How does it work ?
One server. Multiple protocols.
Tomato Proxy carries every SSH-based path, Xray-core carries VMess, VLESS and Trojan, and Tomato Agent enforces quota, IP limits and expiry in the background.
TLS 1.3 · encrypted transport · quota & IP limit enforced live
What's inside ?
Every client app, one server
One SSH account works on every SSH-based path. Every protocol has quota, IP limit, lock and a subscription page.
Tomato Proxy engine: WebSocket, SSL/SNI, HTTP Custom friendly, real client IP behind Cloudflare.
TCP, UDP and SSL using the same SSH account, usage counted in quota.
WS, gRPC, HTTPUpgrade and XHTTP over TLS and non-TLS. Changes apply live.
Fast UDP tunnel with password login, quota, IP limit and its own sub page.
Extra injector paths for restricted networks, same SSH account.
DNS tunnel and UDP Custom for networks that only allow DNS or UDP.
Where does it run ?
Supported operating systems
Built for fresh 64-bit Linux VPS environments.
★ Recommended: Ubuntu 24.04 LTS or Debian 12. All listed versions are supported; Debian 10/11 and Ubuntu 20.04 no longer receive regular security updates from their vendors.
What do I need ?
Minimum VPS requirements
Tomato runs comfortably on a small VPS. Anything at or above this spec is ready to install.
What can it do ?
Core features
Everything you need to manage and sell from a Tomato server.
Which ports ?
Services & ports
Quick reference for the services and ports on a Tomato server. Timezone Asia/Jakarta (GMT +7).
How much ?
Simple licensing
Choose the license duration and IP limit that fits your server setup.
What does it look like ?
Preview the ecosystem
Panel, protocol menus, subscription pages, status page and Telegram bot interface.
Preview images coming soon.
How to pay ?
Payment methods
Get started
Ready to deploy Tomato?
Choose a license and contact Tomato Autoscript through Telegram to get started.