Learning center

Video Tutorials

Step-by-step video guides

Learn HTTP Tweak at your own pace

Choose a lesson, follow along in the focused player, and keep track of what you have completed on this device.

17Lessons
1Topics
0Completed
Lesson 16

Panel: Create & Manage Configs, Tweaks, Servers, and Client Access

Learn how to create an HTTP Tweak configuration directly from the Web Panel, add tweaks and servers, manage client access using passwords or device IDs, and share the config with your clients.

Field reference

Configuration field reference

Use these quick-reference tables when you need the exact meaning, format, or sample value for a Panel field.

Configuration Global Settings

Field Description Sample
Name The unique name for your configuration. My Premium Config
Config Key Read-only key used for cloud import. AB12CD34EF56...
Mobile Locked Config can be used only on mobile data connection. Enabled / Disabled
Block Root / Jailbreak Blocks rooted Android devices and jailbroken iPhones. Enabled / Disabled
Store Install Allow only official store installs (Google Play on Android, App Store on iPhone). Enabled / Disabled
Unlock All Transfers ownership to the importing device after import checks pass and disables the other restrictions. Enable it only when full ownership transfer is intended. Enabled / Disabled
Unlock Server Allow users to change server in the app. Enabled / Disabled
Unlock Server Credentials Allow users to edit username and password. Enabled / Disabled
Unlock Proxy Allow users to edit proxy settings. Enabled / Disabled
Unlock Payload Allow users to edit payload/SNI. Enabled / Disabled
Share Resources Expose this configuration's servers and tweaks to other configs. Enabled / Disabled
Show Shared Resources Enable this to display servers and tweaks shared by other configurations. Enabled / Disabled
Custom Resources Enable this to allow non-owner users to add local custom servers and tweaks for this configuration only. Enabled / Disabled
Allow Config Resharing When enabled, people you share this config with can export and re-share it. When disabled, recipients can use it but cannot re-share. Enabled / Disabled
Hide SSH Banner Suppress the SSH server banner shown during connection. Enabled / Disabled
Expire Date Optional date when the configuration stops working. 2025-12-31
Block Application (Android only) Android only. Not enforced on iPhone. App display names or Android package names to block, separated by new lines or semicolons. Matching is case-insensitive. WhatsApp;com.app.two
Password Import password when Cloud is off. securePass123
Cloud Password Manage passwords in the Access tab; this disables the Password field. Enabled / Disabled
Device ID Lock Restrict to specific device IDs (semicolon-separated). A1B2...;C3D4...
Cloud Device IDs Manage Device IDs in Access tab; disables Device ID Lock. Enabled / Disabled
Update URL Manual update URL when Cloud is off. config.ht
Cloud Update URL Use cloud-managed Update URL; disables manual URL. Enabled / Disabled
App Device ID Device ID allowed to edit this config. 7F3A...32CHARS
Message HTML message shown inside the app. <b>Welcome</b>

Configuration Message Placeholders

Use these tokens in the configuration Message field. The saved template stays unchanged; current values are inserted whenever the configuration is exported, downloaded, or fetched by the app.

  • [config_name] — Configuration name.
  • [created_at] — Creation date and time in YYYY-MM-DD HH:mm:ss format.
  • [created_date] — Creation date in YYYY-MM-DD format.
  • [updated_at] — Last-updated date and time in YYYY-MM-DD HH:mm:ss format.
  • [updated_date] — Last-updated date in YYYY-MM-DD format.
  • [server_count] — Number of servers included in the generated configuration.
  • [tweak_count] — Number of tweaks included in the generated configuration.
  • [server_list] — Server names in alphabetical order, separated by commas.
  • [tweak_list] — Tweak names in alphabetical order, separated by commas.

Placeholders are case-sensitive. Unknown placeholders remain unchanged. Empty server or tweak lists resolve to an empty string.

Example saved message 
Last updated: [updated_at]
Servers ([server_count]): [server_list]
Tweaks ([tweak_count]): [tweak_list]

The date and time and the alphabetically ordered resource names are refreshed in the generated message without a worker rewriting the saved template.

