Release v5.0.0

🎉 BPB Next Generation

This version can only be deployed using ONE-CLICK online BPB Wizard and you can UPDATE and DELETE your panel from panel itself!
Please note that the wizard worker gets deployed only from Wizard Github repository directly for your safety.
Wizard gives you a PRIVATE LINK after first installation and this link is a ONE-CLICK wizard.
Also manual deployment and BPB Wizard client deployments do not work on this release.

💡 Improvements

• An admin dashboard is added to panel in order to monitor your request usage, UPDATE panel to the latest version, permanently DELETE panel, reset password and set Telegram Bot.
• UPDATE panel checks latest releases in background and gets enabled whenever there's a new stable release.
• Telegram Bot is now implemented, you can get subscriptions, single configs and monitor your account request usage. It also warns about usage by passing 80% threshold, PR #1313
• Now you can add Custom Domain to your panel from Common settings, dashboard setup is no longer needed. Also Custom Domain configs will be merged into your subscriptions with D tag so you don't need to login panel with domain and get another subscription.
• All fixed variables like VLESS UUID, Trojan Password, Subscription - Panel path, DoH URL, Proxy IPs, Nat64 Prefixes, Fallback domain... can now be updated from panel. There's no Environment Variables in your Cloudflare dashboard anymore.

Tip

BPB is not using Cloudflare D1 for this fixed variables due to D1 delay overhead and another infrastrucure inconsistencies. All of them are hardcoded into script.

• Panel login now requires your Cloudflare Email as username. This will address security concerns like #1348
• All Panel, Subscriptions and related URLs are ceiled by a compulsory SECURE PATH to maintain more security.

Caution

You cannot reach your panel by just adding /panel to your worker domain anymore. The new entry is like https://xxxx.workers.dev/SECURE_PATH/panel, which the path is a random generated secure path by wizard. You can change it in panel later if you wish, panel will redirect you to new URL.
So please don't forget to save your panel URL after online wizard finished the job.

• Underlying DoH is added to common settings which is used as your panel DNS over HTTPS underlying server.
• Fallback behaviour is now throwing 404 by default. You can set Fallback Domain in Common settings section.
• single Proxy IP test is added to related page.
• The Panel UI has been improved a lot and removed dark/light mode.
• Solid Data validations execute in backend from now on.
• Implemented Toasts and message boxes instead of alerts in panel.
• The whole project is restructured for maintainability purposes.
• Updated default Warp accounts.
• Fixed Typos in doc #1349
• Fixed HTML embedings in script #1344
• And lots of another subtle bug fixes and improvements...

First time contributors: @javadSharifi @gbcwror @doublepleat

Caution

Please update whatever client you use, specially these ones:

Client	Minimum version	Fragment support	Warp Pro support
v2rayNG	2.2.3	✔️	✔️
MahsaNG	16	✔️	✔️
v2rayN	7.22.5	✔️	✔️
Sing-box	1.12.0	✔️	❌
Streisand	1.6.71	✔️	✔️

---

💡 Other tips

Caution

You have to enable Hev TUN feature in v2rayNG in order to connect properly, Xray native Tun is useless right now.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass Iran firewall.

Release v4.2.3

💡 Bug fixes & Improvements

• Bug fix, WorkerLess configs are working again. Recommended Fragment settings are Packet: 1-1 and Mode: Severe #1305
• Adapted sing-box new DNS features.

Caution

Please update whatever client you use, specially these ones:

Client	Minimum version	Fragment support	Warp Pro support
v2rayNG	2.2.3	✔️	✔️
MahsaNG	16	✔️	✔️
v2rayN	7.22.5	✔️	✔️
Sing-box	1.12.0	✔️	❌
Streisand	1.6.71	✔️	✔️

---

💡 Other tips

Caution

You have to enable Hev TUN feature in v2rayNG in order to connect properly, Xray native Tun is useless right now.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass Iran firewall.

Release v4.2.2

💡 Bug fixes & Improvements

• Fixed Cloudflare worker compatibility issue. Please select the latest compatibility date in dashboard if you have manually changed it before.
• External Raw Configs: You can add desired subscriptions and URL configs and BPB fetches all configs and integrate them into Raw subscription.
• Upstream TCP Proxy: adds a TLS config to Normal and Raw subscriptions which can be used with upstream proxies like SNI Spoof. It can be IPv4:Port, [IPv6]:Port or Domain:Port.
• Implemented FinalMask feature of Xray core. Please update your clients to the latest version to support this.
• Update Xray UDP Noise and added Array mode, you should enter numbers between 0-255 like 1,100,23,18... in this field.
• Removed allowInsecure from Xray core configs.
• Fixed hourly releases.
• Fixed undefined appeared in subscriptions links and Warp regestration. #1270 #1291
• Fixed My IP section.
• Updated packages and docs.
• Improved error handling.

