hiddify/hiddify-manager

Multi-user anti-filtering panel, with an effortless installation and supporting more than 20 protocols to circumvent filtering plus the telegram proxy.

 فارسی          Русский 🇷🇺          简体中文 🇨🇳                                        

Welcome to Hiddify-Manager

Hiddify-Manager is a powerful and professional anti-censorship toolbox, which is a multi-user panel with an effortless installation and supporting more than 20 protocols including Reality and Telegram proxy to circumvent filtering. It's optimized for censorship circumvention in China, Russia and Iran and Recommended by Xray. It's a great replacement for X-UI panel.

---

Table of Contents

• Why Hiddify-Manager?
  • Attractive features
  • Supported protocols
  • Smart Proxy For Domestic And Filtered Sites
  • Other fantastic features
• Installation and tutorials
• Donation and Support
• Collaboration and Contact Information

---

Why Hiddify-Manager?

The word Hiddify is a combination of hidden and simplify. We aim to bring together everything that helps to make it simple and hidden in Hiddify-Manager. In other words, it is a panel with a wide range of features and capabilities that helps you enjoy hassle-free and secure internet browsing. Serving as a user-friendly VPN solution, Hiddify-Manager ensures that you can access the free internet with ease and peace of mind.

Attractive features

• Quick installation
• Multiple core Xray and SingBox
• Smart proxy (Hiddify and Clash client)
• Automatic update
• Automatic backup (every 6 hours)
• Automatic connection to Cloudflare
• Using multiple domains
• Auto CDN IP configuration capability
• Management of active configurations
• Multiple admin privileges
• the Only SingBox panel with user management feature
• Applying time and traffic limit for each user
• Dedicated pages for users to view consumption and configurations
• Dedicated and smart configurations
• Dedicated client software
• Telegram proxy using different libraries
• DNS over HTTPS (DoH)
• User management using Telegram Bot
• Dedicated WARP to bypass some restrictions

And dozens of other features that you will notice upon installation.

Supported protocols

(click here)

Supported Configs	Supported Configs	Supported Configs
Direct	CDN	Domain Fronting
- Reality XTLS vless - Reality gRPC vless - SSH - Hysteria2 - TUICv5
Trojan: - TLS WS - TLS TCP - TLS gRPC - TLS H2 WS - TLS H2 TCP - TLS H2 gRPC	Trojan: - TLS WS - TLS gRPC - TLS H2 WS - TLS H2 gRPC	Trojan: - TLS WS Fake
Vless: - TLS WS - HTTP WS - TLS XTLS - TLS gRPC - TLS H2 TLS - TLS H2 WS - TLS H2 gRPC	Vless: - TLS WS - TLS gRPC - HTTP WS - TLS H2 WS - TLS H2 gRPC	Vless: - TLS WS Fake - HTTP WS Fake
Vmess: - TLS WS - TLS TCP - HTTP WS - HTTP TCP - TLS gRPC - TLS H2 WS - TLS H2 TCP	Vmess: - TLS WS - TLS gRPC - HTTP WS - TLS H2 WS - TLS H2 gRPC	Vmess: - TLS WS Fake - HTTP WS Fake
V2ray: - TLS WS - HTTP WS - TLS H2	V2ray: - TLS WS - HTTP WS - TLS H2
Shadowsocks: - TLS Shadowtls - HTTP Shadowtls - TLS H2 Shadowtls - TLS H3 Shadowtls

Smart proxy for domestic and filtered sites

(click here)

You can connect to the internet in 3 modes using Hiddify-Next and Hiddify-Manager.

1. This method only circumvents filtered websites via the proxies.
2. This method circumvents all websites except domestic websites based in China, Russia and Iran. This way the domestic websites can be opened without any proxies (recommended)
3. This method circumvents all websites.

At the same time, the proposed solution is resistant to detection by the internet filtering entities and prevents the usual attacks on the server i.e., the possibility of detection is minimal, however, do not forget to disable other ports except 22, 80 and 443.

Other fantastic features

(click here)

Supported operating systems

Hiddify-Manager has been tested on Ubuntu 22.04. Ubuntu arm64 or amd64

Speed test

In this way, you can check the speed of the server with and without anti-filter.

