BPB Panel: A Cloudflare Worker GUI for VLESS, Trojan, and Warp Subscriptions
A GUI Panel providing Worker subscriptions for VLESS, Trojan and Warp configs alongside a private DoH server and chain proxies, offering full DNS, clean IP, Fragment, Warp, Warp pro and routing settings for cross-platform clients using Amnezia, Wireguard, Sing-box, Clash/Mihomo and Xray cores.
At a glance
- What is it?
- BPB Panel is a TypeScript GUI that runs on Cloudflare Workers and Pages to generate VLESS, Trojan, and Warp subscriptions with a private DoH server, routing rules, and chain proxies. It is a practical tool for users in censored networks, but it carries real limits around UDP and daily request quotas.
- Who is it for?
- Adopt BPB Panel if you need a free, self-hosted subscription manager on Cloudflare Workers or Pages, especially for VLESS, Trojan, and Warp with a private DoH and routing controls. Avoid it if you require reliable UDP transport or expect to serve more than a few users per worker, given the 100K daily request cap.
- Can I use it commercially?
- Yes, with conditions. GPL-3.0 is a copyleft licence: if you distribute software that includes it, you must release that software's source code under the same licence. Running it internally without distributing it does not trigger that obligation.
- Is it still maintained?
- Yes. The repository last received commits 117 days ago.
- What is it written in?
- Mainly TypeScript, according to GitHub's language statistics.
Answers come from the project's GitHub data, last synced on November 13, 2026, and from our analysis. They are not legal advice.
Star history
- bia-pain-bache/BPB-Worker-Panel13,886 ★ · +1,124
| Repository | 2026-07-28 | 2026-11-13 |
|---|---|---|
| bia-pain-bache/BPB-Worker-Panel | 12.8k | 13.9k |
1,124 Stars in the last 108 days, measured from the daily GitHub snapshot. Compare with other projects
Editorial analysis
What BPB Panel Actually Solves
BPB Panel addresses a specific pain: generating and managing proxy subscriptions for VLESS, Trojan, and Warp when you are behind an ISP that blocks domains or Warp services. Instead of hand-editing client configs, you deploy a GUI panel to Cloudflare Workers or Pages. The panel produces subscription links that clients like v2rayNG, Sing-box, Clash Meta, and AmneziaVPN can consume. The target user is someone with basic Cloudflare knowledge who wants a private, free proxy setup without paying for a VPS. The README stresses free and private, meaning no server cost beyond Cloudflare's free tier, and the panel is password-protected for authentication. This is not a general-purpose VPN; it is a configuration factory tailored to Cloudflare's edge network.
How the Panel Generates Subscriptions
The core mechanism is a Worker script that acts as an endpoint. The panel exposes a web interface where you set parameters like protocols, ports, clean IPs, DNS servers, and Warp endpoints. Based on those settings, it generates subscription URLs for different client cores. The README lists VLESS, Trojan, and Wireguard (Warp) as supported protocols. It also includes a private DoH server, which is a DNS-over-HTTPS endpoint that you can customize to point to an underlying DNS server. The routing rules are comprehensive: bypassing Iran, China, and Russia, blocking QUIC, porn, ads, malware, phishing, and bypassing sanctions. There is also a chain proxy feature that lets you add an upstream proxy (VLESS, Trojan, Shadowsocks, socks, or http) to fix your IP.
Deployment via BPB Wizard and Configuration Keys
Getting started is via the BPB Wizard, a separate project that automates deployment. The README links to installation methods, configuration, usage, and FAQ pages on the project site. It mentions Workers and Pages deployments in a few seconds using the wizard. For configuration, the panel supports setting clean IPs-domains, proxy IPs, DNS servers, choosing ports and protocols, Warp endpoints, and more. There is no explicit command-line install in the README; it is a web-based wizard. After deployment, you access the panel, set a password, and configure your preferences. The subscription links are then generated for clients. The README does not list specific config keys; it links a Configuration page on the project site. The wizard is the primary path, which lowers the barrier but also means you depend on that tool's maintenance.
