X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (2024)

X-UI provides a graphical user interface for managing servers and users. You can visually build servers for Shadowsocks, V2ray, Xray, Trojan, and other popular protocols. You can also monitor VPS performance and traffic usage in real time. X-UI replaces the older V2-UI panel.

Preparation

Before you begin, you need to do three or four things:

  1. Get a virtual private server or VPS. You can get a VPS from many providers. Some popular ones are AWS, Google Cloud, Microsoft Azure, DigitalOcean, Hetzner, and Vultr. In our example we use a Debian 11 VPS, but the X-UI install script supports Ubuntu 16+, Debian 8+, or CentOS 7+. You need to have ports 80 and 443 on your VPS open for TCP input. Also open port 54321 for TCP input.
  2. Get a domain name. Some low-cost registrars are Porkbun, Namesilo, and Namecheap.
  3. Create a DNS A record pointing from your host name to your VPS.
  4. Optionally, add your domain to Cloudflare. This will allow you to insert a content distribution network or CDN in between you and your server. However, if you are going to add a CDN, do not turn on proxying in Cloudflare until the end. For now, just use the DNS features of Cloudflare. Adding your domain to Cloudflare is optional, and you can continue to use your domain name registrar’s nameservers if you prefer. In any case, not all protocols support the use of CDN proxying.

Update Server

SSH into your server. On Windows you can use the built-in PowerShell app, or you can install a terminal emulator such as PuTTY or XSHELL.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (1)

Get your server up to date:

1
apt update && apt upgrade -y

Also install curl and socat:

1
apt install curl socat -y

Install Acme Script

Download and install the Acme script for getting a free SSL certificate:

1
curl https://get.acme.sh | sh

Get Free SSL Certificate

Set the default provider to Let’s Encrypt:

1
~/.acme.sh/acme.sh --set-default-ca --server letsencrypt

Register your account for a free SSL certificate. In the next command, replace xxxx@xxxx.com by your actual email address:

1
~/.acme.sh/acme.sh --register-account -m xxxx@xxxx.com

Obtain an SSL certificate. In the next command, replace host.mydomain.com by your actual host name:

1
~/.acme.sh/acme.sh --issue -d host.mydomain.com --standalone

After a minute or so, the script terminates. On success, you will receive feedback as to the location of the certificate and key:

1
2
3
4
Your cert is in: /root/.acme.sh/host.mydomain.com/host.mydomain.com.cer
Your cert key is in: /root/.acme.sh/host.mydomain.com/host.mydomain.com.key
The intermediate CA cert is in: /root/.acme.sh/host.mydomain.com/ca.cer
And the full chain certs is there: /root/.acme.sh/host.mydomain.com/fullchain.cer

You cannot use the certificate and key in their current locations, as these may be temporary. Therefore install the certificate and key to a permanent location. In the next command, replace host.mydomain.com by your actual host name:

1
~/.acme.sh/acme.sh --installcert -d host.mydomain.com --key-file /root/private.key --fullchain-file /root/cert.crt

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (2)

Run the X-UI Install Script

Download and run the one-click install script provided by the developer:

1
bash <(curl -Ls https://raw.githubusercontent.com/vaxilu/x-ui/master/install.sh)

Common Panel Commands

From the command line, you can control the server with various commands:

CommandEffect
x-uiDisplay the management menu
x-ui startStart the X-UI panel
x-ui stopStop the X-UI panel
x-ui restartRestart the X-UI panel
x-ui statusView X-UI status
x-ui enableSet X-UI to start automatically after boot
x-ui disableCancel X-UI boot from start
x-ui logView X-UI log
x-ui updateUpdate the X-UI panel
x-ui installInstall X-UI panel
x-ui uninstallUninstall X-UI panel

First Time Login

You can get to the X-UI panel on your PC by opening a browser and typing your server IP address and port 54321. For example:

1
http://123.45.67.89:54321

By default, the login user name is admin, and the password is also admin.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (3)

Side Menu

After you have logged in, the side menu offers these options:

ChineseEnglish
系统状态System status
入站列表Inbound list
面板设置Panel settings
其他Other
退出登录Sign out

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (4)

Enable HTTPS on Panel

You will notice that, at first, you used plain text HTTP to reach the panel. This is not secure.

