Loading RustProxy…

Connecting to the administration panel.

The panel is taking longer than expected. Check your connection and try again.

Reload panel

CONNECTED TO LOCAL CORE

Traffic, in focus.

RAM cache

HIT / MISS / BYPASS: -
Objects / hot memory: -
Hot / transient cache RAM: -
Fill / cold queue / cold I/O: -
COLD storage / budget: -
Evicted / expired: -

HIT / MISS / BYPASS activity-

HOT RAM usage / limit-

Transient RAM usage / limit-

COLD storage usage / limit-

Process

Platform: -
CPU (100% = 1 core): -
File descriptors / limit: -
OS threads: -
Virtual memory / limit: -
Process start: -
Uptime: -
RSS total: -
HOT cache RAM / limit: -
Cache transient RAM / limit: -
Transform reserved RAM / budget: -
Active transforms / limit: -
Non-cache process RSS: -
Anonymous RSS: -
File-backed / shared RSS: -
Data address space / swap: -
cgroup RAM / limit: -

Process CPU history-

Process RSS history-

Network and responses

OS scope

RX / TX per second: -
Mean exchange duration: -
gzip / br / zstd / deflate: -

RX / TX history-

Traffic by interface-

Response time history

Vhost	Backend	Status	Active	Requests	Errors	Latency	Traffic/s	Client gen.	Gen. requests	Gen. age	Rotations	Last failure	Last recovery

No backend diagnostics yet.

Reusable access profiles can be attached to multiple vhosts. Per-vhost ACL and country rules remain active and are enforced together with the profile.

REUSABLE POLICY

ACL profiles

Profile configuration

Profile ID Display name

Choose the base policy

Start with a simple allow-list or block-list. Use custom mode only when you need mixed allow and deny rules.

Block by defaultAllow selected countries OR selected IP/CIDR ranges. Allow by defaultBlock selected countries OR selected IP/CIDR ranges. CustomControl default, country mode and every IP action manually.

Country exceptions

Use countries

Countries

IP / CIDR exceptions

Paste / import rules

IP rules — one “allow|deny CIDR” per line

Whitespace and invisible Unicode separators are normalized during import.

Effective policy

Country and IP exceptions use OR inside this profile. Explicit deny rules and blocked countries win; attached profile, vhost and location policies must still all pass.

ACME runtime Checking local Python environment…

Preparing

Certificate ID ACME contact email DNS names CA environment

Requests-Since process start

Errors--

Response bytes--

Mean latency--

BOUNDED / ASYNC

Traffic dimensions

Top lists are approximate and bounded so high-cardinality traffic cannot grow proxy memory without limit.

Methods

Status classes

Cache outcomes

Live cache activityHIT / MISS / BYPASS per second for the selected scope -

Samples

HIT 0.0/s MISS 0.0/s BYPASS 0.0/s

Hot objects--

Hot memory--

Transient cache RAM--

Cold objects--

Cold disk--

Hit ratio--

BYPASS--

Body bytes served from RAM-Domain counters since config revision

Tier moves--

Evicted / expired--

Domains and effectiveness

Show

Limits, fills and evictions are shared. Domain counters reset on configuration publication; purging objects does not reset counters.

Vhost	Domain	Hot	Cold	Hot memory	Cold disk	HIT / MISS / BYPASS	Hit ratio	Decision counters

No cache decisions yet. Send traffic to a configured host.

Stored objects

Most recently used first. Targets, cache keys and Cache-Tag values are visible to authenticated administrators; bodies and request headers are not exposed.

Vhost	Domain	Target	Cache key / tags	Tier	Body	Memory / disk	Overhead	HIT	Age	Time in RustProxy	Remaining TTL	Actions

No fresh objects in this scope. Inspect the decision counters above.

Live transformation activityApplied / cache HIT / skipped / errors per second for the selected scope -

Samples

Applied 0.0/s Cache HIT 0.0/s Skipped 0.0/s Errors 0.0/s

Transformed responses--

Transformed cache HITs-Served without running the transformer again

Bytes saved before compression--

Average reduction-For responses that changed representation

Skipped / fail-open--

Body/transport errors--

Transform RAM reservation--

Active transform slots--

Transformations by type

Type	Applied

Skip / fail-open reasons

No skipped transformations in this scope.

