moon5

Operational · all nodes nominal

Private, fast, censorship-resistant networking — built for builders.

moon5 is a self-hosted proxy panel running 3X-UI on Xray, fronted by Cloudflare WARP and served over Caddy. One panel, many protocols, no analytics on you.

Get connection link How it works
  • XHTTPtransport
  • RealityTLS
  • WARPegress
  • 6protocols

Built for production traffic

Six things we got right so you don't have to.

  • Multi-protocol

    VLESS, VMess, Trojan, Shadowsocks-2022 and Reality — all from a single panel. Pick the one that suits your network.

  • Cloudflare WARP egress

    Outbound traffic rides Cloudflare's anycast network, masking your origin and improving routes to most regions.

  • XHTTP transport

    Low-latency, stream-multiplexed transport over plain HTTP/2. Hard to fingerprint, gentle on battery.

  • Hardware-accelerated

    AES-NI, AVX2 and ARM crypto extensions on every node. Line-rate crypto, no soft bottlenecks.

  • Zero-log policy

    Minimal data retention. Ephemeral session counters only — never content, never destinations, never DNS.

  • Always-on

    Autoheal watchdog restarts anything that drops. Health checks every 10 seconds, automatic failover between routes.

Pick your protocol

One panel, six transports. Different trade-offs for different networks.

  • VLESS + XTLS-Reality

    The new default. Looks like a normal TLS handshake to censors — no certificate to manage.

  • VMess + AEAD

    Battle-tested. Still works where nothing else does, including older clients.

  • Trojan

    Classic. Mature clients on every platform, well-understood by most tooling.

  • Shadowsocks-2022

    Lightweight, fast, hard to fingerprint. The minimalist's choice.

  • XHTTP

    Stream-multiplexed transport over standard HTTP/2. Plays nicely with corporate proxies.

  • Direct (WARP)

    For low-latency routes where additional proxying isn't required.

How to connect

Four steps. Most clients auto-configure from a subscription URL.

  1. Install a client

    Pick whatever you already trust: v2rayN, v2rayNG, Shadowrocket, Clash Verge, NekoBox, Sing-box.

  2. Get your subscription link

    The panel issues a per-account subscription URL after approval. Yours is unique — keep it private.

  3. Paste it into your client

    Clients import the full node list from a single URL — no copy-paste gymnastics.

    https://moon5.moonlightentry.space/sub/<your-subscription-token>

    The exact URL is provided by the panel and is unique to your account. Don't share it.

  4. Connect

    Pick a node, hit connect. First handshake takes a second; subsequent ones are warm.

By the numbers

Current capacity and recent operational metrics.

50 Gbps
aggregate capacity
<40 ms
median round-trip latency
99.99%
uptime, last 90 days
6
protocols supported

Frequently asked

Short, honest answers. If yours isn't here, ask.

Is this a VPN?

Technically, no. moon5 is a proxy network using the Xray core, which speaks VLESS / VMess / Trojan / Shadowsocks-2022 — not classic VPN protocols like WireGuard or OpenVPN. In practice it works the same way for most users, but the routing and transport are different.

Do you keep logs?

Minimal and ephemeral. We retain aggregate session counters (bytes transferred, duration) for accounting and rate-limiting, and rotate them on a short schedule. We do not record content, destinations, DNS queries, or source IPs after the session ends. We have nothing to hand over because we keep nothing useful.

What countries do you exit from?

Outbound traffic currently exits via Cloudflare's anycast network, which gives you a Cloudflare-edge IP in most major regions. Direct egress from specific countries can be arranged for team accounts — ask.

Why Cloudflare WARP instead of direct egress?

Two reasons. First, Cloudflare's anycast makes the origin hard to pinpoint and the routes faster for most users. Second, it's cheap and resilient — fewer moving parts to break at 2 a.m.

Can I bring my own domain?

Yes, for team plans. You point a CNAME at our edge and we issue a Reality-compatible certificate for it. Self-serve domain bring-up is on the roadmap.

How do I get an account?

Request access by emailing hello@moonlightentry.space. Accounts are approved manually to keep the network capacity honest. First-time replies usually take under a day.

Ready to route around the noise?

Onboarding is small and personal. Tell us how you'd use it.

Request access