Synology DSM 7.2+ · x86_64 · armv8 · armv7
The official 3x-ui engine with Xray-core runs on your NAS, and its web panel becomes a native DSM app: inbounds, clients, routing and every setting in one DSM window. No Docker, no second login.
01 Inbound
Create an inbound in a form built from DSM’s own controls; anything rare stays one tab away in JSON, so nothing 3x-ui can do is out of reach.
02 Clients
Each client gets a subscription link and a QR code for v2rayNG, Hiddify, Streisand or Happ. Limits and expiry keep themselves; bulk actions handle hundreds at once.
03 Settings
Subscriptions, Telegram bot, e-mail and Discord alerts, API tokens, nodes and hosts, outbounds, WARP and routing rules — every setting of the engine is in the app, in six languages.
Made of DSM’s own components: the same lists, forms and dialogs as Control Panel. Only DSM administrators see it.
One click grants Xray port 443 and TUN through a one-time DSM Task Scheduler task. DSM asks for your password; no SSH.
The app checks ports before saving and Xray right after, so one wrong inbound never takes the others down.
Installs, updates and removes cleanly from our package source, picking the build for your NAS’s processor.
In DSM open Package Center → Settings → Package Sources → Add. Name: IBCSC, location: the address below.
https://apps.ibcsc.be/synology
The package appears under Community. Click Install; the user name and password in the wizard are optional and only for the engine’s own panel.
Open 3x-ui from the DSM main menu. For port 443 and TUN, click “Grant now…” on the Overview page.
Prefer to install by hand? Download the SPK for your NAS and use Package Center → Manual Install.
SHA-256 fingerprints and the ClamAV check are on apps.ibcsc.be.
Any Synology with DSM 7.2 or later: Intel or AMD (x86_64) and ARM (armv8, armv7) models. Package Center picks the right file.
Both can run side by side, but not on the same ports. The package uses 52053 (local only) and 52096 for subscriptions and refuses to install if they are taken. To move, download the database in your old panel and restore it in Maintenance → Backup and restore.
Third-party packages run without root rights. To let Xray use ports below 1024 and TUN, the app creates a one-time root task in Task Scheduler; DSM confirms it with your password and the task is deleted right after it has run.
The engine listens on 127.0.0.1 only, for the DSM app and the Telegram bot. You manage everything in the DSM window; nothing extra is exposed to the network.
Yes. 3x-ui is an open-source project by MHSanaei (GPL-3.0) and Xray-core is by XTLS; the DSM package and its app are made by IBCSC, the Belgian Institute for Citizen Cybersecurity.