Open Source Alternatives
  • Alternatives
  • Categories
    Categories by size882 projects
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • IT Management123
    • Product & Project Management106
    • Cloud & Hosting105
    • Data & Analytics104
    Browse all 21 categoriesLLMOps & AI Tooling, Design & Creative and 9 more
  • Blog
  • Advertise
SearchNotion, Slack, password manager.../
Submit
Open Source Alternatives
  • Alternatives
    • Developer Tools461
    • AI & Machine Learning404
    • Web Development196
    • Business & Productivity191
    • Communication & Collaboration126
    • Security & Monitoring126
    • Browse all 21 categories
  • Blog
  • Advertise
Submit your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Open Source Alternatives LogoOpen Source Alternatives

Handpicked Open Source Alternatives to Paid Softwares

Product

  • Categories
  • Tag
  • Advertise

Resources

  • Blog
  • Collection
  • Submit

Company

  • Privacy Policy
  • Terms of Service
  • Refund Policy
  • Sitemap

Alternatives

  • Claude Code
  • Jira
  • Notion
  • Slack
  • Linear
  • Wispr Flow
  • All alternatives
© 2026 Open Source Alternatives. All rights reserved.
Open SourceAlternatives
Home/Categories/Cloud & Hosting/3x Ui
icon of 3x Ui

3x Ui

Open source alternative to OpenVPN Access Server

  • 48.3K stars
  • GPL-3.0
  • Active this week
  • Last commit 4 days ago

Last verified Oct 20, 2026

Manage Xray-core servers from a web panel with per-client traffic quotas, multi-protocol support, and multi-node coordination.

Visit websiteGitHub48.3K starsDeploy on Hostinger
TL;DR

3x Ui 3X-UI is a web control panel for managing Xray-core proxy and VPN servers, covering over a dozen protocols including VLESS, VMess, Trojan, WireGuard, and Hysteria2. It replaces manual Xray configuration management and commercial VPN panels, offering per-client traffic quotas, expiry dates, IP limits, and multi-node coordination from a single interface. Licensed under GPL-3.0, it installs on any modern Linux distribution via a one-line shell script or Docker. Best suited for operators running private proxy infrastructure who want client-level control without commercial per-seat licensing.

Read the full breakdownHide the full breakdownWho it is for, how it works, trade-offs, the quick start and the FAQ
who it's for

Who 3x Ui is for#

Operators managing private proxy nodes

3X-UI handles client provisioning, traffic accounting, and config distribution for operators running one or more Xray-core servers. Per-client quotas, expiry dates, and QR-code share links remove the need to edit raw config files for each user change.

Skip if:

You need enterprise SLA support, multi-tenant billing, or a hosted control plane you do not administer yourself. Commercial VPN management services are a better fit for those requirements.

Developers testing multi-protocol proxy setups

The panel lets developers stand up inbounds for a wide range of protocols without writing Xray JSON by hand. REALITY, XTLS-Vision, and AmneziaWG configurations that require significant manual effort in raw Xray config are available through guided forms in the UI.

Skip if:

Your use case is a single-protocol VPN for personal connectivity with no per-client control needed. A simpler tool like wg-easy is easier to configure and operate for that scenario.

Network operators in regions with deep packet inspection

3X-UI's REALITY, XTLS, and AmneziaWG support directly targets environments where standard VPN protocols are identified and blocked. These circumvention configurations are available through the web UI without manual JSON editing.

Skip if:

DPI circumvention is not a requirement in your network environment. Standard WireGuard or a simpler VPN tool is easier to configure and audit when stealth is not needed.

the problem

The problem it solves#

Managing proxy and VPN infrastructure at the server level means living inside configuration files. Every new client requires a manual Xray config edit, a service reload, and careful tracking of who has what access. Traffic accounting, expiry enforcement, and IP limits all need external tooling or manual auditing. As client count grows, a single misconfiguration can expose credentials or drop existing sessions.

Coordinating multiple servers compounds this. Operators running nodes in different regions have to SSH into each one, sync config changes manually, and reconcile traffic stats by hand. Distributing connection links to end users means copy-pasting UUIDs or writing custom scripts to generate QR codes. Commercial VPN management panels solve some of this but lock operators into per-seat pricing and proprietary cloud backends.

how 3x Ui solves it

How it solves it#

Multi-Protocol Inbound Support

VLESS, VMess, Trojan, Shadowsocks, WireGuard, AmneziaWG, TUIC v5, Hysteria2, MTProto, HTTP, SOCKS, and TUN are all managed from a single panel. Each inbound can be created, edited, or cloned to other nodes without editing Xray's raw JSON config directly.

Per-Client Traffic and Access Controls

Each client gets individual traffic quotas, expiry dates, IP limits with trusted-address exemptions, and HWID device limits. Live online status is visible per client. One-click share links and QR codes let operators distribute connection configs without manual UUID handling.

