AirVPN new client (Windows-Linux, Mac)

puff-m-d · Feb 7, 2021

Hello,

A new stable version of Hummingbird for macOS Apple M1, version 1.1.1, has been released.
Announcement and Discussion (with download links): macOS Apple M1: Hummingbird 1.1.1 released

Hello!

We're very glad to announce that we have just released Hummingbird for Apple M1 based machines. Hummingbird is a robust, light-weight and very fast OpenVPN 3 command line tool for Linux and macOS offering DNS handling and rock solid traffic leaks prevention out of the box.

It's the first time that OpenVPN 3 library and Hummingbird are available as native software in M1 based Mac computers, providing faster execution speed and higher performance.

As usual Hummingbird uses our OpenVPN 3 AirVPN library fork, which includes bug fixes and very important features missing in the main branch. Please find overview, details, documentation and download link here: https://airvpn.org/forums/topic/48834-macos-hummingbird-111-released/
Click to expand...

wildlights · Feb 9, 2021

puff-m-d said: ↑

Hello,

A new stable version of Hummingbird for macOS Apple M1, version 1.1.1, has been released.
Announcement and Discussion (with download links): macOS Apple M1: Hummingbird 1.1.1 released
Click to expand...

This is good news for me!

puff-m-d · Mar 11, 2021

Hello,

A new stable version of the Eddie client, version 2.20.0, has been released.
Eddie Desktop 2.20.0 released (Announcement and Feedback)

Hello!

We're very glad to inform you that a new stable release of Eddie is now available for Linux (various ARM based architectures included), Mac, Windows.

Eddie is a free and open source (GPLv3) OpenVPN GUI and CLI by AirVPN with many additional features such as:

traffic leaks prevention via packet filtering rules

DNS handling

optional connections over Tor or a generic proxy

customizable events

traffic splitting on a destination IP address or host name basis

complete and swift integration with AirVPN infrastructure

white and black lists of VPN servers

ability to support IPv4, IPv6 and IPv6 over IPv4

What's new in Eddie 2.20.0

[change] [all] OpenVPN 2.5.1

[change] [all] New default setting - Networking -> Switch to 'Block' if issue is detected, new default value: True

[bugfix] [Windows 32bit] - Error at startup (released as a hotfix in 2.19.7 stable)

[bugfix] [all] "Failed to compare two elements in the array"

[bugfix] [all] Using OpenVPN provider other than AirVPN

[bugfix] [all] IPv6 in manifest/bootstrap

[bugfix] [Linux] Elevation failure on Ubuntu on some arm64/aarch64 architecture

Eddie GUI and CLI now run with normal user privileges, while only a "backend" binary, which communicates with the user interface with authentication, gains root/administrator privileges, with important security safeguards in place:

stricter parsing is enforced before passing a profile to OpenVPN in order to block insecure OpenVPN directives

external system binaries which need superuser privileges (examples: openvpn, iptables, hummingbird) will not be launched if they do not belong to a superuser

Eddie events are no more run with superuser privileges: instead of trusting blindly user's responsibility and care when dealing with events, now the user is required to explicitly operate to run something with high privileges, if necessary

Backend binary is written in C++ on all systems (Windows included), making the whole application faster.

Settings, certificates and keys of your account stored on your mass storage can optionally be encrypted on all systems either with a Master Password or in a system key-chain if available.

Eddie 2.20.0 can be downloaded here:
https://airvpn.org/linux - Linux version
https://airvpn.org/macos - Mac version
https://airvpn.org/windows - Windows version

Eddie is free and open source software released under GPLv3. Source code is available on GitHub: https://github.com/AirVPN/Eddie

Complete changelog can be found here.

Kind regards & datalove
AirVPN Staff
Click to expand...

Website - Download - Changelog

Version 2.20.0 (Thu, 11 Mar 2021 11:47:30 +0000)

[change] [all] OpenVPN 2.5.1

[change] [all] New default setting - Networking -> Switch to 'Block' if issue is detected, new default value: True

[bugfix] [Windows 32bit] - Error at startup (released as a hotfix in 2.19.7 stable)

[bugfix] [all] "Failed to compare two elements in the array"

[bugfix] [all] Using OpenVPN provider other than AirVPN

[bugfix] [all] IPv6 in manifest/bootstrap

[bugfix] [Linux] Elevation failure on Ubuntu on some arm64/aarch64 architecture

Click to expand...

puff-m-d · Mar 12, 2021

Hello,

A new beta version of AirVPN Suite 1.1.0 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!
We're very glad to introduce a new AirVPN Suite version for Linux. Check supported systems below
The suite includes:

Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the bootstrap

Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN servers

Hummingbird: lightweight and standalone binary for generic OpenVPN server connections

All the software is free and open source, licensed under GPLv3.

What's new in 1.1.0 version

full compatibility with OSMC, Open Source Media Center (please read the note *)

enhanced compatibility with Raspbian (please read the note *)

persistent Network Lock implementation, useful for example to enforce prompt Network Lock during system bootstrap and prevent traffic leaks caused by processes at bootstap (**). Use directive networklockpersist in bliuetit.rc to enable Network Lock as soon as Bluetit starts, regardless of network status and connection attempts

revisited Network Lock logic for additional safety

enhanced DNS handling for peculiar systemd-resolved operational modes

more rigorous handling of events through semaphore implementation

new D-Bus methods for Network Lock aimed at easier control by clients. Developer's documentation will be published soon

crash caused by systemd signal flooding has been resolved

libcurl crash in OSMC and other systems has been fixed

logical flaw causing Network Lock missed activation in case of account login failure has been fixed

minor bug fixes

see the changelog below for more information and details

Important notes
(*) OSCM and Raspbian users beware: you should activate "Wait for network" in "Rapberry Pi configuration" menu to avoid fooling systemd during bootstrap and have it launch Bluetit prematurely
(**) Ponder the option carefully if your machine needs network sync via NTP or other network services outside the VPN during the bootstrap phase
(***) Fedora 33 users beware: we have noticed that in freshly installed Fedora 33 libcurl cannot find CA LetsEncrypt certificates and this will prevent Bluetit from detecting the country from ipleak.net. In this case, you can overcome this bug by using the country directive in bluetit.rc file, therefore avoiding the need to contact ipleak.net.

AirVPN Suite changelog
Version 1.1.0 Beta 1 - 11 March 2021

[ProMIND] rcparser.cpp: removed formal list control for STRING type

[ProMIND] netfilter.hpp, netfilter.cpp: added functions to set the availability of specific iptables tables in order to properly use available tables only

[ProMIND] vpnclient.hpp: onResolveEvent() sets iptables tables according to the loaded modules

[ProMIND] vpnclient.hpp: Changed constructor in order to use both private and external NetFilter object

[ProMIND] localnetwork.cpp: added getLoopbackInterface(), getLocalIPaddresses() and getLocalInterfaces() methods

[ProMIND] airvpntools.cpp: added detectLocation() method to retrieve location data from ipleak.net

[ProMIND] airvpnuser.cpp: detectUserLocation() now uses AirVPNTools::detectLocation()

[ProMIND] airvpnuser.cpp: loadUserProfile() now correctly sets userProfileErrorDescription in case of network failure

[ProMIND] airvpnserverprovider.cpp: added "DEFAULT" rule to getUserConnectionPriority() in case user's country or continent is undefined

[ProMIND] airvpnmanifest.cpp: loadManifest() now correctly sets the status STORED in case of network failure

[ProMIND] Added Semaphore class

[ProMIND] dnsmanager.hpp: method revertAllResolved() renamed to restoreResolved(). Besides reverting all interfaces it now restarts systemd-resolved service as well.