Client Compatibility and Feature Gaps
The supported clients table is a key decision factor. It lists v2rayNG, MahsaNG, v2rayN, Streisand, Sing-box, husi, Clash Meta, Clash Verge Rev, FLClash, Wireguard, AmneziaVPN, and WG Tunnel. Fragment support is available on the first six clients but not on Clash Meta, Clash Verge Rev, FLClash, Wireguard, AmneziaVPN, or WG Tunnel. Warp Pro support is available on v2rayNG, MahsaNG, v2rayN, Streisand, Clash Meta, Clash Verge Rev, FLClash, AmneziaVPN, and WG Tunnel, but not on Sing-box, husi, or Wireguard. This is a real limitation: if you want both Fragment and Warp Pro, you cannot use Sing-box or husi. The table also shows minimum versions, so older clients may not work. The README does not explain why these gaps exist, but it likely relates to protocol extensions that each core implements differently. Users must match their client version to the feature set, which adds friction.
Known Limitations: UDP and Daily Request Quota
The README is explicit about two limitations. First, UDP transport for VLESS and Trojan on Workers does not handle properly, so it is disabled by default. This affects features like Telegram video calls, and UDP DNS is unsupported. DoH is enabled by default for enhanced security. Second, each Worker supports 100K requests per day for VLESS and Trojan, which the README says is suitable for 2-3 users. Warp configs are limitless, meaning they do not count against that quota. This is a hard constraint: if you plan to share with more than a few people, you will hit the cap. The UDP issue is inherent to Cloudflare Workers, not a bug in the panel. Users who need reliable UDP should look elsewhere.
Maintenance, License, and Upgrade Cost
The project is under GPL-3.0, which means any derivative work must also be open source under the same license. This is a consideration for commercial use. The repository is actively maintained, with the latest release v5.1.1 pushed on 2026-07-19. The release history shows frequent updates: v5.1.0 and v5.0.0 in the same month. This suggests a high maintenance cadence, which is good for bug fixes but also means you need to track releases to stay current. The README does not describe a migration or upgrade path, so test an update in a separate Worker first. The dependency on the BPB Wizard for deployment is another maintenance point; if that tool breaks, you may need to manually edit the Worker script.
Alternatives and When BPB Panel Is the Wrong Tool
A real alternative is the Cloudflare workers/pages VLESS and Trojan proxy script by yonggekkk, which BPB Panel thanks in its README. BPB Panel's difference is the full panel and subscription generation. BPB Panel is the wrong tool if you need UDP support, if you are on a free Worker with heavy usage, or if you prefer a client-agnostic setup without the panel's opinionated routing. Another alternative is to run a VPS with Xray directly, but that costs money and requires server administration. BPB Panel's value is the zero-cost Cloudflare edge, but that comes with the quota and UDP trade-offs.
Editorial conclusion
Adopt BPB Panel if you need a free, self-hosted subscription manager on Cloudflare Workers or Pages, especially for VLESS, Trojan, and Warp with a private DoH and routing controls. Avoid it if you require reliable UDP transport or expect to serve more than a few users per worker, given the 100K daily request cap. Before deploying, verify your Cloudflare account's Worker limits and test that your chosen client supports the features you need, since Fragment and Warp Pro support vary by client. Confirm that the GPL-3.0 license fits your use case, and be ready to update the panel regularly as Cloudflare's platform changes.
Frequently asked questions
How many people can share one BPB Worker Panel deployment?
Two or three, by the project's own sizing: each worker supports 100K requests per day for VLESS and Trojan, and limitless Warp configs are offered separately. What the documentation does not say is what the worker does once that count is spent.
Can BPB Worker Panel handle Telegram video calls over VLESS or Trojan?
No. VLESS and Trojan on workers do not handle UDP properly, so UDP is disabled by default and UDP DNS is unsupported, with Telegram video calls named as an affected feature. DoH is on by default instead, which moves DNS lookups to the panel's own resolver.
Which BPB Worker Panel clients get Fragment and which get Warp Pro?
Fragment works in v2rayNG, MahsaNG, v2rayN, Streisand, Sing-box and husi. Warp Pro works in v2rayNG, MahsaNG, v2rayN, Streisand, Clash Meta, Clash Verge Rev, FLClash, AmneziaVPN and WG Tunnel. Wireguard supports neither, and the table leaves the minimum version blank for the Clash, Wireguard, AmneziaVPN and WG Tunnel rows.
Official sources
Add this badge to your README
If you maintain this project, the badge below links readers to this analysis and shows its maintenance status from the daily GitHub snapshot. Paste the markdown into your README; add ?metric=license or ?metric=stars to the image URL for a different field.
[](https://hysenlabs.com/projects/bia-pain-bache-bpb-worker-panel)Star history chart for your README
[](https://hysenlabs.com/projects/bia-pain-bache-bpb-worker-panel)Was this useful?