Skip to main content

Config reference

Complete reference for all Nebula configuration options including PKI, firewall rules, lighthouse, relay, tun, and more.

pki

Configure the node's certificate, private key, CA trust bundle, and blocklist.

static_host_map

Define the static host map to enable peer discovery on the Nebula network.

static_map

Configure the behavior of hostnames and DNS resolution in the static_host_map.

lighthouse

Lighthouse configuration reference for Nebula mesh networking.

listen

Configure the UDP port used for sending/receiving Nebula traffic on underlay networks.

punchy

Configuration of keep-alive packets to avoid expiration of firewall and NAT mappings

cipher

Selection of cipher used to encrypt Nebula network traffic

preferred_ranges

Configure the priority order of underlay IP addresses to increase performance and reduce latency.

relay

Configure Nebula relays to forward packets between hosts with tricky connectivity issues.

tun

Tun device configuration reference for Nebula mesh networking.

tunnels

Configure tunnel lifecycle management for Nebula mesh networking.

sshd

Enable Nebula's built-in debugging console, accessible via SSH.

logging

Logging configuration reference for Nebula mesh networking.

firewall

Configure inbound and outbound firewall rules for a Nebula host

routines

Routines configuration reference for Nebula mesh networking.

stats

Configure Prometheus or Graphite stats reporting in the Nebula client.

handshakes

Configuration of the Nebula handshake manager subsystem.

local_range

local_ranges has been deprecated in favor of preferred_ranges