Repository navigation
XRayMesh v2.1.0 - Web Dashboard, SafeSync & Multi-Tunnel Manager
🚀 XRayMesh v2.1.0 (Official Release)
XRayMesh v2.1.0 represents a major evolutionary leap from the classic terminal manager into a full-fledged, enterprise-grade mesh network and traffic forwarding platform with a responsive Web UI Dashboard, cluster synchronization, multi-protocol forwarding tunnels, and security hardening.
✨ What's New in v2.1.0
💻 Modern Web UI Dashboard
- Real-Time Mesh Topology: Live visibility into EasyTier connected peers, latency badges, route cost, and real-time RX/TX traffic.
- Node Highlight: The current local node is clearly identified and pinned at the top of the cluster list.
- Streamlined Node Config: Clutter-free configuration segmented into 4 sub-tabs (Identity, Transport & Protocol, Invite & Peers, and Danger Zone).
- In-Mesh Speedtest (iperf3): End-to-end TCP throughput benchmarking and UDP jitter/packet loss analysis across the encrypted mesh.
- Interactive Ping Diagnostics: Real-time multi-packet latency measurements directly between mesh nodes.
- Cyber Aesthetic & Mobile Drawer: 5 themes (Cyber Cyan, Emerald Matrix, Neon Purple, Amber Gold, Midnight Blue), mobile navigation drawer, and full English / Persian (RTL) localization.
🛡️ 4 Port Forwarding Tunnel Backends
- HAProxy Tunnels: High-throughput TCP proxying with connection pooling and health checks.
- Realm Tunnels: Ultra-lightweight Rust forwarding engine for TCP and UDP.
- GOST v3 Tunnels: Flexible multi-protocol user-space forwarding.
- iptables Kernel Forwarding: Linux kernel-level DNAT + MASQUERADE for lowest latency on UDP applications (e.g. Hysteria2, WireGuard).
- Supports single ports, comma-separated lists, and port ranges (
8000-8020).
⚡ Cluster SafeSync (Inter-Node Synchronization)
- Sync mesh configuration updates across all nodes in the cluster simultaneously.
- 90-Second Safety Watchdog: Automatically reverts to the last known-good configuration backup if a configuration change interrupts node communication.
- HMAC-SHA256 authenticated inter-node control channel.
🔒 Hardened Security & Authentication
- One-Click Instant Login: Generate temporary CLI tokens (
sudo xraymesh token) for instant browser access without typing passwords. - Address Bar Sanitization: Tokens are immediately scrubbed from browser URL history upon login.
- Brute-Force Rate Limiter: Protects web login with strict attempt limiting (HTTP 429) per IP.
- Secure Cookie Flag: Dynamically appends
; Secureto session cookies when HTTPS/SSL is active. - UFW Firewall Auto-Allow: Detects active UFW firewalls and automatically opens required web and mesh communication ports.
📥 Quick Install & Update
Run the following command on any Debian or Ubuntu server:
bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/XRayMesh/main/xraymesh.sh)To update existing nodes:
xraymesh update📦 Legacy CLI-Only Version (v1.x)
For users who prefer a minimal, terminal-only manager without the Web UI daemon or background services, the legacy release is permanently available:
- Release: XRayMesh v1.7.0
- Install:
bash <(curl -fsSL https://raw.githubusercontent.com/Erfan-XRay/XRayMesh/v1.7.0/xraymesh.sh)
Developed by ErfanXRay.