm referring to the use of multiple connections in a manner similar to employing several simultaneous TCP streams to increase download/upload speeds from a server. Interestingly, there was a point when I could seed/upload at a continuous gigabit speed on the Haedus server. However, this experience isn't limited to torrenting; I've conducted tests using Iperf and other high-bandwidth usage scenarios. Strikingly, I find that I can use the most bandwidth when torrenting, presumably due to the ability to have several thousand leeches connected. I consistently get about 500 - 700 Mbps on the Haedus server using Wireguard. I can't help but wonder why I haven't seen more bandwidth being utilized, especially with the increasing number of users on the server.

I'm glad that we now have a 10-gigabit server in New York. However, I'm curious about the possibility of future upgrades extending to other major metropolitan hubs like Los Angeles, CA, Chicago, IL, and Dallas, TX. For me, I have the best latency to Chicago, so that's an area I would like to see upgraded. On a related note, I'm also curious as to why we don't see the decommissioning of other lower bandwidth servers when a new 10 Gigabit server is introduced to the same area. I know that the benefits of redundancy/failover, maintenance, load balancing, and resource allocation are some of the reasons why you would have multiple servers in the same area, but I don't see how it is beneficial in terms of cost.

I propose to add an additional option to generate a config file per City (https://airvpn.org/generator/) that will connect to the most optimal server for that city based on server load. This would work similar to how when you connect via Country or Continent. What I mean is when generating config files (https://airvpn.org/generator/) you can only select the specific servers for each city, rather than selecting just the city itself. The problem with connecting via Country or Continent is it will often connect you to a less than optimal server relative to your location. For example, Chicago based connections might be connected to Florida etc. which ultimately leads to connections with bad latency and lower speeds.

The 3 servers for Chicago, Illinois (US) seem to be pretty congested during peak times (Fang, Kruger & Sneden). There seems to be somewhere around 80-100 sessions on each of these servers most of the time, double that of almost every other 1gbit server according to the server status page https://airvpn.org/status/. During peak times these Chicago servers experience some heavy throttling. Right now (7/24/23 5:00PM) Sneden Chicago server is showing 1836 / 2000 Mbit/s and 83 sessions. Fang is showing 1810 / 2000 Mbit/s and 83 sessions, and Kruger is showing 1124 / 2000 Mbit/s with 85 sessions. In my test on a 500/500 connection I was only able to get 160 down/20 up during this period which is pretty abysmal. During non peak times I can usually get around 400-500 mbps up and down on these servers. I think these Chicago servers need atleast 1 or 2 more servers to help handle the load, or better yet an additional 10gbit server at this location would be ideal. Chicago is a vital server location in the US and an ideal location for people in the Midwest. Per City load balancing would be very beneficial here which AirVPN currently does not support. I made a separate post requesting that feature here: . Appreciate any feedback on this. Thanks!

Been noticing that many of your Canadian servers are under increased load capacity (see snapshot). The 1 Gig servers are always listed at running at critical load capacity. That being said, Will Air VPN be adding more Canadian servers in the near future? Thanks for reading.

Today I was reading a posting on M247's site, where they mentioned that in the year 2020, they plan to expand/have expanded into three new locations, one of which being Lisbon, Portugal. AirVPN previously had some servers in Portugal but unfortunately the provider shut down services there and AirVPN has not been able to find a new provider for services in Portugal. M247 is already well regarded in terms of being used for VPN services with performance that is usually quite good, and I have had a dedicated server with them for two years and had good experiences, in addition M247 is already used at multiple other AirVPN locations, and I think they would be a good choice for servers in Portugal for users who would like to have servers there.

I cannot choose another server in Eddie. There is no option to do so. Could you please help me with that. Adding a screenshot

The average number of times I lost the connection to the server is once a day. Is this is expected, or is this an issue with my OS? Is there any variation about the interval for each server restart?

Hi, When I connect without vpn Amazon prime works, but when I connect to AirVpn server Amazon prime blocked. Which vpn servers works for Amazon prime? Thanks

Not a complaint, just a question. I live in New York City. With all of the servers based in NYC and surrounding areas, why is the recommeded server always in Canada? Thank you

​First off, I am quite a fan of AirVPN. There isn't much I can complain about, just a few questions about future access to your servers around the world. ​ ​A quote from AirVPN to Torrentfreaks's annual VPN survey: ​ ​Q: 11. Do you have physical control over your VPN servers and network or are they hosted by/accessible to a third party? Do you use your own DNS servers? ​A: 11. Our servers are housed in data centers which we have physical access to, provided that the access is arranged well in advance for security reasons. Access to servers is also guaranteed to the data center technicians, for any need of on-site support. ​ ​ ​I have worked around DCs quite a bit and I understand the pros and cons of their physical security. As well as the techs that work on these servers, I was one for a while. This being said, do you see the future of AirVPN moving these servers away from Co-location racks and placing them on-premise? ​ ​If not, are you looking to rent your own cages within these DCs along with your own techs to keep these servers locked down to only people with AirVPN embroidered on their shirts? ​ ​Thanks for your time, ​3NwkHrt

