Nebula

Plans and prices

Every plan, in full

On the record

Access model

vpnnebula.defined.net · read 22 Sep 2026

Admin control level

standardnebula.defined.net · read 22 Sep 2026

Compliance option

Nebula can be built in Go FIPS 140-3 mode, and the project says deployments can use NIST P-256 certificates and handshakes for compliance requirements.github.com · read 11 Oct 2026

Cryptography

Its default configuration uses elliptic-curve Diffie-Hellman key exchange and AES-256-GCM.nebula.defined.net · read 11 Oct 2026

Identity

Nebula uses a PKI model and host certificates to identify and authorize peers, with mutual certificate validation and security-group firewall rules.nebula.defined.net · read 11 Oct 2026

Integrations

The official documentation describes SSO integration for Managed Nebula, and the pricing page lists feature and integration requests as an Enterprise offering.defined.net · read 11 Oct 2026

Intended users

The documentation presents Nebula as a way for groups of hosts to communicate securely across the internet, with firewall definitions similar to cloud security groups.nebula.defined.net · read 11 Oct 2026

License

The GitHub repository lists the MIT license.github.com · read 11 Oct 2026

Managed alternative

Managed Nebula adds automated certificate management, SSO integration, and a web UI for teams that do not want to run the infrastructure themselves.nebula.defined.net · read 11 Oct 2026

Network model

Nebula is a mutually authenticated peer-to-peer layer 3 virtual network based on the Noise Protocol Framework.nebula.defined.net · read 11 Oct 2026

Peer discovery

Discovery nodes help peers find routes and can use UDP hole punching to connect through many firewalls or NATs.nebula.defined.net · read 11 Oct 2026

Purpose

Nebula is a self-hosted overlay networking tool for connecting hosts with on-demand encrypted tunnels across IP networks.nebula.defined.net · read 11 Oct 2026

Self-hosting requirement

An overlay network should have at least one Lighthouse host to help peers discover routes and assist with NAT traversal.nebula.defined.net · read 11 Oct 2026

Support

The repository security policy directs vulnerability reports to HackerOne and says the security team will investigate and respond.github.com · read 11 Oct 2026

Supported platforms

Linux,macOS,Windows,FreeBSD,iOS,Androidnebula.defined.net · read 22 Sep 2026

Traffic and firewall

It supports TCP, UDP, and ICMP through a TUN adapter with split tunneling and a host firewall using group-based rules.nebula.defined.net · read 11 Oct 2026

Alternatives to Nebula

T TailscaleAndroidiPhone & iPad+7 OC OpenVPN CloudConnexaAndroidiPhone & iPad+4 AV Azure VPN GatewayAndroidiPhone & iPad+5 CA Cloudflare AccessAndroidiPhone & iPad+5 G GoodAccessAndroidiPhone & iPad+4 N NetBirdAndroidiPhone & iPad+4 T TwingateAndroidiPhone & iPad+7 OA OpenVPN Access ServerAndroidiPhone & iPad+4

Every alternative, ranked