[ProMIND] install.sh: improved update/upgrade process

Bluetit changelog
Version 1.1.0 Beta 1 - 11 March 2021

[ProMIND] connection_stats_updater(): now uses server.getEffectiveBandWidth() for AIRVPN_SERVER_BANDWIDTH

[ProMIND] added bool shutdownInProgress to control bluetit exit procedure and avoid signal flooding

[ProMIND] system location is detected at boot time and eventually propagated to all AirVPN users

[ProMIND] Network lock and filter is now enabled and activated before AirVPN login procedure

[ProMIND] Added dbus methods "enable_network_lock", "disable_network_lock" and "network_lock_status"

[ProMIND] Renamed bluetit.rc directive "airconnectonboot" to "airconnectatboot"

[ProMIND] Added bluetit.rc directive "networklockpersist"

Architecture
The client-daemon architecture offered by Goldcrest and Bluetit combination offers a robust security model and provides system administrators with a fine-grained, very flexible access control.
Bluetit is fully integrated with AirVPN. The daemon is accessed through a D-Bus interface by providing specific methods and interface in order to give full support to OpenVPN connection and AirVPN functionality, including - but not limited to - quick automatic connection to the best AirVPN server for any specific location as well as any AirVPN server or country. Connection during system bootstrap is fully supported as well.

New OpenVPN 3 library features
Hummingbird and Bluetit are linked against a new version of our OpenVPN 3 library which supports directive data-ciphers: it can be used consistently with OpenVPN 2.5 syntax in OpenVPN profiles.
The directive allows OpenVPN 3 based software to negotiate a common Data Channel cipher with the OpenVPN server,, updating therefore our library to ncp-like negotiation with OpenVPN 2 branch. Hummingbird and Bluetit are already linked against the new library version, while Eddie Android edition will be updated in the near future.
The new library also includes a different handling of IV_CIPHERS variable, fixing OpenVPN main branch issues which caused a plethora of problems with OpenVPN 2.5. The implementation, at the same time, takes care of full backward compatibility with OpenVPN versions older than 2.5.
ncp-disable directive, which to date has never been implemented in the main branch, is still supported, in order to further enhance backward compatibility with both OpenVPN profiles and servers, as well as connection flexibility with servers running older than 2.5 OpenVPN versions.
Please note that if you enforce a specific Data Channel cipher by means of Bluetit configuration file, Hummingbird line option, or Goldcrest configuration file and/or line option, the enforced Data Channel cipher will override data-ciphers profile directive.

Notes on systemd-resolved
In Fedora 33 systemd-resolved comes pre-configured to work in "on-link" mode and network-manager works together with it.
This very peculiar, Windows-like setup kills Linux global DNS handling, causing those DNS leaks which previously occurred only on Windows. Hummingbird and Bluetit take care of preventing the brand new DNS leaks caused by such a setup.
Also note that systemd-resolved comes pre-configured with fallback DNS (Google DNS is a systemd-resolved default fallback DNS, smart choices pile up!) which will be queried if each interface DNS server fails some resolution. In such a case, if and only if you have Network Lock enabled will DNS leaks be prevented.

Supported systems
The suite is currently available for Linux x86-64, i686 (32 bit distributions), arm7l (for example Raspbian, OSMC and other ARM 32 bit based systems) and aarch64 (ARM 64 bit). Both systemd and SysV-style init based systems are supported.
AirVPN Suite is free and open source software licensed under GPLv3.

Overview and main features
AirVPN’s free and open source OpenVPN 3 suite based on AirVPN’s OpenVPN 3 library fork

Bluetit: lightweight D-Bus controlled system daemon providing full connectivity to AirVPN servers and generic OpenVPN servers. Ability to connect the system to AirVPN during the bootstrap.

Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN servers

Hummingbird: lightweight and standalone client for generic OpenVPN server connection

Linux i686, x86-64, arm7l and arm64 (Raspberry) support

Full integration with systemd, SysV Style-init and chkconfig

No heavy framework required, no GUI

Tiny RAM footprint

Lightning fast

Based on OpenVPN 3 library fork by AirVPN version 3.6.6 with tons of critical bug fixes from the main branch, new cipher support and never seen before features

ChaCha20-Poly1305 cipher support on both Control and Data Channel providing great performance boost on ARM, Raspberry PI and any Linux based platform not supporting AES-NI. Note: ChaCha20 support for Android had been already implemented in our free and open source Eddie Android edition

Robust leaks prevention through Network Lock based either on iptables, nftables or pf through automatic detection

Proper handling of DNS push by VPN servers, working with resolv.conf as well as any operational mode of systemd-resolved additional features

User documentation (*) and source code:
https://gitlab.com/AirVPN/AirVPN-Suite
(*) Developer documentation to create custom software clients for Bluetit will be published in the near future.

Download links:
Linux x86-64: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-x86_64-1.1.0-Beta1.tar.gz
Linux x-86-64 sha512 check file: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-x86_64-1.1.0-Beta1.tar.gz.sha512

Linux i686: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-i686-1.1.0-Beta1.tar.gz
Linux i686 sha512 check file: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-i686-1.1.0-Beta1.tar.gz.sha512

Linux arm7l: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-armv7l-1.1.0-Beta1.tar.gz
Linux arm7l sha512 check file: https://eddie.website/repository/AirVPN-Suite/1.0/AirVPN-Suite-armv7l-1.0.0.tar.gz.sha512

Linux aarch64: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-aarch64-1.1.0-Beta1.tar.gz
Linux aarch64 sha512 check file: https://eddie.website/repository/AirVPN-Suite/1.1.0-Beta1/AirVPN-Suite-aarch64-1.1.0-Beta1.tar.gz.sha512

Kind regards
AirVPN Staff
Click to expand...

caspian · Mar 16, 2021

puff-m-d said: ↑

Hello,

A new beta version of AirVPN Suite 1.1.0 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available
Click to expand...

I just downloaded and noticed a portable version? I had no idea. So I can run airVPN from a USB?

puff-m-d · Apr 3, 2021

Hello,

A new beta version of AirVPN Suite 1.1.0 beta 2 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!
We're glad to announce that AirVPN Suite 1.1.0 beta 2 is now available.
Download URLs and changelog have been updated accordingly in the first topic message.
Most important changes:

Bluetit crash in some 32 bit systems (e.g. Raspbian) has been addressed and resolved

Bluetit now waits for the system to set up properly gateway and gateway interface. Therefore, even when launched by some init system prematurely during bootstrap, and in any other circumstance, Bluetit can autonomously decide when it's time to proceed, as soon as the network link is up, avoiding errors due to network unavailability

Bluetit recognizes new directive aircipher allowing to pick a specific cipher for Data Channel even when Bluetit is configured to start automatically at system bootstrap

Bluetit recognizes new directive maxconnretries which tells Bluetit how many connection retries must be attempted (default: 10) in case of connection failure

Goldcrest new line option --bluetit-stats allows to fetch connection stats from Bluetit

Thank you for testing!

