Doprax

3x-ui or Marzban? People argue features, but those barely differ.

Both run on Xray-core, both do VLESS and Reality, both give you a dashboard, traffic stats, and a Telegram bot.

The real question is: how many users are you serving?

One server and a handful of users, run 3x-ui. It's a single Go binary, light on memory, up in minutes, and simple enough that you won't fight it.

Many users, or servers in more than one location, run Marzban. Real database, full API, and one panel that controls multiple nodes, so a user connects through any of them on the same subscription link.

That's the whole decision. Small and simple, 3x-ui. Large and multi-server, Marzban.
Full breakdown, including where 3x-ui starts to strain and why: https://www.doprax.com/blog/3x-ui-or-marzban-pick-by-how-many-servers-you-run

Psiphon Conduit can be super helpful when you need reliable access to the open web. The nodes are run by volunteers and they can keep thousands of users connected simultaneously.

Each node is just a VPS running a Docker container, forwarding encrypted packets.
Here's how to run one on a ProVM:

https://www.doprax.com/docs/run-a-psiphon-conduit-node-on-a-doprax-provm

Doprax pinned a photo

We’ve launched the ProVM Turbo tier! ⚡️

3Gbps port speed, advanced 2026 CPU and high speed RAM / disk.

You can spin up a more powerful ProVM now via your Doprax dashboard:

https://www.doprax.com/v/virtual-machines

We’re always working on improving our systems and your experience. The most valuable feedback comes from our users, so we want to know what you think. What’s missing, what would you like to improve?

Take a look at our anonymous survey (you can reply in any language): https://docs.google.com/forms/d/e/1FAIpQLScSlPQl7Agr-NsnoUP9UqQefi9IN7jxxl_u1jro3LbVy9guEQ/viewform

It’s official: Hetzner prices are up to 36% higher now. The good news: ProVM prices remain the same, so now is a good time to switch to ProVM.

Read more here: https://www.doprax.com/blog/hetzner-just-raised-prices-by-up-to-36-provm-didnt

PS: We’re currently syncing our system against the new Hetzner prices, so for a short time you won’t see “Hetzner” in the list of providers when creating a new VM. Updates coming up!

MikroTik is now on ProVM.

You can deploy a full MikroTik Cloud Hosted Router (CHR) on a Doprax VM in under a minute. Same RouterOS you'd run on a physical MikroTik box, running in the cloud.

What you can do with it:

→ Firewall for your cloud servers
→ VPN server (WireGuard, OpenVPN, L2TP, IPsec)
→ Bandwidth management and traffic shaping
→ HTTP proxy with domain filtering
→ Route traffic between sites

Pick MikroTik as the image source when you create a ProVM. Version 7.17, available now.

One thing to know: CHR's free license caps speed at 1 Mbps. Grab the 60-day trial or a P1 license from your MikroTik.com account to unlock full throughput. We'll have a setup guide up shortly.

Full guide: https://www.doprax.com/docs/how-to-deploy-a-mikrotik-cloud-hosted-router-on-a-doprax-vm

Hetzner is increasing their prices starting June 15. They’ve not published any numbers yet. Keep an eye on your Doprax dashboard, and we’ll bring you the latest news when we have them.

What’s going on & what you should do before June 15: https://www.doprax.com/blog/hetzner-is-changing-their-server-lineup-increasing-the-prices

In many cases having the “best” VPN (like VLESS + REALITY) won’t save you from being flagged or blocked. Which means the real skill is flexibility: portable config, more than one node, a clean IP you can spin up in under a minute.

Full breakdown, plus what a resilient setup actually looks like:
https://www.doprax.com/blog/why-one-vpn-protocol-isnt-enough

GitHub breach. Same crew as last week's npm worm.

GitHub confirmed unauthorized access to its internal repositories. A poisoned VS Code extension on an employee device, ~3,800 internal repos exfiltrated. No evidence yet of impact to customer enterprises, organizations, or repos.

Attribution: TeamPCP. The same group behind the Mini Shai-Hulud npm worm that hit TanStack, UiPath, Mistral AI, and 165+ other packages on May 11.

If you run code on a Doprax VM and use GitHub:
→ Rotate GitHub PATs, OAuth tokens, Actions secrets
→ Audit VS Code extensions installed on your dev machines
→ Review recent repo activity for anything you didn't push

GitHub rotated its critical secrets overnight. Downstream systems should follow.
Two TeamPCP attacks in nine days, both targeting developer tooling. The pattern is clear: registries, extensions, CI runners. Treat each install like the privileged operation it is.

npm supply-chain worm hits 169+ packages.

The Mini Shai-Hulud worm (TeamPCP) compromised TanStack Router, UiPath, Mistral AI, Guardrails AI, and 165+ other npm packages. 373 malicious versions.
It hijacks CI/CD via GitHub Actions cache poisoning, steals credentials, and installs a daemon polling GitHub every 60s. If the daemon sees a revoked token, it runs rm -rf ~/. Cleanup order matters.

Running Node.js on a Doprax VM:
1. npm ls | grep -E '@tanstack|@uipath|@mistralai|guardrails'
2. npm audit
3. If hit: stop gh-token-monitor BEFORE rotating tokens
4. Wipe node_modules, reinstall with --ignore-scripts
5. Rotate every credential that touched the VM

Prevention: pnpm 11 defaults (minimumReleaseAge: 1440, blockExoticSubdeps, no install scripts) would have blocked this.
Isolated VMs keep the blast radius at one machine. Core Doprax is unaffected.