Vhost effectiveness

Counters are in-memory runtime diagnostics. A transformed cache HIT does not execute the transformer again.

Vhost	Applied	Cache HITs	Skipped	Errors	Saved	Reduction	Avg time

No transform activity yet.

LOCAL / READ-ONLY / BOUNDED

Stored log explorer

Search syntax

Kibana-style field search

Use field:value clauses. Clauses are joined with AND; prefix a clause with ! to exclude it. Quotes keep spaces together.

req: GET AND !country: PL status:>=500 AND path:/api/* error:"connection reset"

Merge rotations

Searches bounded RustProxy access/error logs and parses structured fields without exposing filesystem paths.

Advanced parser · repeated values

Counts matching values across the bounded scanned log set, not only the current page. Use fields such as user_agent, client_ip, host, path or any parsed nested field.

Value	Count

No repeated values for the selected field.

No records match the current search.

Security

Accounts and ACLs are global; SSL and response policies also have per-vhost controls.

Find settings

INTERFACE

Appearance

These preferences are saved for your administrator account and follow you between sessions.

INTERFACE

Interface

Theme Language Interface scale 100% Scale the entire administration interface, including dialogs and overlays, without changing browser zoom. Time format Button styleNormal uses the refreshed controls; Compact restores the smaller source-style buttons across all actions and dialog tabs. Corner roundingControls corners throughout the interface independently of the theme. Original keeps the previous geometry.

CHARTS

Chart style

TABLES / LOGS

Tables and logs density

Tables and logs densityChanges row height and log spacing independently from interface scale.

DASHBOARD

Dashboard layout

Dashboard densityControls Overview telemetry card size without changing the rest of the interface.

Stream cards are opt-in and only change Dashboard presentation, not Stream routing or monitoring.

REFRESH

Data refresh

Per-account refresh intervals. Off pauses all automatic sources; manual refresh remains available.

Automatic refresh enabled Live overview / SSE interval Traffic interval Cache interval System information interval

HTTP connections

Connection lifecycle and transport limits for HTTP/2 and HTTP/3.

HTTP/2 connections

RESTART

HTTP/2 enablement is controlled per listener. Tune idle, maximum lifetime and graceful GOAWAY drain limits here.

Rules & headers

LIVE APPLY

USER-AGENT BLOCKING

Global User-Agent blocklist

Blocks matching User-Agent values on public proxy vhosts before an upstream is opened. Per-vhost lists are configured in Vhosts → Security.

Static response transformation

LIVE APPLY

Enable transformation engine globally

Transformation happens after upstream decoding and before cache storage and client compression. Each vhost must opt in separately.

Resource preset

Presets tune the temporary memory ceiling, maximum transformable response size and global concurrent transformation limit. Content types and extension allow-lists are left unchanged.

Temporary transform memory budget (MiB)

Maximum transformable response (KiB)

Maximum concurrent transformations

JavaScript minification CSS minification HTML minification SVG optimization JSON compaction

Allowed file extensions, one per line

Cache-Control: no-transform is always respected. Transformed representations receive a new ETag and are cached before gzip, Brotli or zstd encoding.

JSON / ASYNC / BOUNDED

Structured access logging

LIVE APPLY

Live log viewing stays in memory. External sinks run on a bounded background queue and never block proxy request I/O.

Stored log explorer

Browse configured access/error files with server-side filters. File logs can be off while Live Logs continues to use its memory buffer.

Captured request dimensions

Capture User-Agent Capture country from GeoIP

Country lookup is optional and disabled by default. Enable it only when country logs/statistics are needed; country ACL/rate-limit rules still resolve GeoIP when required.

JSON file

Enabled Separate file per vhost File path Per-vhost directory

When enabled, each vhost writes to its own JSONL file. Unmatched traffic uses _unmatched.jsonl.