Kind regards
AirVPN Staff
Click to expand...

puff-m-d · Apr 7, 2021

Hello,

A new release candidate version of AirVPN Suite 1.1.0 RC 1 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!
AirVPN Suite 1.1.0 RC 1 is now available. No news from beta 2, it's just for development cycle consistency and coherency.
Kind regards
Click to expand...

puff-m-d · Apr 15, 2021

Hello,

A new release candidate version of AirVPN Suite 1.1.0 RC 2 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!

We're glad to inform you that AirVPN Suite 1.1.0 RC 2 is now available. Diownload URLs have been updated accordingly in this thread first message.

AirVPN Suite 1.1.0 RC 2 includes NEW OpenVPN AirVPN library 3.7 fixing a couple of issues coming from the main branch causing the library to crash under the conditions found by our community testers and reported in this thread: thank you all! Another issue in the library was the confusion between "proto tcp-client" and "proto tcp" in OpeNVPN 3 main branch, which caused a critical problem as reported in this thread by testers. The issue has been addressed.

OpenVPN AirVPN 3.7 is now 100 commits ahead of the main branch, featuring several, new important features and very many bug fixes.
https://github.com/AirVPN/openvpn3-airvpn

A small change in Bluetit will also cause less CPU usage, at the price of a slightly lower responsiveness (which will not be seen by the naked eye). The main load was caused by the handling of the D-Bus message queue, which is critical because D-Bus does not have a message buffer: if the listener loses a message that message will be lost for good. Through an appropriate fine tuning, now Bluetit will not lose any message but at the same time will need less CPU time. Thanks again to our community testers for having reported the matter in this thread.

Please keep testing RC 2!

Kind regards
AirVPN Staff
Click to expand...

puff-m-d · Apr 17, 2021

Hello,

A new release candidate version of AirVPN Suite 1.1.0 RC 3 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!

We're glad to inform you that AirVPN Suite 1.1.0 RC 3 is now available. Download URLs have been updated in this thread first message.

AirVPN Suite 1.1.0 RC 3 aims at addressing RC 2 Bluetit problem or regression suffered in D-Bus message handling and found out (unfortunately not reproduced on our systems) by our community testers @pjnsmb @leori and @colorman

Please keep testing RC 3!

Version 1.1.0 RC 3 - 16 April 2021 - changelog

[ProMIND] Updated to OpenVPN 3.7 AirVPN

[ProMIND] vpnclient.hpp: avoid netFilter setup in case NetFilter object is not private

[ProMIND] dbusconnector.cpp: fine tuned D-Bus wait cycle in R/W dispatch. Implemented a thread safe wait in order to avoid D-Bus timeout policy

Kind regards
Click to expand...

puff-m-d · May 14, 2021

Hello,

A new release candidate version of AirVPN Suite 1.1.0 RC 4 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 beta available

Hello!

We're glad to inform you that AirVPN Suite 1.1.0 RC 4 is now available. Download URLs have been updated accordingly in this thread first message. Please check the changelog for a full list of important changes, which in this last time frame between RC3 and RC4 have been particularly numerous.

The latest problems found by our internal and public testers have been reproduced and addressed. Thank you all, you brought to light various, elusive bugs which slipped unnoticed through all the previous testing phases.

AirVPN Suite 1.1.0 RC 4 includes new OpenVPN AirVPN library 3.7 fixing a couple of issues coming from the main branch causing the library to crash under the conditions found by our community testers and reported in this thread: thank you all! Another issue in the library was the confusion between "proto tcp-client" and "proto tcp" in OpeNVPN 3 main branch, which caused a critical problem as reported in this thread by testers.

OpenVPN AirVPN 3.7 is now 103 commits ahead of the main branch, featuring several, new important features and very many bug fixes.
https://github.com/AirVPN/openvpn3-airvpn

Please keep testing RC 4!

Kind regards
AirVPN Staff
Click to expand...

BoerenkoolMetWorst · Jun 6, 2021

AirVPN currently has discounts because of their 11th birthday.

puff-m-d · Jun 14, 2021

Hello,

A new stable version of AirVPN Suite 1.1.0 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.1.0 released

Hello!

We're very glad to inform you that AirVPN Suite version 1.1.0 for Linux has been released. Check supported systems below

The suite includes:

Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the bootstrap

Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN servers

Hummingbird: lightweight and standalone binary for generic OpenVPN server connections

All the software is free and open source, licensed under GPLv3.

What's new in 1.1.0 version

full compatibility with OSMC, Open Source Media Center

enhanced compatibility with Raspbian

persistent Network Lock implementation, useful for example to enforce prompt Network Lock during system bootstrap and prevent traffic leaks caused by processes at bootstrap (**). Use directive networklockpersist in bluetit.rc to enable Network Lock as soon as Bluetit starts, regardless of network status and connection attempts

revisited Network Lock logic for additional safety

new directives for bluetit.rc: networklockpersist, connectretrymax and aircipher

enhanced DNS handling for peculiar systemd-resolved operational modes

more rigorous handling of events through semaphore implementation

new D-Bus methods for Network Lock aimed at easier control by clients. Developer's documentation will be published soon

crash caused by systemd signal flooding has been resolved

libcurl crash in OSMC and other systems has been fixed

crash in some 32 bit systems has been fixed

logical flaw causing Network Lock missed activation in case of account login failure has been fixed

various bug fixes

see the changelog below for more information and details

Important notes
(**) Ponder the option carefully if your machine needs network sync via NTP or other network services outside the VPN during the bootstrap phase
(***) Fedora 33 and openSUSE 15.2 users beware: we have noticed that in freshly installed Fedora 33 libcurl cannot find CA LetsEncrypt certificates and this will prevent Bluetit from detecting the country from ipleak.net. In this case, you can overcome this bug by using the country directive in bluetit.rc file, therefore avoiding the need to contact ipleak.net web site.

AirVPN Suite changelog
Version 1.1.0 - 4 June 2021

[ProMIND] vpnclient.hpp: restoreNetworkSettings() now returns a warning in case backup files are not found

[ProMIND] vpnclient.hpp: restoreNetworkSettings() improved restoring management with more cases/scenarios

[ProMIND] updated all dependencies and libraries

Version 1.1.0 RC 4 - 14 May 2021

[ProMIND] optionparser.cpp: added proper message errors in case of invalid argument and allocation memory error

[ProMIND] netfilter.cpp: systemBackupExists() now evaluate every firewall mode backup file name

[ProMIND] netfilter.cpp: restore() now check for every firewall mode backup and restore it accordingly

[ProMIND] netfilter.cpp: IPv6 rules are now allowed or added only in case IPv6 is available in the system

Version 1.1.0 RC 3 - 16 April 2021

[ProMIND] Updated to OpenVPN 3.7 AirVPN

[ProMIND] vpnclient.hpp: avoid netFilter setup in case NetFilter object is not private

[ProMIND] dbusconnector.cpp: fine tuned D-Bus wait cycle in R/W dispatch. Implemented a thread safe wait in order to avoid D-Bus timeout policy

Version 1.1.0 RC 1 - 7 April 2021

Release Candidate, no change from Beta 2

Version 1.1.0 Beta 2 - 2 April 2021

[ProMIND] localnetwork.cpp: added getDefaultGatewayInterface() method

Version 1.1.0 Beta 1 - 11 March 2021

[ProMIND] rcparser.cpp: removed formal list control for STRING type

[ProMIND] netfilter.hpp, netfilter.cpp: added functions to set the availability of specific iptables tables in order to properly use available tables only

[ProMIND] vpnclient.hpp: onResolveEvent() sets iptables tables according to the loaded modules

[ProMIND] vpnclient.hpp: Changed constructor in order to use both private and external NetFilter object

[ProMIND] localnetwork.cpp: added getLoopbackInterface(), getLocalIPaddresses() and getLocalInterfaces() methods

[ProMIND] airvpntools.cpp: added detectLocation() method to retrieve location data from ipleak.net

[ProMIND] airvpnuser.cpp: detectUserLocation() now uses AirVPNTools::detectLocation()

[ProMIND] airvpnuser.cpp: loadUserProfile() now correctly sets userProfileErrorDescription in case of network failure

[ProMIND] airvpnserverprovider.cpp: added "DEFAULT" rule to getUserConnectionPriority() in case user's country or continent is undefined

[ProMIND] airvpnmanifest.cpp: loadManifest() now correctly sets the status STORED in case of network failure

[ProMIND] Added Semaphore class

[ProMIND] dnsmanager.hpp: method revertAllResolved() renamed to restoreResolved(). Besides reverting all interfaces it now restarts systemd-resolved service as well.

