What is this?
CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.
CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.Is this a standalone proxy server or just a subscription aggregator?Both: the single-file Worker/Pages script is the actual VLESS/Trojan/XHTTP proxy endpoint, and it also aggregates/generates the client subscription links and hosts the GUI panel.
Both: the single-file Worker/Pages script is the actual VLESS/Trojan/XHTTP proxy endpoint, and it also aggregates/generates the client subscription links and hosts the GUI panel.How do I deploy it?Create a Worker (or Pages project) on Cloudflare, paste in the CFNext plain or obfuscated source, set the env var U to your UUID (used both as the VLESS ID and the panel path), then open the UUID path for the panel and /sub for the subscription link.
Create a Worker (or Pages project) on Cloudflare, paste in the CFNext plain or obfuscated source, set the env var U to your UUID (used both as the VLESS ID and the panel path), then open the UUID path for the panel and /sub for the subscription link.Do I need to set up Cloudflare KV?Not strictly: without a bound KV namespace, panel settings only persist for the current session; binding a KV namespace as variable K makes your saved config persist across redeploys.
Not strictly: without a bound KV namespace, panel settings only persist for the current session; binding a KV namespace as variable K makes your saved config persist across redeploys.Will it blow through Cloudflare's free tier?CFNext monitors your Workers/Pages quota in real time and automatically shrinks the number of nodes it hands out once daily usage passes 60% of the free allowance, down to a 100-node floor at 100% usage.
CFNext monitors your Workers/Pages quota in real time and automatically shrinks the number of nodes it hands out once daily usage passes 60% of the free allowance, down to a 100-node floor at 100% usage.Who is this mainly built for?It targets users who need to get around network censorship, especially mainland Chinese users whose direct connections to services get blocked, while running everything on Cloudflare's free serverless tier.
It targets users who need to get around network censorship, especially mainland Chinese users whose direct connections to services get blocked, while running everything on Cloudflare's free serverless tier.Which proxy client apps does the subscription support?It auto-detects the client by User-Agent and serves correctly formatted configs for Clash, Sing-box, Surge, Loon, Quantumult X, V2ray, Shadowrocket, Nekoray and Stash, or you can force a format with ?format=.
It auto-detects the client by User-Agent and serves correctly formatted configs for Clash, Sing-box, Surge, Loon, Quantumult X, V2ray, Shadowrocket, Nekoray and Stash, or you can force a format with ?format=.What is the 'home broadband' (家宽) mode?It pulls the current VPN Gate OpenVPN node list and relays it as regular subscription nodes, tunneling the OpenVPN traffic through CFNext's own Cloudflare front so it stays reachable even when direct VPN Gate access is blocked.
It pulls the current VPN Gate OpenVPN node list and relays it as regular subscription nodes, tunneling the OpenVPN traffic through CFNext's own Cloudflare front so it stays reachable even when direct VPN Gate access is blocked.What does enabling ECH do?ECH encrypts the TLS handshake (hiding the SNI) for stronger anti-censorship, and automatically switches the panel into TLS-only node mode.
ECH encrypts the TLS handshake (hiding the SNI) for stronger anti-censorship, and automatically switches the panel into TLS-only node mode.Can I run VLESS, Trojan and XHTTP at the same time?Yes, each protocol has its own toggle and they can be enabled simultaneously; Trojan's password defaults to your UUID if left blank.
Yes, each protocol has its own toggle and they can be enabled simultaneously; Trojan's password defaults to your UUID if left blank.What are similar projects?Open-Box, nyx, edgetunnel, cfnew, Xray-core, back4app-vless, BPB-Worker-Panel, v2ray
Open-Box, nyx, edgetunnel, cfnew, Xray-core, back4app-vless, BPB-Worker-Panel, v2rayWhich topics is it in?obfuscation, dns-over-https, ipv6, vless, load-balancer, wireguard, trojan, socks5, v2ray, shadowsocks, tunnel, cloudflare-workers
obfuscation, dns-over-https, ipv6, vless, load-balancer, wireguard, trojan, socks5, v2ray, shadowsocks, tunnel, cloudflare-workers