Logstash

Enabled TCP address

Loki

Enabled Push URL Bearer token environment variable Labels (JSON object)

Administration panel

RESTART

HTTPS allows the administration listener to bind beyond loopback. Listener and certificate changes take effect after restart.

Listen address Enable HTTPS for administration Certificate Public panel HTTPS origin (optional)

Pins the browser-facing HTTPS scheme, hostname and optional port for Origin/CSRF checks behind a trusted reverse proxy; it is not only a DNS allowlist. The hostname is automatically allowed. Restart required.

Advanced: additional allowed DNS hostnames

Additional allowed DNS hostnames

Only extra hostnames belong here. The hostname from the public panel URL is automatically included; without a public URL this remains an independent strict allowlist.

Administrator session lifetime (days)

Browser sessions use an absolute 7–30 day lifetime.

Panel content compression

Zstd Brotli (br) gzip

The browser negotiates the best supported encoding (equal quality: Zstd → Brotli → gzip). Disable all to send uncompressed panel assets. Applies immediately; a reverse proxy may forward or re-encode the response.

API tokens (RO/RW)

API token management has moved to Settings → Security.

Open API tokens in Security

System information

API

Read-only information from the authenticated system-info API. Unavailable metrics are not estimated.

Operating system and hardware

Platform-

Operating system-

Kernel-

Architecture-

Logical CPUs-

CPU usage-

RAM used / total-

System uptime-

RustProxy process

RustProxy version-

Process uptime-

Process RAM (RSS)-

Process threads-

Open file descriptors-

Statistics source-

ACME / Python environment

Versions refer to the interpreter and tools actually selected for certificate management, not an arbitrary Python installation.

ACME mode-

ACME status-

Python-

pip-

Certbot-

Managed environment-

Data locations

Data directory-

Database-

Certificate API

SCOPED TOKENS

Separate Key ID + Bearer Token credentials are reload-only by default and restricted to explicit certificate IDs. Deploy is optional; tokens cannot read configuration or use other administration APIs.

Key ID Comment Allowed certificate IDs

List one or more certificate IDs separated by commas or new lines. The token can act only on these IDs.

Also allow deploy

Leave disabled for Certbot renewal hooks. Reload-only is the recommended least-privilege mode.

Bearer token (optional custom value)

Each cleartext token is shown only after generation/rotation. RustProxy stores only its hash.

Copy this token now

External automation sends the Key ID header and Bearer token over HTTPS (or loopback HTTP). Reload tokens use the targeted /api/certificates/{id}/reload endpoint; token access cannot trigger global reload.

Security

Access stays deliberate.

Sessions, credentials and host access policies in one place.

API tokens (RO/RW)

Generate independent API tokens with read-only or read-write access, restricted to your client IP/CIDR. Existing browser login remains available. Non-loopback requests require HTTPS.

Copy the token now — it will not be displayed again

curl -H 'Authorization: Bearer $RUSTPROXY_API_TOKEN' https://panel.example.com/api/config

CURRENT SESSION

Lost access? Run rust-proxy admin reset-password locally. Existing sessions will be revoked.

Change passwordRequires the current password and signs out all sessions.

ACCESS CONTROL

Host access policies

Keep the policy list visible; open the editor only when adding or changing a rule set.

Add / replace host policyHostname scope, default action and CIDR rules.

Hostnames and aliases, comma-separated Default decision Rules: allow/deny followed by CIDR, one per line

Deny wins. Route allow never overrides host deny. The socket client IP is used.

CACHE

Active BAN rules

ID	Selector	Value	Host	Vhost	Expires	Actions

No active BAN rules.

WEBSOCKET / CONNECT

Active WebSocket / tunnels

Kill reason

ID	Client	Host	Upstream	Protocol	Duration	RX	TX	Actions

No active tunnels.

SQLITE / LAST 100 / RETAINED 10,000

Administration audit

Recent administration changes are loaded only when this window is opened.

Time	Actor	Action	Detail

No audit entries.

