Jump to content
TorGuard

Leaderboard

  1. Support

    Support

    Administrators


    • Points

      157

    • Content Count

      2,269


  2. TorGuard

    TorGuard

    Members


    • Points

      20

    • Content Count

      179


  3. TorGuard Admin

    TorGuard Admin

    Members


    • Points

      14

    • Content Count

      85


  4. 19807409

    19807409

    Members


    • Points

      13

    • Content Count

      48



Popular Content

Showing content with the highest reputation since 11/06/2014 in Posts

  1. 3 points
    I have successfully used wireguard to connect to the "wireguard" servers listed in the support page; however, I am looking to connect via wireguard to one of the dedicated IP servers I have on my account. Is anyone aware if this is available now and, if so, how to set it up, or if there is any timeline on when it will be available?
  2. 1 point
    Hi, isn't it good idea to have Server status page like Windscirbe has on https://windscribe.com/status I thought maybe it might be good idea to have that for the users whom might like to look at such info. Thanks.
  3. 1 point
    I've used the ticket system through the client area many times, they're usually pretty responsive even on weekends. I've used OpenVPN UDP and TCP TorGuard for a year with no problems on my Win 10 PC. Lenovo machines are renowned for shipping with bloatware, and your issue doesn't sound like a TG problem, it sounds like either a TUN adapter conflict or issue, or possibly a firewall/AV issue. What antivirus/security software are you using? What other troubleshooting have you done on your side? Ran pings or done traceroutes when you lose connectivity to see if the traffic is stopping anywhere in particular? Checked for conflicting software? Tried TCP instead of UDP? (TCP does some TCP-in-TCP 'magic' to avoid issues like packet fragmentation, despite it being less efficient on a totally optimised connection). The VPN connection grinding slowly to a halt is indicative of a problem with your PC (software or drivers) or your connection, not necessarily the TG server. I use various TG servers in the UK and US, all of which perform reliably. Slightly slower at peak time if you're hammering a download or upload, but still plenty fast (always over 100 mbit/sec). How does it perform if you run over a wired link? If fine, that points to wifi chipset or driver problems. Have you booted the machine from a Linux live USB or live CD and set up a VPN connection in Linux to test? That's a harmless way of doing a useful comparison on the same hardware without having to set up dualboot. Also, have you tried other VPN providers? They all use the same underlying approach (build aspects of the OpenVPN client into their own apps and wrap that with their own interface) and so they almost all use the same kind of TUN adapters controlled in the same way. If you're having problems with one provider, you'll quite possibly have problems with all of them. Have you done a clean uninstall of the TorGuard app and then reinstalled the latest version? Have you tried installing with the older version of the TUN adapter? I'd also try OpenConnect and/or Wireguard, both of which are available to you either through the TG client app or by installing a WireGuard client on your PC and following some instructions online (not too tough, and the TG site gives you the crypto details you need to put in on your client).
  4. 1 point
    With the Torguard app, when you to tell it to connect it creates an IKEv2 VPN with 'connect on demand' enabled. So whenever the iPhone needs a network connection, iOS will check if the VPN is connected and, if not, will make it connect. My understanding is that this applies whether the iPhone is sleeping or not - I don't know how to prove this from direct experience. Certainly when I wake the iPhone, the VPN is either connected or quickly connects. Unless you need to stop the VPN (using the Torguard app) there is no need to touch the VPN through all sleeps, wakes and changes of network (e.g. wifi to mobile/cell) for weeks on end. There are two things going on: 'Connect on demand' which does what it says whenever a process wants a network connection. This has always been available on iOS in the IPSec family and, with earlier implementations of iOS, required certificates to be separately installed as a profile on the iPhone. Now with IKEv2 apps such as the Torguard one can do it without any messing about. Roaming: IKEv2 has strong roaming capabilities, such that it can maintain the same VPN connection (i.e. it doesn't need to make a new connection) when you change physical networks. Unless there are strong reasons to use OpenVPN, the general advice for mobile devices was to use IPsec with connect on demand, but now to use IKEv2 with connect on demand.
  5. 1 point
