Troubleshooting & FAQ¶
Common issues, debugging tips, and frequently asked questions.
Installation Issues¶
Installer fails with "Go version too old"¶
VortexUI requires Go 1.26+.
# Remove old Go
sudo rm -rf /usr/local/go
# Install Go 1.26
wget https://go.dev/dl/go1.26.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.26.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/bin
go version # verify
Database connection failed¶
# Check PostgreSQL is running
systemctl status postgresql
# Verify connection
psql -U vortex -d vortexui -h localhost
# Check connection string in .env
echo $VORTEX_DB_URL
Port 8080 already in use¶
Docker containers won't start¶
# Check logs
docker compose logs
# Verify .env is complete
cat .env
# Rebuild
docker compose down
docker compose up -d --force-recreate
Login Issues¶
Can't login after installation¶
# Reset admin password
vortexui admin reset-password admin
# Or create new admin
vortexui admin create --username admin2 --password newpass --sudo
"Invalid token" after restart¶
The JWT secret may have changed. Ensure VORTEX_JWT_SECRET is stable in .env.
2FA locked out¶
Use a recovery code, or reset via CLI:
Session expires too quickly¶
Increase session TTL in Settings → Security or:
Node Issues¶
Node shows "Offline"¶
Checklist:
-
Network reachable?
-
Agent running?
-
Port open?
-
Check agent logs:
-
Firewall allows the port?
Config push fails¶
# Check agent logs for the error
journalctl -u vortex-node -n 100
# Verify core binary exists
which xray # or sing-box
# Restart agent
systemctl restart vortex-node
mTLS certificate errors¶
Certificates may have expired or mismatched. Re-enroll the node:
- Delete node from panel
- Re-add via enrollment wizard
- Run new install command on node
High node latency¶
Connection Issues¶
Users can't connect¶
Checklist:
-
Inbound port open on node?
-
User not expired/limited?
-
Check user status in panel
-
Protocol settings correct?
-
Verify in client app
-
Firewall on node?
Subscription URL returns 404¶
- User has at least one inbound assigned?
- User not expired or suspended?
- Domain resolves to panel?
Slow speeds¶
- Check node bandwidth/load
- Enable BBR on node
- Try different transport (WS vs gRPC)
- Check for ISP throttling → use TLS Tricks
Reality connection fails¶
- Verify dest domain is reachable from node
- Check SNI matches server_names
- Ensure short IDs are configured
- Use Reality Scanner for better SNI
Performance Issues¶
Panel is slow¶
-
Check database performance:
-
Increase DB pool:
-
Ensure Redis is running:
-
Check disk I/O:
High memory usage¶
- Set retention policy for old traffic data
- Configure Redis maxmemory
- Check for memory leaks in logs
Database growing too fast¶
Add retention policy:
Certificate / HTTPS Issues¶
ACME certificate not issuing¶
1.3.0+
- Verify Cloudflare token has DNS edit permission
- Check domain is in Cloudflare
- Review ACME events in Audit Log
- Check logs:
Certificate expired¶
With auto-renewal, this shouldn't happen. If it does:
Frequently Asked Questions¶
General¶
Q: What's the difference between VortexUI and 3x-ui/Marzban?
A: VortexUI is user-centric (one identity across all nodes), supports dual cores (Xray + sing-box), has push-based traffic (not polling), and includes a full reseller platform, federation, and anti-censorship suite. See comparison.
Q: Can I migrate from 3x-ui or Marzban?
A: Yes. Use Users → Import to migrate from 3x-ui database or Marzban export.
Q: Does it support IPv6?
A: Yes, both panel and nodes support IPv6.
Q: How many nodes can one panel manage?
A: Dozens comfortably. For hundreds, use federation.
Cores & Protocols¶
Q: Xray or sing-box — which should I use?
A: Xray for VLESS+Reality (most common). sing-box for Hysteria2, TUIC, WireGuard. You can mix cores across nodes.
Q: What's the best protocol for censorship resistance?
A: VLESS + Reality is the gold standard. For lossy networks, Hysteria2.
Q: Can one user use multiple protocols?
A: Yes! That's the user-centric model. One user, all assigned inbounds.
Reseller Platform¶
Q: How do reseller wallets work?
A: Resellers have credits (traffic + user). Credits are consumed as they create users or users consume traffic. See Plans & Payments.
Q: Can resellers have their own branding?
A: Yes, full whitelabel — logo, colors, portal branding. See Settings → Branding.
Q: Can resellers create sub-resellers?
A: Yes, with inherited scope (can't exceed parent's limits).
Security¶
Q: Is 2FA required?
A: Not required by default, but strongly recommended for sudo. Can be enforced in settings.
Q: How does probing protection work?
A: It detects active GFW/TSPU probes and can block, honeypot, or log them. See Security.
Q: What is account-sharing guard?
A: It monitors concurrent IPs per user and can warn, limit, or disconnect on sharing detection.
Backup & Recovery¶
Q: How often should I backup?
A: Daily minimum. Auto-backup to Telegram + S3 recommended.
Q: Can I restore to a different server?
A: Yes. Install VortexUI on new host, then vortexui restore backup.sql.gz.
Updates¶
Q: Will updates break my setup?
A: Migrations run automatically and are backward-compatible. Always backup before major updates.
Q: How do I update from 1.2.x to 1.3.x?
A: See the Changelog and migration notes. Generally vortexui update handles it.
Getting Help¶
Self-Diagnosis¶
Logs¶
# Panel
journalctl -u vortexui -f
# Node
journalctl -u vortex-node -f
# Docker
docker compose logs -f
Debug Mode¶
Community Support¶
Reporting Bugs¶
Include:
1. VortexUI version (vortexui version)
2. OS and architecture
3. Relevant logs
4. Steps to reproduce
5. Output of vortexui doctor