Live access logs

ACTIVITY

Access log

Columns

Time	Request	Host	Source IP	Vhost	Backend	Status	Duration	Cache	Outcome	Transport	WebSocket	Upstream error

No traffic yet. Open the proxy to make your first request.

Live view starts with the latest 256 completed exchanges. Increase buffer to keep accumulating live entries up to 4096 until the log window is closed.

.htaccess compatibility

This is a migration-oriented compatibility layer, not a complete Apache runtime. Supported directives are compiled into RustProxy Web Server rules.

Supported subset

RewriteEngine, RewriteBase, RewriteCond, RewriteRule, DirectoryIndex, Options +/-Indexes, AddType, AddHandler (PHP extensions), Header set/add/unset, ExpiresActive, ExpiresDefault, ExpiresByType, Require all granted/denied.

Rewrite compatibility

Rewrite conditions support REQUEST_FILENAME file tests (-f, -d, -s), REQUEST_URI, REQUEST_METHOD, QUERY_STRING, HTTP_HOST, HTTPS, DOCUMENT_ROOT, THE_REQUEST and HTTP headers. Flags: L, END, R, R=301/302/307/308, QSA, NC, F, OR. PT/NE are accepted as no-ops. E= is accepted as a compatibility no-op because request HTTP headers already reach PHP-FPM.

RewriteEngine On
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]

PHP-FPM

.htaccess may add PHP extensions with AddHandler, but the PHP-FPM endpoint, timeouts and concurrency remain controlled by the Web Service PHP-FPM tab. Apache SetHandler proxy socket syntax is intentionally not accepted.

Loading and limits

Files are read and compiled on Validate, save and apply. RustProxy does not parse .htaccess per request. Re-apply after changing a file. The scan is bounded to 128 files, depth 16, 128 KiB per file and 1 MiB total.

Not Apache-complete

ErrorDocument, SetEnvIf, Redirect/RedirectMatch and FallbackResource are not implemented in this compatibility layer. General Files/FilesMatch, unsupported authentication/authorization directives, non-PHP handlers and SetHandler are rejected even when Strict mode is off because silently ignoring them could weaken access control or expose source. .htaccess/.htpasswd files are always blocked from HTTP delivery. Other unsupported non-security directives are logged and ignored unless Strict mode is enabled.

Vhost/location ACL, authentication, error pages and response rules still remain authoritative. .htaccess cannot escape the document root, select an arbitrary FastCGI socket or override protected framing headers.

PHP-FPM / FastCGI configuration

The same fields and syntax apply to a local Web Service PHP configuration and a reusable PHP-FPM profile. A selected profile overrides local PHP fields for all attached services. RustProxy connects to an already running PHP-FPM pool.

Enabling PHP and PATH_INFO

Enables execution of configured PHP extensions via the PHP-FPM socket. The pool must already be running; RustProxy does not start PHP. Other files remain static.

Allows /static.php/skins/file.css to run the existing static.php script with PATH_INFO=/skins/file.css. Needed by Roundcube static.php routes; usually not required for WordPress. Off by default.

Passes the incoming Authorization header to PHP as HTTP_AUTHORIZATION. Enable for API/Bearer/Basic authentication; disable if the application does not need it.

Endpoint syntax

unix:/run/php/php_wordpress.sock
tcp:127.0.0.1:9000
tcp:[::1]:9000

Use unix: for the full local socket path or tcp: plus a literal loopback IP and port. Hostnames and non-loopback TCP are rejected. The RustProxy user must be allowed to connect to the socket. Separate pools when PHP INI security settings differ.

Execution and size limits

PHP extensions: comma-separated names such as php, phtml (no leading dots). Connect timeout: 1000 ms = 1 second. Full FastCGI request timeout: 30000 ms = 30 seconds. Concurrent requests: 64 (returns 503 when exhausted). Request body: 67108864 bytes = 64 MiB; 0 means unlimited by RustProxy. Response headers: 65536 bytes. STDERR: 4096 bytes; 0 disables capture. All numeric fields require integers; PHP INI limits are separate.

