Enterprise-grade fleet management system for OpenVPN, WireGuard, Cisco AnyConnect, and L2TP/IPsec.
This project is a high-performance, modern Control Plane designed to manage dozens of VPN nodes, handle seamless certificate and key issuances, and provide a secure, real-time dashboard for administrators, resellers, and clients alike.
Full integration, provisioning, and management for all major VPN protocols from a single dashboard:
- OpenVPN (UDP/TCP)
- Cisco AnyConnect (Ocserv)
- WireGuard (wg1)
- L2TP/IPsec
- Xray Core (VLESS / VMess / Trojan) with auto-UUID generation & Quick Scan configs.
- Flexible Port Management: Dynamically assign ports during user provisioning.
- Port Reuse: Multiple users can share the same port simultaneously on identical protocols.
- Conflict Prevention: Built-in validation natively preventing protocol collisions (e.g., blocking OpenVPN and Wireguard sharing the same underlying port).
- Integrated SweetAlert2 for fluid, elegant, informative alerts for errors, port conflicts, and user operations.
- MySQL Support: Robust schema for MySQL 8.0+.
- Persistent Sessions: Upgraded
SECRET_KEY(JWT secret) storage for robust security preventing forced admin logouts after service restarts.
- Single & Bulk Provisioning: Create standard or multiple users instantly using the bulk generation tool.
- Granular Quotas: Set specific data limits (GB), maximum simultaneous connections (per protocol), and flexible expiration dates.
- Multi-Password Layers: Define custom, unique passwords specific to L2TP and Cisco protocols for users along with global ones.
- Live Monitoring & State: View real-time uploaded/downloaded bandwidth and instantly toggle account access capabilities (activate/deactivate).
- Easily create and categorize accounts with
Resellerroles. - Allocate and strictly limit the max number of users they can create.
- Bind overall traffic/data quotas on a per-reseller basis.
- Sub-Admins get an isolated view to safely manage only their assigned users.
- Centralized Control: Seamlessly orchestrate synchronization of users across multiple servers/nodes for all available protocols.
- Node Health Tracking: Track load scores and the online/offline status of interconnected nodes.
- Protocol Discovery: New nodes intelligently broadcast their supported protocol features allowing granular, conditional network routing.
- Subscriptions URL: Every user features a unique login link to access their portal securely.
- Smart QR Codes: Instantly scan to connect configurations for mobile clients utilizing QR technology.
- Quick Downloads: Direct download links for
.ovpnfiles and other required credentials.
- Frontend: Next.js 15 App Router, React Server Components, Tailwind CSS, styled by Lucide Icons & Framer Motion.
- Backend / API: Expressing RESTful structures inside Next.js API Routes, providing robust programmatic automation handling.
- Security: Double-hashed
bcryptpassword protection and robust JWT session cookies over HTTP-only strict endpoints.
You can set up the entire Power VPN Manager, including SSL via Let's Encrypt with auto-renewal, missing dependencies, and initial configuration prompts by running a single command:
bash <(curl -Ls https://raw.githubusercontent.com/ehsanking/Power-VPN/main/install.sh)The interactive installer will ask for your domain, email, MySQL details, and Admin credentials. It will automatically issue the SSL certificate and deploy the panel securely.
-
Clone the repository:
git clone https://github.com/ehsanking/Power-VPN.git cd Power-VPN -
Database Schema Injection: Configure
.envwith MySQL credentials, then build the tables:mysql -u root -p < schema.sql -
Run The Panel:
npm install npm run build npm start
(For production environments, utilizing PM2, Docker, or Google Cloud Run is heavily recommended).
- Author: EHSANKiNG (@ehsanking)
- Contributions: Pull requests, feature requests, and bug finding strongly encouraged!
- License: MIT
If you find this scalable architecture and real-time dashboard useful, consider keeping the project maintained by donating via Tether (USDT):
- Network: Tether (TRC20 / ERC20)
- Address:
TKPswLQqd2e73UTGJ5prxVXBVo7MTsWedU
Optimized for privacy, security, and low-latency performance worldwide.