  6. 1 point
    Try https://updates.torguard.biz/Software/Linux/torguard-v3.96.1-amd64.deb
  7. 1 point
    Release torguard-v3.97.0, 2019-12-13 ==================================== * All platforms: Use internal DNS resolver for server name lookups TorGuard now uses a full DNS resolver for looking up host names. When connected to the VPN TorGuard does not need to query a forwarding DNS server. During the initial connect and reconnects when internet connection is restricted and firewall rules block DNS TorGuard will query the DNS server configured by the system. * Windows: Fix a crash caused by 'Block Outside DNS' * MacOS: Notarize the app through Apple, so it can pass Apples GatekeeperInternal changes: ---------------- * Support secureconnect.me domains* Upgraded MacOS build chain. A complete update of the build chain (MacOS Mojave, XCode) was required due to the new notarization policy enforced by Apple. Downloads
  8. 1 point
    Greetings! I've been trying to determine if there is a way to pick the fastest server every time I launch Torguard LT or Torguard Visc. Currently, I do it manually by connecting, running a speed test, disconnecting...rinse repeat. Takes longer sometimes as the servers don't always connect quickly. I would like to automate this and was wondering if any way to do this with either app. The communities thoughts / opinions / advice is appreciated! Thanks!
  9. 1 point
    Check out this TG openVPN install guide on an Asus with Merlin: https://x3mtek.com/torguard-openvpn-2-4-client-setup-for-asuswrt-merlin-firmware/
  10. 1 point
    Pretty much the same thing here. Some servers just plain refuse to connect period. Others you have to hammer many times to get a connection. Forget the ticket, it's a system wide problem as evidenced by multiple reports here. I have the same problem from from multiple sites, different computers, different carriers. I don't understand. What happened and why is taking so long to fix it?
  11. 1 point
  12. 1 point
    When are you going to add command-line options, such as "--disconnect," for Windows and others?
  13. 1 point
    Hi, did you upgrade from a much older build by chance? Can I ask that you do the following so we can make sure you start fresh? 1) Go to more settings --> general tab --> click "restore defaults" and then hit save (if you can't do this move to the next step) 2) Delete the Torguard app from the applications folder and empty your trash 3) Remove this folder: /users/user/Library/Application Support/VPNetworkLLC/TorGuard 4) Flush DNS >> https://torguard.net/knowledgebase.php?action=displayarticle&catid=71&id=227 5) Reboot 6) Reinstall TG Client latest version here https://torguard.net/downloads.php Let me know how you go.
  14. 1 point
    Good day. I guess this a Feature Request? I think the port-reservation website should let us pick a "pool" (a city) and then suggest a server automatically; even better if it looks at which port we want and then picks a server that doesn't have that port already reserved.Here is why I'd like this: When you connect to a "pool" the VPN client picks a server randomly from that pool. This means that on average, every server in the pool will have the same load - the same number of users using it. However, if 1000 people have reserved ports on Server A, then we can expect that particular server to have, on a bad day, 1000 more people using it, since TorGuard graciously lets us pick which server we connect to (you can "pin" a server in the client, or even multiple ones if you want.) So if I were to want to pick a server for my own port forwards, I'd want the server with the least amount of people already reserving ports on it Because that particular server should be the one with the least load, on average. As it is, I can't really pick any server over any another in the same pool, since they all ping about the same - I can't tell which has the least load. This should also benefit TorGuard, helping to distribute load across servers more evenly. Regards,
  15. 1 point
    This would be awesome 👍 and i hope developer add "tls -crypt " to all port not only port 53
  16. 1 point
    Yes but didnt get anywhere however after extensive troubleshooting, this is a digital signature issue with ver 1809 of Windows 10, I went back to 1803 and its OK
  17. 1 point
    support answer was "To be honest, there's nothing to fix here, a WAIT status doesn't indicate a problem with the client, it normally means for some reason you cannot reach the server to connect or your ISP regularly filters UDP on specific ports - does this happen with all servers/ports or just the one?" If it does happen to you then try to use other ports, i will keep in touch with support if its happening again in the future.
  18. 1 point
