Xray Client

1.0.0-0004

Xray client as a native Synology app: connect this NAS to a 3x-ui or any Xray server by a link or subscription — proxy for the LAN, whole NAS or LAN gateway through the tunnel, reverse access to NAS services. No Docker.

The package runs Xray-core v26.10.21 on the NAS and manages it from a DSM app: paste a server link or the subscription URL from 3x-ui, choose what goes through the tunnel, and the client keeps the connection up.

Every protocol 3x-ui offers works: VLESS with REALITY and Vision, VMess, Trojan, Shadowsocks 2022, Hysteria2 and WireGuard, over TCP, WebSocket, gRPC, XHTTP and more.

Features

Proxy

SOCKS5 and HTTP for the LAN

Browsers, Docker containers and DSM itself use the NAS as a proxy; optional user and password. No root rights needed.

Whole NAS

All the NAS’s traffic

Package Center, Download Station, updates and Docker go through the server, while the local network, incoming connections and DNS stay direct.

Gateway

The NAS as a gateway

Devices that use the NAS as their default gateway reach the internet through the server; traffic between local devices is not touched.

Reverse tunnel

Reach this NAS from outside

The server forwards chosen ports to DSM, files or a camera on this NAS without port forwarding on the router (VLESS, a separate 3x-ui client).

Servers

Links and subscriptions

Subscriptions update by themselves and keep the chosen server; delay check, connection check with the exit address.

Routing

Direct, through the server or blocked

Rules by domain, IP or subnet and geosite/geoip lists; local addresses always direct.

What’s new

Version 1.0.0-0004, 28 October 2026

First release: Xray-core v26.10.21 client as a native DSM app, connecting to a 3x-ui or Xray server by a share link or subscription.
Four modes that can be combined: SOCKS5/HTTP proxy for the LAN, the whole NAS through the tunnel, a gateway for the LAN, a reverse tunnel to NAS services.

Installation

1
Add the package source
Package Center → Settings → Package Sources → Add, with the address below. The package appears under Community.
https://apps.ibcsc.be/synology
2
Install Xray Client
Click Install. The wizard asks for a server link or subscription URL (optional) and the network interface.
3
Choose the modes
Open Xray Client from the main menu. The proxy works at once; for the whole-NAS and gateway modes click “Grant now…” on the Overview page.

Questions and answers

Which servers?

Any 3x-ui or Xray server: paste the client’s link from 3x-ui (Clients → the client → Links) or its subscription URL.

Why does DSM ask for my password?

The whole-NAS and gateway modes need a TUN interface and routes. Third-party packages run without root rights, so the app creates a one-time root task in Task Scheduler that DSM confirms with your password; it is deleted right after.

What if the server is down?

The client retries by itself. In the whole-NAS and gateway modes the routes disappear with the tunnel, so traffic falls back to the normal route instead of stopping.

Which NAS?

Any Synology with DSM 7.2 or later: Intel/AMD (x86_64) or ARM (armv8, armv7).

How do I check the downloaded file?

In Terminal, run the command below and compare the result with the SHA-256 fingerprint on the right. If a single character differs, do not open the file and write to us.

shasum -a 256 ~/Downloads/xray-client-1.0.0-0004-x86_64.spk shasum -a 256 ~/Downloads/xray-client-1.0.0-0004-armv8.spk shasum -a 256 ~/Downloads/xray-client-1.0.0-0004-armv7.spk

Version: 1.0.0-0004
Developer: IBCSC, Charleroi
Interface languages: Français, Nederlands, Deutsch, English, Русский, Español
Compatibility: DSM 7.2 or later
Architecture: x86_64, armv8, armv7
Licence: Free, no ads
SHA-256 fingerprint · x86_64: c5e2139ad073…140f5e
SHA-256 fingerprint · armv8: 7a9076be2a15…8b3889
SHA-256 fingerprint · armv7: 517e3e349f86…587a86