Build a Self-Hosted SSH Tunneling Server with Per-User Accounting

If you want a self-hosted SSH tunneling server that handles bandwidth limits, session control, and brute-force protection without you scripting any of it, this walkthrough is for you. We'll set up Abdal 4iProto Server — a Go-based tunnel by Ebrahim Shafiei (EbraSha) — from build to first connection, and I'll explain the config decisions along the way so you're not just copy-pasting blindly.

Heads up: this server is part of the broader Abdal 4iProto ecosystem ( and


⚙️ Web Panel



📱 Android Client



🗝️ SSH KeyGen
automates OS/arch detection, SHA-256 verification, port config, key generation, and service registration if you'd rather skip the manual build.

🔗 Source: https://github.com/ebrasha/abdal-4iproto-server

FAQ

Do I need the GUI clients? No — any SSH client with -D dynamic forwarding works. The clients just make it nicer.

How do I cap a user's speed? Add max_speed_kbps to their users.json entry (1024 = 1 MB/s).

What happens when a user hits their data quota? They're disconnected mid-session within 1–2 seconds and refused at next login until the quota resets.