diff --git a/frontend/src/views/AdminView.vue b/frontend/src/views/AdminView.vue
index c46f914..4ac42c3 100644
--- a/frontend/src/views/AdminView.vue
+++ b/frontend/src/views/AdminView.vue
@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { onMounted, ref } from 'vue'
+import { onMounted, onUnmounted, ref } from 'vue'
 import { useRouter } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useAuthStore } from '@/stores/auth'
@@ -17,6 +17,17 @@ const stats = ref([
 ])
 
 const userCount = ref<number | null>(null)
+let statsTimer: ReturnType<typeof setInterval> | null = null
+
+function formatUptime(seconds: number): string {
+  if (seconds <= 0) return '0m'
+  const d = Math.floor(seconds / 86400)
+  const h = Math.floor((seconds % 86400) / 3600)
+  const m = Math.floor((seconds % 3600) / 60)
+  if (d > 0) return `${d}d ${h}h`
+  if (h > 0) return `${h}h ${m}m`
+  return `${m}m`
+}
 
 async function fetchUserCount() {
   try {
@@ -32,9 +43,33 @@ async function fetchUserCount() {
   } catch {}
 }
 
+async function fetchStats() {
+  try {
+    const res = await fetch('/api/admin/stats', {
+      headers: { Authorization: `Bearer ${authStore.token}` },
+    })
+    if (!res.ok) return
+    const data = await res.json()
+    const set = (label: string, value: string) => {
+      const stat = stats.value.find(s => s.label === label)
+      if (stat) stat.value = value
+    }
+    set('admin.uptime', formatUptime(data.uptime_seconds))
+    set('admin.activeDevices', String(data.active_devices))
+    set('admin.todayTraffic', (data.today_traffic_bytes / 1e9).toFixed(2))
+    set('admin.onlineNodes', String(data.online_nodes))
+  } catch {}
+}
+
 onMounted(async () => {
   await authStore.fetchUser()
   fetchUserCount()
+  fetchStats()
+  statsTimer = setInterval(fetchStats, 30000)
+})
+
+onUnmounted(() => {
+  if (statsTimer) clearInterval(statsTimer)
 })
 
 function handleStatClick(route: string) {
diff --git a/internal/db/db.go b/internal/db/db.go
index 82835af..1ea8f4f 100644
--- a/internal/db/db.go
+++ b/internal/db/db.go
@@ -40,7 +40,7 @@ func Init(cfg *config.DatabaseConfig) error {
 		return fmt.Errorf("数据库连接失败: %w", err)
 	}
 
-	if err := DB.AutoMigrate(&model.User{}, &model.Session{}, &model.VpnSetting{}, &model.VpnReservation{}); err != nil {
+	if err := DB.AutoMigrate(&model.User{}, &model.Session{}, &model.VpnSetting{}, &model.VpnReservation{}, &model.TrafficStat{}); err != nil {
 		return fmt.Errorf("数据库迁移失败: %w", err)
 	}
 
diff --git a/internal/handler/stats.go b/internal/handler/stats.go
new file mode 100644
index 0000000..dabe4f1
--- /dev/null
+++ b/internal/handler/stats.go
@@ -0,0 +1,43 @@
+package handler
+
+import (
+	"net/http"
+	"time"
+
+	"lmvpn/internal/db"
+	"lmvpn/internal/model"
+	"lmvpn/internal/vpn"
+
+	"github.com/gin-gonic/gin"
+)
+
+type adminStatsResponse struct {
+	UptimeSeconds     int64 `json:"uptime_seconds"`
+	ActiveDevices     int   `json:"active_devices"`
+	TodayTrafficBytes int64 `json:"today_traffic_bytes"`
+	OnlineNodes       int   `json:"online_nodes"`
+}
+
+func GetAdminStats(c *gin.Context) {
+	var uptime int64
+	var onlineNodes int
+	if vpn.VPN.Running() {
+		uptime = int64(time.Since(vpn.VPN.StartedAt()).Seconds())
+		onlineNodes = 1
+	}
+
+	activeDevices := len(vpn.VPN.ClientList())
+
+	today := time.Now().Format("2006-01-02")
+	var stat model.TrafficStat
+	db.DB.Where("date = ?", today).First(&stat)
+	liveRx, liveTx := vpn.VPN.TotalLiveTraffic()
+	todayTraffic := stat.RxBytes + stat.TxBytes + liveRx + liveTx
+
+	c.JSON(http.StatusOK, adminStatsResponse{
+		UptimeSeconds:     uptime,
+		ActiveDevices:     activeDevices,
+		TodayTrafficBytes: todayTraffic,
+		OnlineNodes:       onlineNodes,
+	})
+}
diff --git a/internal/model/vpn.go b/internal/model/vpn.go
index 073ab7d..1ebe842 100644
--- a/internal/model/vpn.go
+++ b/internal/model/vpn.go
@@ -32,3 +32,15 @@ type VpnReservation struct {
 func (VpnReservation) TableName() string {
 	return "vpn_reservations"
 }
+
+type TrafficStat struct {
+	ID        uint   `gorm:"primaryKey;autoIncrement"`
+	Date      string `gorm:"uniqueIndex;size:10;not null"`
+	RxBytes   int64  `gorm:"default:0"`
+	TxBytes   int64  `gorm:"default:0"`
+	UpdatedAt time.Time
+}
+
+func (TrafficStat) TableName() string {
+	return "traffic_stats"
+}
diff --git a/internal/router/router.go b/internal/router/router.go
index fb3bd39..8163b81 100644
--- a/internal/router/router.go
+++ b/internal/router/router.go
@@ -28,6 +28,7 @@ func Setup(r *gin.Engine) {
 	admin := r.Group("/api/admin")
 	admin.Use(middleware.AuthMiddleware(), middleware.AdminMiddleware())
 	{
+		admin.GET("/stats", handler.GetAdminStats)
 		admin.GET("/users/count", handler.GetUserCount)
 		admin.GET("/users", handler.ListUsers)
 		admin.POST("/users", handler.CreateUser)
diff --git a/internal/vpn/service.go b/internal/vpn/service.go
index ff50101..3f80e84 100644
--- a/internal/vpn/service.go
+++ b/internal/vpn/service.go
@@ -6,6 +6,7 @@ import (
 	"log"
 	"net"
 	"sync"
+	"time"
 