[ProMIND] install.sh: improved update/upgrade process

Bluetit changelog
Version 1.1.0 - 4 June 2021

[ProMIND] Client option "network-lock" is now forbidden in case persistent network lock is enabled

[ProMIND] Avoid network lock initialization in case persistent network lock is enabled and client is requiring an OpenVPN connection from profile

[ProMIND] --air-list option now accepts "all" for sub options --air-server and --air-country

[ProMIND] AirVPN Manifest update suspended in case Bluetit is in a dirty status

[ProMIND] Changed systemd unit in order to prevent the obnoxious SIGKILL signal inappropriately sent before stop timeout completion and for no logical or practical reason when Bluetit is properly and neatly terminating in response to a legal and expected SIGTERM

Version 1.1.0 RC 4 - 14 May 2021

[ProMIND] Added directives airipv6 and air6to4 in bluetit.rc

[ProMIND] In case it is requested a network recovery, VpnClient object is now initialized with NetFilter::Mode::OFF

[ProMIND] In case the requested network lock method is not available, connection is not started

[ProMIND] In case system location cannot be determined through ipleak.net, country is now properly set to empty, latitude and longitude to 0.

[ProMIND] Persistent network lock is enabled only in case Bluetit status is clean

[ProMIND] AirVPN boot connection is started only in case Bluetit status is clean

[ProMIND] DNS backup files are now properly evaluated when determining dirty status

[ProMIND] Added D-Bus commands "reconnect_connection" and "session_reconnect"

Version 1.1.0 Beta 2 - 2 April 2021

[ProMIND] Gateway and gateway interface check at startup. Bluetit won't proceed until both gateway and gateway interface are properly set up by the system

[ProMIND] Increased volume and rate data sizes for 32 bit architectures

[ProMIND] Added aircipher directive to bluetit.rc

[ProMIND] Added maxconnretries directive to bluetit.rc

Version 1.1.0 Beta 1 - 11 March 2021

[ProMIND] connection_stats_updater(): now uses server.getEffectiveBandWidth() for AIRVPN_SERVER_BANDWIDTH

[ProMIND] added bool shutdownInProgress to control bluetit exit procedure and avoid signal flooding

[ProMIND] system location is detected at boot time and eventually propagated to all AirVPN users

[ProMIND] Network lock and filter is now enabled and activated before AirVPN login procedure

[ProMIND] Added dbus methods "enable_network_lock", "disable_network_lock" and "network_lock_status"

[ProMIND] Renamed bluetit.rc directive "airconnectonboot" to "airconnectatboot"

[ProMIND] Added bluetit.rc directive "networklockpersist"

Goldcrest changelog
Version 1.1.0 - 4 June 2021

[ProMIND] Production release

Version 1.1.2 RC 4 - 14 May 2021

[ProMIND] DNS backup files are now properly evaluated when determining dirty status

[ProMIND] ProfileMerge is now constructed by allowing any file extension

[ProMIND] Reconnection (SIGUSR2) is now allowed only in case tun persistence is enabled

Version 1.1.2 - 2 April 2021

[ProMIND] Updated base classes

Hummingbird changelog
Version 1.1.2 - 4 June 2021

[ProMIND] updated all dependencies and libraries

Version 1.1.2 RC 4 - 14 May 2021

[ProMIND] DNS backup files are now properly evaluated when determining dirty status

[ProMIND] ProfileMerge is now constructed by allowing any file extension

[ProMIND] Reconnection (SIGUSR2) is now allowed only in case tun persistence is enabled

Architecture
The client-daemon architecture offered by Goldcrest and Bluetit combination offers a robust security model and provides system administrators with a fine-grained, very flexible access control.

Bluetit is fully integrated with AirVPN. The daemon is accessed through a D-Bus interface by providing specific methods and interface in order to give full support to OpenVPN connection and AirVPN functionality, including - but not limited to - quick automatic connection to the best AirVPN server for any specific location as well as any AirVPN server or country. Connection during system bootstrap is fully supported as well.

New OpenVPN 3 library features
Hummingbird and Bluetit are linked against a new version of our OpenVPN 3 library which supports directive data-ciphers: it can be used consistently with OpenVPN 2.5 syntax in OpenVPN profiles.

The directive allows OpenVPN 3 based software to negotiate a common Data Channel cipher with the OpenVPN server,, updating therefore our library to ncp-like negotiation with OpenVPN 2 branch. Hummingbird and Bluetit are already linked against the new library version, while Eddie Android edition will be updated in the near future.

The new library also includes a different handling of IV_CIPHERS variable, fixing OpenVPN main branch issues which caused a plethora of problems with OpenVPN 2.5. The implementation, at the same time, takes care of full backward compatibility with OpenVPN versions older than 2.5.

ncp-disable directive, which to date has never been implemented in the main branch, is still supported, in order to further enhance backward compatibility with both OpenVPN profiles and servers, as well as connection flexibility with servers running older than 2.5 OpenVPN versions.

Please note that if you enforce a specific Data Channel cipher by means of Bluetit configuration file, Hummingbird line option, or Goldcrest configuration file and/or line option, the enforced Data Channel cipher will override data-ciphers profile directive.

Notes on systemd
Users running Linux distributions which are not based on systemd can safely ignore this section.

Superusers of linux-systemd systems must be aware that systemd unit configuration file has been changed in order to circumvent a systemd critical bug which causes two obnoxious SIGKILL signals inappropriately sent before stop timeout completion and for no logical or practical reason when Bluetit is properly and neatly terminating in response to a legal and expected SIGTERM. The only known workaround so far to compensate the bug is forbidding systemd to send SIGKILL to Bluetit. The bug affects at least systemd versions 205, 214, 234, 246, but it might affect other versions too.

In Fedora 33 systemd-resolved comes pre-configured to work in "on-link" mode and network-manager works together with it.This very peculiar, Windows-like setup kills Linux global DNS handling, causing those DNS leaks which previously occurred only on Windows. Hummingbird and Bluetit take care of preventing the brand new DNS leaks caused by such a setup.Also note that systemd-resolved comes pre-configured with fallback DNS (Google DNS is a systemd-resolved default fallback DNS, smart choices pile up!) which will be queried if each interface DNS server fails some resolution. In such a case, if and only if you have Network Lock enabled will DNS leaks be prevented.