Here's the log. It just cycles over and over again, never connecting. ___________________________________________________________________________________________________ I 2017.03.05 19:45:19 - DNS of a network adapter restored to original settings (Ralink RT5390R 802.11bgn Wi-Fi Adapter)I 2017.03.05 19:45:20 - DNS of a network adapter restored to original settings (TAP-Windows Adapter V9)I 2017.03.05 19:45:23 - Checking authorization ...! 2017.03.05 19:45:23 - Connecting to Gemma (Canada, Vancouver). 2017.03.05 19:45:24 - OpenVPN > OpenVPN 2.3.8 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [iPv6] built on Aug 13 2015. 2017.03.05 19:45:24 - OpenVPN > library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.08. 2017.03.05 19:45:24 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100. 2017.03.05 19:45:24 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file. 2017.03.05 19:45:24 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication. 2017.03.05 19:45:25 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication. 2017.03.05 19:45:25 - OpenVPN > Socket Buffers: R=[65536->131072] S=[65536->131072]. 2017.03.05 19:45:25 - OpenVPN > UDPv4 link local: [undef]. 2017.03.05 19:45:25 - OpenVPN > UDPv4 link remote: [AF_INET]71.19.252.113:443. 2017.03.05 19:45:25 - OpenVPN > TLS: Initial packet from [AF_INET]71.19.252.113:443, sid=6b36d440 0ea641d4. 2017.03.05 19:45:25 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org. 2017.03.05 19:45:25 - OpenVPN > Validating certificate key usage. 2017.03.05 19:45:25 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0. 2017.03.05 19:45:25 - OpenVPN > VERIFY KU OK. 2017.03.05 19:45:25 - OpenVPN > Validating certificate extended key usage. 2017.03.05 19:45:25 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication. 2017.03.05 19:45:25 - OpenVPN > VERIFY EKU OK. 2017.03.05 19:45:25 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org. 2017.03.05 19:45:31 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key. 2017.03.05 19:45:31 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication. 2017.03.05 19:45:31 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key. 2017.03.05 19:45:31 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication. 2017.03.05 19:45:31 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA. 2017.03.05 19:45:31 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]71.19.252.113:443. 2017.03.05 19:45:33 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1). 2017.03.05 19:45:34 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.37.190 255.255.0.0'. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: LZO parms modified. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: route options modified. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: route-related options modified. 2017.03.05 19:45:34 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified. 2017.03.05 19:45:34 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0. 2017.03.05 19:45:34 - OpenVPN > open_tun, tt->ipv6=0. 2017.03.05 19:45:34 - OpenVPN > TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{4DDBFCB8-FB95-4B51-AB55-F8E9B44F34EA}.tap. 2017.03.05 19:45:34 - OpenVPN > TAP-Windows Driver Version 9.21. 2017.03.05 19:45:34 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.37.190/255.255.0.0 [sUCCEEDED]. 2017.03.05 19:45:34 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.37.190/255.255.0.0 on interface {4DDBFCB8-FB95-4B51-AB55-F8E9B44F34EA} [DHCP-serv: 10.4.255.254, lease-time: 31536000]. 2017.03.05 19:45:34 - OpenVPN > Successful ARP Flush on interface [6] {4DDBFCB8-FB95-4B51-AB55-F8E9B44F34EA}. 2017.03.05 19:45:39 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up. 2017.03.05 19:45:39 - OpenVPN > C:\WINDOWS\system32\route.exe ADD 71.19.252.113 MASK 255.255.255.255 192.168.1.1. 2017.03.05 19:45:39 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4. 2017.03.05 19:45:39 - OpenVPN > Route addition via IPAPI succeeded [adaptive]. 2017.03.05 19:45:39 - OpenVPN > C:\WINDOWS\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 4. 2017.03.05 19:45:39 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4. 2017.03.05 19:45:39 - OpenVPN > Route addition via IPAPI succeeded [adaptive]. 2017.03.05 19:45:39 - OpenVPN > C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1. 2017.03.05 19:45:39 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4. 2017.03.05 19:45:39 - OpenVPN > Route addition via IPAPI succeeded [adaptive]. 2017.03.05 19:45:39 - OpenVPN > C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1. 2017.03.05 19:45:39 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4. 2017.03.05 19:45:39 - OpenVPN > Route addition via IPAPI succeeded [adaptive]. 2017.03.05 19:45:39 - Starting Management Interface. 2017.03.05 19:45:39 - OpenVPN > Initialization Sequence CompletedI 2017.03.05 19:45:40 - DNS of a network adapter forced (Ralink RT5390R 802.11bgn Wi-Fi Adapter)I 2017.03.05 19:45:40 - DNS of a network adapter forced (TAP-Windows Adapter V9)I 2017.03.05 19:45:40 - Flushing DNSI 2017.03.05 19:45:41 - Checking routeW 2017.03.05 19:46:42 - The operation has timed out! 2017.03.05 19:46:42 - Disconnecting. 2017.03.05 19:46:42 - Management - Send 'signal SIGTERM'. 2017.03.05 19:46:42 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info. 2017.03.05 19:46:42 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'. 2017.03.05 19:46:42 - OpenVPN > SIGTERM received, sending exit notification to peer. 2017.03.05 19:46:47 - OpenVPN > C:\WINDOWS\system32\route.exe DELETE 71.19.252.113 MASK 255.255.255.255 192.168.1.1. 2017.03.05 19:46:47 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]. 2017.03.05 19:46:47 - OpenVPN > C:\WINDOWS\system32\route.exe DELETE 192.168.1.1 MASK 255.255.255.255 192.168.1.1. 2017.03.05 19:46:47 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]. 2017.03.05 19:46:47 - OpenVPN > C:\WINDOWS\system32\route.exe DELETE 0.0.0.0 MASK 128.0.0.0 10.4.0.1. 2017.03.05 19:46:47 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]. 2017.03.05 19:46:47 - OpenVPN > C:\WINDOWS\system32\route.exe DELETE 128.0.0.0 MASK 128.0.0.0 10.4.0.1. 2017.03.05 19:46:47 - OpenVPN > Route deletion via IPAPI succeeded [adaptive]. 2017.03.05 19:46:47 - OpenVPN > Closing TUN/TAP interface. 2017.03.05 19:46:47 - OpenVPN > SIGTERM[soft,exit-with-notification] received, process exiting . 2017.03.05 19:46:47 - Connection terminated.

