← Zurück zum Verzeichnis
Logo: AirVPN

AirVPN

Italian OpenVPN/WireGuard VPN with remote port forwarding, Dynamic DNS, and open-source Eddie clients—strong for technical privacy use, not enterprise fleet VPN.

Open Source
vpnprivacyopen-sourcewireguardopenvpnport-forwardingno-logsitalyp2p
Webseite besuchenAsk an EU migration specialistFeedback & Korrekturen

AirVPN is a commercial OpenVPN and WireGuard VPN operated from Perugia, Italy, by AirVPN di Paolo Brini. It is an activist-led service (since 2010) that emphasizes privacy, net neutrality, and inbound reachability rather than mass-market streaming branding.

It exists for people who need a European VPN that treats incoming connections as a first-class feature. Remote port forwarding and Dynamic DNS are product capabilities, not afterthoughts. Signup is not forced to collect a real email or other personal data.

The concrete differentiator is that inbound model, plus the official Eddie client (GPLv3) and standard OpenVPN or WireGuard configs that work without the GUI. For hostile networks, servers support OpenVPN nested over SSH, SSL, or Tor. Access is prepaid rather than a widely marketed unlimited free tier.

EU-operatedOpen-source client (GPLv3)Remote port forwardingWireGuard + OpenVPNPrepaid access

Strong European option when you need remote port forwarding, Dynamic DNS, and open-source clients. Skip for enterprise fleet VPN or ISO/SOC-led vendor risk — consider WireGuard mesh (e.g. Tailscale/NetBird) or audited privacy VPNs such as Mullvad.

Key capabilities

Reserve up to five inbound remote ports (TCP/UDP) while a plan is active, optionally map to different local ports, and attach optional *.airdns.org names that follow the VPN exit IP—useful for P2P, seedboxes, and self-hosted services.

Official GPLv3 client for major desktops and Android with firewall-based Network Lock (blocks traffic outside the tunnel), CLI, multi-provider mode, and hostile-network layering (SSH/SSL/Tor with AirVPN).

Choose WireGuard or OpenVPN; OpenVPN is available on multiple ports and can run over SSH, SSL, or Tor when middleboxes block or throttle plain VPN handshakes. Dual-stack IPv4/IPv6 and internal VPN DNS with optional block lists.

Signup does not require real identity fields; email is optional for support. Payment processors handle their own data when used.

Five simultaneous connections, free server switches, public live server load, and a stated minimum allocated bandwidth per session. Commercial access is prepaid—see the vendor site for current plans.

Auf einen Blick

HQ / entity
Perugia, Italy — AirVPN di Paolo Brini (sole proprietorship)
Protocols
OpenVPN, WireGuard; OpenVPN over SSH/SSL/Tor
Clients
Eddie GPLv3 (desktop + Android); configs without GUI
Inbound ports
Up to 5 reserved remote ports + optional *.airdns.org DDNS
Sessions
Five simultaneous connections per account
Commercial model
Prepaid access (see vendor site for current plans)
Independent audit
No public no-logs audit found
B2B packaging
Self-serve ToS; no productized enterprise pack found

Best fit when

  • You need remote port forwarding and Dynamic DNS through a European-operated VPN
  • Open-source (GPLv3) clients and inspectable tunnel configs are a hard requirement
  • Users face ISP or state-level OpenVPN blocking and need SSH/SSL/Tor layering
  • Small technical teams or individuals comfortable with prepaid self-serve onboarding

Poor fit when

  • Italian-resident staff or contractors must use the service (contractually prohibited)
  • Security policy requires independent no-logs audit, ISO 27001, or SOC 2 from the VPN vendor
  • You need enterprise fleet controls (SSO/SAML, MDM-managed client, org-wide admin console)
  • Primary goal is streaming polish and maximum server footprint rather than inbound reachability

Consider instead when

  • When: You need enterprise fleet / zero-trust mesh connectivity

    Consider: Tailscale, NetBird, or self-hosted WireGuard

    Different product class: org network access vs consumer privacy VPN with inbound ports.

  • When: You prioritise audited no-logs / accountless anonymity over inbound ports

    Consider: Mullvad

    Mullvad is stronger on the public no-logs narrative; weaker on multi-port forwarding / airdns.org-style DDNS.

  • When: You want a free tier and a broader consumer privacy suite

    Consider: Proton VPN

Gerichtsbarkeit & Eigentum

Rechtsträger
AirVPN di Paolo Brini (also Air di Paolo Brini), Perugia
Anwendbares Recht
Italian courts / EU private international law framing (per ToS)
US-Mutter / Kontrolle
Keine bekannte US-Mutter
CLOUD-Act-Exposition (indikativ)
Low
Hosting / Residenz
Multi-region servers (EU and outside EU). Confirm exit-node policy if you need EU-only traffic.

Indicative CLOUD Act path via a US corporate parent is not evident from public materials. Not legal advice.

  • Independent no-logs / security auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • HighItalian resident restriction

    ToS and footer ban residents of Italy. Orgs with Italian-based staff cannot use AirVPN as a universal approved VPN; exclude that population or choose another vendor.

  • MediumNo public independent no-logs audit

    If vendor risk requires ISO/SOC or a no-logs audit letter, treat this as a gap until evidence is obtained offline.

  • MediumMulti-region exit nodes

    Traffic can exit outside the EU depending on server choice. Strict residency policies need operational controls, not just EU HQ.

  • MediumSmall operator / sole proprietorship

    Long-running activist project with a small operating structure; set continuity and support expectations accordingly.

  • LowUS CLOUD Act (indicative)

    No known US parent from public research. Not a guarantee against other LE cooperation or non-EU exits.

Open questions for due diligence

  • Can exit nodes be constrained to EU-only for all org devices, and how is that enforced?
  • Will the operator sign a DPA and provide a subprocessors list for a company account?
  • Is any independent security or no-logs assessment available under NDA?
  • Which payment processors receive identity data, and can crypto-only reduce that footprint for your policy?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Webseite besuchenCompare similar toolsView alternativesFeedback & Korrekturen

Häufig gestellte Fragen

Shortlist AirVPN when inbound port forwarding, Dynamic DNS, open-source clients, and hostile-network OpenVPN layering matter. Prefer Mullvad for anonymous accounts and a stronger public no-logs narrative; Proton for free tier and suite integration. For enterprise fleet/ZTNA, evaluate mesh tools instead.

You reserve up to five remote ports on AirVPN (ports ≥ 2048 on the server side). Incoming traffic to the exit IP on those ports is forwarded to your client. Optional *.airdns.org Dynamic DNS names track the exit IP of the linked device. Details: https://airvpn.org/faq/port_forwarding/

Yes. Eddie Desktop is GPLv3 on GitHub (AirVPN/Eddie); Android is GPLv3 on GitLab. You can also run stock OpenVPN/WireGuard configs without Eddie.

No. The Terms of Service and site footer prohibit use by residents of Italy. That is a hard eligibility constraint for any org with Italian-resident users.

Research did not find a published third-party no-logs audit. Privacy claims are first-party policy and architecture descriptions. Treat as a gap if your policy requires an audit report.

Prepaid access periods; cards, PayPal, and several cryptocurrencies accepted. Prices change—use the official Buy page. Expect consumer ToS rather than a packaged enterprise MSA/DPA.