Next-generation proxy management panel

Core-agnostic · User-centric · Real-time · Anti-censorship

English · فارسی

Features · What's New in 1.2.5 · What's New in 1.2.3 · What's New in 1.2 · Screenshots · Comparison · Quick Start · Protocols · Roadmap · Contributing

---

✨ Features

🔧 Core Engine Xray-core and sing-box — choose per node In-process local node (no separate agent needed) Hot-reload config, runtime user add/remove REALITY key generation built-in Reality Scanner — auto-discover best SNIs 👥 User Management User-centric model (one identity → many protocols) Subscription: auto-detect Clash/sing-box/base64 Self-service portal (login with sub token, view usage, buy plans, open tickets) Subscription Hosts — per-inbound CDN/SNI/host overrides in share links Family/group subscriptions (shared data pool) Smart Quota — progressive speed reduction instead of hard-cut Referral system — invite codes with rewards Config templates (custom Clash/sing-box routing) QR codes + deep links (vortex:// scheme) Traffic accounting: delta-based, restart-safe Quota enforcement + scheduled reset Device limit + HWID allowlist Bulk actions + import from 3x-ui / Marzban 🌐 Network & Routing Outbounds: freedom/blackhole/dns + proxy chaining CDN/Relay chain builder (multi-hop paths) Smart routing rule packs (apply to node or embed in subscription) Routing rules: domain/IP/port/protocol matchers Multi-domain SNI routing + auto SSL Load balancers with health probing GeoIP/Geosite updater with Iran rules Panel Federation — sync users/nodes across panels

🖥 Node Fleet mTLS connections (panel ↔ node) Auto-migration — move users from unhealthy nodes Live health monitoring (CPU/RAM/Disk) Remote restart / stop core Custom endpoint (tunnel/CDN/relay) Cloudflare DNS automation Per-node logs streaming 🛡 Security & Anti-Censorship TLS Tricks Manager — ISP-specific profiles (Hamrah Aval, Irancell, Mokhaberat) Active probing protection — detect & block GFW probes Client fingerprint validator — block curl/Go/Python Decoy website — serve fake site to probers Evasion profiles (fragment, mux, uTLS, ECH) Clean-IP scanner (Cloudflare) and IP-limit enforcement WARP+ integration DNS-over-HTTPS server (built-in, ad/malware blocking) IP whitelist/blacklist Geo-blocking per inbound 🔐 Auth & Admin JWT + TOTP 2FA RBAC + full reseller platform (wallet, sub-resellers, whitelabel, webhooks, policy limits, auto-suspend) API tokens (PAT) Login brute-force protection Account-sharing guard Audit log Support ticket system 🎨 Frontend & UX React 18 + TypeScript + Tailwind 8 languages with full RTL Dark + Light themes (smooth transition) Command palette (Ctrl+K) Customizable dashboard widgets (drag & drop) Onboarding tour for new admins Mobile-first portal (bottom nav, pull-to-refresh) Real-time charts + animated gauges World map geo-visualization Skeleton loading states Keyboard shortcuts Error boundaries with retry PWA (installable mobile app)

---

🆕 What's New in 1.2.5

Reseller platform · wallet & sub-resellers · whitelabel · webhooks · policy limits · auto-suspend · full i18n

Feature	Description
Allowlists	Per-reseller plan, node, and inbound pickers — resellers only see what you assign
Quota modes	allocated vs consumed traffic pool enforcement
Reseller dashboard	Accounts, traffic pool, top consumers, expiring users, CSV export
Quota alerts	Telegram + webhook when resellers approach limits
Wallet & ledger	Traffic/user credits with top-up and history
Sub-resellers	Hierarchical child resellers with role + quota
Whitelabel	Custom panel title, logo, accent, slug, footer
Outbound webhook	Signed user.created / user.deleted events
Impersonate	Sudo Login as for reseller support
Scoped audit	Resellers see only their own audit entries
Policy limits	Max data/expire, bulk create/delete gates
Auto-suspend	IP violation and quota overage suspension worker
Bulk quota adjust	+50 accounts / +10 GB / +50 GB from Admins table
i18n	All reseller pages in 8 languages (EN/FA/TR/AR/RU/ZH/JA/ES)

See the v1.2.5 features guide for setup details.