DNS over HTTPS (CDN support)

To use DNS over HTTPS, just use the following DNS in the browser.

https://yourdomain.com/yoursecret/dns/dns-query{?dns}

Redirector (CDN support)

When you want to share Telegram proxy or Shadowsocks proxy through other programs, it is possible to redirect with CDN support. For example, if you put the Shadowsocks configuration instead of "fullURL", clicking on this link will open Shadowsocks app and activate the proxy on it. For example:

https://yourdomain.com/yoursecret/redirect/fullURL

Replace "fullURL" by the Shadowsocks configuration.

https://yourdomain.com/yoursecret/redirect/ss://secret/

Installation and tutorials

Please find tutorial information on our website by clicking on image below.

Acknowledgements

We would like to express our sincere appreciation to the contributors of the following projects, whose robust foundation and innovative features have significantly enhanced the success and functionality of this project.

• Sing-box
• Xray
• Linux by Linus Torvalds
• Font: Vazirmatn by Saber Rastikerdar

Donation And Support

The easiest way to support us is to click on the star (⭐) at the top of this page.

We also need financial support for our services. All of our activities are done voluntarily and financial support will be spent on the development of the project. You can view our support addresses here.

Collaboration and Contact Information

We need your collaboration in order to develop this project. If you are specialists in these areas, please do not hesitate to contact us and mention your skill.

• Media Production
• Python Developing‌
• Kotlin Developing
• Flutter Developing

We appreciate all people who are participating in this project. Some people here and many many more outside of Github. It means a lot to us. ♥

Made with Contrib.Rocks

hiddify-manager's Issues

Arvan block my ip!

Unfortunately, until we install the script, everything fails!

What service site is the best solution to use a domain(for cdn and servername)?
Because Arvancloud seems to understand immediately, especially when you turn on the CDN!
I am very confused and I need help

CDN configs on clash are slow compared to xray and v2ray clients

Hi there
My issue possibly might be out of the scope of this project.
Using clash on windows, (clash core and clash meta core), my ping to my cdn configs are very high (1300MS) and my connection is very unstable.
Using nekoray and v2rayn on windows, (xray core and v2fly), My cdn configs work very well and have a good ping and i have a very stable connection.

Hidify is on ubuntu 22 LTS, I am using Arvan cloud.

پیشنهادات

سلام دوست عزیز ممنون برای اسکریپت
1-رابط کاربری زیاد جالب نیست
2-به جای وب سرور nginx از وب سرور قدرت مند و دارای پنل گرافیکی openlitespeed استفاده کنید
3- اسکریپت از ssr پشتیبانی نمی کنه
4-پروکسی تلگرام نیاز به توجه بیشتری داره و میتونه بهتر بشه
5-محدودیت حجم و تعداد کانکشن رو لطفا هرچه زود تر به اسکریپت اضافه کنید

و یک سوال میتونیم nginx رو حذف کنیم و وب سرور هایی همچون openlitespeed و آپاچی و... نصب کنیم و مشکلی پیش نمیاد؟

ممنون از راهنمایی هاتون

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

hello,

after installing, this error appears in browser for using admin panel "ERR_SSL_VERSION_OR_CIPHER_MISMATCH"

Arvan 504 for admin page

I get Arvan CDN and a domain and successfully change my domain nameserver to arvan CDN.
I get an https certificate for my domain and all subdomain with Arvan CDN and turn it on.
After that, I create a new subdomain, pointed it to my server, and turned the cloud off for that domain.
after that I set up a fresh server with my new subdomain and the script can successfully get certificate.
in the end, my status was:

gost                           inactive
hiddify_monitoring_web         inactive
ss-faketls                     active
ss-v2ray                       active
mtproxy                        active
trojan-go                      active
v2ray                          active
netdata                        active
nginx                          active
xray                           active 

After that I turn cloud on for this subdomain.
When I want to go to admin page with IP, every thing is ok but when I want to go to admin page with domain(https) it takes about 5 minute and in the end I see Arvan timeout(504)

uinstall installed packages

how can uninstall al packages installed via this script?

SubDomain blocked

Hi there,
Just did set it up 2 days ago, and it was only me using it.
surprisingly my sub domain got blocked!!
i never visited Iranian websites. and i used the fakecdn links.
my subdomain never got blocked since past 3 months.
wondering what did go wrong!

