New widget v3.58 is up at cryptostorm.is/cryptostorm_se… Only change is the built-in OpenVPN was updated to 2.6.10, and the OpenSSL to 3.2.1

Finished updating the OpenVPN on all our servers to account for qualys.com/2024/07/01/cve… still working on updating the tutorial pages, and adding IPv6 to everything

IPv6 support added, and new tutorial pages, and new config generators, and some other fixes. See cryptostorm.is/blog/ipv6

All the servers have been updated to OpenVPN 2.6.13 We'll hold off a bit on updating the OpenVPN our Windows client uses since none of the new features/bugfixes appear to be relevant to us, and some other changes will be made soon to that program anyways so we'll just wait until

All servers have been updated to OpenVPN 2.6.14 to address CVE-2025-2704

cryptostorm.is/blog/port-stri… Port striping v3: Improved SNAT to address Port Shadowing (and more), isolated entry/exit IPs, better balancing and separation, hardened rulesets, more IPs for WireGuard users, and other changes

cryptostorm.is/blog/pq-openvpn We added post-quantum OpenVPN instances to the network

Just a heads up, we're going to be getting rid of these servers: ireland, madrid, denmark, bulgaria, rome, slovakia, latvia, mexico, and nc (North Carolina), mainly because their low usage doesn't justify their costs.

We replaced our 1 Gbps Atlanta and Chicago servers with 10 Gbps servers. The new IPs have already been added to the DNS. Those of you only using IPs in your configs need to update to the new ones.

We also replaced our 1 Gbps Finland server with a 10 Gbps server. Those of you with IPs in your configs have about a month to update them.

We accidentally broke transparent .onion access for WireGuard users in cryptostorm.is/blog/port-stri… at "Tighter leak prevention in iptables". An exclusion was needed for tor's VirtualAddrNetworkIPv4. The transparent .onion (and .i2p) feature now works again for WireGuard users.