3X-UI is the most popular open-source Xray management panel, providing a full-featured web interface for deploying and monitoring proxy and VPN protocols on Linux servers. The Go backend manages Xray-core instances supporting VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria2, HTTP, SOCKS, Dokodemo-door, and TUN inbounds across TCP, mKCP, WebSocket, gRPC, HTTPUpgrade, and XHTTP transports secured with TLS, XTLS Vision, and REALITY. The Clients page tracks each user with individual traffic quotas, expiration dates, concurrent connection limits, and live online status indicators, while one-click share links, QR codes, and a built-in subscription server distribute configurations in multiple output formats. The multi-node architecture manages and scales deployments across multiple servers from a single panel instance. The Panel Settings page configures listen address, port, URI path, session duration, trusted proxy CIDRs, authentication, and Telegram bot integration for remote monitoring and management alerts. Outbound routing supports WARP, NordVPN, custom rules, load balancers, and proxy chaining. Xray Configs provides template-level control over the core configuration, while the API Docs page exposes a complete RESTful API with in-panel Swagger documentation. Data persists in SQLite by default or PostgreSQL for larger deployments, with database export and import from the panel. Fail2ban integration enforces per-client IP limits. On RepoCloud, deploy 3X-UI on a dedicated VPS with Docker, root SSH access, and complete control over your proxy infrastructure, all under the GPL-3.0 license.

Qeli is a self-hosted VPN built for networks where ordinary VPN protocols get recognized and blocked, disguising its traffic as ordinary web traffic while keeping the classic full-tunnel experience. Where WireGuard, OpenVPN, and IKEv2 carry fingerprints that deep packet inspection has learned to spot, Qeli answers with five wire modes: plain, TLS mimicry, ChaCha20 obfuscation behind WebSocket fronting, REALITY, and a flagship mode that carries the private stream inside a genuine HTTP/2 request within a real TLS 1.3 exchange. A probe without a valid token never learns the difference, because the server bridges it to the configured public target site. The handshake is hybrid post-quantum, X25519 plus ML-KEM-768, with a ChaCha20-Poly1305 data plane, and the tunnel itself behaves like the VPNs people already know: full-tunnel or split routing, OS-level DNS, and per-app include or exclude rules on Windows, macOS, and Android. A one-command installer on a clean Debian or Ubuntu server asks for a profile and a port, writes the NAT configuration, creates the first users, and prints ready-to-paste connection links. The web panel then issues qeli:// links and QR codes per person behind an Argon2id login, so onboarding a phone is a camera scan instead of a config file. Clients cover Linux, Windows, macOS, Android, and Keenetic and OpenWrt routers, and published lab benchmarks average around 1220 Mbit/s across all twelve profiles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.