**Your own censorship-resistant proxy with a full admin panel, on a single Cloudflare Worker.**
VLESS, Trojan, Shadowsocks, gRPC, XHTTP over WebSocket + TLS, with a bilingual panel
(English + فارسی), per-ISP clean-IP optimization, multi-user accounts, a Telegram bot,
WARP, proxy chaining, and a Backend mode. Runs on Cloudflare's **free plan**.
[](LICENSE)
[](https://github.com/IRNova/Nova-Proxy)
[](https://github.com/IRNova/Nova-Proxy)
---
## 🌐 Links
[](https://novaproxy.online/)
[](https://t.me/irnova_proxy)
[](https://t.me/irnovaproxy_group)
[](https://www.youtube.com/@novaproxyir)
[](https://x.com/irNovaProxy)
[](https://www.instagram.com/irnova_proxy)
[](https://deploy.workers.cloudflare.com/?url=https://github.com/IRNova/Nova-Proxy)
---
## What it is
Nova Proxy is a control panel and edge worker that runs on Cloudflare Workers. You deploy it to **your own** free Cloudflare account, so the bandwidth, the domain, and the data are all yours. There is no shared server and no middleman. It is built to be a free, high-quality tool, not a reseller platform.
The panel gives you a clean dashboard (English, فارسی, and Русский) to create users, hand each person their own subscription link, and keep everyone connected on networks that actively filter traffic.
## Features
- **Multi-user management** with per-user quota, expiry, daily limits, and one private link each.
- **Resistance Policy** presets: routing tuned for Iran and other high-censorship networks (port spread, domestic bypass, ad and tracker blocking, and more), each with a plain-language on/off.
- **Nova Radar**: an in-browser scanner that finds the fastest clean Cloudflare IPs for the current network and applies them in one click, per user.
- **Universal config formats**: every user link works as Auto, Base64, or Clash, so it imports into almost any client.
- **Calls support**: optional WARP node for FaceTime, WhatsApp, and Telegram calls (UDP), plus a backend mode for full-quality routing through your own server.
- **Mixed protocol**: hand out one link that carries both VLESS and Trojan, so if a filter blocks one, the app keeps working on the other.
- **GitHub mirror failover**: publishes your subscription to a GitHub repo so users keep a permanent `raw.githubusercontent.com` link even if your domain gets filtered.
- **Telegram bot control**: manage users (add, edit, quota, expiry, extend, delete) straight from a bot, in EN, FA, or RU.
- **Node name templates**: brand every node name with a template ({FLAG} {COUNTRY} {CITY} {NAME} {DATE} and more).
- **Self-healing links**: if your worker domain changes or a host goes down, configs fall back to a working address on their own.
## Quick start
You need a free [Cloudflare](https://dash.cloudflare.com/sign-up) account.
**Option A, one-click:** use the Deploy to Cloudflare button above and follow the prompts. Cloudflare's supported deployment flow creates the Worker, the KV namespace, and the D1 database, then connects Workers Builds. You do not create or paste a Cloudflare API token into Nova.
**Option B, Telegram bot:** the installer bot [@IRNovaProxy_Bot](https://t.me/IRNovaProxy_Bot) can do the whole deployment from your phone.
**Option C, Wrangler (CLI):**
```bash
# 1. install the Cloudflare CLI
npm install -g wrangler
wrangler login
# 2. install dependencies and deploy
# Wrangler provisions and binds KV and D1 automatically.
npm ci
npm run deploy
```
After it deploys, open `https://
, and everyone who needs an open internet.
**None of your traffic is logged. The proxy is yours.**
📖 [نسخهٔ فارسی / Persian version](README.fa.md)