CompassVPN: Scalable, Self-Hosted, Open-Source VPN Solution.

Deploy your VPN server easily using a simple Web Panel for configuration.

• Start with a single command.
• Configure all settings via a user-friendly Web Panel
• Automatic SSL certificate generation using ZeroSSL or Let’s Encrypt
• Integrated Cloudflare DNS management to automatically manage DNS records.
• Direct & CDN Options: Select direct or Cloudflare CDN configurations via the panel.

Protect your server and network traffic with multiple layers of security features.

• Automatic blocking: Torrents, Iranian websites, Ads, Malware, Phishing (using curated blocklists)
• Configuration self-testing via Xray-Knife
• Fail2ban integration to prevent brute-force attacks and bad requests
• Automated UFW firewall configuration
• NGINX webserver enhances security and resource efficiency

Gain insights into performance and usage through comprehensive metrics collection.

• Centralized monitoring via Grafana Cloud or self-hosted Prometheus/Pushgateway
• Real-time connection statistics
• Host system resource monitoring (CPU, memory, traffic, …)
• User metrics: Track approximate unique active users and blocked junk traffic requests

Easily scale your VPN infrastructure horizontally.

• Effortlessly replicate agent instances using Docker for rapid capacity expansion.
• Stateless agent design simplifies horizontal scaling behind standard load balancers for high availability.
• Centralized monitoring via the Manager component handles metrics from numerous agents seamlessly.

Optimize bandwidth usage and connection routing for better performance.

• NGINX web server improves connection handling efficiency
• Monitor blocked traffic requests to understand bandwidth savings
• Flexible Custom DNS options (Default, Cloudflare, ControlD, or custom DoU/DoT/DoH/DoQ)
• Choose between Direct or WARP outbound connections

Utilize modern protocols and flexible connection options.

• WARP and Direct outbound connection choices
• WireGuard integration for WARP outbound connections with automatic fallback
• Supports multiple VLESS inbound protocols (TCP / HTTPUpgrade(WS) / QUIC)
• Automatic configuration rotation based on a defined interval