Multi-Node Coordination

Manage multiple servers from a single panel, clone inbounds across nodes, and aggregate traffic stats. External proxies and managed hosts are supported alongside direct node connections, making it practical for operators running distributed infrastructure.

Built-In Subscription Server

Generates VLESS, Clash, and JSON subscription output automatically, with format auto-selection based on the client's User-Agent. Custom page templates are supported for operators who want branded config delivery pages for their end users.

Telegram and Discord Bot Integration

Built-in bots send notifications for traffic cap hits, expiry warnings, and system load alerts. Bots also support admin actions, so operators can respond to alerts and manage clients without opening the web UI.

REALITY and XTLS-Vision Support

First-class support for VLESS with REALITY, including x25519 key generation, short IDs, and the xtls-rprx-vision flow. This combination targets stealth against deep packet inspection, with configuration available directly from the UI without manual JSON editing.

strengths · trade-offs

Strengths and trade-offs#

Strengths

  • No client count limits or per-seat feesThe panel runs on your own server with no licensing calls to external services. Unlike OpenVPN Access Server, which requires paid licensing above 2 simultaneous connections, 3X-UI imposes no connection or user limits beyond what your server hardware can handle.
  • AmneziaWG without kernel modulesAmneziaWG, the DPI-resistant WireGuard variant, runs on a userspace network stack inside the panel. No DKMS, no kernel patches, and no extra packages are required, which simplifies deployment on VPS providers that restrict kernel module installation.
  • Active maintenance and large communityOver 47,780 GitHub stars and regular releases through October 2026 reflect sustained community activity. Security patches, protocol updates, and new platform support follow from this active maintainer and contributor base.
  • PostgreSQL backend for high-scale deploymentsSingle-server setups use SQLite by default. Operators managing high client counts or multi-node infrastructure can migrate to PostgreSQL with a built-in migration command without reinstalling the panel or losing existing client data.

Trade-offs

  • -Intended for personal use per project READMEThe README explicitly states the project is intended for personal use only and cautions against use in production environments. Operators considering it for team or commercial proxy infrastructure should read this caveat and assess the implications before committing.
  • -GPL-3.0 copyleft applies to redistributionsGPL-3.0 requires distributing source changes if you redistribute 3X-UI as a modified version. For most self-hosting operators this has no practical impact. Integrators building commercial products on top of 3X-UI need to comply with the copyleft terms.
  • -Fail2ban requires elevated Docker capabilitiesIP limit enforcement via Fail2ban uses iptables, which requires NET_ADMIN and NET_RAW capabilities in Docker. The provided docker-compose file adds these automatically, but bare docker run commands that omit the capability flags will log ban events without applying them.
versus alternatives

3x Ui vs alternatives#

3X-UI vs OpenVPN Access Server

Both tools provide a web panel for administering VPN or proxy servers with per-client access controls. The key differences are protocol depth, licensing cost, and DPI circumvention capability.

Feature3X-UIOpenVPN Access Server
LicenseGPL-3.0Proprietary
Free tierUnlimited (self-hosted)2 simultaneous connections
ProtocolsVLESS, VMess, Trojan, WireGuard, Hysteria2, and moreOpenVPN, WireGuard
Multi-nodeYesLimited in standard tiers
DPI circumventionYes (REALITY, XTLS, AmneziaWG)No
Subscription linksYes (VLESS, Clash, JSON)No
Vendor supportCommunityPaid plans available

3X-UI is the better choice when protocol flexibility or DPI circumvention matters. REALITY, XTLS-Vision, and AmneziaWG are specific to the Xray-core ecosystem and are not available in any commercial panel at any price tier. For operators who need to support many different client apps via subscription links, 3X-UI has no commercial equivalent in that feature set.

OpenVPN Access Server is worth choosing when your environment standardizes on OpenVPN clients, your organization requires enterprise SLA support, or you need a vendor to provide compliance documentation. Its paid tiers include official support contracts that 3X-UI, as a community-maintained project, does not offer.

3X-UI vs Pritunl

Pritunl is a self-hosted VPN server panel with a commercial cloud management tier. Like 3X-UI, the base install runs on your own infrastructure; unlike 3X-UI, its protocol support covers OpenVPN and WireGuard only.

Feature3X-UIPritunl
LicenseGPL-3.0AGPL-3.0 (open), proprietary (cloud tier)
Protocols15+ via Xray-coreOpenVPN, WireGuard
Multi-nodeYes, built-inYes, via paid cloud tier
DPI circumventionYesNo
Subscription outputYes (VLESS, Clash, JSON)No
Vendor supportCommunityPaid plans available

Pritunl fits teams already running OpenVPN or WireGuard who want a polished server management interface and optional commercial support. 3X-UI fits operators who need the broader Xray-core protocol set or require circumvention capabilities that Pritunl cannot provide.

install · quick start

Quick start#

bash
Deploy 3X-UI on any Linux server with the official install script.
```bash
curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh | sudo bash
```
tech stack · detected from GitHub

What it's built on#

Languages
GoTypeScript
Frameworks
Next.jsReact
frequently asked

FAQ#

Is 3X-UI free to use?

