mistgate Docs
EN

Comparison with other panels

How Mistgate compares with 3x-ui, Marzban, PasarGuard, Remnawave, Hiddify Manager and s-ui, where the others are ahead, and the sources, as checked on 2026-10-09.

On this page

This page compares Mistgate with the self-hosted panels people most often run for the same job. Every cell was checked on 2026-10-09 against the project's own README, documentation and release notes; "?" means they do not say. Projects change fast: check the sources before you decide, and open an issue when a cell is out of date.

Where Mistgate is different#

  • Nodes are added from the panel. Over SSH with a password: the panel pins the host key, checks the server, prepares an active host firewall and installs the signed agent. The other panels add a node by hand: a full panel per node, a node package or a generated compose file.
  • No Docker, no database server. Two static Go binaries, SQLite and systemd.
  • AmneziaWG is a first-class protocol. Versions 2.0 and 3.1, a separate key per device (a lost phone is revoked without touching the others), vpn:// keys for AmneziaVPN. 3x-ui also ships AmneziaWG 3.1 in userspace.
  • Checks from the client's side. The panel connects to every profile on every node the way an app does; each node runs a doctor with fixes you confirm; alerts open, close and go to Telegram.
  • Signed releases. Reproducible builds signed with an offline key; the panel and the nodes install only signed builds.
  • Hidden by default. A decoy site on the public address; the admin behind a secret path, host or listener.
  • A built-in MCP server for AI agents, with plan / apply and owner approvals.

Where the others are ahead#

  • Protocols. VMess, Trojan, Shadowsocks, TUIC and plain WireGuard are in most other panels. Mistgate has Hysteria2, VLESS (REALITY over XHTTP or TCP with Vision; TLS over XHTTP or WebSocket, direct or behind a CDN) and AmneziaWG.
  • Subscription formats. Others serve Xray JSON, sing-box, Clash, Stash or Outline. Mistgate serves a URI list, Mihomo YAML, Xray JSON, sing-box JSON and AmneziaVPN keys; not every profile fits every format, see what works where.
  • Community and maturity. 3x-ui has about 47.7k GitHub stars, s-ui about 10.0k, Hiddify Manager about 9.3k. Mistgate is a new project in early releases.
  • Device limits. 3x-ui, PasarGuard and Remnawave limit devices by HWID. Mistgate does too, and gives each device its own keys, online status and traffic, so one device can be removed or blocked without touching the others.
  • Telegram. 3x-ui, Marzban, PasarGuard and Hiddify Manager have full Telegram bots. Mistgate sends alerts; a full bot is Planned.
  • Installation. Mistgate's one-line installer verifies the signed panel manifest before installing the panel.