---

🆕 What's New in 1.2.3

Subscription Hosts · new output formats · smart routing packs · clean-IP scanner · IP-limit enforcement · more protocols

Feature	Description
Subscription Hosts	Marzban-style per-inbound host overrides (address/SNI/Host/path/ALPN/fingerprint/security/fragment/mux) projected into subscription links, with template variables ({USERNAME}, {SERVER_IP}, …)
New subscription output formats	Raw Xray/V2Ray JSON, Outline ss://, and plain V2rayN links (?format=xray|outline|links)
Smart routing rule packs	Reusable routing rule sets applied to nodes and/or embedded into Clash/sing-box subscriptions; global + per-user selection
Clean-IP scanner (Cloudflare)	Scan and score candidate CDN IPs by latency + loss, SSRF-guarded
IP-limit enforcement	Warn / temporary-disable / kill-connections when a user exceeds its device-IP limit (kill applies to Xray; sing-box degrades to temporary disable)
New protocols	socks, http, naive (sing-box), dokodemo (xray); sing-box hysteria v1, shadowtls, anytls; mKCP transport; per-protocol capability matrix

---

🆕 What's New in 1.2

17 new features + 24 UX improvements in a single release

🚀 Major Features

Feature	Description
User Self-Service Portal	End-users login with their sub token, view usage, buy plans, submit support tickets
Reality Scanner	Built-in TLS probe — scan SNIs, measure latency, score compatibility (0-100)
Smart Quota (Fair Use)	Progressive speed reduction at configurable thresholds instead of hard-cut
CDN/Relay Chain Builder	Define multi-hop relay paths with per-hop protocol/SNI/path config
Decoy Website	Serve fake site (reverse-proxy or static HTML) to active probers
Advanced Analytics	Geo-IP breakdown, top users, peak hours, CSV export
Node Auto-Migration	Automatic user migration when nodes become unhealthy
Active Probing Protection	Detect and block GFW/DPI probes with IP blocklist
Family/Group Subscriptions	Shared data pools for multiple devices under one parent
Invite/Referral System	Referral codes with configurable rewards (data/days/discount)
DNS-over-HTTPS	Built-in DoH server with ad/malware blocking
Multi-Domain SNI + SSL	Multiple domains per inbound, auto Let's Encrypt/ZeroSSL
TLS Tricks Manager	ISP-specific anti-DPI profiles with one-click presets
Client Fingerprint Validator	JA3-based filtering — allow Chrome/Firefox, block curl/Go
Multi-Panel Federation	Sync users and nodes across multiple VortexUI panels
Deep Links + QR	Custom URL scheme (vortex://) for one-tap subscription import
Quota Notifications	Telegram/webhook alerts at configurable usage thresholds

🎨 UX Improvements (24)

• Collapsible sidebar sections (Dashboard, Users, Network, Security, System)
• Command palette with fuzzy search (Ctrl+K)
• Skeleton loading states (shimmer placeholders)
• Professional data table with sort, filter, pagination
• Animated page transitions (CSS-based)
• Code splitting with lazy routes
• Redesigned toast notifications (progress bar + undo)
• Notification center (bell dropdown)
• Keyboard shortcuts (N/S/?)
• Error boundaries with retry button
• Animated circular gauges (CPU/RAM/Bandwidth)
• World map heatmap (geo analytics)
• Multi-step wizard component
• Contextual help tooltips
• Optimistic UI updates
• Enhanced PWA support
• Accessibility improvements (aria, focus management)
• Smooth dark/light theme transition
• Onboarding tour for first-time users
• Customizable dashboard widgets (drag & drop)
• Mobile-first portal layout (bottom nav)
• Bottom sheet modals
• Pull-to-refresh gesture
• Safe-area support (iPhone notch)