Caution

1- No further actions are required if you create a new panel, however it's highly recommended to reset panel settings and update subscriptions if you are upgrading to this version.
2- Please update whatever client you use, specially these ones:

Client	Minimum version	Fragment support	Warp Pro support
v2rayNG	2.2.3	✔️	✔️
MahsaNG	16	✔️	✔️
v2rayN	7.22.5	✔️	✔️
Sing-box	1.12.0	✔️	❌
Streisand	1.6.71	✔️	✔️

---

💡 Other tips

Caution

You have to enable Hev TUN feature in v2rayNG in order to connect properly, Xray native Tun is useless right now.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass Iran firewall.

Release v4.2.1

💡 Bug fixes & Improvements

• Fixed Cloudflare worker compatibility issue. Please select the latest compatibility date in dashboard if you have manually changed it before.
• External Raw Configs: You can add desired subscriptions and URL configs and BPB fetches all configs and integrate them into Raw subscription.
• Upstream TCP Proxy: adds a TLS config to Normal and Raw subscriptions which can be used with upstream proxies like SNI Spoof. It can be IPv4:Port, [IPv6]:Port or Domain:Port.
• Implemented FinalMask feature of Xray core. Please update your clients to the latest version to support this.
• Update Xray UDP Noise and added Array mode, you should enter numbers between 0-255 like 1,100,23,18... in this field.
• Fixed hourly releases.
• Fixed undefined appeared in subscriptions links and Warp regestration. #1270 #1291
• Fixed My IP section.
• Updated packages and docs.
• Improved error handling.

---

💡 Other tips

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Caution

You have to enable Hev TUN feature in v2rayNG in order to connect properly, Xray native Tun is useless right now.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass Iran firewall.

Release v4.2.0

💡 Bug fixes & Improvements

• Fixed Cloudflare worker compatibility issue. Please select the latest compatibility date in dashboard if you have manually changed it before.
• External Raw Configs: You can add desired subscriptions and URL configs and BPB fetches all configs and integrate them into Raw subscription.
• Upstream TCP Proxy: adds a TLS config to Normal and Raw subscriptions which can be used with upstream proxies like SNI Spoof. It can be IPv4:Port, [IPv6]:Port or Domain:Port.
• Implemented FinalMask feature of Xray core. Please update your clients to the latest version to support this.
• Update Xray UDP Noise and added Array mode, you should enter numbers between 0-255 like 1,100,23,18... in this field.
• Fixed hourly releases.
• Fixed undefined appeared in subscriptions links and Warp regestration. #1270
• Fixed My IP section.
• Updated packages and docs.

---

💡 Other tips

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Caution

You have to enable Hev TUN feature in v2rayNG in order to connect properly, Xray native Tun is useless right now.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass Iran firewall.

Release v4.1.3

💡 Bug fixes & Improvements

• Due to nslookup issue for querying proxy IPs, the built-in proxy IPs list is now implemented and is accessible under /proxy-ip or by clicking provided shortcut in panel which lists Country, City and ISP. #1185

• Fixed ECH config query. Be aware that ECH config query is delegated to Core DNS module (Local DNS) now, so this DNS server should be locally available. Optional ECH Server Name is also added. #1190

Caution

Please note that ECH Server Name option is available in Xray for a while, however sing-box supports this feature from 1.13.0 and Clash supports it from v1.19.20. If you leave it empty, it uses your worker domain to query ECH config which works on all cores' stable versions right now. Also if you enter a Cloudflare domain, it should have ECH enabled on it, otherwise it won't work. To check this, visit here and resolve your desired domain, you should see an ech value in Answer field.

Caution

ECH is still unstable in IRAN.

Tip

ECH applies only to Normal subscription, not Fragment.

• Fixed ECH Server Name bug #1224
• Fixed ECH query DNS if local DNS is set to localhost
• Fixed some typos, PR #1191
• Reverted back URL configs to panel as Raw subscription. None of panel settings apply to these configs as you know and also they consume more worker requests than Normal configs and won't perform as others. They're not recommended to use and connections issues will not be supported anymore, please use Normal configs instead.

