AirVPN : The air to breathe the real Internet

[jasonX]

 

AirVPN new Taiwan server - Sulafat RAW Test

 

AirVPN has recently announced a new 1 Gbit/s (full duplex) server located in Taipei (Taiwan), Sulafat.

Said server supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well.

The AirVPN client will automatically show the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses and 4096 bit DH key not shared with any other VPN server. This is AirVPN's first server in Taiwan and tests performed since it started have been encouraging but not totally perfect to AirVPN's quality standards. 

This is a raw 'random' usability test on the new Taiwan server - Sulafat using AirVPN Eddie-UI for Windows and AirVPN Android ver3. Raw test was done mainly on torrenting. 


 

A. Perform "Network Lock" test with AirVPN Eddie-UI for Windows using Taiwan server - Sulafat

The AirVPN "Network Lock" is based on strict firewalls rules contrary to several so called "kill switches" and VPN check monitoring processes (which don't do anything while connection is on and become totally useless if they crash).

With "Network Lock" strict firewall-based rules, the protection against leaks is active even when the connection is detected as "on" (regardless it is really "on" or not), even if Eddie could not work anymore and even if you mis-configured by accident a listening service binding it to a physical network card. If Eddie/OpenVPN/WireGuard stops unexpectedly leak prevention is assured because of the strict firewall rules of the Network Lock. 

Network lock is a feature that prevents IPv4/IPv6 communications when your system is not connected to an AirVPN server. Its main purpose is preventing IPv4/IPv6 leaks under any circumstance, including unexpected VPN disconnection, but not limited to it. Traffic leaks can arise not only after an unexpected disconnection from the VPN, but even because of wrong binding in software settings.

To simulate leak prevention, the user can kill Eddie (simulating a crash) via Task Manager and see if his "real IP" is reflected / shown in the ipleaktest.net (or any leak test site). 


The procedure is as follows:

Check your Real IP address via a 3rd-party site, like ipvoid.com or via AirVPN Eddie-UI for Windows > Stats. 
 

• Open AirVPN Eddie-UI for Windows. Go to Preferences > General. 'Check' the box of 'Activate Network Lock at startup'.
  
  
• Connect to Taiwan server - Sulafat
  
  
• In your browser, got to 'ipleak.net'. Check and see if the IP Address reflected in 'ipleak.net' matches the one in the 'Public Exit IP' in AirVPN Eddie-UI for Windows (overview). 
  
  
• In your browser, got to 'ipvoid.com'. Check and see if the IP Address reflected matches that of the IP Address in 'ipleak.net' and the one in the 'Public Exit IP' in AirVPN Eddie-UI for Windows (overview). 
  
  
• Start 'Task Manager', and locate 'Eddie-Windows UI'. Simulate a crash by "killing" 'Eddie-Windows UI' -- End task. 
  
  
• The 'Network Lock' firewall rules SHOULD protect the Real IP Address of user. To check, reload 'ipleak.net'. ipleak.net should NOT show any connection -- this is because of 'Network Lock". 
  
  
• Restart "Eddie-UI for Windows". Connect to 'Taiwan server - Sulafat'.
  
  
• Reload 'ipleak.net'. Check IF your 'Real IP Address' is reflected. 
  
  
• Reload 'ipvoid.net'. Check IF your 'Real IP Address' is reflected. 
  
  
• Check if "both sites" show your 'Real IP Address'. 
  

IF neither (shows your 'Real IP Address'), then AirVPN's 'Network Lock' is functioning properly. See images below. 

 

 

B. Perform "Torrent Address Detection" test with AirVPN Eddie-UI for Windows using qBittorrent Portable and Taiwan server - Sulafat

Utilize ipleak.net's, torrent test to check if the user's real IP is shown. To test the torrent program --qBittorent Portable, a magnet link provided by 'ipleak.net' should be imported in the torrent software (remember to start the torrent software after your system has already connected to AirVPN Taiwan server --Sulafat). Once the 'magnet link' is imported in the torrent software, 'ipleak.net' will detect and show the 'qBittorent Portable's' advertised IP address, which must NOT be the user's real IP address. (User should refresh the page as necessary).


The procedure is as follows:
 

• In your broswer, go to 'ipleak.net'.
  
  
• Check if the "Publick Exit IP" address in AirVPN matches the one in 'ipleak.net'. (in this case, Taiwan server - Sulafat 103.230.144.104)
  
  
• Click "Activate" in "Torrent Address detection". 
  