    I had some issues earlier but support live chat helped me out. The app installed with some default settings which may not be optimal for port forwarding, not sure. Support recommended these changes: I was already connecting with OpenVPN over UDP but with a stronger cipher and a different port. I didn't modify my TorGuard DNS settings (just using DHCP and VPN-pushed once connected, instead of Google for everything). I did however uncheck 'Seamless Reconnect' (what does that do?) and I also checked WebRTC Leak Prevent. IPv6 Leak Prevent was already checked. I'd already added my desired VPN IP as a custom server in the TG app preferences, be sure to do that. If you want to test, you can connect to a country server and 'pin' its IP (click the pushpin next to the public IP once connected, then use that for your port forward request - set up a custom server if all works after a reconnect.) I also deleted and remade my port forward request in the control panel. Mine was a combined TCP and UDP one, I remade it for port 1912 on my chosen VPN IP. I'd already tried port 1194 and 1195 without success. Not entirely sure what made it work in the end - I should do more testing in future to figure it out. I guess support recommend I use a simpler cipher to avoid any session setup problems, I wouldn't have thought that would make a difference. I would be interested to see if port forwards only work if they are requested, and you connect, via port 1912.
  19. 1 point
    Hi JessiTom, you are right, normally that would be the case. The problem is that OpenVPN encryption is single threaded i.e. can use only one CPU core, no matter what. This is also the reason why OpenVPN on routers was/is relatively slow --> CPU is the bottleneck. What merlin does (among other things) is using the routers CPU core 2 to maintain all "normal" router functions like firewall, routing, MAC access etc etc and core 1 will focus on encryption. This way you get the max bandwidth (encryption wise) out of your router. Otherwise all would be balanced (as you already mentioned). But mind you, using core 1 solely for encryption works only with merlin firmware (as far as i know) so you need to use an ASUS router. And when you are at it choose the 86U (strongest CPU in the consumer market right now). I have seen some speedtests with the 86U and merlin firmware (under optimal environment) that could reach and breach 200MBit encrypted transfer! And thats a fantastic value. Also remember to use GCM cipher. it has a better performance. if some time goes by I am sure OpenVPN will be made multithreaded. There is currently a project underway thats called Frivpn that aims to do just that --> making Openvpn able to use more than one core. Just now for linux, hopefully some day for windows. Maybe soon wireguard will replace OpenVPN.... We will see....
  20. 1 point
    This was an issue a year or two ago when I used TorGuard and it still seems to be an issue now. There's nothing you can do to fix it. TorGuard's server config is botched in such a way that you can't negotiate with it. I'll use connecting to UDP port 53 as an example. These are the listed ciphers. cipher AES-256-CBC* cipher AES-128-GCM cipher AES-256-GCM cipher AES-128-CBC cipher BF-CBC A proper OpenVPN server would use cipher AES-256-CBC and then ncp-ciphers AES-256-GCM:AES-128-GCM:AES-128-CBC:BF-CBC. An older OpenVPN client (pre 2.4) would pass cipher AES-256-CBC in their client config. These don't support cipher negotiation, so OpenVPN 2.3 or less, or Open 2.4+ with cipher negotiation disabled, would use AES-256-CBC. But once cipher negotiation is in play (ncp), the cipher config is overridden in favor of ncp-ciphers. An OpenVPN client could pass a list in order of preference and as long as the server accepts them, the first one the server supports gets used. I build my own OpenVPN servers so I have worked with this. An example in my case, I only want to support the AES-256-GCM cipher as I only let the latest clients connect. I set cipher AES-256-CBC as is proper, then ncp-ciphers AES-256-GCM. Since any client with OpenVPN 2.4 by default will use negotiation, and I only list AES-256-GCM, the client absolutely must support and use AES-256-GCM. Technically, they could disable ncp client side and connect with AES-256-CBC (and a 2.3 client might be able to connect, but then I use 2.4+ features so they wouldn't work anyway). I could allow additional ciphers server side by setting ncp-ciphers AES-256-GCM:AES-256-CBC:AES-128-GCM:AES-128-CBC. Now, a 2.4+ client with ncp enabled will default to AES-256-GCM, but they can set ncp-ciphers in the client config to force any one of those 4. TorGuard will need to fix their servers to remedy this. There is nothing you can do on your end to force AES-256-GCM properly. I posted here awhile ago about this issue and it looks like they never fixed it. It would also be nice if they would allow SHA-512 on their tls-crypt servers, but at least according to the specs page that no configuration supports that, as opposed to the specs page stating all listed ciphers are valid on 2.4+ despite this being provably false due to their configuration error. On both ASUS Merlin and pfSense, there is no setting that allows me to get AES-256-GCM without the local/remote error and issues that follow from there. So I've just disabled ncp and used AES-256-CBC.