Stats doesn't work

Hi
this link doesn't work https://yourdomain.com/yoursecret/stats/
and it will get "500 Internal Server Error"
please fix it, thanks

Tutorial

سلام و ممنون از اسکریپت
اگر مقدوره یک ویدئو تولید و در اون آموزش تصویری نصب و نحوه استفاده انواع کانفیگ‌ها و پروتکل‌ها برای افراد کمتر آشنا قرار بگیره.

remove vultr due to sanctions against iran

Vultr removed my access to panle due to sanctions against iran (connecting via iran Ip address)
Please remove it from your manual guide

[Ticket:] Re:Possible International Trade Restriction Inquiry

Due to recent activity on your account from a sanctioned country - Iran, Islamic Republic of, our ToS department is requesting additional information to validate your identity

New Version has many bug

Hi, The new version has so many problems that it doesn't even connect and the user panel is changed to /hash32/hash32

Error 502

I do it according to tutorial but finally it web page show a error 502 , bad gateway.
what's wrong?

problem with port 443

port 443 is close in TelegramVM.
i can see all Inbound port rules and port 443 is in the list, but it's close when i use port check from other servers.
only port 22 in open.

cd tugi

hcckk i'm b i'm b g

ssl build problem and host

SSL cannot be requested more than 5 times in seven days, and this causes us to have problems in the installation process.But this script solves this problem by adding a txt record and can receive ssl.
https://github.com/mack-a/v2ray-agent/blob/master/documents/en/README_EN.md
If this item is added, it would be great to get ssl from other methods during installation, because sometimes problems arise during installation and we have to install it several times.

user adress incorrect

my user page is
https://xxxx/59e726d68ef64767cc77a7b7651b6e45/59e726d68ef64767cc77a7b7651b6e45/

pls fix it to
https://xxxx/59e726d68ef64767cc77a7b7651b6e45/

Add management and limit for each user in admin panel

The ability to generate a link for each user and add a volume limit for the add program will be great, because Arvan's cdn has a limit on internet usage.

Possible DNS Leak

Doing a simple DNS Leak test on https://www.dnsleaktest.com/ or https://www.expressvpn.com/dns-leak-test shows possible DNS leaks, which is very concerning.

Server is down

My server became unavailable after last night's update and reinstallation did not solve it

nginx failed cant open site

Doesn't bypass google safe search

Iranian ISP has locked the google safe search on!!

Most of VPN's bypass it. but this one doesn't

admin link not working after install

after successful install admin links not working.
returning such errors:

This page isn’t working78.111.. didn’t send any data.
ERR_EMPTY_RESPONSE

or:

This site can’t be reached78.111...sslip.io refused to connect.

Hello, is there an alternative way of converting?

donation

if you can add Dogecoin it would be very nice

Nginx service can`t be active after update

I update to the new version, after running install.sh file my nginx service has this error:

Jan 15 17:22:29 your-vps.x nginx[82295]: nginx: [emerg] "proxy_cache" zone "STATIC" is unknown in /etc/nginx/nginx.conf:63
Jan 15 17:22:29 your-vps.x nginx[82295]: nginx: configuration file /etc/nginx/nginx.conf test failed

My server status:

hiddify_monitoring_web         inactive
ss-faketls                     inactive
ss-v2ray                       inactive
ssplugin-shadowtls             inactive
hiddify-sniproxy               active
mtproxy                        active
trojan-go                      inactive
hiddify-xray                   active
netdata                        active
nginx                          failed

Not an issue

Thank you!
This project is an excellent contribution towards freedom and should not be unnoticed.
I made this issue to say "thank you" for your efforts. I hope this motivates you (even a little bit) to continue helping thousands (and hopefully millions of people).

- From myself and many more using hiddify to access the free internet.

Only Clash works

Hi, It seems on auto installation only clash fully works even with CDN inside IRAN works smooth
But other shadowsocks, vmess and etc not working at all any help regarding this?
and how can we debug this

error 520 cloudflare

ممنون از پروژه خیلی عالی شما
بعد از یک روز کارکردن صفحه ادمین وارد نمیشود ارور 520 کلودفلر میدهد و کلش کار نمیکند لطفا راهنمایی بفرمایید

Problem with cdn

vless and trojan configurations do not work with cdn and only vmess is active, but there are no problems without cdn

Netdata not working

Netdata is enabled in the settings but it says "failed" on my logs
And when I go to the netdata page it gives me this error
"502 Bad Gateway
nginx/1.18.0 (Ubuntu)"

ubuntu 20 nginx error: missing ) in "^2023-01-13T(08|"

Hi
In ubuntu 20 with every installation this error occurs:
nginx: [emerg] pcre_compile() failed: missing ) in "^2023-01-13T(08|" in /opt/hiddify-config/nginx/def-link.conf:2

Server doesn't work after update

Hi @hiddify,

First I want to thank you for this great project. This really helps people.

