3x-ui
3.11.0-00113x-ui as a native Synology app: an Xray-core server (VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria…) managed from a DSM window — inbounds, clients, subscriptions, Telegram bot. No Docker.
The package runs the official 3x-ui v3.11.0 engine with Xray-core v26.10.21 on the NAS and replaces its web panel with a DSM app: every inbound, client, route and setting is in the DSM window, for DSM administrators only.
Ports below 1024 (such as 443) and TUN are granted once from the app through a DSM Task Scheduler task: DSM asks for your password, no SSH needed.
Features
Every protocol
VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria 2, TUIC, MTProto, HTTP and SOCKS; REALITY with key generation and a target check, TLS, XHTTP, gRPC, WebSocket.
Links, QR codes and subscriptions
Traffic limits, expiry, device and IP limits, groups, bulk actions; one subscription link per client with its QR code.
Outbounds and rules
Routing rules with geoip/geosite, balancers, DNS, Cloudflare WARP, outbound subscriptions and a route tester.
Bot and alerts
Telegram bot for traffic reports, logins and alerts, database backups to Telegram, alerts by e-mail and Discord.
Native DSM app
Built from DSM’s own components, in six languages; checks ports before saving so Xray never goes down on a conflict.
x86_64, armv8, armv7
One package for Intel/AMD and ARM Synology models on DSM 7.2 or later. Backup and restore move an existing 3x-ui (Docker or a server) onto the NAS.
What’s new
Version 3.11.0-0011, 28 October 2026
- The root helper no longer follows symbolic links in the package's folders (security fix).
Installation
-
1
Add the package source
Package Center → Settings → Package Sources → Add, with the address below. The package appears under Community.
https://apps.ibcsc.be/synology -
2
Install 3x-ui
Click Install. The wizard offers an optional user name and password for the engine’s own panel; leave them empty if you only use DSM.
-
3
Open it from the main menu
Open 3x-ui from the DSM main menu. For ports below 1024, click “Grant now…” on the Overview page.
Questions and answers
Does it conflict with 3x-ui in Docker?
Both can run, but not on the same ports. The package uses 52053 (local) and 52096 for subscriptions and refuses to install if they are taken; to move, download the database in the old panel and restore it in Maintenance.
Why does DSM ask for my password?
Third-party packages run without root rights. To let Xray use ports below 1024 and TUN, the app creates a one-time root task in Task Scheduler; DSM confirms it with your password and the task is deleted right after.
Is the 3x-ui panel itself still there?
The engine listens on 127.0.0.1 only, for the DSM app and the Telegram bot. Everything is managed in the DSM window.
Which NAS?
Any Synology with DSM 7.2 or later: Intel/AMD (x86_64) or ARM (armv8, armv7). Package Center picks the right file.
How do I check the downloaded file?
In Terminal, run the command below and compare the result with the SHA-256 fingerprint on the right. If a single character differs, do not open the file and write to us.
shasum -a 256 ~/Downloads/3x-ui-3.11.0-0011-x86_64.spk
shasum -a 256 ~/Downloads/3x-ui-3.11.0-0011-armv8.spk
shasum -a 256 ~/Downloads/3x-ui-3.11.0-0011-armv7.spk
- Version
- 3.11.0-0011
- Developer
- IBCSC, Charleroi
- Interface languages
- Français, Nederlands, Deutsch, English, Русский, Español
- Compatibility
- DSM 7.2 or later
- Architecture
- x86_64, armv8, armv7
- Licence
- Free, no ads
- SHA-256 fingerprint · x86_64
f25c88309730…eca5e5- SHA-256 fingerprint · armv8
2343e3fa4e4f…d120d2- SHA-256 fingerprint · armv7
d0bda3d5e907…92dd5e
No threats found.Details…
File scanned by ClamAV (1.4.6, base 28167) on 28 October 2026; SHA-256 fingerprint computed on our server.