📄️ Quick start
How to create your first overlay network using a Certificate Authority, Lighthouse, and Hosts
📄️ How Hosts Find Each Other
The two mechanisms Nebula hosts use to discover each other's routable addresses — the static host map and lighthouse discovery — and when to use each.
📄️ Running Nebula as a non-root user
How to run Nebula on Linux as an unprivileged user by granting the CAP_NET_ADMIN capability via systemd or setcap.
📄️ Signing a certificate without a private key
How to sign Nebula certificates without copying private keys across devices.
📄️ Rotating a certificate authority
How to rotate an expiring Nebula certificate authority without downtime.
📄️ Using Lighthouse DNS with Nebula
Configure Nebula's experimental built-in DNS server on Lighthouse hosts to resolve overlay network hostnames.
📄️ Extending network access beyond overlay hosts
Configure Nebula unsafe_routes to route traffic through overlay hosts and reach devices that cannot run Nebula directly.
📄️ Debugging with Nebula SSH commands
Learn how to use Nebula's built-in SSH server commands to debug network connectivity issues on overlay hosts.
📄️ Upgrading a Nebula network to IPv6 overlay addresses
Step-by-step guide to upgrading an existing Nebula network to the v2 certificate format and enabling IPv6 overlay addresses.
📄️ Viewing Nebula logs
How to view Nebula logs on Linux, macOS, Windows, iOS, and Android for troubleshooting and monitoring.