 	"lmvpn/internal/model"
 
@@ -13,21 +14,22 @@ import (
 )
 
 type VpnService struct {
-	mu       sync.RWMutex
-	settings model.VpnSetting
-	net      *net.IPNet
-	serverIP net.IP
-	prefix   int
-	alloc    *AllocationManager
-	net6     *net.IPNet
+	mu        sync.RWMutex
+	settings  model.VpnSetting
+	net       *net.IPNet
+	serverIP  net.IP
+	prefix    int
+	alloc     *AllocationManager
+	net6      *net.IPNet
 	serverIP6 net.IP
 	prefix6   int
-	alloc6   *AllocationManager
-	switchx  *PacketSwitch
-	tun      *TUNInterface
-	tunDone  chan struct{}
-	running  bool
-	clients  map[*tunnelConn]struct{}
+	alloc6    *AllocationManager
+	switchx   *PacketSwitch
+	tun       *TUNInterface
+	tunDone   chan struct{}
+	running   bool
+	startedAt time.Time
+	clients   map[*tunnelConn]struct{}
 }
 
 func NewVpnService() *VpnService {
@@ -42,6 +44,22 @@ func (s *VpnService) Running() bool {
 	return s.running
 }
 
+func (s *VpnService) StartedAt() time.Time {
+	s.mu.RLock()
+	defer s.mu.RUnlock()
+	return s.startedAt
+}
+
+func (s *VpnService) TotalLiveTraffic() (rx, tx int64) {
+	s.mu.RLock()
+	for c := range s.clients {
+		rx += c.rxBytes.Load()
+		tx += c.txBytes.Load()
+	}
+	s.mu.RUnlock()
+	return
+}
+
 func (s *VpnService) Settings() model.VpnSetting {
 	s.mu.RLock()
 	defer s.mu.RUnlock()
@@ -133,6 +151,7 @@ func (s *VpnService) ApplySettings(settings model.VpnSetting, reservations4, res
 	s.tun = tun
 	s.tunDone = make(chan struct{})
 	s.running = true
+	s.startedAt = time.Now()
 	s.mu.Unlock()
 
 	go s.serveTUN()
diff --git a/internal/vpn/tunnel.go b/internal/vpn/tunnel.go
index 69684d0..621665b 100644
--- a/internal/vpn/tunnel.go
+++ b/internal/vpn/tunnel.go
@@ -8,9 +8,12 @@ import (
 	"sync/atomic"
 	"time"
 
+	"lmvpn/internal/db"
 	"lmvpn/internal/model"
 
 	"github.com/gorilla/websocket"
+	"gorm.io/gorm"
+	"gorm.io/gorm/clause"
 )
 
 const (
@@ -28,19 +31,19 @@ var (
 )
 
 type tunnelConn struct {
-	conn         *websocket.Conn
-	user         *model.User
-	svc          *VpnService
-	assignedIP   net.IP
-	assignedIP6  net.IP
-	connectedAt  time.Time
-	writeMu      sync.Mutex
-	ready        atomic.Bool
-	rxBytes      atomic.Int64
-	txBytes      atomic.Int64
+	conn        *websocket.Conn
+	user        *model.User
+	svc         *VpnService
+	assignedIP  net.IP
+	assignedIP6 net.IP
+	connectedAt time.Time
+	writeMu     sync.Mutex
+	ready       atomic.Bool
+	rxBytes     atomic.Int64
+	txBytes     atomic.Int64
 }
 
-func (c *tunnelConn) AssignedIP() net.IP { return c.assignedIP }
+func (c *tunnelConn) AssignedIP() net.IP  { return c.assignedIP }
 func (c *tunnelConn) AssignedIP6() net.IP { return c.assignedIP6 }
 
 func (c *tunnelConn) WritePacket(data []byte) error {
@@ -128,7 +131,10 @@ func runTunnel(conn *websocket.Conn, user *model.User) {
 	}
 
 	VPN.registerClient(tc)
-	defer VPN.unregisterClient(tc)
+	defer func() {
+		recordTraffic(tc.rxBytes.Load(), tc.txBytes.Load())
+		VPN.unregisterClient(tc)
+	}()
 
 	settings := VPN.Settings()
 	initMsg := initMessage{
@@ -222,3 +228,20 @@ func runTunnel(conn *websocket.Conn, user *model.User) {
 		}
 	}
 }
+
+func recordTraffic(rx, tx int64) {
+	if rx == 0 && tx == 0 {
+		return
+	}
+	today := time.Now().Format("2006-01-02")
+	stat := model.TrafficStat{Date: today, RxBytes: rx, TxBytes: tx}
+	if err := db.DB.Clauses(clause.OnConflict{
+		Columns: []clause.Column{{Name: "date"}},
+		DoUpdates: clause.Assignments(map[string]interface{}{
+			"rx_bytes": gorm.Expr("rx_bytes + ?", rx),
+			"tx_bytes": gorm.Expr("tx_bytes + ?", tx),
+		}),
+	}).Create(&stat).Error; err != nil {
+		log.Printf("记录流量失败: %v", err)
+	}
+}