---

📸 Screenshots

🌙 Dark Mode

Dashboard	Nodes	Users

☀️ Light Mode

Dashboard	Nodes	Users

---

⚖️ Comparison

How VortexUI stacks up against other panels

	VortexUI 1.2.5	3x-ui	Marzban	Hiddify
Proxy engines	Xray + sing-box	Xray	Xray	Xray + sing-box
Data model	User-centric	Inbound-centric	User-centric	User-centric
Traffic method	Push delta	Polling	Polling	Polling
Multi-node	mTLS + auto-migration	✅	✅	✅
Balancer	✅ 4 strategies	❌	❌	❌
Outbound/Routing	✅ full CRUD	Partial	❌	❌
Reality Scanner	✅ built-in	❌	❌	❌
Anti-DPI profiles	✅ ISP-specific	❌	❌	✅
Self-service portal	✅	❌	❌	✅
Family groups	✅	❌	❌	❌
Federation	✅ multi-panel sync	❌	❌	❌
Referral system	✅	❌	❌	❌
Probing protection	✅ detect + block	❌	❌	❌
Fingerprint validation	✅ JA3	❌	❌	❌
Decoy website	✅	❌	❌	❌
DNS-over-HTTPS	✅ built-in	❌	❌	❌
Deep links	✅ custom scheme	❌	❌	✅
Smart quota	✅ progressive	❌	❌	❌
CDN/Relay chains	✅ visual builder	❌	❌	❌
Analytics (geo)	✅ + CSV export	❌	❌	❌
Reseller platform	✅ wallet, sub-resellers, whitelabel	Partial	✅	Partial
Notifications	Webhook + TG + portal	TG	✅	TG
Languages	8	13	3	5
Backend	Go	Go	Python	Python
Database	PG + TimescaleDB	SQLite/PG	SQLite/Maria	SQLite

---

📡 Supported Protocols

Protocol	Inbound	Outbound	Transport
VLESS	✅	✅	TCP, WS, gRPC, HTTPUpgrade, xHTTP, mKCP
VMess	✅	✅	TCP, WS, gRPC, HTTPUpgrade, mKCP
Trojan	✅	✅	TCP, WS, gRPC, mKCP
Shadowsocks	✅	✅	TCP (+ SS-2022 multi-user)
SOCKS	✅	✅	TCP
HTTP	✅	✅	TCP
Naive	✅ (sing-box)	—	TCP/TLS
Dokodemo	✅ (xray)	—	TCP/UDP
Hysteria2	✅ (sing-box)	—	UDP
Hysteria (v1)	✅ (sing-box)	—	UDP
TUIC	✅ (sing-box)	—	UDP
ShadowTLS	✅ (sing-box)	—	TCP
AnyTLS	✅ (sing-box)	—	TCP
WireGuard	✅	—	UDP

Subscription output: base64 · Clash/Clash.Meta · sing-box · Xray JSON · Outline · plain links (auto-detected by client).

Security layers: None, TLS, REALITY (with built-in scanner)

---

🚀 Quick Start

One-line Install

bash <(curl -Ls https://raw.githubusercontent.com/iPmartNetwork/VortexUI/master/install.sh)

The installer asks:

1. Method — Docker Compose (recommended) or Native (systemd)
2. Access — Domain + auto HTTPS (Let's Encrypt) or IP + HTTP

Then generates secrets, mTLS certs, starts the stack, creates your first admin, and installs the vortexui CLI.

Non-interactive:

VORTEXUI_METHOD=docker VORTEXUI_NONINTERACTIVE=1 \
  VORTEXUI_ADMIN_USER=admin VORTEXUI_ADMIN_PASS='s3cret' \
  bash install.sh

Management Console

$ vortexui

   1) Start            2) Stop
   3) Restart          4) Status
   5) Logs             6) Update
   7) Create admin     8) Change web port
   9) Domain / SSL    10) Settings / URL
  11) Uninstall        0) Exit

Docker

git clone https://github.com/iPmartNetwork/VortexUI && cd VortexUI
docker compose up -d