Supported systems
The suite is currently available for Linux x86-64, i686 (32 bit distributions), arm7l (for example Raspbian, OSMC and other ARM 32 bit based systems) and aarch64 (ARM 64 bit). Both systemd and SysV-style init based systems are supported.

AirVPN Suite is free and open source software licensed under GPLv3.

Overview and main features
AirVPN’s free and open source OpenVPN 3 suite based on AirVPN’s OpenVPN 3 library fork

Bluetit: lightweight D-Bus controlled system daemon providing full connectivity to AirVPN servers and generic OpenVPN servers. Ability to connect the system to AirVPN during the bootstrap.

Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN servers

Hummingbird: lightweight and standalone client for generic OpenVPN server connection

Linux i686, x86-64, arm7l and arm64 (Raspberry) support

Full integration with systemd, SysV Style-init and chkconfig

No heavy framework required, no GUI

Tiny RAM footprint

Lightning fast

Based on OpenVPN 3 library fork by AirVPN version 3.6.6 with tons of critical bug fixes from the main branch, new cipher support and never seen before features

ChaCha20-Poly1305 cipher support on both Control and Data Channel providing great performance boost on ARM, Raspberry PI and any Linux based platform not supporting AES-NI. Note: ChaCha20 support for Android had been already implemented in our free and open source Eddie Android edition

Robust leaks prevention through Network Lock based either on iptables, nftables or pf through automatic detection

Proper handling of DNS push by VPN servers, working with resolv.conf as well as any operational mode of systemd-resolved additional features

User documentation (*) and source code: https://gitlab.com/AirVPN/AirVPN-Suite
User documentation is also included in an md file in each package.
(*) Developer documentation to create custom software clients for Bluetit will be published in the very near future.

Download page: https://airvpn.org/linux/suite/
Click to expand...

puff-m-d · Jun 14, 2021

Hello,

A new stable version of Hummingbird for macOS, version 1.1.2, has been released.
Announcement and Discussion (with download links): macOS: Hummingbird 1.1.2 released

Hello!

We're very glad to inform you that we have just released Hummingbird 1.1.2 for macOS (High Sierra or higher version required). Hummingbird is available natively both for Intel and M1 based Mac computers.
Hummingbird is free and open source released under GPLv3: https://gitlab.com/AirVPN/hummingbird

Main features

Lightweight and stand alone binary

No heavy framework required, no GUI

Small RAM footprint

Lightning fast

Up to 100% higher throughput than OpenVPN 2.5 (on 1 Gbit/s lines)

Based on OpenVPN 3 library fork by AirVPN

Robust leaks prevention through Network Lock based on pf - working perfectly on Big Sur too

Proper handling of DNS push by VPN servers

What's new
Remarkably higher performance
Hummingbird 1.1.2 is based on the latest OpenVPN AirVPN library version linked against OpenSSL, and not mbedTLS anymore. OpenSSL latest versions in macOS have reached higher performance than mbedTLS both in encryption and decryption based on AES and CHACHA20-POLY1305 ciphers.

The current 1.1.2 version has been additionally optimized and can now provide higher performance than 1.1.1. According to our tests now Hummigbird can reach, both on Intel i7 and M1 machines, with AES-GCM-256, 400 Mbit/s of download rate (CHACHA20 is slower as it can't still compete with AES-NI).

On equal ground, as a comparison, OpenVPN 2.5.2 (our new binary optimized for M1) can reach 200 Mbit/s (only half of the speed!).

Therefore, we strongly recommend that you test Hummingbird 1.1.2 even if you run Eddie. Remember that you can run Hummingbird through Eddie comfortably and quickly by setting the proper option.

Hummingbird 1.1.2 is linked against latest OpenVPN3-AirVPN library.

Changelog
Version 1.1.2 - 4 June 2021
- [ProMIND] updated all dependencies and libraries
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Version 1.1.2 RC 4 - 14 May 2021
- [ProMIND] DNS backup files are now properly evaluated when determining dirty status
- [ProMIND] ProfileMerge is now constructed by allowing any file extension
- [ProMIND] Reconnection (SIGUSR2) is now allowed only in case tun persistence is enabled
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Version 1.1.2 RC 3 - 16 April 2021
- [ProMIND] Release Candidate 3
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Version 1.1.2 RC 2 - 14 April 2021
- [ProMIND] Release Candidate 2
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Version 1.1.2 RC 1 - 7 April 2021
- [ProMIND] Release Candidate 1
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Version 1.1.2 - 2 April 2021
- [ProMIND] Updated base classes
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

Download
Hummingbird for macOS is distributed in notarized and plain versions, both for Intel and M1 processors: Check the download page: https://airvpn.org/macos/hummingbird

The difference is about how the package is seen by macOS security and it is therefore up to the user to pick the distribution file suiting his or her needs best. The notarized version is compliant to macOS software security scheme and runs "out-of-the-box", whereas the plain version needs to be explicitly granted permission to run by the user in macOS security & privacy settings. Please note that both versions ensure the same functionality in connecting a VPN server, it is however up to the user to decide whether using the signed and notarized version or not.

Jump to the manual: https://airvpn.org/hummingbird/readme

Kind regards & datalove
AirVPN Staff
Click to expand...

puff-m-d · Jul 22, 2021

Hello,

A new beta version of the Eddie client, version 2.21.0, has been released.
Eddie Desktop 2.21 beta released (Announcement and Feedback)

Hello!
We're very glad to inform you that a new Eddie Air client version has been released: 2.21 beta. It is ready for public beta testing.
<snip>
This version contains an almost completely rewritten code for routes management, DNS and more, so please report any difference from the latest stable 2.20.
This version implements WireGuard support. AirVPN servers will offer it, during an opt-in beta-testing phase, within September. WireGuard support is expected to work out-of-the-box (no need to install anything else but Eddie) in Windows and macOS. In Linux it works if kernel supports it (kernel 5.6 or higher version is required).
PLEASE CONSIDER THIS AS A BETA VERSION. Don't use it for real connections it's only for those who want to collaborate to the project as beta testers.
Arch AUR will be update soon, please be patience. In the mean-time, you can obtain .zst in download page.
Click to expand...

Website - Download - Changelog

Version 2.21.0 (Wed, 21 Jul 2021 16:23:18 +0000)

[change] [all] OpenVPN 2.5.3, HummingBird 1.1.2

[new] [all] Option "proxy.tor.control.cookie.path" for custom Tor cookie path

[change] [windows] New default - Advanced -> Use wintun driver, new default True

[deprecated] [all] Option "os.single_instance", now always true.

[bugfix] [macos] Ping6 under macOS

[change] [all] Detection of default gateway

[change] [all] DNS, routes, network code revised

[change] [all] WireGuard, experimental support for beta-tester

[bugfix] [all] Minor bugfixes

Click to expand...

puff-m-d · Aug 19, 2021

Hello,

A new beta version of the Eddie client, version 2.21.1, has been released.
Eddie Desktop 2.21 beta released (Announcement and Feedback)

Version 2.21.1 (Thu, 19 Aug 2021 12:19:20 +0000)

[change] [windows] OpenVPN 2.5.3 also in Windows 7/8

[change] [linux] Removed "libappindicator1" dependency in .deb package

[bugfix] [linux] Fixed an issue with portable/AppImage packages ('cannot open shared object file')

[bugfix] [windows] Fixed Windows 7 issues

[bugfix] [all] Fixed an issue when IPv6 is disabled at system level

[bugfix] [windows] Updated libcurl

[change] [all] New ping engine

Windows users: now if Wintun is used (default from this version), a network adapter is created when session starts, and destroyed when session ends.
Wintun driver is installed (or upgraded) when the adapter is created, and removed when the adapter is removed.
We added an option to keep the adapter in Preferences->Advanced window.

