Caramba Project
Run a VPN service on your own infrastructure. Bring the network, subscriptions and customer experience together—from the first server to the next support reply.
Public beta 0.9.98Windows · Android · macOS · Linux
A service is the whole journey: how someone joins, where their traffic goes, what their plan includes and who helps when something goes wrong.
Caramba connects those parts. The operator controls the infrastructure and access rules. Customers use Connect or your Telegram bot to reach the service. The panel brings their subscriptions, devices and support into the same working environment.
VPN servers, optional relays and the node agents that report back.
Caramba PanelProvision, manage, understand and support.
Caramba Connect, the Telegram bot and Mini App.
Enroll your servers, organize access through plans and check node health from the panel. Use a direct connection, or add a relay when your deployment needs a separate entry point.
Choose from several protocol families and offer the connection types that fit your infrastructure.
Availability depends on the server, configuration and client.
Your connection and your account, in one app. Choose a server, check your subscription, manage devices and contact support. Account features require a linked provider account and depend on the provider’s setup.
Open a provider invitation, paste a link, or import a supported subscription or configuration file.
Review the operator name before accepting a Caramba invitation.
Select an available server or use Find best node. Adjust the supported routing mode and traffic rules.
With a linked account, review your subscription, remove an unused device or open a support request.
The same service, with the controls your provider makes available.
Imported configurations do not automatically include account features. macOS currently uses a local proxy; platform requirements are listed with the downloads below.
A plan describes what someone can use. A subscription puts it into effect. Set the duration, server access, traffic allowance and device limit before you invite the customer.
Issue single-use keys for promotions, individual access or marketplace delivery. Choose the plan, granted days, batch name and optional redemption deadline. Create up to 5,000 keys in one batch.
Keys for the same plan add time. In Free, approval extends active time on that plan; if no time remains, access starts at approval. A change of plan replaces the current one.
Revoke unused keys without deleting existing subscriptions. A redemption deadline controls when a key can be used, not how long the subscription lasts.
Review measured daily traffic across up to 730 days. Choose a preset or custom period, filter by user and device, inspect exact totals and export CSV when your role permits it.
The useful part is the context: Caramba keeps device, shared and unknown traffic distinct, so a total does not imply precision the measurement cannot provide.
These analytics measure traffic volume, not visited websites. Device attribution needs an updated client, stable installation ID and separate credentials applied by the serving node. Shared AmneziaWG and Shadowsocks modes remain shared.
History accumulates after upgrading; deleted measurements and old shared-device histories cannot be reconstructed. Dates use UTC, and delayed reports may appear on the day they arrive. This describes the analytics, not a platform-wide no-logs guarantee.
A small service still needs clear responsibilities. Give each team member their own account, keep customer conversations together and check a message before sending it.
Set access per section. Support staff can manage tickets without receiving server credentials or payment settings. Owner management and system secrets stay with the owner.
Permission changes or disabling an account invalidate its previous sessions.
Customers open requests and read replies in Connect. Your team follows the conversation in the panel and can assign the person responsible, keeping help connected to the customer’s account.
Shape Telegram messages around your service. Customize templates by event and language, add images, GIFs and buttons, then preview the message and send yourself a test before launching a broadcast.
Saving a template never sends a campaign.
The panel coordinates the service. Node agents receive configuration and report health and usage. The client handles the connection on the customer’s device. Each part has a defined job, so the management interface and the traffic path remain understandable.
Caramba Panel · Rust
Accounts, plans, subscriptions, support, configuration and telemetry.
Node agents · sing-box
Enrolled servers and optional relays carry the configured connections.
Flutter · Go connection core
Connect uses a Mihomo-based core; the Telegram bot and Mini App provide another way into the service.
Choose where the platform runs, how customers get access and how your service is configured. Your servers and operating policies stay under your control. The installation guide covers HTTPS, enrollment, backups and the first connection.
Component source & licensesStart with a Linux server, administrator access and a domain. The official installer brings in the released components. Infrastructure, deployment and provider accounts are yours to arrange.
Open the installation guide| Included | Free | Full |
|---|---|---|
| VPN servers | Up to 3 | Per license |
| Separate relays | Up to 2 | Per license |
| Users | Up to 100 | Per license |
| Staff, support & analytics | Included | Included |
| Integrated payments | Not included | Included |
| Key activation | Admin approval | Automatic |
| Operator branding | Standard | Customizable |
Free has no panel license fee. Owner-configured free access and welcome gifts may also activate automatically. Full terms and authorization are arranged individually; automated license sales are not open.
Discuss Full licensingDownload Caramba Connect 0.9.98 for your device, then add your provider’s connection.
The app does not include VPN service. Bring a subscription or supported configuration from your provider or your own deployment.
Unsigned beta. Windows may display a security warning. System TUN requests administrator permission.
Direct installation. Allow installation from your download source, then approve the VPN permission when connecting.
Local proxy only; no system TUN. Ad-hoc signed app, unsigned DMG, not notarized. macOS may block normal opening.
Extract the archive and run its install.sh for integration and TUN permissions. Requirements are in the connection guide.
Clear expectations make a better service—for the person running it and the person connecting.
Browse the documentationCaramba is software for running a service and connecting to one. Downloading Connect does not supply servers, an account or internet access. Get a subscription from your provider, or deploy the platform on infrastructure you control.
Connect accepts supported standard subscriptions and configuration files as well as Caramba invitation links. Importing a configuration does not automatically create a provider account. In-app subscriptions, device management and support require a linked panel account and the relevant provider capabilities.
No. Android uses the system VPN permission. Windows and Linux default to system TUN and need the required permissions; a previously selected mode is retained. The current macOS build uses a local proxy, so you configure the browser or app that should use it. A connected Mac does not mean every app is using the VPN.
A VPN server provides the internet exit. A relay adds a separate entry point and forwards the connection to that exit. Start with a regular VPN server; add a relay when your deployment needs that extra step.
In Free, keys and promotional subscriptions normally wait for the operator’s approval. Their granted days are preserved while waiting. Keys for the same plan accumulate; approval adds time to an active subscription of that plan. A different plan replaces the current one. Full can activate keys automatically.
The original panel has its own license terms. Connect and other components include separately licensed software; corresponding source archives, notices and checksums are published alongside the release. Choose the source archive that matches your binary. The public repository provides documentation and downloads, not the entire panel development tree.
For an account, payment, device limit or connection supplied by another operator, contact that provider. For Caramba installation, the app itself or Full licensing, contact the Caramba team. Share the platform, version and error text; keep invitation links, keys, passwords and payment details private.