ScriptsMay 25, 2026·3 min read

3X-UI — Multi-Protocol Xray Panel with Traffic and User Management

A self-hosted Xray panel supporting Vmess, Vless, Trojan, ShadowSocks, WireGuard, Hysteria and more with per-user traffic limits, expiry controls, and a clean web dashboard.

Agent ready

Review-first install path

This asset needs a review step. The copied prompt tells the agent to dry-run, show the writes, then proceed only after confirmation.

Needs Confirmation · 64/100Policy: confirm
Agent surface
Any MCP/CLI agent
Kind
Skill
Install
Single
Trust
Trust: Established
Entrypoint
3X-UI Overview
Review-first command
npx -y tokrepo@latest install ae4ebb45-5876-11f1-9bc6-00163e2b0d79 --target codex

Dry-run first, confirm the writes, then run this command.

Introduction

3X-UI is a self-hosted web panel for managing Xray-based proxy services. It provides a clean interface for configuring multiple protocols and managing users with granular traffic and expiry controls, making it straightforward to operate censorship-resistant network infrastructure.

What 3X-UI Does

  • Manages multi-protocol proxy nodes (Vmess, Vless, Trojan, ShadowSocks, WireGuard, Hysteria2)
  • Tracks per-user bandwidth consumption with configurable traffic limits
  • Supports user account expiration and automatic disabling
  • Provides subscription links and QR codes for easy client configuration
  • Offers Telegram bot integration for notifications and remote management

Architecture Overview

3X-UI is built on top of Xray-core, the successor to V2Ray. The panel itself is a Go web application backed by SQLite for configuration storage. It wraps Xray-core process management and exposes a web UI and REST API for creating inbounds (listener configurations) and client accounts. TLS certificates can be managed via ACME integration.

Self-Hosting & Configuration

  • Install via one-line bash script on any Linux VPS with root access
  • Runs as a systemd service; default port is 2053 (configurable)
  • Supports custom TLS certificates or automatic Let's Encrypt provisioning
  • Database is a local SQLite file; back up the /etc/x-ui directory for full state
  • Configure fail2ban integration for brute-force protection on the panel login

Key Features

  • Supports REALITY, XTLS, and post-quantum cryptography for advanced traffic obfuscation
  • Multi-node management from a single panel instance
  • Built-in traffic statistics with per-inbound and per-client granularity
  • IP limit controls to restrict simultaneous connections per user
  • Dark mode UI with multi-language support including English, Chinese, and Farsi

Comparison with Similar Tools

  • Marzban — More opinionated REST API design; 3X-UI offers broader protocol support and simpler single-server setup
  • V2Ray-Agent — Script-based approach without persistent web UI; 3X-UI adds user management and traffic tracking
  • Hiddify Manager — Focuses on ease-of-use for non-technical users; 3X-UI provides more granular protocol configuration
  • X-UI (original) — Unmaintained predecessor; 3X-UI adds Hysteria2, REALITY, IP limits, and active development

FAQ

Q: What operating systems does 3X-UI support? A: It runs on Linux (Ubuntu, Debian, CentOS, Fedora, Arch) on amd64, arm64, and s390x architectures.

Q: Can I run multiple inbounds on one server? A: Yes, you can create unlimited inbound configurations each with different protocols, ports, and client sets.

Q: How do I update 3X-UI? A: Run the same install script again or use the built-in panel menu command to check for and apply updates.

Q: Is the panel accessible remotely by default? A: Yes, it listens on all interfaces. You should set a strong username/password and optionally restrict access via firewall rules or a reverse proxy with TLS.

Sources

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.

Related Assets