Server Settings

Common Fields
Field Description Sample
Name Label for the server. SG Premium 1
Tunnel Type Protocol used for connection. OpenVPN, SSH, DNSTT, UDP Hysteria, V2Ray
Category Used to match tweaks and servers, aside from the tunnel type. WS, CF, GCP, Free, Paid, etc.
Note Optional note for your reference. Singapore backup
OpenVPN Specific
Field Description Sample
Type Connection mode. OpenVPN TCP or OpenVPN UDP
Username and Password OpenVPN account credentials. username:password
SSL Port TLS port for OpenVPN. 443
OpenVPN Config Full OpenVPN configuration. remote host1;host2
Private key Optional private key. serverprivatekeyad
SSH Specific
Field Description Sample
Hosts, Port, Username and Password SSH host list and credentials. host1;host2:port@username:password
IPv6 Host Format Wrap each IPv6 host in brackets, then add the shared port like normal host:port. [ipv6:1];[ipv6:2];[ipv6:3]:port
SSL Port TLS port for SSH. 443
Private key Optional private key. -----BEGIN PRIVATE KEY-----...
V2Ray Specific
Field Description Sample
Type V2Ray mode. Default, VLESS, VMess, Hysteria2, Socks, HTTP, Shadowsocks, Trojan, WireGuard
V2Ray Configuration Full JSON configuration or V2Ray URI. vmess://... or {"outbounds": [...]}
DNSTT (Server)
Field Description Sample
Nameserver, Username and Password DNS servers and credentials. ns1;ns2@username:password
DNSTT Public Key Public key for the server. 1234abcd...
UDP Hysteria Specific
Field Description Sample
Server and Authentication Auth may be used alone or followed by OBFS. Separate multiple hosts with semicolons before the shared port. hy.example.com:443@my-auth
hy1.example.com;hy2.example.com:443@my-auth:my-obfs
Upload:Download Single bandwidth field using Upload:Download format. 100:100
ALPN Optional. Blank by default. h3
Port Hopping Interval Optional seconds value. Blank values use the app fallback of 10. 10
Allow Insecure Certificate-verification setting, enabled by default. true

Tweak Settings

Common Fields
Field Description Sample
Name Label for the network tweak. Globe No Load
Tunnel Type Matches the server protocol. OVPN/SSH, V2Ray, DNSTT, UDP Hysteria
Category Used to match tweaks and servers, aside from the tunnel type. WS, CF, GCP, Free, Paid, etc.
Note Optional note for your reference. No load payload
OpenVPN / SSH Payloads
Field Description Sample
Type Sub-protocol for the payload. UDP hides the advanced payload fields. OpenVPN TCP & SSH, OpenVPN TCP, OpenVPN UDP, SSH
Payload HTTP Injection Payload. GET / HTTP/1.1[crlf]Host: example.com...
SNI Server Name Indication (SSL/TLS). m.facebook.com
TLS Version TLS version used with SNI. TLSv1.2
Proxy Remote proxy list with optional auth. proxy1;proxy2:port@username:password
V2Ray Specific
Field Description Sample
Type V2Ray mode for tweaks. Default, VLESS, VMess, Hysteria2, Socks, HTTP, Shadowsocks, Trojan, WireGuard
Bug Host Replaces the [bughost] placeholder in the server config with the host entered here. bughost1;bughost2
DNSTT (Tweak)
Field Description Sample
DNSTT Resolver DNS Resolver IPs. 8.8.8.8;1.1.1.1
Payload Optional payload for DNSTT. GET / HTTP/1.1[crlf]Host: example.com...
UDP Hysteria Specific
Field Description Sample
SNI Optional Hysteria1 SNI. It supports [host], [ip], [ssh_host], [rlb], [bughost], [cf], their uppercase forms, and the existing extended host aliases, and follows Unlock Payload protection. [proxy] is not supported. hy.example.com or [host]

Payload Placeholders

Placeholder Description Example
[host] Replaced with the selected server host. Host: [host] -> Host: sg1.example.com
[proxy] Replaced with the selected proxy host. CONNECT [proxy] -> CONNECT 10.10.10.10
[bughost] Replaced with the tweak's Bug Host value (V2Ray tweaks). Host: [bughost] -> Host: bug.example.com
[host_port] Replaced with the selected server host and port. CONNECT [host_port] -> CONNECT sg1.example.com:443
[crlf] Inserts a line break (carriage return + line feed) in the payload. GET / HTTP/1.1[crlf]Host: [host][crlf][crlf]
[ua] Replaced with the request User-Agent. User-Agent: [ua]

OpenVPN/SSH SNI supports [host] and [proxy], which are converted to the selected server host and the tweak's Proxy host at runtime. UDP Hysteria SNI supports all host-valued TunnelUtils forms—including [host], [ip], [ssh_host], [rlb], [bughost], and [cf] in lowercase or uppercase—plus the existing extended host aliases. They resolve to the selected Hysteria endpoint host inside the native core. It does not support [proxy].

Proxy can use [host] to automatically reuse the server host without hardcoding it.