Simple Bridge Panel Offers Self-Hosted Management for Xray and AmneziaWG Connections
A developer tired of unreliable mass-market VPN services and the growing administrative burden of managing multiple personal VPS instances has created Simple Bridge Panel (SBP), a self-hosted web interface for controlling Xray and AmneziaWG connections.
After years of renting individual servers to avoid shared-IP fraud scoring by systems such as Scamalytics, the author found that manual configuration files multiplied quickly once family members and friends requested access. The resulting tool, also playfully called Suspiciously Big Pizza, installs on a fresh Ubuntu 24.04 amd64 server and centralizes deployment, user management, and traffic accounting behind a single interface.
Supported connection types
SBP currently offers three primary protocols. Xray TCP uses VLESS over TCP with REALITY and XTLS Vision on port 443. Xray XHTTP runs in a separate container and has demonstrated higher throughput in the author’s tests. AmneziaWG provides a stable UDP-based WireGuard-compatible tunnel using amneziawg-go inside Docker. Additional whitelist-bypass routes based on work by kulikov0 are also supported for networks that filter UDP.
The interface displays groups, devices, server status, component health, and traffic statistics on a single screen. Each group can be assigned an expiration date; when the date passes, the panel automatically adjusts the corresponding container configurations and routing rules.
Architecture and security considerations
The application is split into an unprivileged web frontend and a local agent that executes only pre-approved operations over a Unix socket. State is stored in SQLite, and runtime changes to Xray are applied via its API rather than container restarts. Update verification includes SHA-256 checks and automatic rollback if the new version fails health checks. Historical logs and traffic archives are deliberately minimized; only the current calendar month’s data is retained.
The project is limited to clean Ubuntu 24.04 installations to reduce the chance of conflicting with existing Docker setups, sysctl rules, or third-party containers. Source code is available under the Apache 2.0 license at the official GitHub repository.
Related articles
Avito Details Security Gates Implementation to Enforce Vulnerability Remediation Without Disrupting Developers
Alexander Trifanov, head of Application Security at Avito, shares a detailed case study on building security gates that block risky deployments while preserving developer experience. The approach relies on asynchronous scanning pipelines using SAST, SCA, secret detection, and YAML Security tools aggregated in ASOC or SOAR systems. Gates are placed at multiple lifecycle points including pre-receive hooks, CI/CD deployment stages, and manual unit-level overrides via a red-button mechanism. Strict false-positive management, deduplication, and emergency bypass controls are highlighted as essential for scalability across thousands of developers. The article covers pre-receive gating limited to ten-second scans, separate library update flows, and Kubernetes integration attempts with Kyverno. Avito reports that even unused red-button capabilities significantly improve SLA compliance without frequent enforcement actions.
SafeTech Lab Expands SafeTech CA with CDM Module for Automated Certificate Delivery and Renewal
SafeTech Lab has released a new module called CDM (Certificate Delivery Management) for its SafeTech CA platform. The update allows the certificate authority to not only issue digital certificates but also deliver them to endpoints, install them in required stores, and automatically renew them before expiration. Administrators can now manage agents centrally, eliminating the need for custom scripts or separate heavy PKI solutions. The system supports GOST algorithms and operates independently of domain infrastructure, functioning in isolated network segments without LDAP. Additional improvements include root and subordinate CA certificate rotation without breaking trust chains, web-based configuration management, and integration with HashiCorp Vault for centralized credential storage and rotation. Future plans focus on increasing agent autonomy through the web interface.
InfotecsTech Builds Custom Kubernetes-Based Traffic Generator for NGFW RnD and Performance Testing
InfotecsTech developed an in-house traffic generator to support development and testing of its high-performance NGFW cluster in active-active mode. The team rejected commercial solutions from IXIA and Xinertel due to high cost, insufficient flexibility for complex NGFW functions, and geopolitical restrictions. The resulting platform runs on Kubernetes with a master node managing Registry, Discovery, and Crux components while worker nodes host containerized generators. Supported generators include Cisco TRex for throughput and connection testing, SIPp for VoIP scenarios, pyftpdlib-based FTP generator, Yandex Tank with Nginx for live TLS traffic, and Selenium-based legitimate clients against OWASP Juice Shop. Practical scenarios cover VoIP call storms, maximum concurrent connections, 400 Gbit/s UDP throughput, 5 million CPS, and IMIX traffic at 300 Gbit/s with packet loss analysis. The system integrates Camunda for full automation of test scenarios and device configuration.
Why AI Chatbots Misread Polished Reports and How to Prepare AI-Ready Content
Beautifully designed reports often confuse AI systems because visual layout does not preserve logical relationships between elements. When design is stripped away, machines may lose connections between headings, numbers, tables, and footnotes, leading to incorrect interpretations of key facts such as revenue growth. The solution is to create AI Ready content that maintains structure, semantics, and context even after text extraction or copying. This approach aligns closely with web accessibility standards from W3C and benefits both human readers using assistive technologies and automated analysis tools. Organizations are advised to use tagged PDFs following PDF/UA and ISO 14289-2:2024, provide data in XLSX or CSV alongside visual charts, and ensure every important figure travels with its full context including period, unit, and comparison base. The same principles apply to presentations, press releases, websites, and multimedia content.