The full table#

Mistgate 3x-ui Marzban PasarGuard Remnawave Hiddify Manager s-ui
Backend Go Go Python, React Python, React NestJS (TypeScript) Python Go
Database SQLite SQLite or PostgreSQL SQLite, MySQL or MariaDB SQLite, MySQL, MariaDB, PostgreSQL or TimescaleDB PostgreSQL, Redis MySQL, Redis SQLite
Licence AGPL-3.0 GPL-3.0 AGPL-3.0 AGPL-3.0 AGPL-3.0 GPL-3.0 GPL-3.0
Docker not used: systemd, static binaries optional partial the installer uses Compose; a manual install is documented partial Compose required for the panel and the node optional optional
One-line installer yes yes yes yes no Compose, community scripts yes yes
Memory panel: 16-20 MiB idle, measured¹; node: the SSH installer needs 256 MB 68-74 MiB idle, measured¹ ? 262-265 MiB idle, measured¹; documented: 1 GB minimum, 2 GB recommended 426-454 MiB idle, measured¹; documented: panel 2 GB minimum, 4 GB recommended; node 1 GB minimum ? ?
Core Hysteria2; xray-core for VLESS; AmneziaWG in userspace or the kernel Xray, TUIC in process, AmneziaWG Xray Xray, a WireGuard core; a sing-box node announced Xray Xray and sing-box sing-box
VLESS REALITY / XHTTP yes / yes yes / yes yes / ? yes / ? yes / yes yes / yes ? (VLESS is in the source)
VMess, Trojan, Shadowsocks no yes yes yes partial Trojan and Shadowsocks; VMess not listed yes yes (in the source)
Hysteria2 yes yes ? yes partial in Xray JSON client configs only yes yes (in the source)
TUIC no yes (v5) ? ? ? yes yes (in the source)
WireGuard no yes ? yes partial passthrough yes ?
AmneziaWG yes 2.0 and 3.1, a key per device yes 3.1 in userspace ? ? ? ? ?
Several nodes yes an agent over mutual TLS yes a master panel manages other 3x-ui panels yes marzban-node yes yes yes parent and child panels ?
How a node is added from the panel over SSH, or a one-time command by hand: a full 3x-ui per node by hand by hand by hand: a generated compose file by hand: a child panel ?
Subscription formats URI list, Mihomo YAML, AmneziaVPN vpn:// keys, Xray JSON, sing-box JSON, a web page base64, Xray JSON, Clash/Mihomo V2ray, Clash, ClashMeta V2ray, Clash, ClashMeta, sing-box, Outline Xray JSON, base64, Mihomo, Stash, Clash, sing-box sub, sub64, Xray, sing-box, Clash, ClashMeta, WireGuard links, sing-box, Clash.Meta
Traffic and term per user yes yes yes yes yes yes yes
Device limit yes HWID, a place and keys per device yes HWID and IP ? yes HWID yes HWID ? ?
Telegram bot partial alerts; a full bot Planned yes (and Discord) yes yes partial notifications, Telegram login yes ?
API yes Connect, readonly / operator / admin tokens yes REST, scoped tokens yes REST, webhooks yes REST, webhooks yes OpenAPI, scoped tokens, webhooks yes yes
AI agents (MCP) yes built in, plan / apply, owner approvals ? ? ? no first-party server; community ones exist ? ?
WARP exit yes per profile, fails closed yes ? partial a guide partial community yes yes (in the source)
Health and alerts yes client-eye checks, node doctor with fixes, alert lifecycle, Telegram yes Telegram alerts, an opt-in tunnel monitor partial partial yes status, Prometheus, traffic alerts partial ?
Torrent blocking yes in the kernel; an event keeps what matched and the destination port, no addresses ? ? ? yes a plugin ? ?
Decoy site yes ? ? ? ? ? ?
Signed releases yes offline key, reproducible, nodes install only signed builds partial .sha256 files ? ? ? ? ?
Edition on Cloudflare Workers preview: not yet run on a real Cloudflare account no no no no no no
GitHub stars 1 about 47.7k about 7.4k about 2.7k about 5.2k about 9.3k about 10.0k
Latest release v0.1.32 v3.9.0 (2026-10-03) v0.8.4 (2025-01-09) v5.4.1 (2026-09-12) 3.4.5 (2026-10-06) v13.0.3 (2026-09-26) v1.6.4 (2026-10-07)

¹ Measured by this project on one test machine: private memory (anon) of the whole panel group, idle, with 0 to 200 users and no node connected, on a 1 vCPU / 1 GB server (3x-ui includes its Xray core and fail2ban). Marzban, Hiddify Manager and s-ui were not measured.

On a 2 vCPU / 2 GB server with the VPN core, the database and Hysteria2 traffic, Mistgate (panel and node) held 57 MiB idle and 80 MiB on a "bad day" (64 tunnel streams, 300 subscription requests per second and one user added and one removed per second); the same figures were 74 and 129 MiB for 3x-ui, 297 and 347 MiB for PasarGuard, 761 and 1,114 MiB for Remnawave. The method, the versions and where Mistgate is slower are on the Benchmarks page. The end-to-end test checks the panel's idle memory against 80 MB and the node agent's against 100 MB.

Marzban gets maintenance only (its last release is from January 2025), and its users are moving to PasarGuard, a successor developed in a separate repository rather than a GitHub fork. Marzneshin is dormant.

Sources#

Checked on 2026-10-09. Each project's README, documentation and release notes; the stars and the latest releases from the GitHub API on that day.

Edit this page on GitHub