Skip to content

Node Installation

Deploy V2RayTun proxy nodes with Docker and connect them to the panel over mTLS.

Overview

Nodes are lightweight Docker containers that run the actual proxy protocols (Xray-core, AmneziaWG). Each node registers with the panel and communicates over a mutually authenticated TLS (mTLS) channel.

Step 1 — Create the Node in the Panel

  1. Log in to the panel and navigate to Nodes → Add Node.
  2. Enter a name and the node server's public IP address.
  3. Click Create. The panel generates:
    • A docker-compose.yml tailored to this node.
    • mTLS certificate files (ca.crt, node.crt, node.key).

Step 2 — Prepare the Node Server

SSH into the node server and install Docker if it is not already present:

Bash
curl -fsSL https://get.docker.com | sh

Create the working directory:

Bash
mkdir -p /opt/v2raytun-node && cd /opt/v2raytun-node

Step 3 — Deploy Certificates

Copy the three mTLS certificate files from the panel into /opt/v2raytun-node/certs/:

Text
certs/
├── ca.crt
├── node.crt
└── node.key

These certificates authenticate the node to the panel and encrypt all control-plane traffic.

Step 4 — Start the Node

Place the generated docker-compose.yml in /opt/v2raytun-node/ and start the services:

Bash
docker compose up -d

The node will connect to the panel and appear as online within seconds.

Required Ports

PortProtocolPurpose
443TCPVLESS Reality
51820UDPAmneziaWG
8443TCP/UDPHysteria2 (QUIC)
62050TCPmTLS control plane

Ensure these ports are open in the server's firewall and any upstream security groups.

Verifying the Connection

In the panel, navigate to Nodes. The node status should display a green Online badge. You can also check locally:

Bash
docker compose logs -f --tail 50

Look for connected to panel in the log output.

Multiple Nodes

Repeat the process for each additional server. Every node gets its own unique certificate set and docker-compose.yml from the panel.

Next Steps

  • VLESS Reality — configure the first protocol on your node.
  • Squads — control which users can access which nodes.