Custom FastCGI parameters

APP_ENV = production
APP_DEBUG = 0
TENANT = main

Put these in Custom FastCGI parameters only. One NAME = value per line; names start with A-Z and then contain A-Z, 0-9 or underscore (max 64 characters). Values are static, up to 8192 bytes each; no placeholders are expanded. Do not use SCRIPT_FILENAME, HTTP_* or PHP_VALUE/PHP_ADMIN_VALUE here.

PHP_VALUE — regular php.ini overrides

memory_limit = 256M
upload_max_filesize = 64M
post_max_size = 64M
max_execution_time = 30
error_reporting = E_ALL
log_errors = On
display_errors = Off
date.timezone = Europe/Warsaw

Enter these in PHP INI overrides (PHP_VALUE), not in FastCGI parameters. Use one directive = value per line (php.ini notation, no [section] headers or PHP tags). Exact support depends on which directives PHP-FPM permits to change. Common sizes use M/G, booleans On/Off and times seconds. Do not duplicate a directive in PHP_ADMIN_VALUE.

PHP_ADMIN_VALUE — administrator-only overrides

open_basedir = /var/www/webmail/:/tmp/:/usr/lib/php/
display_errors = Off
log_errors = On

Put these in PHP administrator INI overrides (PHP_ADMIN_VALUE). open_basedir lists allowed directories separated by ':' on Unix. Set it to paths of THAT application; do not reuse Roundcube restrictions in a WordPress pool. For security-sensitive values, prefer php_admin_value[...] in the configuration of a dedicated PHP-FPM pool. Shared FPM workers can retain request-supplied INI settings.

Storage, validation and troubleshooting

Each INI name may contain letters, digits, '.', '_' and '-' (up to 64 bytes); a value must be nonempty (up to 8192 bytes). Max 64 custom FastCGI entries and 64 INI overrides per map, with a total 128 KiB budget. No control characters or multi-line values. Values are saved in normal configuration: never place secrets there unless that storage is acceptable. A syntax-valid directive can still be rejected/ignored by PHP itself.

Critical: per-service PHP_VALUE/PHP_ADMIN_VALUE do NOT isolate applications when they share one PHP-FPM worker pool. Use different Unix sockets and restart the pools after moving WordPress and Roundcube apart. PATH_INFO does not fix open_basedir isolation.

Visual field builder

CONFIGURABLE JSON

Select source fields and optionally rename their JSON keys. Changes are written to the advanced JSON mapping when applied.

Fields

Enabled	Source field	Output JSON key

Loading RustProxy…

Your traffic.Your control.

Sign in

Traffic, in focus.

RAM cache

Process

Network and responses

Backends

Virtual hosts

Web Services

Docker vhosts

Redirect hosts

404 hosts

Streams

ACL profiles

Profile configuration

Traffic dimensions

Methods

Status classes

Cache outcomes

Top countries

Top User-Agents

Top client IPs

Top paths

Top routes

Methods

Status classes

Cache outcomes

Traffic volume

Domains and effectiveness

Stored objects

Transformations by type

Skip / fail-open reasons

Vhost effectiveness

Stored log explorer

Advanced parser · repeated values

Appearance

Interface

Chart style

Tables and logs density

Dashboard layout

Data refresh

Public listeners

HTTP connections

HTTP/2 connections

HTTP/3 / QUIC

Docker agents

Rules & headers

Global User-Agent blocklist

Global custom headers

Response to client

Request to backend

Client response

Diagnostic headers

Streaming compression

Cache

Memory sizing

Request collapsing

Stale-if-error policy

Proactive refresh

COLD policy preset

Static asset cache boost

HTTP BAN / PURGE IP allowlist

Static response transformation

Resource preset

Client identity / forwarding

Default responses

Structured access logging

Stored log explorer

Captured request dimensions

JSON file

Logstash

Loki

Configurable JSON format

Error file

Prometheus bearer token

Administration panel

Panel content compression

API tokens (RO/RW)

System information

Your traffic.
Your control.