3x-ui-SRM

3.11.0-0016

3x-ui on a Synology router: an Xray-core server (VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria…) managed from an SRM window — inbounds, clients, subscriptions, Telegram bot.

The package runs the official 3x-ui v3.11.0 engine with Xray-core v26.10.21 on the router and manages it from an SRM app: inbounds, clients, routing and settings, for the router’s administrators only.

On SRM the package has the rights it needs from the start: ports below 1024 and TUN need no extra step. Xray can use the router’s own certificate (Control Panel → Services → Certificate) and gets its renewals.

Features

Inbounds

Every protocol

VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria 2, TUIC, MTProto, HTTP and SOCKS; REALITY with key generation, TLS, XHTTP, gRPC, WebSocket.

Clients

Links, QR codes and subscriptions

Traffic limits, expiry, device and IP limits, groups, bulk actions; one subscription link per client.

Routing

Outbounds and rules

geoip/geosite rules, balancers, DNS, Cloudflare WARP and a route tester.

Router

Native SRM app

Built from SRM’s own components, in six languages; the engine listens on 127.0.0.1 only, for the app.

Models

RT6600ax, WRX560, RT2600ac, MR2200ac, RT1900ac

One file for ARM 64-bit and one for ARM 32-bit; Package Center picks the right one.

What’s new

Version 3.11.0-0016, 28 October 2026

First release for Synology routers (SRM 1.3): the same 3x-ui server as for DSM, as a native SRM app.

Installation

1
Add the package source
Package Center → Settings → Package Sources → Add, with the address below. In Settings → General, allow packages from “any publisher”.
https://apps.ibcsc.be/synology
2
Install 3x-ui
Click Install and choose the network interface.
3
Open it from the main menu
Open 3x-ui from the SRM main menu and create an inbound.

Questions and answers

Is the router powerful enough?

For a few clients, yes: an RT2600ac at 1.7 GHz encrypts a few tens of Mbit/s. For many clients a NAS is the better host.

Can Xray Client run on the same router?

Yes, in the proxy or gateway modes. The whole-router mode would loop this server’s REALITY checks through the tunnel.

How do I check the downloaded file?

In Terminal, run the command below and compare the result with the SHA-256 fingerprint on the right. If a single character differs, do not open the file and write to us.

shasum -a 256 ~/Downloads/3x-ui-3.11.0-0016-srm-armv8.spk shasum -a 256 ~/Downloads/3x-ui-3.11.0-0016-srm-armv7.spk

Version: 3.11.0-0016
Developer: IBCSC, Charleroi
Interface languages: Français, Nederlands, Deutsch, English, Русский, Español
Compatibility: SRM 1.3 or later
Architecture: armv8, armv7
Licence: Free, no ads
SHA-256 fingerprint · armv8: ca3cecea9486…c3423f
SHA-256 fingerprint · armv7: 9ae7f1880675…1690a4