Manual Build

cp .env.example .env    # edit secrets
make build              # compile Go binaries
make certs              # generate dev mTLS certs
make run-panel          # start panel
./bin/panel admin create --username admin --password 'your-pass' --sudo

---

🔒 Operations

Feature	How
Automatic HTTPS	Caddy + Let's Encrypt — zero config renewal
Live updates	SSE push — no polling, instant UI refresh
GeoIP/Geosite	One-click Iran routing rules update per node
Account-sharing guard	Online IP enforcement + auto-limit option
Auto-backup	Scheduled exports to Telegram or S3
Prometheus metrics	/metrics endpoint + Grafana dashboard

---

📖 Documentation

Topic	Link
Documentation site	ipmartnetwork.github.io/VortexUI
Telegram	@vortex_ui
Discussions	GitHub Q&A
Wiki	EN · FA · AR · TR
API (OpenAPI 3.0)	docs/openapi.yaml
Protocols	docs/protocols.md
Changelog	CHANGELOG.md
Contributing	CONTRIBUTING.md

---

🗺 Roadmap

Completed (v1.0 → v1.2)

• Core-agnostic engine (Xray + sing-box)
• User-centric data model + push delta traffic
• Multi-node with mTLS + auto-failover
• Outbound/Routing/Balancer management
• REALITY key generation + scanner
• Webhook + Telegram notifications
• Interactive Telegram bot
• Backup/Restore + auto-backup (TG/S3)
• Audit log + API tokens
• Account-sharing guard
• Import from 3x-ui / Marzban
• 8-language frontend + RTL
• Real-time dashboard (SSE)
• Automatic HTTPS (Caddy)
• One-line installer + CLI
• Hysteria2 + TUIC + WireGuard
• Reseller platform (v1.2.5)
• Payment gateways (ZarinPal + crypto)
• Evasion profiles + WARP+
• Cluster mode (HA)
• Grafana/Prometheus metrics
• Self-service portal
• Reality Scanner
• Smart Quota (fair use)
• CDN/Relay chains
• Decoy website
• Advanced analytics (geo)
• Node auto-migration
• Active probing protection
• Family/group subscriptions
• Referral system
• DNS-over-HTTPS
• Multi-domain SNI + auto SSL
• TLS Tricks (ISP profiles)
• Client fingerprint validator
• Multi-panel federation
• Deep links + QR
• Quota notifications
• Command palette + keyboard shortcuts
• Dashboard widgets + onboarding tour
• Mobile-first portal

Coming Next

• Mobile app (React Native / Flutter)
• AI-powered anomaly detection
• Multi-language docs expansion
• Proxy-level rate limiting per user
• Plugin system for custom extensions
• WebSocket transport support for sing-box

---

💝 Support

If VortexUI is useful to you:

• ⭐ Star this repository
• 🍴 Fork and contribute
• 📢 Share with your community
• 💬 Join @vortex_ui on Telegram

Network	Address
USDT (TRC20)	TRLnjZ7YDSwjh3oay28qigEYNieGPMs6ew
BTC	bc1qszt4g7jdv7ev2t3pexctc07ults8nfflht3nj5
TON	UQAYSSSirtQ9_67ZHYUgLVLMx9Ir9vvh3vpcq2qbpit_8-Db

---

🤝 Contributing

1. Fork the repo
2. Create a feature branch (git checkout -b feat/amazing)
3. Commit (git commit -m 'feat: add amazing feature')
4. Push (git push origin feat/amazing)
5. Open a Pull Request

See CONTRIBUTING.md for guidelines.

---

🌐 Internationalization

🇺🇸 English	🇮🇷 فارسی	🇹🇷 Türkçe	🇸🇦 العربية
🇷🇺 Русский	🇨🇳 中文	🇯🇵 日本語	🇪🇸 Español

Full RTL support for Persian and Arabic.

---

📄 License

GPL-3.0 — see LICENSE.

---

_{© 2026 iPmart Network. All rights reserved.}

Made with ❤️ by iPmart Network

Telegram @vortex_ui · Documentation

⭐ Star this repo if you find it useful!