SUIWARP

MCP Tools

Deploy S-UI + Cloudflare WARP proxy server in one command. 6 protocols (VLESS Reality, TUIC, Hysteria2, gRPC, Trojan, WebSocket), clean Cloudflare IP exit via wireproxy (~54MB RAM). Use when the user wants to set up a proxy server, VPN alternative, or network tunnel on a VPS.

Install

openclaw skills install suiwarp

SUIWARP — S-UI + Cloudflare WARP One-Liner

Deploy a multi-protocol proxy server with clean Cloudflare IP exit on any VPS.

When to Use

Activate when the user wants to:

Deploy a proxy / tunnel / VPN alternative on a VPS
Set up S-UI or sing-box with WARP
Configure VLESS Reality, TUIC, Hysteria2, or other protocols
Get a clean exit IP via Cloudflare WARP
Audit or fix an existing S-UI installation

Architecture

Client → S-UI (sing-box, 6 protocols) → wireproxy (SOCKS5 ~4MB) → Cloudflare WARP → Clean Exit IP

Protocol	Port	Best For
VLESS Reality Vision	443/tcp	Daily use (most covert)
TUIC v5	443/udp	Gaming (low latency)
Hysteria2	8443/udp	Streaming (max speed)
VLESS Reality gRPC	2053/tcp	Multiplexing (stable)
Trojan Reality	8880/tcp	Classic fallback
VLESS Reality WS	2083/tcp	CDN/firewall bypass
VLESS CDN WS	2052/tcp	IP hidden behind Cloudflare CDN
ShadowTLS v3 + SS2022	9443/tcp	Anti-DPI stealth (looks like real TLS)
VLESS HTTPUpgrade	10443/tcp	Stealth HTTP transport with Reality
Hysteria2 Port Hopping	20000-40000/udp	Anti-QoS, port randomization

Deployment

One-Liner (Recommended)

SSH into the target server as root, then run:

bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)

This handles everything automatically:

System dependencies + swap (for low-RAM VPS)
S-UI installation with 6 protocol inbounds
Reality keypair generation
Free Cloudflare WARP registration via wgcf
wireproxy setup (WireGuard → SOCKS5, ~4MB RAM)
S-UI outbound routing through WARP
UFW firewall configuration
Client link generation

Remote Deployment via SSH

If the user provides server credentials, deploy remotely:

ssh root@SERVER_IP 'bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)'

For password-only servers:

sshpass -p 'PASSWORD' ssh -o StrictHostKeyChecking=no root@SERVER_IP \
  'bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/setup.sh)'

Requirements

OS: Ubuntu 20.04+ / Debian 11+ (x86_64 or ARM64)
RAM: 1GB minimum (512MB usable after OS)
Access: Root SSH

Post-Deploy

After setup completes:

Client links are at /root/suiwarp-client-links.txt
S-UI panel is at http://SERVER_IP:2095/app/ (default: admin/admin — remind user to change!)
Subscription URL is at http://SERVER_IP:2096/sub/

Verify WARP

# Direct IP
curl ifconfig.me

# WARP exit IP (should be Cloudflare)
curl -x socks5h://127.0.0.1:40000 ifconfig.me

Troubleshooting

sing-box won't start

Check logs: journalctl -u s-ui -n 20

Common causes:

out_json type mismatch: If DB was manually edited, out_json column must be blob (bytes), not string. Fix with Python:
```
cur.execute("UPDATE inbounds SET out_json=? WHERE id=?", (json.dumps(data).encode("utf-8"), rid))
```
outbound type not found: wireguard: S-UI 1.4.0 sing-box doesn't include WireGuard. Use the wireproxy SOCKS5 approach instead.

WARP not connecting

systemctl status wireproxy-warp
journalctl -u wireproxy-warp -n 20

If endpoint is unreachable, try alternative WARP endpoints:

engage.cloudflareclient.com:2408
162.159.193.1:2408
162.159.195.1:2408

Firewall blocking ports

ufw status numbered
# Ensure 443/tcp, 443/udp, 8443/udp, 2053/tcp, 8880/tcp, 2083/tcp are ALLOW

OOM kills (low RAM servers)

# Check swap
free -h
# If no swap, create one
fallocate -l 2G /swapfile && chmod 600 /swapfile && mkswap /swapfile && swapon /swapfile

Uninstall

bash <(curl -sL https://raw.githubusercontent.com/iPythoning/SUIWARP/main/uninstall.sh)

Service Management

systemctl status s-ui              # S-UI status
systemctl status wireproxy-warp    # WARP status
systemctl restart s-ui             # Restart proxy
systemctl restart wireproxy-warp   # Restart WARP tunnel
journalctl -u s-ui -f              # Live S-UI logs
journalctl -u wireproxy-warp -f    # Live WARP logs

Key Paths

Path	Description
`/usr/local/s-ui/db/s-ui.db`	S-UI SQLite database
`/usr/local/s-ui/sui`	S-UI binary
`/etc/wireproxy.conf`	wireproxy WireGuard config
`/etc/suiwarp/wgcf-account.toml`	WARP account credentials
`/root/suiwarp-client-links.txt`	Generated client links

Credits

S-UI | sing-box | wireproxy | wgcf