pdnczone / hashem-panel

# Hashem Panel 🇮🇷 ↔ 🌍
**A hub-and-spoke tunnel manager: GRE Layer-3 + FRP / Backhaul reverse relay, with a web dashboard, health model, watchdog and safe updates.**
*Keep the real servers hidden — expose foreign-server ports through the public IP of your Iran server.*
🇬🇧 English | 🇮🇷 فارسی
🌐 Website · ✈️ Telegram · ▶️ YouTube · *DNC MADE THIS*
---
## Table of contents
- What's new in v2.5.0
- What is Hashem?
- Why Hashem?
- Features
- Architecture
- Requirements
- Quick install
- Choosing an engine
- Panel tour
- Tunnel types
- Cluster
- Health model
- Automation
- Updates, downgrade and channels
- `hashem` CLI
- Troubleshooting
- Uninstall and your data
- Known limitations
- Documentation map
- Security notes
- Contributing
- License
---
## What's new in v2.5.0
- 🕸️ **Cluster: no single point of failure.** One Iran port served by several foreign servers (failover, balance, sticky per user, lowest latency, least connections), a one-second health check plus a **service check through the tunnel** (catches a dead xray behind a live tunnel), standby servers and connection limits, drain for maintenance, manual failback. Several Iran servers can share the same foreign servers, Iran hubs back each other up, and DNS failover (Cloudflare or any provider by webhook) keeps a domain on the working hubs. Everything runs in the kernel: no speed loss, the real client IP is kept, and a panel restart drops nothing.
- 🗺️ **Cluster map.** A live picture of the whole cluster. Line thickness is each server's share of traffic and color is its health. Click any server, pool, line, hub or DNS to change it in place.
- 🧪 **Path test before any tunnel.** Benchmark tab: every transport between your two servers (TCP/UDP, GRE, SSH, FRP x 5, Backhaul x 7) with latency and speed, so you know what gets through before you build anything.
- 🧩 **Every tunnel in Setup.** GRE + FRP, Backhaul (with or without GRE, now one engine with UDP support) and Bagher, all from the same Setup and Tunnel tabs. Old "Modified Backhaul" tunnels move in by themselves.
- 🔁 **Back to GRE by itself.** A foreign server that fell back to the hub's public IP returns to GRE once GRE carries the tunnel again.
- 💻 **`hashem` is a terminal app** with arrow-key menus that follow the panel tabs; everything the panel does works from SSH too (TLS, settings, cluster, performance).
- ⚙️ **FRP options where they apply:** PROXY protocol (v1/v2), bandwidth limit per port, health check, TCP multiplexing; Backhaul connection pool. Let's Encrypt in Settings fixed.
- 🔐 **Hashem Pro** now covers Cluster, Path Test, Backhaul setup, Diagnostics, Performance, Watchdog and Benchmark. Every existing Pro key opens all of them, and running tunnels are never taken away.
Full list: CHANGELOG. Cluster: guide · how it works and tutorial.
---
## What is Hashem?
Hashem is a tunnel manager made of two parts:
- **The installer / CLI** — `hashem.sh` (installed as `hashem`). It sets up GRE, FRP and Backhaul services with systemd.
- **The pa