Engineered for High-Density, Zero-Friction Hosting

Frontend UI assets and database migrations are embedded directly inside the compiled binary using rust-embed. No Python, Ruby, or external node runtime required.

Unprivileged web daemon runs as 'dpanel' user. Privileged root operations execute via a strictly isolated Unix Domain Socket IPC (/run/dpanel.sock).

Idle RAM footprint of only 25MB-40MB. Handles 50,000+ requests per second with sub-millisecond p99 latency on a 1 vCPU cloud instance.

Zero external database dependencies for panel configuration. Atomic writes with SQLite Write-Ahead Logging (WAL) and automated schema migrations.

Zero-template syntax validation before reloading. Automatically configures reverse proxying, root directories, access logs, and error handlers.

Automated SSL provisioning and background cron renewal (every 60 days). Supports HTTP-01 challenge and Wildcard DNS-01 verification.

Proxy pass configuration with Upgrade and Connection headers for real-time WebSocket applications (Socket.io, WS, gRPC-Web).

Built-in presets for HTTP Strict Transport Security (HSTS), X-Frame-Options, Content Security Policy (CSP), and Brotli compression.

Run different PHP versions per domain with dedicated PHP-FPM pools, isolated sockets, custom php.ini directives, and OPcache tuning.

Deploy Next.js, Express, NestJS, and Fastify apps with automatic restart, cluster mode, environment variable injection, and zero-downtime reloads.

Inspect, start, stop, rebuild, and monitor Docker containers directly through the web console. Automatic bridge network mapping.

Securely store and inject .env configuration per application without writing plaintext secrets to disk.

Create databases, grant fine-grained user privileges (SELECT, INSERT, ALL), manage collations (utf8mb4_unicode_ci), and reset passwords instantly.

Full support for PostgreSQL databases, roles, search paths, and database-level connection limits.

Export and import SQL dumps (.sql, .sql.gz) with automated integrity checking and single-command rollback.

Configure per-user host permissions ('localhost', '%', or specific CIDR IP ranges) for secure external client connections.

Open, close, or whitelist TCP/UDP ports with 1-click. Real-time rule audit and visual port binding overview.

Automated ban/unban rules for SSH, Nginx auth, and API brute-force attempts. Live banned IP list with instant unban capability.

Manage authorized public SSH keys, toggle password authentication, and rebind default SSH ports to prevent automated bot attacks.

HMAC-SHA256 authenticated sessions with atomic revocation and strict HttpOnly cookie security flags.

Full browser-based file management with drag-and-drop uploads, archive compression (.tar.gz, .zip), inline code editing with syntax highlighting, and chmod permission controls.

Secure FTP/FTPS accounts isolated to specific virtual directories without granting system shell access.

Configurable cron-based snapshots of websites, Nginx configs, and databases with automated retention policies and 1-click restores.

Manage forward and reverse DNS zones with support for A, AAAA, CNAME, MX, TXT (SPF/DKIM/DMARC), and NS records.