Need fresh and solid recommendations for configuring OpenVPN for AirVPN

[kgursu]

Hi,

I need fresh and solid recommendations to use AirVPN on my device, to use it as always on.
I tried packages several times with no success. How can I configure the packages you may recommend me here to:

• Exclude devices by their IPs
• Exclude IP ranges to connect to (to define services, etc.)
• Exclude specific websites
• Use Tailscale to extend network independent from the location
• Use security features and adblocking without interruption
• My country uses several blocking ways and attempts slowing speeds to prevent VPN usage

Thanks for your contribution...

[lleachii]

Have you searched the forum?

[trendy]

PBR is a good place to start reading.

VPN Policy-Based Routing + Web UI -- Discussion

VPN Policy-Based Routing is a service supporting multiple types of VPN Connections (Openconnect, OpenVPN, PPTP and Wireguard) allowing you to create policies to use either VPN tunnel or WAN as a gateway. More information (requirements, full features list, etc.) on the service is available in the README. Gateways/Tunnels Any policy can target either WAN or a VPN tunnel interface. L2TP tunnels supported (with protocol names l2tp*). Openconnect tunnels supported (with protocol names openconne…

[kgursu]

It's a way too long chat, I'm subscribed to. I'm trying to extract things from there by searching keywords from time to time, but these tries were mostly unhelpful.
I'm stuck with no internet access all the time and that is too painful.
I just need a template to start with, it can be a PBR config file for example.

[anon89577378]

Did you happen to look at the README link provided in the first post in the "way too long chat"?

Appears to have everything you need...

[kgursu]

Ok, thanks. Will look...

[kgursu]

I posted a support request on AirVPN simultaneously with this post. Here is their answer:

Hello and thank you for your choice!

1. Device exclusion on an IP address basis can be achieved by policy based routing. Verify whether your firmware supports it.

2 and 3.. You may act on black lists defined on devices behind the router through hosts file. If block lists are available for OpenWRT, you may operate on the router directly.

4. Tailscale is a VPN service and we think you can't overlap AirVPN and Tailscale, but it must be said that we're not familiar with Tailscale so you might get better recommendations by those who know it.

5. Adblocking can be achieved by enabling AirVPN block lists, which also include blocks against trackers and know malware sources. Other security features may be implemented via firewall, while antimalware specific features should be implemented on the devices behind the router too, especially if such devices run Windows.

6. Try connections with OpenVPN in TCP to port 443 of entry-IP address THREE. Such connections will have tls-crypt enabled which helps a lot against traffic shaping and blocks. Probably you will need to forget WireGuard, which is too easy to block.

Kind regards

AirVPN Support Team

[mk24]

@kgursu

(6) My country uses several blocking ways and attempts slowing speeds to prevent VPN usage

This is actually the only one that would prevent reaching the Internet (via VPN) at all. The other 5 are a wish list of things that would be nice to add after basic Internet access is working.

So look at the VPN provider's answer on point 6, which is solid advice. You need to obfuscate VPN traffic sufficiently that the national firewall doesn't recognize it as VPN.