  21. 1 point
    Hi, sorry for the stupid question, where do I find the streaming IP and how do I add it to TorGuard? I have bought one and would like to use it Thank-You
  22. 1 point
    == Release v1.1.40, 2018-10-20 * Bug fix: Stealth Proxy could not reconnect The Stealth Proxies, a feature introduced in version 1.1.36, where not able to reconnect. * STunnel added The STunnel feature will obfuscate the data with an additional SSL tunnel. In order to activate it, the user should check the "Use STunnel" option and then select the TCP protocol. * Supporting Oreo and Pie Internal changes were done in order to follow the new technical the standard required by Android 8.0 and Android 9.0 * Disabling "Reconnect when the screen is back on" option in Android Oreo and Pie This option works in conjunction with "Disconnect when the screen is off", and automatically reconnect the VPN when the screen is turned on. Unfortunately, the current implementation is not compatible with Android Oreo and Pie Downloads
  23. 1 point
    Hi. Is there any update on Wireguard Servers? @Support The main reason i interested to this Technology is very little battery usage on smartphones. OVPN usually destroy battery life. I'm testing Wireguard on my own server and battery usage close to Zero. Can you guys provide any ETA for Wireguard servers? Thanks
  24. 1 point
    Google "kodi no limits build"
  25. 1 point
    Hi Marco, Rest Assured the app will still work as normal but we will fix this in our next release. Regards
  26. 1 point
  27. 1 point
    The good news is, I found my backup code and logged in successfully.
  28. 1 point
    HI there Balexter The New York one is the same as you have or can use, About the streaming ip it was move from Arizona to Michigan, after it was done I did get a better speed out of it. but as you have try it I am not sure, it will help you It can also be that your ISP are throttling you when using VPN, I have been trying out difference VPN providers, and did come back to torguard as I got the best streaming speed I did try out one where then speed I got out of New York, as the was the streaming ip was only good for SD but at the same time a friend got the speed I was after. But I never got that. So after 20 days I ask for a refund
  29. 1 point
    Hey so i paid for a Proxy specifically. After I completed the purchase... I downloaded it, and only have the option of running a VPN. I was needing a proxy though. Can someone please help me figure this out.? Thank you, Trevor.
  30. 1 point
    == Release v1.1.36, 2018-07-01 * Reconnect when the screen is back on This option is related to "Disconnect when the screen is off" feature. If OpenVPN was stopped while the screen is off, the user can now choose to reconnect the VPN when the screen is back on. * Add Port/Auth choice The user can now choose the Port and Auth independently from the Cipher. All ports have a list of Cipher that the user can choose, except of port 1194 that is reserved for no encrypted connections. * Add Auto port The user can let TorGuard choose the best port, leaving the default "Auto" option in the Port/Auth choice. The port chosen will be in accordance to the cipher selected. * Add port 53: Tls-Crypt option used The user is now able to use the OpenVPN "tls-crypt" option. In order to do that, the user should choose a server that allows it too. Right now, servers that are using the tls-crypt option are running on the port 53. * Disable cipher negotiation Ensure OpenVPN will use the user selected cipher by disabling cipher auto-negotiation. * Add Proxy option to preferences The user can now select a proxy type to connect to from the preferences before opening a VPN connection. Available are either - no proxy - custom proxy - stealth proxy The stealth proxy option is not available for devices with an armeabi architecture. Downloads
  31. 1 point
    Hey Everyone. I made a good tutorial on how to properly use TorGuard VPN + their mini VPN router sold from the router store, to access Netflix US content on the Ps4. This also works with any wi-fi enabled streaming device!
  32. 1 point