After I updated hiddify this morning, almost all protocols got shut down + I cannot access the admin and user panel through domain name, but they are accessible by IP address. I even tried fresh install in a new server with a new domain but It didn't help and got the same problem again.

vmess

vmess dont connect after Update

add bot.sudoer.net

Hi
please add this http://bot.sudoer.net/best.cf.iran
to find best ip for different network like mci , irancell ... and generate specific configs

https://github.com/MortezaBashsiz/CFScanner

https://twitter.com/MortezaBashsiz/status/1618572804076736515

Dokerized version

Hi
Can you please provide a docker image for this package?
A sample docker-compose.yml also will be grate

config issuse

سلام
من توی اوراکل اکانت ساختم و طبق ویدیو و آموزش کار هارو انجام دادم
اما وقتی آیپی و کد رو از قسمت Application information کپی کردم و وارد مرورگر کردم ، هیچ اتفاقی نیفتاد و چیزی باز نشد که بقیه کانفیگ ها رو انجام بدم
منظورم این آدرسه :
http://140.***.***.***/ef********703315******f6dd8ff7c66d076/config

هیچی باز نشد
انگار از سمت خود اوراکل بسته شده
ممنون میشم اگر راه حلی داره بفرمایید

HTTP2 ALPN for trojan CDN seems to have problems with Arvancloud

Hi, Thank you for this awesome script. It seems using WebSockets alongside http/2 causes some problems in Arvan CDN. When using with Clash we'll get :

23-01-12 18:03:36[ warn ][TCP] dial P (match Match/) 127.0.0.1:61225 --> [destination]:443 error: [CDN_DOMAIN]:443 connect error: dial [CDN_DOMAIN]:443 error: malformed HTTP response "\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\b\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\b\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01"

by commenting alpn in here it works fine.

Also as I checked x-ray configurations, Trojan over WS fallback is matched via path instead of alpn. it's trojan-TCP which is detected with alpn=h2

It would be awesome to check and change clash configs if my assumption is correct.

Not working on a fresh install of ubuntu 20.04

throws please enter valid domain name to use

Low speed and high ping

Hi guys,
first of all thanks for this script.
I installed that yesterday on 2 different servers which were located in different countries.

but the speed was really bad!

first I tried without CDN and then I used CDN (from Arvancloud) but the results don't change as much as I expected.
also, the ping of the telegram proxy was more than 1200ms!

any helo would be great from you.

Please support SSR

Please support SSR

Multi user preferred

کارنکردن همه ی کانفیگ کلود

برای من قسمت runcmd کانفیگ cloud config داخل هتزنر کار نکرد! شاید نسخه ی cloud init فرق کرده باشه در هتزنر جدیدا!

new idea

Since some of Cloudflare's IPs are blocked, I think a part should be added to Clash to see which IP is pinged on the user's device and use it, what do you think?

getting systemd error after install

in install, after "Finished!" message I get following errors:

× nginx.service - A high performance web server and a reverse proxy server
     Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Sun 2023-01-22 15:00:21 +0330; 2s ago
       Docs: man:nginx(8)
        CPU: 24ms

Jan 22 15:00:21 cv systemd[1]: Starting A high performance web server and a reverse proxy server...
Jan 22 15:00:21 cv nginx[27581]: nginx: [emerg] socket() [::]:438 failed (97: Unknown error)
Jan 22 15:00:21 cv nginx[27581]: nginx: configuration file /etc/nginx/nginx.conf test failed
Jan 22 15:00:21 cv systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE
Jan 22 15:00:21 cv systemd[1]: nginx.service: Failed with result 'exit-code'.
Jan 22 15:00:21 cv systemd[1]: Failed to start A high performance web server and a reverse proxy server.

● hiddify-xray.service - Xray Service
     Loaded: loaded (/etc/systemd/system/hiddify-xray.service; enabled; vendor preset: enabled)
     Active: active (running) since Sun 2023-01-22 15:00:21 +0330; 2s ago
       Docs: https://github.com/xtls
   Main PID: 27706 (xray)
      Tasks: 5 (limit: 1102)
     Memory: 45.5M
        CPU: 194ms
     CGroup: /system.slice/hiddify-xray.service
             └─27706 /usr/local/bin/xray run -confdir /opt/hiddify-config/xray/configs/

Jan 22 15:00:21 cv systemd[1]: Started Xray Service.

