gitmyhub

cfnew

★ 14k updated 12d ago

cfnew deploys a proxy tunnel on Cloudflare Workers or Pages supporting VLESS, Trojan, and xhttp protocols, with a browser-based management UI for configuring proxies and generating client subscription links.

Cloudflare WorkersCloudflare PagesCloudflare KVJavaScriptsetup: moderatecomplexity 3/5

cfnew is a tool that runs on Cloudflare Workers or Cloudflare Pages and sets up a proxy tunnel for routing internet traffic. It supports three network protocols: VLESS, Trojan, and xhttp. These protocols are commonly used by people who need to route their internet traffic through an intermediary server, typically to access services that may be restricted on a particular network.

The project includes a graphical management interface that appears when you navigate to a specific URL path after deployment. From there, you can configure which protocols are active, set up proxy IP addresses, run latency tests on candidate IP addresses, and generate subscription links that work with popular proxy client apps. Ten supported clients are listed, including CLASH, Surge, Sing-Box, Shadowrocket, and several others.

Configuration is stored in Cloudflare key-value storage (called KV). Changes made through the graphical interface take effect immediately without redeploying the Worker. The tool also exposes a REST API for adding and removing preferred IP addresses programmatically, if you prefer to manage things via scripts or the companion selection tool.

A latency tester is built directly into the management page. You can supply a list of IP addresses or domains, test them with up to 50 concurrent threads, and filter results by region or limit output to the fastest ten. The subscription refreshes automatically every 15 minutes to pick the best available IPs at any given time.

The interface supports both Chinese and Persian, switching automatically based on your browser language. The project builds on an earlier open-source project called edgetunnel and credits several other contributors for portions of the proxy IP logic.

Where it fits