    == Release v1.1.35, 2018-04-16 * Change some URLs from HTTP to HTTPS * Android's Power saving mode is handled (Android 6 and above). In case that Power saving mode from Android is turned on, TorGuard is not working as intended. Thus, the user gets a notification if power saving mode is on. Additionally, the user gets a description on how to exclude TorGuard from that mode. * User can choose Nameserver when VPN is connected. The option can be found in Settings > Network > Nameservers Selectable are: - VPN DNS - Google - Level 3 - OpenDNS - Ad Blocking DNS - Custom (Name, DNS1, DNS2) * Show "Verified" link When VPN is connected, the current IP was shown under the label "Connected" Now, if the IP is correct (equal to the server IP), a "Verified" link will appear. The link points to a website where the user can check the working connection. Download
  33. 1 point
    Thanks for your suggestions, we are working to improve port forwards and will take note Regards
  34. 1 point
    We can make this optional yes - we will get this out in next release. Regards
  35. 1 point
    Try adding stunnel/openconnect/openvpn2.4/2.3/ss-local/TorGuarddesktopQT binaries under C:\Program Files\VPNetwork LLC\TorGuard tls-crypt should be more than sufficient to bypass most dpi/firewall blocks - using stunnel is optional if you want a second SSL layer then, by all means use it, it is not "needed" in a sense to bypass blocks when using tls-crypt. Regards
  36. 1 point
    I am a new user of TorGuard VPN and I was wondering what are the main differences between the port/auth settings, aka what are the differences between choosing either/or of the following: 443 (SHA1) 80 (SHA1) 995 (SHA1) 1912 (SHA256) 1195 (SHA256) 1215 (SHA512) 389 (SHA512) 1914 1212 (SHA256) 4443 (SHA256) | Stealth
  37. 1 point
    Hello mrneilypops. I just saw your question and can answer that as I am a TG user myself and have done a lot of research with this topic! when you use a vpn-client on a router you (at this point of time) you never get full speed of your provider. the cpu used in the router is the limiting thing here! You have to understand, that the whole encryption, normally done by your PC cpu is done by the router cpu in this case. So using a router router the nighthawk, with a strong cpu is a good idea. The 60Mbit you get is as good as it gets! VPN encryption on a router is a single thread!!!!!! So you wont get benefits from having a router cpu with more that 1 core. I too wanted to put all my devices behind a vpn router and discovered the same problem as you. As I am streaming from the US to central europe, all I get is around 15Mbit :-( but as this is still enough to stream in HD I am content. So people like us will have to wait till DD-WRT router cpu's become a lot more powerfull! I think when they are around 2.6/2.8GHz, nearing the 3GHz you will get full speed from your fiber line. right now 1.8GHz is the most powerful as far as I know. in fact you are lucky to get more than 50Mbit on your nighthawk! When security is not your concern, you can try to max out the speed by lowering your encryption (the lower the less work for the routers cpu) or using blowfish instead of aes. Most router cpu's can handle blowfish a bit faster. dont expect wonders! If you (like me) you are using a dedicated ip to stream content otherwise not available, you might even consider trying to put encryption to zero, effectively just changing your ip so you can access content. Sooo, to answer your question: subscribing to the 10GBit network wont give a better speed with your router!!! If you are using TG on a desktop/laptop too (with a more powerful cpu) it might max out your fiber speed! Hope this helps you... regards balexter
  38. 1 point
    ===================================== Release torguard-v0.3.79, 2018-03-14 ==================================== * All platforms: Set System DNS (permanent option) In case of error, it is possible that TorGuard does not clean the DNS state. Normally the state is cleaned in the next TorGuard start, but if the user selected "Enable DNS state recovery on start = No (forget information)" then the state is forgotten and could not be recovered anymore. This situation could lead to having no working DNS, hence no connection. In this case, we now added a new option "Set System DNS (permanent option)" that will change the System DNS used when TorGuard is not running (this is a permanent change in the OS). The user can choose between - (only Windows and MacOSX) DHCP (the default in most system) - one of the Nameservers in the configured list * All platforms: New Ad Blocking DNS New Ad Blocking DNS are available when the VPN is connected. The user can select them in the "Use these nameservers" option in "when VPN is connected" stage. * All platforms: set timeout for enabling interfaces up to 30 seconds When InternetKillSwitch is used, interfaces are enabled before connecting. We wait a while checking if the interfaces are indeed enabled, otherwise, a warning message is shown to the user. In the last version, the timeout (5 seconds) was too short and the warning message