Guides
Step-by-step guides for configuring and troubleshooting Nebula overlay networks, including quick start, certificate management, DNS, and routing.
How to create your first overlay network using a certificate authority, lighthouse, and hostsThe two mechanisms Nebula hosts use to discover each other's routable addresses — the static host map and lighthouse discovery — and when to use each.What Nebula needs from the firewalls and NATs between hosts — how UDP hole punching works, which NAT behaviors break it, and the fallbacks available when a direct tunnel cannot be established.How to run Nebula on Linux as an unprivileged user by granting the CAP_NET_ADMIN capability via systemd or setcap.How to sign Nebula certificates without copying private keys across devices.How to rotate an expiring Nebula certificate authority without downtime.Configure Nebula's experimental built-in DNS server on lighthouse hosts to resolve overlay network hostnames.Configure Nebula unsafe_routes to route traffic through overlay hosts and reach devices that cannot run Nebula directly.Learn how to use Nebula's built-in SSH server commands to debug network connectivity issues on overlay hosts.Inspect and control a running Nebula from the same machine with nebula ctl, and look up peer identities with the info API.Step-by-step guide to upgrading an existing Nebula network to the v2 certificate format and enabling IPv6 overlay addresses.How to view Nebula logs on Linux, macOS, Windows, iOS, and Android for troubleshooting and monitoring.Apply config changes to a running Nebula, read the result, and know which settings need a restart.Build and run Nebula using the Go Cryptographic Module in FIPS 140-3 mode.