To enable HTTPS, choose 面板设置 (Panel settings).

You will need to specify your certificate and key.

1
2
3
4
面板证书公钥文件路径
填写一个 '/' 开头的绝对路径,重启面板生效
Panel certificate public key file path
Fill in an absolute path starting with'/', restart the panel to take effect

Fill in /root/cert.crt.

1
2
3
4
面板证书密钥文件路径
填写一个 '/' 开头的绝对路径,重启面板生效
Panel certificate key file path
Fill in an absolute path starting with'/', restart the panel to take effect

Fill in /root/private.key.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (5)

Save these options.

Now in your SSH session issue the command:

1
x-ui restart

Now you can reach the panel using HTTPS. For example:

1
https://host.mydomain.com:54321

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (6)

Change Admin Password

The default admin user name admin and password admin are the same for all installations. This is not secure. Input the old values of admin and admin, and choose new, unique values:

ChineseEnglish
原用户名Original user name
原密码Old password
新用户名New user name
新密码New password

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (7)

Save the new values.

Sign out, then sign in again with the new user name and password.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (8)

Add VLESS+XTLS Xray User

We are going to add an inbound user account using VLESS and Xray. VLESS is an an updated version of the older Vmess protocol. After several developers found flaws in Vmess protocol and showed that the Vmess protocol can be detected by deep packet inspection or DPI, VLESS was developed. (Note that it is plain Vmess that can be detected; Vmess+WS+TLS is still secure and supports the use of a CDN.) Xray core was developed as an alternative to the older V2Ray core. According to the Xray developers, Xray is more stable, better for UDP gaming, and 30% faster than V2Ray. XTLS speeds up TLS by reducing double-encryption.

On the side menu, select 入站列表 (Inbound list).

Click the plus sign to add a new inbound user.

The 添加入站 (Add inbound) box appears.

Enter fields as follows.

FieldContents
RemarkPut a unique and meaningful description
EnableOn
Protocolvless
监听 IP Listening IPLeave blank
端口 Port443
总流量(GB) Total bandwidth (GB)0 means unlimited
到期时间 Expiry dateBlank
IdLeave the generated UUID as is
Flowxtls-rprx-direct
FallbacksNone
传输 Transmissiontcp
HTTP 伪装 masqueradingOff
TLSOff
XTLSOn
域名 Domain namePut your host name, e.g. host.mydomain.com
公钥文件路径 Public key file path/root/cert.crt
密钥文件路径 Key file path/root/private.key
SniffingOn

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (9)

Save the new user.

Click the 操作 (operating) button at the start of its row to display the QR code for the new user.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (10)

Client

Clients are available for Android, iOS, Windows, macOS, and Linux. Examples are v2rayNG, Shadowrocket, and Qv2ray.

Add the profile in the QR code to your client.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (11)

You can check that your connection is working by opening a browser and going to https://whatismyipaddress.com.

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (12)

X-UI, a multi-user Xray graphical management panel (replacing V2-UI and V2Ray) (2024)
Top Articles
Latest Posts
Recommended Articles
Article information

Author: Roderick King

Last Updated:

Views: 5581

Rating: 4 / 5 (51 voted)

Reviews: 82% of readers found this page helpful

Author information

Name: Roderick King

Birthday: 1997-10-09

Address: 3782 Madge Knoll, East Dudley, MA 63913

Phone: +2521695290067

Job: Customer Sales Coordinator

Hobby: Gunsmithing, Embroidery, Parkour, Kitesurfing, Rock climbing, Sand art, Beekeeping

Introduction: My name is Roderick King, I am a cute, splendid, excited, perfect, gentle, funny, vivacious person who loves writing and wants to share my knowledge and understanding with you.