× hiddify-sniproxy.service - HTTPS SNI Proxy
     Loaded: loaded (/etc/systemd/system/hiddify-sniproxy.service; enabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Sun 2023-01-22 15:00:21 +0330; 2s ago
       Docs: man:sniproxy(8)
             file:///usr/share/doc/sniproxy/
   Main PID: 27587 (code=exited, status=1/FAILURE)
        CPU: 2ms

Jan 22 15:00:21 cv systemd[1]: Started HTTPS SNI Proxy.
Jan 22 15:00:21 cv systemd[1]: hiddify-sniproxy.service: Main process exited, code=exited, status=1/FAILURE
Jan 22 15:00:21 cv systemd[1]: hiddify-sniproxy.service: Failed with result 'exit-code'.
hiddify-admin                  active                         
ss-faketls                     inactive                       
ss-v2ray                       inactive                       
ssplugin-shadowtls             inactive                       
hiddify-sniproxy               failed                         
mtproxy                        active                         
hiddify-xray                   active                         
netdata                        active                         
nginx                          failed   

Fake CDN concept clarification

Hi

In fake CDN documentation, you mentioned that it's mandatory to disable CDN proxying. By doing so, we're only using CF or Arvan as a simple DNS server and nothing more since its only job is to resolve fake-cdn.domain.com to my ip. I'm having trouble understanding the "fake CDN" concept here.

Insecure configuration and option to disable logging

The only option of authentication for admin panel is ADMIN_SECRET, which is enforced via nginx URL filtering. Please notice that when using a CDN, provider is a literal MITM. Decrypting user side data and encrypting it to destination server. It can access headers(hence paths and URLs). and cookies. For the same reason using a password based method is not a very good decision and at least should be limited to one domain (That is not under the control of CDN)
Nginx by default may use weaker TLS ciphers. Most of devices now support TLSv1.3, so limiting TLS to TLSv1.2 and TLSv1.3 should not be a problem (Chiphers should be limited too).
Some people may don't need the logging and monitoring option. (Or using them is not safe). An option to completely disable logging is a needed feature in these cases.
Also a separation of subdomains to only route the CDN compatible methods through CDN is really appreciated 😅
Thanks

Dockerfile

با سلام
ممنون از طراحی بسیار خوبتون
لطفاً فایل docker هم برای این پروژه بسازید.
ممنون

How to use multiuser?

پارسی:
وقت بخیر
پنل رو از طریق نصب سریع نصب کردم
برای استفاده از قابلیت چندکاربره سکرت کد رو مشابه گفته خودتون در بخش تنظیمات بصورت تعریف میکنم:
b3fbb9b35e1052f713f36c303ac02ffd;b3fbb9b35e1052f713f36c303ac02ffe
مثلا برای دو UUID
اما با اخطار زیر مواجه میشم.
Secret for USER_SECRET=b3fbb9b35e1052f713f36c303ac02ffd;b3fbb9b35e1052f713f36c303ac02ffe is incorrect. It should be 32 char hex values. Click back and fix it

ممنون میشم بطور کلی نحوه استفاده از قابلیت مولتی یوزر رو توضیح دهید.

English:
HI dude
I installed the panel through quick installation
To use the multi-user feature, I define the secret code as you said in the settings section:
b3fbb9b35e1052f713f36c303ac02ffd; b3fbb9b35e1052f713f36c303ac02ffe
For example, for two UUIDs
But I get the following warning.
Secret for USER_SECRET=b3fbb9b35e1052f713f36c303ac02ffd;b3fbb9b35e1052f713f36c303ac02ffe is incorrect. It should be 32 char hex values. Click back and fix it

Please explaining how to use the multi-user function.

Shadowrocket subscribtion

Hi there
Shadowrocket subscribtion url doesn't exist in hiddify!
How can I use hiddify configs for Shadowrocket iOS.?

changing port

I think that port 443 has been blocked in my ISP ,is there any way to change protocols port access?

کلش ویندوز

سلام تشکر میکنم از زحماتتون

برای من روی گوشی خیلی خوب کار میکنه ولی برای ویندوز 7 بعد از نصب کلش و فعال کردن پروکسی و انتخاب یکی از تنظیمات هیچ پروکسی در قسمت PROXIES نمیاد و فقط نشون میده کانکت هست ولی هیچ ارتباطی برقرار نیست

ممنون میشم راهنمایی کنید