3X-UI on Ubuntu 24.04 LTS

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

3X-UI - Xray Proxy Management Panel by cloudimg

Deploy a private, self-hosted management panel for the Xray-core proxy on your own Azure infrastructure in minutes. 3X-UI 3.5.0 gives you a browser interface to create and manage inbound connections and client accounts for protocols such as VLESS, VMess, Trojan and Shadowsocks, apply per client traffic limits and expiry dates, watch live traffic and system statistics, and control the underlying Xray process, all without hand editing JSON configuration. The panel stores its accounts, inbounds and settings in an embedded SQLite database and runs Xray-core as a managed child process, regenerating its configuration and reloading it for you whenever you change an inbound.

Why This Image Instead of Manual Installation

Setting Xray and a panel up by hand means fetching the correct release binaries, writing a systemd unit, initialising the database, and - critically - hardening a service that will relay network traffic and expose a privileged admin panel. This image removes that work and ships secure by default:

• 3X-UI 3.5.0 from the pinned upstream release, a single self contained Go binary managed by systemd
• The bundled Xray-core engine, managed by the panel as a child process
• A per VM admin username and password generated on your own VM at first boot; the upstream admin/admin default never exists on a running VM
• A random secret web base path per VM, so the panel is not reachable at a predictable URL
• Zero inbounds and zero proxy accounts: Xray binds no proxy port until you create one
• The subscription server disabled by default, so the panel on port 2053 is the only public surface
• 24/7 cloudimg support for deployment, upgrades, TLS and access configuration

Use Case: Your Own Authorised Use Proxy Endpoints

A team needs to run its own proxy endpoints - for testing, for reaching its own services, or for authorised access - without maintaining hand written Xray JSON on every host. With this image they launch a VM, read the per VM admin credential and secret panel URL written at first boot, log in, and create their inbounds and client accounts from a browser, each with its own traffic limit and expiry. The panel writes the configuration and reloads Xray for them, inside their own VNet, on infrastructure they control.

Secure By Default

This is proxy infrastructure with a privileged admin panel, and the image is built accordingly. There are no shared or default credentials: the well known upstream admin/admin login is never present on a running VM, because a per VM administrator username and password are generated on your own VM at first boot and written to a root only file. The panel is served under a random secret base path, so a bare request returns 404. The image ships with zero inbounds, so Xray binds no proxy port until you deliberately create an inbound, and the subscription server is turned off, leaving the panel on port 2053 as the only public surface.

Because the panel configures a proxy that will relay traffic, restrict inbound access to port 2053 and port 22 to your own IP address before first boot. The panel serves plain HTTP and ships no TLS certificate, so add your own before using it beyond a short lived test. Run only proxy endpoints you are authorised to operate.

Getting Started

1. Launch the image with ports 2053 and 22 restricted to your own address 2. SSH in and read the per VM admin credential and secret panel URL from /root/3x-ui-credentials.txt 3. Open the panel URL and log in with the generated username and password 4. Create your first inbound and client from the Inbounds page 5. Add a TLS certificate before production - the image serves plain HTTP

Licensing and Pricing

3X-UI is licensed under GPL-3.0 and is free; there is no per-seat fee. The cloudimg charge of 0.04 US dollars per vCPU hour covers packaging, security patching, image maintenance, and 24/7 expert support. Restrict the panel to trusted networks and terminate TLS before production.

3X-UI and Xray are trademarks of their respective owners. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.