Analysis updated 2026-05-18
Deploy an xray proxy server with Cloudflare CDN in front of it, on a low-memory or NAT-restricted server.
Manage vless, trojan, or vmess protocol settings and generate a subscription link from the command line.
Update Cloudflare's Origin Rules after a NAT port mapping changes, without restarting the proxy.
Cleanly uninstall the setup and restore Cloudflare's original DNS, SSL, and security settings.
| byjoey/xray-cf-lite | goatstarter/goat-fable | zx41r/awesome-reverse-engineering-and-malware-analysis | |
|---|---|---|---|
| Stars | 58 | 57 | 59 |
| Language | Shell | Shell | Shell |
| Setup difficulty | moderate | easy | easy |
| Complexity | 3/5 | 3/5 | 1/5 |
| Audience | ops devops | developer | researcher |
Figures from each repo's GitHub metadata at analysis time.
Requires a domain on Cloudflare and a Global API Key, plus root access on a Linux server.
xray-cf-lite is a single Bash script that sets up an xray-core proxy server behind Cloudflare, without needing a web-based control panel. It is aimed at small, low-resource servers, including machines with as little as 256MB of memory, NAT setups where a server sits behind port mapping, and lightweight environments like Alpine Linux containers. You run it by piping a single curl command straight into Bash, and it registers a short command called x so you can rerun it later, always pulling the latest version from GitHub rather than keeping a local copy. The script detects whether your system uses systemd or OpenRC as its service manager and sets up the xray process accordingly, including automatic restart if the process crashes. During setup it walks you through picking a domain already managed through Cloudflare, entering your Cloudflare account email and Global API Key, and choosing which proxy protocols to enable: vless, trojan, or vmess. It automatically configures Cloudflare DNS records, SSL settings, and Origin Rules so that traffic reaches the right port on your server, and it temporarily turns off Cloudflare protections like Bot Fight Mode during setup, restoring them afterward. The menu also supports checking your current subscription link, changing settings like the UUID or WebSocket path, viewing the current configuration, updating an external port after a NAT mapping changes without restarting the service, and fully uninstalling, which reverts all Cloudflare settings and removes local credential and state files. Cloudflare credentials are stored only on the server itself and are not sent anywhere else. Only one deployment is supported per server at a time, so reinstalling requires uninstalling first. The subscription link feature relies on a companion project by the same author.
xray-cf-lite is a single Bash script that deploys an xray-core proxy behind Cloudflare on low-resource or NAT servers, without needing a separate web control panel.
Mainly Shell. The stack also includes Shell, xray-core, Cloudflare.
No license information is stated in the README.
Setup difficulty is rated moderate, with roughly 30min to a first successful run.
Mainly ops devops.
This repo across BitVibe Labs
Verify against the repo before relying on details.