Skip to content
SPECIFICTION
Get listed

Nebula

github.com

From $1/mo Free plan WindowsmacOSLinuxiOSAndroidSelf-hosted
Visit github.com
Spec score 8.3 #36 of 94 in Business VPN Software

Spec sheet

Purpose
Nebula is a self-hosted overlay networking tool for connecting hosts with on-demand encrypted tunnels across IP networks.Read 11 Oct 2026 · nebula.defined.net
Intended users
The documentation presents Nebula as a way for groups of hosts to communicate securely across the internet, with firewall definitions similar to cloud security groups.Read 11 Oct 2026 · nebula.defined.net
Platforms
Nebula is packaged for Linux, macOS, Windows, iOS, Android, and FreeBSD, and runs on x86, ARM, MIPS, PPC, and RISC hardware.Read 11 Oct 2026 · nebula.defined.net
Integrations
The official documentation describes SSO integration for Managed Nebula, and the pricing page lists feature and integration requests as an Enterprise offering.Read 11 Oct 2026 · defined.net
Support
The repository security policy directs vulnerability reports to HackerOne and says the security team will investigate and respond.Read 11 Oct 2026 · github.com
License
The GitHub repository lists the MIT license.Read 11 Oct 2026 · github.com
Access model
vpnRead 22 Sep 2026 · nebula.defined.net
Admin control level
standardRead 22 Sep 2026 · nebula.defined.net
Compliance option
Nebula can be built in Go FIPS 140-3 mode, and the project says deployments can use NIST P-256 certificates and handshakes for compliance requirements.Read 11 Oct 2026 · github.com
Cryptography
Its default configuration uses elliptic-curve Diffie-Hellman key exchange and AES-256-GCM.Read 11 Oct 2026 · nebula.defined.net
Identity
Nebula uses a PKI model and host certificates to identify and authorize peers, with mutual certificate validation and security-group firewall rules.Read 11 Oct 2026 · nebula.defined.net
Managed alternative
Managed Nebula adds automated certificate management, SSO integration, and a web UI for teams that do not want to run the infrastructure themselves.Read 11 Oct 2026 · nebula.defined.net
Network model
Nebula is a mutually authenticated peer-to-peer layer 3 virtual network based on the Noise Protocol Framework.Read 11 Oct 2026 · nebula.defined.net
Peer discovery
Discovery nodes help peers find routes and can use UDP hole punching to connect through many firewalls or NATs.Read 11 Oct 2026 · nebula.defined.net
Self-hosting requirement
An overlay network should have at least one Lighthouse host to help peers discover routes and assist with NAT traversal.Read 11 Oct 2026 · nebula.defined.net
Supported platforms
Linux,macOS,Windows,FreeBSD,iOS,AndroidRead 22 Sep 2026 · nebula.defined.net
Traffic and firewall
It supports TCP, UDP, and ICMP through a TUN adapter with split tunneling and a host firewall using group-based rules.Read 11 Oct 2026 · nebula.defined.net

Plans and prices

Managed Nebula Free Free per host Up to 100 hosts · 2 routes for external hosts · managed lighthouse · SSO · web management interface Read 11 Oct 2026 · defined.net
Nebula (self-hosted open source) Free Self-hosted overlay networking · connect any number of hosts Read 11 Oct 2026 · nebula.defined.net
Managed Nebula Pro $1 a month per host Unlimited hosts · up to 100 routes · priority support · guaranteed uptime Read 11 Oct 2026 · defined.net
Managed Nebula Enterprise Priced on request Custom pricing Unlimited hosts · custom routes · dedicated Slack support channel · network design and setup · feature and integration requests Read 11 Oct 2026 · defined.net

Every Nebula plan and price →

Where Specifiction places it

Alternatives to NebulaAll alternatives →