Windows/Linux/macOS: We rewrote the latency/ping system to make it work better and faster, resolve some UI issues in Linux and provide more accurate results in macOS.

@airvpnforumuser and other: issues after system suspension, and the error "Windows WFP, unexpected: Rule 'ipv6_block_all' already exists" is still under investigation,it is our next priority.

About Windows OS compatibility: Windows 8 works exactly like Windows 10. In Windows 7 the latest Wintun driver doesn't work for some currently unknown reason, so it is not used (OpenVPN works with the tapdriver6), and for the same reason Wireguard (which can use ONLY Wintun) will not be supported on Win7.
Click to expand...

Website - Download - Changelog

puff-m-d · Oct 27, 2021

Hello,

A new beta version of the Eddie client, version 2.21.2, has been released.
Eddie Desktop 2.21 beta released (Announcement and Feedback)

We deployed a new release which fixes issues with WireGuard (for a public beta testing) and some minor bugs.
Other issues reported in this thread are under investigation.
Click to expand...

Website - Download - Changelog

Version 2.21.2 (Wed, 27 Oct 2021 12:29:20 +0000)

[bugfix] [all] WireGuard support beta

[change] [all] Whitelist->Allowlist, Blacklist->Denylist

[bugfix] [all] Preferences -> Routes error

Click to expand...

puff-m-d · Oct 28, 2021

Hello,

AirVPN now offers a new feature: DNS Block Lists.
New feature: DNS block lists (Announcement and Discussion)

Hello!

We're glad to introduce a new feature in AirVPN infrastructure: DNS block lists.
By default, AirVPN DNS remains neutral in accordance with our mission. However, from now on you have the option to enforce block lists which poison our DNS, in order, for example, to block known sources of ads, spam, malware and so on.
You can manage your preferences in your account Client Area ⇨ DNS panel https://airvpn.org/dns/.
We offer only lists released with licenses which grant re-distribution for business purposes too.
The system is very flexible and offers some exclusive features never seen before in other VPN services:

You can activate or de-activate, anytime, any combination of lists.

You can add customized exceptions and/or additional blocks.

Any specified domain which must be blocked includes all of its subdomains too.

Lists which can return custom A,AAAA,CNAME,TXT records are supported.

You can define any combination of block lists and/or exceptions and/or additions for your whole account or only for specific certificate/key pairs of your account (Client Area ⇨ Devices ⇨ Details ⇨ DNS)

Different matching methods are available for your additions and exceptions: Exact (exact FQDN), Domain (domain and its subdomains), Wildcard (with * and ? as wildcards), Contain, Start with, End with.

An API to fetch every and each list in different formats (see Client Area ⇨ API ⇨ dns_lists service) is active

Any change in your selected list(s), any added exception and any added block is enforced very quickly, within few tens of seconds. You don't need to disconnect and re-connect your account.

You can define your own lists and discuss lists and anything related in the community forum here

Essential requisite to enjoy the service is, of course, querying AirVPN DNS while your system is connected to some VPN server, which is by the way a default setup if you run any of our software.

Kind regards & datalove
AirVPN Staff
Click to expand...

puff-m-d · Oct 28, 2021

Hello,

WireGuard beta testing in AirVPN infrastructure has begun.
WireGuard beta testing available (Announcement and Discussion)

Hello!

We're glad to announce the beginning of WireGuard beta testing in AirPVN infrastructure.
In order to test WireGuard, go to Client Area ⇨ Preferences and check Beta Features. This will allow you to see specific guides and options pertaining to WireGuard.
About privacy concerns, we wrote a FAQ answer here . Please make sure to read it.

WireGuard with Eddie
If you want to use Eddie, go to download page of your OS, and click Other versions ⇨ Experimental in Eddie download pages.
Linux note: Eddie doesn't recognize WireGuard until it is present at kernel level. Use cat /sys/module/wireguard/version to check your WireGuard kernel module. Wireguard will be available in Preferences > Protocols window (logout and login from Eddie's main window might be necessary).

WireGuard without Eddie
Otherwise, for official WireGuard app/binaries, see the guides below:

Windows - with official WireGuard app (GUI) ⇨ https://airvpn.org/windows/wireguard/gui/

macOS - with official WireGuard app from App Store (GUI) ⇨ https://airvpn.org/macos/wireguard/appstore/

macOS - with Homebrew, terminal ⇨ https://airvpn.org/macos/wireguard/homebrew/

Linux - with official WireGuard from your distro, terminal ⇨ https://airvpn.org/linux/wireguard/terminal/

iOS - with official WireGuard app from App Store (GUI) ⇨ https://airvpn.org/ios/wireguard/appstore/

Android - with official WireGuard app from Play Store (GUI) ⇨ https://airvpn.org/android/wireguard/playstore/

The guides above will be also shown in Download section when Beta Features option is checked.

Notes:

We will add other connection ports, suggestions are welcome.

We automatically generate WireGuard keypair (and preshared-key), and assigned IPv4/IPv6 addresses, for any device, no action required.

Kind regards & datalove
AirVPN Staff
Click to expand...

puff-m-d · Dec 15, 2021

Hello,

A new beta version of the Eddie client, version 2.21.3, has been released.
Eddie Desktop 2.21 beta released (Announcement and Feedback)
Website - Download - Changelog

Version 2.21.3 (Wed, 15 Dec 2021 11:35:46 +0000)

[change] [windows] WireGuard 0.3.11 > 0.5.2 WireGuardNT/0.10

[change] [windows] Important fix about crash after many hours with WireGuard

[change] [windows] "Recovery, unexpected crash?" false positive in some circumstances

[bugfix] [linux] Updated Portable and AppImage bundles for better distro compatibility

[change] [linux] Constant monitoring of /etc/resolv.conf during connection

[change] [windows] Better management of network adapter creation & destruction

[new] [all] "Upload to paste URL in support ticket" in Lifebelt

Click to expand...

puff-m-d · Dec 24, 2021

Hello,

Eddie Android edition 2.5 released (Announcement and Feedback)

Hello!

We're very glad to inform you that Eddie Android edition 2.5 has been released. The new release achieves full compatibility with Android versions 10, 11 and 12,. It also maintains compatibility with Android 5.1. Many parts have been thoroughly rewritten to obtain better performance and efficiency. Ability to start and connect during device bootstrap is no more limited to a specific profile: it has been extended to a variety of choices, such as quick auto connection or user defined servers or countries, according to a customizable priority list.

Master Password is now optional and VPN concurrency management has been improved.

SSL/TLS library is OpenSSL, since it can provide, nowadays, slightly better performance than mbedTLS library on several processors. TLS 1.3 is supported as well.