Tech. Support I was under the impression that AirVPN runs their own servers, however when using an SSH tunnel the connection is to ip 71.19.249.195 (eSecureData.com). Do you use third party servers, Virtual Private Servers, or is this a co-location? It appears that if SSH tunneling is used, your only option is to be routed through ip 71.19.249.195. Is this correct? Since the configuration files list ip addresses and not url's, I guess your service is running on third party eSecureData.com servers. When my SSH data packets arrive at eSecureData.com and are decrypted, I would think that the OpenVPN encrypted data would be forwarded to an AirVPN server, however it seems that my OpenVPN data is decrypted at eSecureData.com also, along with the SSH encryption (route ---> 71.19.249.195 255.255.255.255 net_gateway in the .opnv file.). I imagine this makes sense as stripping the SSH encryption and then forwarding the OpenVPN encrypted data would defeat the purpose of the SSH encryption in the first place. So my bottom line question is how much can I trust eSecureData.com, including their logging policy? I tried to install the AirVPN GUI .deb (Eddie I believe) on LinuxMint 17: Kernel: 3.19.0-32-generic x86_64 (64 bit gcc: 4.8.2) Desktop: Cinnamon 2.8.8 (Gtk 3.10.8~8+qiana) Distro: Linux Mint 17.3 Rosa and the install fails halfway through. I can not find any info. about the abend in my logs. I do not have Mono installed. Is that my issue? All of this is beyond my pay grade, but I'm having fun. Best Regards.

For asia servers you have only 4 hong kong and 1 singapore. In asia and europe day time singapore has high load each day, can we get another singapore server or server in japan or new place in asia? Thank you

Can not connect to a Large number of OVH domains and would like to get this Resolved ASAP Seems like being they are doing some of Air's Hosting, This is kind of odd??? Please Advice As seen checking routes, although it seems ovh.nl works as of right now... https://airvpn.org/routes/?q=ovh.com

Hello, as many of you know some users of AirVPN that actually value geolocation accuracy on web based services such as google such as my self have noted MANY times that services such as Google do not detect the proper country of the VPN servers we use. I would like to request that a chart of each and every server be made that lists the accuracy of geolocation on both Google.com and Ipleak.net. I consistently find myself searching server after server for one that is both fast and accurate. I would like it noted that most AirVPN users could care less about this and support even less so; all i ask is that it be made easier for the minority to access accurate servers without trial and error.

Hi, it seems Eddie will re-set to a different server every 20 or 30 minutes for me today. Am I the only one experiencing this? Thanks.

It would be useful, I think, to have more servers in countries that don't have very close military/intelligence relations with the "Five Eyes" countries and/or NATO. It seems likely that VPN traffic in such countries is targeted for surveillance, and that data is shared. At present, I think the only non-aligned territory in which AirVPN operates a server is Hong Kong. (Sweden, Switzerland, and Singapore all have close intelligence ties with the U.S. and/or NATO.) I would very much like to see servers made available in countries such as Finland, Russia (which has granted asylum to Edward Snowden), Serbia, Brazil, Ecuador (which has granted asylum to Julian Assange), Bolivia, and South Africa.

Hi everyone, I'm wondering, if I tweak my SNR settings on my Asus DSL-AC68U, is this likely to cause any of the AirVPN servers to possibly slow down? I have tweaked my SNR settings and am getting around a 25 percent speed increase when I'm not using AirVPN, but it's possibly effecting both the speed and throughput when using AirVPN, although I'm still running further tests to accurately determine this. Any input from any of you out there would be greatly appreciated.

I've tried to connect to a bunch of US servers today and they all fail while trying to add the route info, but I can connect to any Canadian server. I've changed my protocol settings but nothing changes.

Hi Air, I just saw that all the Dutch Servers are out.. Can you tell me what wrong? Thanks in Advance!