could appear if more than two interfaces were selected. In this version we set the timeout up to 30 seconds. * Windows: Bug fix: infinite error messages in OpenConnect Sometimes, while using OpenConnect, the user could experiment infinite popups saying "Failed to write the TAP device. The data area passed to a system call is too small" or “Failed to read from TAP device: A device attached to the system is not functioning.” The cause of the problem is not yet clear. In this version, a new OpenConnect whit debugging log is shipped within TorGuard and the error message system is changed so that, in case of error, the user should see only one single popup. * MacOSX: Bug Fix: Double instance on updating If TorGuard was already running while installing a new version, in MacOSX there was the possibility to have two instances running at the same time. The bug is solved with the improvement of the SingeInstance detection mechanism. Download
  39. 1 point
    Hi, On system startup, TorGuard's client seems to startup pretty late for me (one of the last autostart programs). Is there a way to make it start faster? Higher its autostart priority or something like that? I've configured my Firewall to not allow any connection that's not coming from TorGuards OpenVPN adapter. The consequence is that I'm always unable to access the internet when TorGuard is not connected, resulting in error messages when connecting to steam etc. on startup. If TorGuard would be called faster, there'd be enough time.
  40. 1 point
    Hello, We have noted these down for the next release Regards
  41. 1 point
    This is coming yes, im sorry for the delayed reply to your thread but this has been noted down for net release Regards
  42. 1 point
    Hi Robyn If you use many different Wifi hotspots it may be that on some of them block the ports required for IKEv2 but not plain ipsec or vice versa, IKEv2 is commonly blocked on some networks. What version of the iOS are you running just now? have you tried the on-demand option, is this checked?
  43. 1 point
    I don't have much knowledge on the subject and need someone to explain certain aspects to me. I have done some research but online research isn't very friendly to someone who has limited knowledge on the subject in the first place. This thread could also be a future reference to others who use the VPN but are not very informed on what certain aspects are. - What's the different between OpenVPN and OpenVPN V2.4? -What's the different between enabling STunnel and not enabling it on the Torguard Client? -Should I be using STunnel? -Does stealth actually hide what VPN server i'm connecting to (NY, LA, Etc.), or does it only disguise my traffic to look like normal traffic from said server? -Is there any way around websites which specifically block the use of VPN's or proxies? Stealth connections don't seem to work all the time, at least for me.
  44. 1 point
    Hi Marco - thanks for your suggestions, the adblocking will be coming and i will mention about a battery saving option to our developers. Thanks
  45. 1 point
    As we use TLS Auth using SHA1 via openvpn is fine - port 443 is a good port to use. Direct IP bypass DNS lookups on our hostnames, this helps if our hostnames are DNS blocked in the network you are connecting through. Our VPN DNS should be faster but i would test those for yourself. Regards
  46. 0 points
    I have some time to Play with it...Thanks. But it's my Houses only TV Service so I can't have those Download Speeds.
  47. 0 points
    Agreed. I hunted around for a while until I found a server in my preferred region with decent throughput, then set up port forwards manually. I'd be happy for the option of a longer connection setup time but dynamically created port forwards. As it is, if my chosen server is heavily loaded, I stay on it (increasing the problem of load) - because manually creating port forwards on another server is quite long-winded. 'Camping' port forward allocations on multiple servers, so I can hop around depending on load, is something I've not done because I think it's antisocial. The port forwarding features and design needs a bit of TLC
  48. 0 points
  49. 0 points
    Hello, Please go to more settings --> Network Tab --> Set the DNS as below: At Application Start: Level3 While establishing: Level3 When VPN is connected: Level3 Restart TG Client and retest. Let me know if this resolves your problem. Regards
  50. 0 points
    Hi Robyn If IKev2 almost never works then something at your end must be blocking it,, i can guarantee these servers IKev2 are all working fine and im able to connect to them all, have you tried connecting to the "Direct IP" profiles in case there is an issue with resolving our hostnames? it could also be a cause for losing all connectivity when your phone wakes. Regards
×
×
  • Create New...