Yes. 3X-UI is GPL-3.0 licensed and free to run on your own server. There are no client count limits, no per-seat fees, and no licensing calls to external services. Your only recurring cost is the server you run it on.

What VPN and proxy protocols does 3X-UI support?

3X-UI supports VLESS, VMess, Trojan, Shadowsocks, WireGuard, AmneziaWG, TUIC v5, Hysteria2, MTProto, HTTP, SOCKS (Mixed), Dokodemo-door, Tunnel, and TUN through Xray-core. Multiple protocols can share a single port using Xray's fallback feature.

Can 3X-UI manage multiple servers from one panel?

Yes. The multi-node feature lets you manage and scale across multiple servers from a single panel, including cloning inbounds onto other nodes. PostgreSQL is recommended as the backend when running multi-node deployments with high client counts.

How do I install 3X-UI?

Run the one-line install script from the GitHub README on any supported Linux distribution. The installer generates random credentials and sets up a systemd service automatically. Docker is also supported via the official image at ghcr.io/mhsanaei/3x-ui. Full documentation is at docs.sanaei.dev.

Does 3X-UI work on ARM servers and cloud VMs?

Yes. 3X-UI supports amd64, arm64 (aarch64), armv7, armv6, armv5, and s390x architectures. It runs on Ubuntu, Debian, Fedora, CentOS, AlmaLinux, Rocky Linux, Alpine, Arch, and several other distributions. Most standard cloud provider VMs are supported out of the box.

also worth a look

Similar open-source tools#

Paymenter

Alternative toWHMCS

Self-hosted billing for hosting providers, MIT licensed

  • 2,770 GitHub stars
  • MITLicence MIT

Vela

Alternative toGoogle Maps

OpenStreetMap and Google data, no account, no Play Services

  • 2,060 GitHub stars
  • GPL-3.0Licence GPL-3.0

Obtainium

InIT Management

Android app updates direct from GitHub and F-Droid

  • 20,630 GitHub stars
  • GPL-3.0Licence GPL-3.0

Cloudflare Os

Alternative toDust

Open source AI workspace with sandboxed apps and Gatekeeper security

  • 11,537 GitHub stars
  • Apache-2.0Licence Apache-2.0

FckSignups

InCustomer Support

Open-source tools that work instantly, no signup required

  • 4,511 GitHub stars
  • GPL-3.0Licence GPL-3.0

fmt

InCustomer Support

Fast, type-safe C++ formatting that replaces printf and iostreams

  • 25,884 GitHub stars
  • MITLicence MIT
by category

Open source tools in these categories#

105

Cloud & Hosting

dify, RuView, rtk196

Web Development

freeCodeCamp, superpowers, Skills for Real Engineers123

IT Management

RustDesk, Immich, Stirling PDF
Hostinger

Run 3x Ui on your own server

Self-host 3x Ui on a Hostinger VPS.

Deploy on Hostinger

Featured

Omnara

Alternative toCClaude Managed Agents

Open-source agent deployment API. Self-host or use Omnara Cloud.

  • 2,957 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents

Inbox Zero

Alternative toSuperhuman

AI email assistant that drafts replies and clears your inbox

  • 12,712 GitHub stars
  • AGPL-3.0Licence AGPL-3.0
  • #Email

rakazo

Alternative toGrok Bot

AI teammates you own: your keys, your model, your machine.

  • 4,904 GitHub stars
  • Apache-2.0Licence Apache-2.0
  • #AI Agents
Feature your project

New open source projects by email

The projects we add and every new guide. Free, unsubscribe any time.

Find open source alternatives to paid software

/
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse
  • Claude Code to OpenCode
  • Jira to Windshift
  • Notion to AppFlowy
  • Slack to Mattermost
  • Linear to GitLab
  • Wispr Flow to Handy
  • CapCut to Concat
  • Grok Bot to rakazo
  • Superhuman to Inbox Zero
  • Airtable to AITable
  • Muse to OpenClaw
  • GitHub Copilot to Cline
  • Datadog to Netdata
  • Microsoft Teams to Rocket.Chat
  • Pinecone to Qdrant
  • Zapier to n8n
  • Devin AI to OpenHands
  • Firebase to Supabase
  • 1Password to KeePassXC
  • Confluence to Docmost
  • Contentful to Strapi
  • Adobe Premiere Pro to Shotcut
  • ChatGPT to AnythingLLM
  • LangSmith to Langfuse