Eddie for Android is free and open source software released under GPLv3. We invite you to check from independent 3rd parties lack of trackers code signatures, for example here: https://reports.exodus-privacy.eu.org/en/reports/search/org.airvpn.eddie

You can download Eddie Android 2.5 APK directly from our repository: https://airvpn.org/forums/topic/29660-using-airvpn-with-eddie-client-for-android

You can also download it from the Google Play Store: https://play.google.com/store/apps/details?id=org.airvpn.eddie

and in Amazon Appstore (2.5 release will be available soon, according to Amazon App Store approval time)

Source code (and of course changelog) is available in GitLab: https://gitlab.com/AirVPN/EddieAndroid

Main features (new features in bold):

Free and open source OpenVPN GUI based on "OpenVPN 3.7.1 AirVPN" (free and open source software library by AirVPN)

ChaCha20-Poly1305, AES-CBC and AES-GCM support on both OpenVPN Control and Data channel

Robust, best effort prevention of traffic leaks outside the VPN tunnel

Battery-conscious application

Low RAM footprint

Ergonomic and friendly interface

Ability to start and connect the application at device boot

Option to define which apps must have traffic inside or outside the VPN tunnel through white and black list

Localization in simplified and traditional Chinese, Danish, English, French, German, Italian, Portuguese, Russian, Spanish, Turkish

Full integration with AirVPN

Enhanced security thanks to locally stored encrypted data through optional master password

Quick one-tap connection and smart, fully automated server selection

Smart server selection with custom settings

Manual server selection

Ability to start and connect during device startup according to a priority list which includes automatic choice, your defined country and your defined AirVPN server

Smart attempts to bypass OpenVPN blocks featuring protocol and server fail-over

Full Android TV compatibility including D-Pad support. Mouse emulation is not required.

Enhancements aimed to increase accessibility and comfort to visually impaired persons

AirVPN servers sorting options

Customizable "Default", "Favorite" and "Forbidden" servers and countries

OpenVPN mimetype support to import profiles from external applications

Multiple OpenVPN profile support. The app now imports and manages multiple OpenVPN profiles

Support for custom bootstrap servers

Support for favorite and forbidden countries

AirVPN broadcast messages support

User's subscription expiration date is shown in login/connection information

The app is aware of concurrent VPN use. In case another app is granted VPN access,

Eddie acts accordingly and releases VPN resources

Optional local networks access. In such case, local network devices are exempted from the VPN and can be accessed within the local devices

Localization override. User can choose the default language and localization from one of the available ones

Favorite and forbidden lists can be emptied with a single tap

Ability to directly select an AirVPN area (country, continent, planet) to connect to

VPN reconnection in case of unexpected OpenVPN disconnection. (It requires VPN Lock to be disabled)

VPN concurrency management

Full integration with VPN traffic leaks prevention by system in Android 7 or higher version

Full compatibility with Android 10, 11 and 12

User can generate or save an OpenVPN profile for any AirVPN server or country and save it in the internal OpenVPN profile manager or export it

On the fly language change allowing to switch language without re-starting application

Exclusive optional VPN lock in case the device cannot take advantage of Android's VPN direct management (Android 5 and 6)

Server scoring algorithm implementing the latest AirVPN balancing factors in order to determine the best server for quick connection

Network name and extra information are shown along with network type Device network status management

Fully compatible with Android TV 5.1 and higher versions

bug fixes

Kind regards & datalove
AirVPN Staff
Click to expand...

puff-m-d · Feb 9, 2022

Hello,

A new beta version of AirVPN Suite for Linux 1.2.0 Beta 1 has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.2.0 Beta 1 available

Hello!
We're very glad to inform you that AirVPN Suite version 1.2.0 beta 1 for Linux is now available. Check supported systems below
The suite includes:

Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the bootstrap

Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN servers

Hummingbird: lightweight and standalone binary for generic OpenVPN server connections

What's new in 1.2.0 Beta 1

bug fix: white and black lists are now handled more properly by quick connection mode with new logical approach

bug fix: comma in password is now parsed correctly when entered in bluetit.rc

bug fix: Hummingbird network restore function works properly when hummingbird.lock file is missing but DNS and firewall rules have their backup copies to be recovered

minor bug fixes

refinements in logging

in automatic network lock mode, nftables takes precedence over iptables if nft userland utility exists

DNS handling improvements with certain systemd-resolved wortking modes

added support for zstd and gzip compressed kernel modules

IPv6 bootstrap servers enhanced support

update of all support libraries, including OpenVPN-AirVPN

Please check the changelog at the end of this post for detailed information.
Thank you very much for your tests and please report any bug, glitch, malfunction etc. in this thread!

Packages
Please note that the Suite is no more built for i686 systems (32 bit architecture). If you need the Suite for such systems please run 1.1.0 release in the meantime and contact us in this thread or through a ticket.
aarch64 for 64 bit ARM CPU based systems, for example Raspberry Pi OS 64 bit: https://eddie.website/repository/AirVPN-Suite/1.2.0-Beta1/AirVPN-Suite-aarch64-1.2.0-Beta-1.tar.gz
armv7l for 32 bit ARM CPU based systems, for example Raspberry Pi OS 32 bit: https://eddie.website/repository/AirVPN-Suite/1.2.0-Beta1/AirVPN-Suite-armv7l-1.2.0-Beta-1.tar.gz
armv7l legacy for 32 bit ARM CPU based systems, for example Raspberry Pi OS Legacy 32 bit: https://eddie.website/repository/AirVPN-Suite/1.2.0-Beta1/AirVPN-Suite-armv7l-legacy-1.2.0-Beta-1.tar.gz
x86-64 for 64 bit Intel/AMD CPU based systems: https://eddie.website/repository/AirVPN-Suite/1.2.0-Beta1/AirVPN-Suite-x86_64-Beta-1.tar.gz
Checksum of the above linked files:
5ac28c386609b11237fb3e9c3b2591da768d50d3c9a11774308a40c63c6c996f AirVPN-Suite-aarch64-1.2.0-Beta-1.tar.gz
ce1cb059d988ba26b1008de9f17a0fff9f9667c114096ce7eee0bb617f767dd8 AirVPN-Suite-armv7l-1.2.0-Beta-1.tar.gz
396e65c4ff7ad9ca38daae4f0b8edc95ca603f326d8464355baf97c4a4ceb362 AirVPN-Suite-armv7l-legacy-1.2.0-Beta-1.tar.gz
aacea0b19d1d325b11f21624a6965c0e2b785b7597e2a01feec9072e7d32f801 AirVPN-Suite-x86_64-1.2.0-Beta-1.tar.gz

AirVPN Suite changelog
Changelog for AirVPN Suite
Version 1.2.0 Beta 1 - 7 February 2022

[ProMIND] updated to OpenVPN 3.7.1 AirVPN and latest support libraries and support projects

[ProMIND] vpnclient.hpp: added methods openVPNInfo(), openVPNCopyright() and sslLibraryVersion()

[ProMIND] vpnclient.hpp: added event management (subscription, unsubscription, raising) via callback functions for all native ClientEvent::Type

[ProMIND] loadmod.c: added support for gz and zstd modules

[ProMIND] netfilter.cpp: changed firewall priority scheme into nftables, iptables-legacy, iptables, pf

[ProMIND] netfilter.cpp: added workaround for iptables modules in order to comply to kernel 5.15.x

[ProMIND] netfilter.cpp: init(): in case netlock is set to iptables, force the initial loading of system rules by adding and then immediately removing two IPv4 and IPv6 "fake rules" in order to have netlock work in distributions running under kernel 5.15.x and iptables 1.8.7

[ProMIND] dnsmanager.cpp: systemHasResolved() method renamed as systemHasSystemdResolved()