  
• Click "this Magnet Link" to qBittorrent (you can copy the link and manually "add torrent link" to qBittorrent Portable)
  
  
• Add the torrent link to qBittorrent Portable (File > Add Torrent Link or Ctrl+Shift+O)
  
  
• In qBittorrent Portable, check the detected "Magnet Link", click "Download" to add link. The torrent detection window will appear. Click "OK" to start the torrent link. 
  
  
• Check "Torrent IP Address detection" data in ipleak.net if it matches the Public Exit IP in AirVPN. (Remember that the IP address shown in the Torrent Address detection" must NOT be your real IP address.) See images below. 
  

 

 

C. Bind qBittorrent app to physical network interface

Further test can be done by misconfiguring the torrent client to force traffic to flow "outside" AirVPN client. 

qBittorrent has a feature called “Bind to Network Interface” which forces the client only to use the selected network adapter. To do this, go to Tool -> Options -> Advanced.  

Under 'Network interface', select your physical network interface and click  'Apply'.

Under 'Optional IP to bind to', select your 'Real IP address' and click 'Apply'. 

NOTE: User should exercise caution now because qBittorrent specifically mis-configured to force traffic leaks outside the VPN tunnel. 

To apply the misconfiguration, 'Shutdown/Exit' qBittorrent, start AirVPN Eddie client for Windows and enable 'Network Lock'. Connect to some VPN server (In this case, Taiwan server - Sulafat 103.230.144.104), and re-start qBittorrent. qBittorent traffic now flows OUTSIDE the AirVPN Tunnel. 

Verify that that there are no leaks by repeating the 'ipleak.net's' "Torrent Address Detection".  See image below. 

 

To reset or 'correct' the misconfigured settings, reverse the previous operation.

'Network interface' - Any interface
'Optional IP to bind to' - All addresses

Or, for additional safety, you can bind qBittorrent to the VPN network interface - Eddie.  

"Binding" the torrent client (qBittorrent) to the VPN network interface (Eddie) ensures that all torrent client traffic will flow "ALWAYS INSIDE" the VPN client. AirVPN client with 'Network Lock' enabled will ensure that there is no IP leak. See image below. 

 

 

D. Perform torrent downloading test using qBittorent Portable and Taiwan server - Sulafat

Here shown are some raw downloading tests using qBittorrent Portable and the new Taiwan server - Sulafat. Sample downloads are 'Movies' and 'TV-series'. See images below. 

 

 

A. Perform "Torrent Address Detection" test with AirVPN Android ver3 using 'Flud' torrent client for Android and Taiwan server - Sulafat

Utilize ipleak.net's, torrent test to check if the user's Real IP is shown. To test the torrent program --'Flud' torrent client for Android, a magnet link provided by 'ipleak.net' should be imported in the torrent software (remember to start the torrent software after your system has already connected to AirVPN Taiwan server --Sulafat). Once the 'magnet link' is imported in the torrent software, 'ipleak.net' will detect and show 'Flud' torrent client's advertised IP address, which must NOT be the user's real IP address. (User should refresh the page as necessary).


The procedure is as follows:
 

• In your Android default browser, go to 'ipleak.net'.
  
  
• Check if the "Publick Exit IP" address in AirVPN matches the one in 'ipleak.net'. (in this case, Taiwan server - Sulafat 103.230.144.104)
  
  
• In 'ipleak.net', Click "Activate" in "Torrent Address detection". 
  
  
• Click "this Magnet Link" for 'Flud' torrent client will detect the 'magnet link' of ipleak.net. 
  
  
• You can add the 'magnet link' manually IF the Android torrent client does not automatically detect the magnet link. 
  
  
• Check "Torrent IP Address detection" data in 'ipleak.net' if it matches the 'Public Exit IP' in AirVPN. (Remember that the IP address shown in the Torrent Address detection" must NOT be your real IP address.) See images below. 
  

 

 

B. Perform torrent downloading test using 'Flud' torrent client for Android and Taiwan server - Sulafat

Here shown are some raw downloading tests using 'Flud' torrent client for Android with the new Taiwan server - Sulafat. Sample downloads are 'Movies'. See images below. 

 

 

PERTINENT LINKS

 

AirVPN real time servers monitor status HERE

Download AirVPN HERE

AirVPN Forums

AirVPN FAQ

AirVPN Privacy Policy

Sign-up / Register for AirVPN account here

Guide To Getting Started + Links For Advanced Users

Explanation of Advanced Features