Full guide: https://www.doprax.com/blog/an-npm-worm-is-spreading-heres-what-to-do-if-you-run-node-on-doprax

Doprax pinned a video

Did you know that you can easily create a Doprax app for your phone? Useful if you want to check in on your deployments every now and then.

🍏 For iPhone (Safari):
• Open Safari and go to doprax.com.
• Tap the Share icon (the square with an up arrow at the bottom).
• Scroll down and select "Add to Home Screen."
• Name it "Doprax" and tap Add.

🤖 For Android (Chrome):
• Open Chrome and head to doprax.com.
• Tap the three dots (⋮) in the top right corner.
• Select "Install app" or "Add to Home screen."
• Confirm by tapping Install/Add.

We’re now offering Google Cloud!

Which means: you can have the power of one of the largest fiber networks in the world, but without the complexity. Deploy AI agents, scale up as high as you want, be local everywhere (43 new locations).

Request early access via the Doprax dashboard:
https://www.doprax.com/v/virtual-machines/new

The 4 Tiers of VPNs:

🟢 Tier 1 — Easy to identify
WireGuard, OpenVPN/UDP, IKEv2, L2TP. Fast and simple, but have clear packet signatures. Fine on most networks, first to get filtered where traffic gets inspected.

🟡 Tier 2 — TLS-wrapped, still fingerprintable
OpenVPN/TCP, SOCKS proxies. Looks like HTTPS at a glance, but the handshakes have quirks that distinguish them from real browsers.

🟠 Tier 3 — Camouflaged as web traffic
Shadowsocks, OpenConnect, OpenVPN+XOR, SoftEther. Blends in well against simple inspection. More advanced detection (entropy analysis, active probing) can still spot them.

🔴 Tier 4 — Indistinguishable from web traffic
v2ray, VLESS, wstunnel, Cloak. Not VPNs themselves — mimicry layers you bolt onto a tunnel. Cloak even serves a real "donor" website to anyone probing your server 🎭

The takeaway: run more than one. WireGuard for speed, a Tier 3/4 stack as a fallback.

Read more 👉 https://www.doprax.com/blog/self-hosted-vpns-how-they-work-and-why-the-protocol-you-choose-matters

Doprax v2 is here.

New infrastructure. New billing. New container platform. Expanded VM catalogue. GPU options. Better everything under the hood.

And for existing users: we're wiping the slate clean! General amnesty on all old billing issues & debt when you migrate.

New system. Fresh start.

More details dropping soon.

The “Great Repatriation” and the “Sovereign Stack”

Around 2023/2024 companies started realizing that hosting their stuff on big names like AWS or Google is getting expensive.

That’s how the "Great Repatriation" began.

We can compare cloud giants like AWS to a hotel. Very convenient, because someone else handled the cleaning, the plumbing, and the security.

But the hotel slowly raised its rates. They started charging for every person you brought into your room (per-seat pricing) and every time you carried a bag through the lobby (egress fees).

Eventually, the hotel bills became higher than a mortgage.

People started moving out of those high-prices hotels, and moving into their own homes.

You don’t have to keep renting a hotel room.

The Sovereign Stack is the act of building your own house on your own land. Or, if you don’t want to buy a piece of land, you can always park your tiny home on our soil ;)

As some of you may have noticed, Hetzner had an outage yesterday. Our ProVM tier remained fully operational, successfully managing a 20% traffic peak.

The graph shows an interesting correlation: ProVM traffic increased at the exact same time Hetzner’s services went down.

Coming Soon: to help you secure your uptime, we are building an automatic migration tool to move your Hetzner instances to ProVM with a single click. Stay tuned for the dashboard update.

همان‌طور که برخی از شما احتمالاً متوجه شده‌اید، Hetzner دیروز دچار قطعی شد. در مقابل، سرویس ProVM ما کاملاً پایدار باقی ماند و با موفقیت اوج ترافیک ۲۰٪ را مدیریت کرد.
نمودار زیر یک ارتباط یا وابستگی جالب را نشان می‌دهد: دقیقاً هم‌زمان با از کار افتادن سرویس‌های Hetzner، ترافیک ProVM افزایش پیدا کرد.
به‌ زودی برای کمک به حفظ پایداری سرویس های شما، در حال توسعه یک ابزار ارتقای خودکار هستیم تا بتوانید سرورهای Hetzner خود را تنها با یک کلیک به ProVM منتقل کنید.
داشبورد خود را زیر نظر داشته باشید — به‌زودی در دسترس خواهد بود.

We’re adding new features. One of them is the new status page. Now you can check whether the services are running, so you’re always informed about what’s going on:

ما داریم قابلیت‌های جدیدی به پلتفرم اضافه می‌کنیم
یکی از مهم‌ترینشون صفحه وضعیت (Status Page) جدیده.
از این به بعد می‌تونید به‌راحتی بررسی کنید که سرویس‌ها در چه وضعیتی هستن و همیشه در جریان اتفاقات باشید. ✨
ساده، شفاف و همیشه در دسترس.

https://status.doprax.com/

When we first started Doprax, our goal was simple: make the cloud easy. We wanted a world where you could deploy an app or a server without needing a PhD in Linux.

But as we’ve grown, we’ve realized that ease of use is only half the battle.

Relying on external cloud infrastructure often means inheriting their downsides (like outdated hardware and restrictive traffic limits). We decided there are some things you shouldn’t have to compromise on.

That’s how ProVM was born.

Read the full story here: https://www.doprax.com/blog/why-we-built-provm