[ProMIND] dnsmanager.cpp: added systemHasResolvectl() method

[ProMIND] optionparser.cpp: added description and order members to OptionConfig and Option structures

[ProMIND] airvpntools.cpp: added automatic support and selection for AirVPN IPv6 bootstrap servers

[ProMIND] airvpnserverprovider.cpp: getFilteredServerList() includes all AirVPN server. Those not meeting the connection priority scheme are sent to the bottom of the list with the highest possible penalty. This is needed in case the country black list includes all of the connection priority scheme's countries

Changelog for Bluetit
Version 1.2.0 Beta 1 - 7 February 2022

[ProMIND] White and black lists are now properly checked when connecting to an AirVPN server or country

[ProMIND] In case there are white lists defined, quick connection will ignore the connection scheme priority

[ProMIND] Added "africa" and "oceania" to continent/country connection process

[ProMIND] Added SSL library version to startup log

[ProMIND] Removed ipv6 option and replaced with allowuaf option (Allow Unused Address Families) in order to comply to the new OpenVPN3 specifications

[ProMIND] Added DBus method ssl_library_version

[ProMIND] btcommon.hpp: added normalized client options and descriptions

[ProMIND] add_airvpn_bootstrap_to_network_lock(): added support for AirVPN IPv6 bootstrap servers

Changelog for Goldcrest
Version 1.2.0 Beta 1 - 7 February 2022

[ProMIND] Removed ipv6 command line option and replaced with allowuaf option (Allow Unused Address Families) in order to comply to the new OpenVPN3 specifications

[ProMIND] Added OpenVPN copyright information and SSL library information to the welcome message

[ProMIND] Changed usage() in order to use the new normalized option format

Changelog for Hummingbird
Version 1.2.0 Beta 1 - 7 February 2022

[ProMIND] updated to OpenVPN 3.7.1 AirVPN and latest support libraries and support projects

[ProMIND] Added SSL library version to version message

[ProMIND] Removed ipv6 command line option and replaced with allowuaf option (Allow Unused Address Families) in order to comply to the new OpenVPN3 specifications

[ProMIND] Added OpenVPN and copyright information and SSL library information to the welcome message

[ProMIND] Fixed recover network procedure. It now properly checks the existence of network backup file

Kind regards and datalove
AirVPN Staff
Click to expand...

puff-m-d · Feb 9, 2022

Hello,

A new beta version of Hummingbird for macOS, version 1.2.0 Beta 1, has been released for testing.
Announcement and Discussion (with download links): macOS: Hummingbird 1.2.0 Beta 1 available

Hello!
We're very glad to inform you that we have just released Hummingbird 1.2.0 Beta 1for macOS (High Sierra or higher version required). It is ready for public beta testing.

Main features

Lightweight and stand alone binary

No heavy framework required, no GUI

Small RAM footprint

Lightning fast

Based on OpenVPN 3 library fork by AirVPN: https://github.com/AirVPN/openvpn3-airvpn

robust leaks prevention through Network Lock based on pf - working perfectly on Big Sur and higher versions too

proper handling of DNS push by VPN servers

capable of higher throughput than OpenVPN 2.5

What's new

bug fixes pertaining to --restore-network option

update of all support libraries

improved handling of AirVPN IPv6 bootstrap servers

higher performance, mainly thanks to the new OpenSSL library version. Both Apple M1 and Intel based Mac performances are finally on par with Linux and Windows ones. Throughput as high as 650-700 Mbit/s has been reached both with CHACHA20 and AES-GCM, both on M1 and Intel based Mac computers

Check the changelog for detailed information.

Download
Hummingbird for macOS is distributed in plain versions for M1 and Intel based Mac computers. Notarized versions will be available with the stable release.
M1 package:https://eddie.website/repository/hummingbird/1.2.0-Beta-1/hummingbird-macos-arm64-1.2.0-Beta-1.tar.gz
SHA256 checksum verification:bf6a22027c0325585c623ae1ddc2a7606eac0abf37c094a21257449b830762fd hummingbird-macos-arm64-1.2.0-Beta-1.tar.gz
Intel package: https://eddie.website/repository/hummingbird/1.2.0-Beta-1/hummingbird-macos-x86_64-1.2.0-Beta-1.tar.gz
SHA256 checksum verification:c22ae33745261bb9d05aa8d7c6d557b2085aeeffd4f6f21145f378fe79ebce8b hummingbird-macos-x86_64-1.2.0-Beta-1.tar.gz

Changelog for Hummingbird
Version 1.2.0 Beta 1 - 7 February 2022
- [ProMIND] updated to OpenVPN 3.7.1 AirVPN and latest support libraries and support projects
- [ProMIND] Added SSL library version to version message
- [ProMIND] Removed ipv6 command line option and replaced with allowuaf option (Allow Unused Address Families) in order to comply to the new OpenVPN3 specifications
- [ProMIND] Added OpenVPN and copyright information and SSL library information to the welcome message
- [ProMIND] Fixed recover network procedure. It now properly checks the existence of network backup file

Thank you for your tests! Please feel free to report any bug, malfunction etc. on this thread or through a ticket.

Kind regards & datalove
AirVPN Staff
Click to expand...

puff-m-d · Feb 15, 2022

Hello,

A new release candidate of Hummingbird for macOS, version 1.2.0 Release Candidate 1, has been released for testing.
Announcement and Discussion (with download links): macOS: Hummingbird 1.2.0 Release Candidate 1 available

Hello!
Update: Hummingbird 1.2.0 Release Candidate 1 is now available. Links to download the packages have been updated in this thread first message. Thank you very much for your tests!
Kind regards
Click to expand...

puff-m-d · Feb 15, 2022

Hello,

A new release candidate of AirVPN Suite for Linux, version 1.2.0 Release Candidate 1, has been released for testing.
Announcement and Discussion (includes download links): Linux: AirVPN Suite 1.2.0 Release Candidate 1 available

Hello!
Update: AirVPN Suite 1.2.0 Release Candidate 1 is now available. Original message download links and changelog have been updated accordingly. RC 1 is linked against the new OpenVPN3-AirVPN library and fixes all the glitches you have found so far in beta 1. Thank you for your tests!
Kind regards
Click to expand...

puff-m-d · Feb 18, 2022

Hello,

A new beta version of the Eddie client, version 2.21.4, has been released.
Eddie Desktop 2.21 beta released (Announcement and Feedback)
Website - Download - Changelog

Version 2.21.4 (Fri, 18 Feb 2022 12:04:45 +0000)

[new] OpenVPN 2.5.5

[new] Allows setting a generic adapter (and not only a specific IP address) in "Interface used for connection"

[change] Added an IPv6 bootstrap address in boot manifest

[change] A useless, wrong error message if connection fails (about object not defined)

[change] [windows] Improvement about driver detection

[change] [windows] wgtunnel.dll 0.5.2

[bugfix] [windows] Unquoted service path fix

[bugfix] [linux] bug with iptables/iptables-legacy/nftables in some distribution

[bugfix] Useless re-auth for non-beta users

[bugfix] Other minor fixes

Click to expand...

Log in or Sign up

AirVPN new client (Windows-Linux, Mac)

puff-m-d Registered Member

wildlights Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

caspian Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

BoerenkoolMetWorst Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

Log in or Sign up

AirVPN new client (Windows-Linux, Mac)

puff-m-d Registered Member

wildlights Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

caspian Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

BoerenkoolMetWorst Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

puff-m-d Registered Member

Useful Searches