INFRASTRUCTURE AT A GLANCEYour VPS.
Your VPS.
Under control.
Access, traffic and recovery. Know what is running. Control what happens next.
▣
Loading server…Domain not configured
CheckingYOUR DAILY WORKFLOW
One place. Every control.
CONNECTION LAYER
Protocol gateway
Separate profiles. Shared TLS entry.:443
SYSTEM SERVICES
—Node health
ACCESS DIRECTORY
Xray profiles
| PROFILE | PROTOCOLS | EXPIRY | STATUS |
|---|
ACCESS MANAGEMENT
SSH accounts.
Dropbear access with separate session and unique-source-IP caps.
SSH byte metering is unavailable. Finite GB quotas are rejected. IP and session checks run every 5 seconds plus processing time; unknown sources cannot use an IP-limited account.
| USERNAME | EXPIRY | SESSIONS | QUOTA | ACTIONS |
|---|
SECURE CONNECTIONS
Xray profiles.
VLESS, VMess and Trojan. Ready to import into your client.
Xray core
Checking installation…
| PROFILE | PROTOCOLS | EXPIRY | STATUS | USAGE / LIMIT | ACTIONS |
|---|
AWS EDGE DELIVERY
DisabledCloudFront.
One verified TLS route for VLESS, VMess, Trojan and Dropbear.
Connect your edge
Prepare the origin, download the private setup, deploy it in your AWS account, then attach the distribution hostname.
The ZIP contains an origin secret. Keep it private. Origin DNS must point directly to this VPS and have a valid public TLS certificate. Disabling routes does not delete or stop AWS billing.
Check the complete route
No endpoint check has run.
Use an RFC6455 binary WebSocket client with SSH. Keep SSH host-key checking on; legacy raw Upgrade clients cannot use CloudFront.
For Xray, open a profile's Export dialog and select CloudFront. XHTTP stays direct. Checks verify handshakes; test an actual login and file transfer before sharing access.
NETWORK CONFIGURATION
DNS & SSL.
Give your server a name. Keep its connections verified.
Public hostname
Create A/AAAA records at your DNS provider pointing to this VPS, then save the hostname here.
Port 80 must be reachable for Let's Encrypt. Disable Xray before switching domains.
Resolver settings
Used by Xray and included in generated client JSON files. Does not replace the VPS system resolver.
Accepts 1–4 IP addresses or HTTPS DoH URLs, such as https://cloudflare-dns.com/dns-query. No public recursive DNS listener is opened.
FIND THE FAILURE
Diagnostics.
Check the config, internal listeners, DNS, TLS and server clock.
Health report
Not run yet⌁
Know where to look.
Run a check to see findings and practical fixes.
KEEP A RECOVERY COPY
Backup & recovery.
Download your Xray profiles and settings before making large changes.
Private profile backup
Includes Xray credentials, expiry dates, subscription digests, DNS and transport settings. Keep the JSON somewhere private. SSH users/passwords, TLS keys, web login and Telegram token are excluded.
↓ Download backup JSONsudo abdulbasit-panelctl restore /root/NOWAY-xray-backup.jsonMEASURED, NOT ESTIMATED
Traffic & connections.
Exact byte totals and unique source IPs of authenticated streams.
Target sampling: 5 seconds plus API/restart time. Quotas can overshoot between checks. Core crashes can lose uncheckpointed bytes. SSH byte metering is unavailable. Shared NAT counts as one IP.
Profile usage
Waiting for a sample| PROFILE | UPLOAD | DOWNLOAD | USED / LIMIT | STATUS |
|---|
Authenticated Xray IPs
CORE APIRefresh live data to load activity.
Gateway peers
TCP OBSERVATIONTCP peers alone do not prove account authentication.
TRANSPORT WORKBENCH
More ways to connect.
An explicit UDP policy and an optional DNS tunnel.
UDP through Xray
Forward client UDP through an authenticated profile. No unauthenticated UDP proxy is opened.
Checking
Private-address blocking stays active. Your client must support UDP forwarding.
SlowDNS · dnstt
Optional coreTunnels TCP to local Dropbear; an SSH account is still required.
Public NS delegation needs UDP :53 or an explicit port-forward arrangement. Existing DNS services are kept.
Install official core · root terminal
sudo abdulbasit-panelctl slowdns-installOPERATIONS DESK
Find it. Fix it.
Bounded diagnostics, clear results and deliberate service changes.
Service journal
Up to 100 entries. Private links and tokens are redacted.
Loss & latency
15 ICMP probes from this VPS. This measures latency and loss, not bandwidth.
Allow about 15 seconds. Some networks filter ICMP.
SSH BANNER
Your welcome message
Applies to managed Dropbear. Saving restarts it and may reconnect clients.
OWNER CONTROLS
Operate with a way back.
Telegram administration and maintenance from your root terminal.
Your second control room
Existing Telegram account/service menus and Xray-link retrieval remain available.
Set token & Super Admin
sudo abdulbasit-panelctl configure-botReview administrators
sudo abdulbasit-panelctl list-adminsOpen the terminal menu
sudo menuDeliberate housekeeping
Linux reclaims caches automatically. Manual cache reclamation may temporarily reduce performance.
Inspect memory
sudo abdulbasit-panelctl maintenance memoryReclaim caches · typed confirmation
sudo abdulbasit-panelctl maintenance memory --reclaimSystem journal retention · 7 days / 256 MiB
sudo abdulbasit-panelctl maintenance clean-logsCleanup permanently removes older archived journal entries after confirmation.
Upgrade with a checkpoint
A private installation archive is saved before running the reviewed, root-owned source checkout.
Replace the path with your repository checkout
sudo abdulbasit-panelctl maintenance reinstall --source /root/secure-vps-panelRemove the panel carefully
Requires active normal OpenSSH and typed confirmation. Saves a private archive, removes panel services/routes and locks managed SSH users. Keeps configuration, certificates and shared packages.
Root terminal only · this website cannot trigger it
sudo abdulbasit-panelctl maintenance uninstall