Skip to content
RayTun

Introduction

Overview of V2RayTun — a self-hosted proxy panel with multi-protocol support, Docker deployment, and all-in-one subscriptions.

What Is V2RayTun?

V2RayTun is a self-hosted proxy management panel that lets you deploy, monitor, and manage proxy nodes through a single web dashboard. It supports multiple modern tunneling protocols out of the box and delivers one-click subscriptions to end users.

Architecture

The platform follows a panel + nodes model:

  • Panel — a central web application (backend API + frontend UI) backed by PostgreSQL, Redis, and RabbitMQ. It handles user management, subscription generation, and node orchestration.
  • Nodes — lightweight Docker containers running Xray-core and AmneziaWG. Each node connects back to the panel over mTLS for secure control-plane communication.
  • Subscriptions — a single URL per user that returns a base64-encoded list of all available connection profiles across every protocol and node.
Text
┌──────────────┐       mTLS        ┌────────────┐
│    Panel     │◄─────────────────►│   Node 1   │
│  (backend)   │                   └────────────┘
│  (frontend)  │       mTLS        ┌────────────┐
│  (caddy)     │◄─────────────────►│   Node 2   │
│  (postgres)  │                   └────────────┘
│  (redis)     │         ...
│  (rabbitmq)  │       mTLS        ┌────────────┐
└──────────────┘◄─────────────────►│   Node N   │
                                   └────────────┘

Supported Protocols

ProtocolTransportHighlights
VLESS RealityTCP / gRPCTLS fingerprint camouflage via X25519 keys
AmneziaWGUDP (WireGuard)Jitter-based DPI evasion on top of WireGuard
Hysteria2QUICHigh-throughput with salamander obfuscation

Key Features

  • All-in-one subscriptions — one URL delivers VLESS, AmneziaWG, and Hysteria2 configs together.
  • Squads — group users and control which nodes and protocols each group can access.
  • Config profiles (Hosts) — fine-tune SNI, port, and transport settings per inbound.
  • mTLS node communication — every panel ↔ node channel is mutually authenticated.
  • Docker-first deployment — the entire stack (panel and nodes) runs in Docker with a single install script.
  • Auto-TLS — Caddy obtains and renews Let's Encrypt certificates automatically.
  • REST API & Webhooks — automate user provisioning, node management, and event notifications.
  • CLI tool (v2raytunsetup) — manage installations, updates, and backups from the terminal.

Next Steps