English | فارسی | العربية | 中文 | Español | Русский

3X-UI — advanced, open-source web-based control panel designed for managing Xray-core server. It offers a user-friendly interface for configuring and monitoring various VPN and proxy protocols.

As an enhanced fork of the original X-UI project, 3X-UI provides improved stability, broader protocol support, and additional features.

This fork also includes an experimental management layer for the TrustTunnel ecosystem:

• TrustTunnel as a custom managed protocol inside Inbounds
• MTProto as a custom managed protocol inside Inbounds
• TrustTunnel client creation directly from the panel
• tt:// export for TrustTunnel users
• QR-ready export flow for TrustTunnel links
• automatic MTProto secret generation when the field is left empty

These additions are designed for deployments that use:

• TrustTunnel for endpoint/runtime
• trusty and related client-side tooling for GUI onboarding

At the moment, these fork-specific integrations should be treated as custom extensions of this repository rather than upstream 3X-UI features.

bash <(curl -Ls https://raw.githubusercontent.com/Valerrra/3x-ui_plus/main/install.sh)

After installation:

1. Open the panel and sign in with the generated credentials.
2. Install the runtime binaries expected by this fork:

sudo mkdir -p /opt/trusttunnel/access /opt/trusttunnel/certs

# Install TrustTunnel from the official project and make sure the endpoint binary is available here:
sudo install -m 755 /path/to/trusttunnel_endpoint /usr/local/bin/trusttunnel_endpoint

# Install MTProto bridge (mtg) and make sure it is available here:
sudo install -m 755 /path/to/mtg /usr/local/bin/mtg

3. Prepare your certificate files for the TrustTunnel inbound, for example:

sudo cp /path/to/fullchain.pem /opt/trusttunnel/certs/fullchain.pem
sudo cp /path/to/privkey.pem /opt/trusttunnel/certs/privkey.pem
sudo chmod 600 /opt/trusttunnel/certs/privkey.pem

4. Create a new inbound and choose TrustTunnel or MTProto from the protocol list.
5. For TrustTunnel, use the auto-fill helpers for hostname, public address, and certificate paths, then save the inbound. The panel will write:
   • /opt/trusttunnel/vpn.toml
   • /opt/trusttunnel/hosts.toml
   • /opt/trusttunnel/credentials.toml
6. Add TrustTunnel users from the inbound menu and export tt:// links or QR codes directly from the panel.
7. For MTProto, leave the secret empty to auto-generate a valid value on save. The panel will write /opt/trusttunnel/access/mtproto.toml and manage trusttunnel-mtproto.service.

If you install binaries in different paths, adjust them or place symlinks so this fork can find:

• /usr/local/bin/trusttunnel_endpoint
• /usr/local/bin/mtg

For full documentation, please visit the project Wiki.

• alireza0

• Iran v2ray rules (License: GPL-3.0): Enhanced v2ray/xray and v2ray/xray-clients routing rules with built-in Iranian domains and a focus on security and adblocking.
• Russia v2ray rules (License: GPL-3.0): This repository contains automatically updated V2Ray routing rules based on data on blocked domains and addresses in Russia.

If this project is helpful to you, you may wish to give it a🌟