Nasnet Linux
Run and manage Xray subscriptions from a single self-hosted panel
Nasnet Linux is the nasnet-panel application: a single-server control panel for
running Xray-based proxy access. Everything ships in one Go binary, covering
the HTTP API, the embedded admin web panel, the subscriber self-serve page, a
background scheduler and the optional Telegram bot. The binary also starts and supervises a
local Xray-core process as a child process, keeps it alive with a watchdog,
and pushes the configuration you build in the panel straight into the running
core.
It is built for server operators, not for end users. If you rent a VPS and
hand out proxy access to a group of people, this is the layer that sits between
you and hand-edited Xray JSON: you define inbounds, outbounds, routing and
balancing rules in a form, then issue time- and traffic-limited subscriptions
that clients poll for configuration. Each subscription is served at
/sub/{key} as a Base64 feed that auto-detects the client app (v2rayNG, v2rayN,
Clash, sing-box, Shadowrocket) and returns the right format.
Around that core, the panel gives you the operational surface a real deployment needs: Prometheus metrics, a rule-based alert engine with Telegram, Discord and webhook delivery, an audit log of every admin action, database backup and restore for both PostgreSQL and SQLite, automatic TLS through ACME, and an in-browser terminal on the host.
The whole project is licensed AGPL-3.0, so you can run, modify and redistribute it, but a modified version offered as a network service must make its source available to its users.
At a glance
- What it is
- Self-hosted proxy and subscription panel for a single Linux server
- Runs on
- 64-bit Linux (amd64/arm64) under Docker Compose or systemd
- Protocols
- VLESS, VMess, Trojan, Shadowsocks and WireGuard over TLS, REALITY or XTLS
- Stack
- Go 1.26 + Gin + GORM, React 19 SPA, Xray-core, PostgreSQL or SQLite
- License
- AGPL-3.0
Start here
Install it
Docker Compose, the guided installer, systemd, release binaries or the offline bundle.
Enter→
First run
Sign in as admin, check the Xray core is up, and set your base URL.
Enter→
Hand out access
Create subscriptions with an expiry and a data cap, then share the link.
Enter→
Watch the server
Online users, traffic, system health and activity on one screen.
Enter→
All pages
Getting started
- System requirements→
The server, ports, database and secrets Nasnet Linux needs before you install it.
- Installation→
Pick an install path from Docker Compose, the guided installer, systemd, release binaries or the offline bundle.
- First run and admin sign-in→
Sign in to the panel for the first time and check the things that break silently.
- TLS and domains→
Serve the panel over HTTPS with ACME, your own certificate, or a reverse proxy.
Overview
- Dashboard→
The landing screen, showing online users, traffic, system health and activity on a layout you arrange yourself.
Customers
- Users→
The people who hold subscriptions, and how to find, filter, ban and promote them.
- Subscriptions→
Issue, limit and revoke the entitlements your users actually connect with.
- Subscriber panel→
The self-serve page your users get at /sub/{key}, with usage, QR codes and one-tap import.
Infrastructure
- Server→
The one screen that controls the machine and the Xray process running on it.
- Certificates→
Manage the mTLS and public domain certificates the deployment depends on.
Operations
- Backup→
Create, download and restore database backups, plus the one thing to do before every upgrade.
- Alerts→
Turn on the rules that tell you when the server or the Xray core is in trouble.
- Audit Log→
A searchable record of who changed what, and when.
- Settings→
The panel-editable configuration, grouped by category and stored in the database.
- Telegram bot→
Optional remote control for admins and a self-serve view for users, without leaving Telegram.
- Metrics and monitoring→
Prometheus metrics, the bundled Prometheus container, and the health endpoint to point your uptime monitor at.
- Troubleshooting→
The failures people hit most often with Nasnet Linux, from logins that will not stick to certificates that will not issue and subscriptions that come back empty.
Reference
- Architecture→
One Go binary that holds the panel, the bot and the background workers, and supervises Xray-core as a child process.
- Changelog→
Published Nasnet Linux releases, what each one shipped, and how to upgrade without losing data.
- Getting support→
Where to ask about Nasnet Linux, what to put in a bug report, and how to share logs without leaking your secrets.