Caution

You have to manually set DoH as remote DNS in your clients and disable MUX to use Raw configs.

---

💡 Other tips

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass IR-GFW.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Release v4.1.2

💡 Bug fixes & Improvements

• Due to nslookup issue for querying proxy IPs, the built-in proxy IPs list is now implemented and is accessible under /proxy-ip or by clicking provided shortcut in panel which lists Country, City and ISP. #1185

• Fixed ECH config query. Be aware that ECH config query is delegated to Core DNS module (Local DNS) now, so this DNS server should be locally available. Optional ECH Server Name is also added. #1190

Caution

Please note that ECH Server Name option is available in Xray for a while, however sing-box supports this feature from 1.13.0 and Clash supports it from v1.19.20. If you leave it empty, it uses your worker domain to query ECH config which works on all cores' stable versions right now. Also if you enter a Cloudflare domain, it should have ECH enabled on it, otherwise it won't work. To check this, visit here and resolve your desired domain, you should see an ech value in Answer field.

Caution

ECH is still unstable in IRAN.

Tip

ECH applies only to Normal subscription, not Fragment.

• Fixed ECH Server Name bug #1224
• Fixed ECH query DNS if local DNS is set to localhost
• Fixed some typos, PR #1191

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass IR-GFW.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Release v4.1.1

💡 Bug fixes & Improvements

• Due to nslookup issue for querying proxy IPs, the built-in proxy IPs list is now implemented and is accessible under /proxy-ip or by clicking provided shortcut in panel which lists Country, City and ISP. #1185

• Fixed ECH config query. Be aware that ECH config query is delegated to Core DNS module (Local DNS) now, so this DNS server should be locally available. Optional ECH Server Name is also added. #1190

Caution

Please note that ECH Server Name option is available in Xray for a while, however sing-box supports this feature from 1.13.0 and Clash supports it from v1.19.20. If you leave it empty, it uses your worker domain to query ECH config which works on all cores' stable versions right now.

Caution

ECH is still unstable in IRAN.

Tip

ECH applies only to Normal subscription, not Fragment.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass IR-GFW.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Release v4.1.0

💡 Improvements

⚙️ Cloudflare ECH

ECH option is added to BPB Panel now for all cores. Please note that this is not so helpful in Iran regarding tests, successfully connects but gets banned after a while on some ISPs. This option can be more helpful in other countries.

Tip

ECH applies only to Normal subscription, not Fragment.

Tip

BPB queries ECH config within worker and does not delegate ECH config query to client core which is an advantage (core query may fail due to DNS query failure or blocked domains). So there's no extra settings, you can just enable ECH from panel and use it.

⚙️ BPB DoH

As most of famous public DoH servers are blocked by firewalls, we can use domain fronting to successfully use them. BPB DoH only supports RFC 8484 standard DoH servers which typically are in https://domain/dns-query format. For example Google has two types of DoH https://dns.google/dns-query which is RFC 8484 and https://dns.google/resolve which is JSON API. BPB only supports the first type.
To change underlying DoH you can set an environment variable named DOH_URL in worker settings and set your desired DoH.

Caution

Avoid using BPB DoH for remote DNS, otherwise you will waste your worker requests. It's better be use in browsers or DoH based clients like Intra, Rethink...

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass IR-GFW.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.

Release v4.0.2

⚙️ Cloudflare ECH

ECH option is added to BPB Panel now for all cores. Please note that this is not so helpful in Iran regarding tests, successfully connects but gets banned after a while on some ISPs. This option can be more helpful in other countries.

Tip

ECH applies only to Normal subscription, not Fragment.

Tip

BPB queries ECH config within worker and does not delegate ECH config query to client core which is an advantage (core query may fail due to DNS query failure or blocked domains). So there's no extra settings, you can just enable ECH from panel and use it.

Note

These days Fragment on some ISPs stopped working in Iran, you can change Fragment packet to 1-1 instead of tlshello and test, also you can try to change Fragment mode to bypass IR-GFW.

Caution

If you are upgrading from versions below 3.5.1 to 4, you should get subscriptions from panel again.

Caution

sing-box client version should be 1.12.0 or higher.

Caution

Xray clients should be updated to the latest version i.e. v2rayNG, v2rayN and Streisand.