Config reference
Complete reference for all Nebula configuration options including PKI, firewall rules, lighthouse, relay, tun, and more.
- pkiConfigure the node's certificate, private key, CA trust bundle, and blocklist.
- static_host_mapDefine the static host map to enable peer discovery on the Nebula network.
- static_mapConfigure the behavior of hostnames and DNS resolution in the static_host_map.
- lighthouseLighthouse configuration reference for Nebula mesh networking.
- listenConfigure the UDP port used for sending/receiving Nebula traffic on underlay networks.
- punchyConfiguration of keep-alive packets to avoid expiration of firewall and NAT mappings
- cipherSelection of cipher used to encrypt Nebula network traffic
- preferred_rangesConfigure the priority order of underlay IP addresses to increase performance and reduce latency.
- relayConfigure Nebula relays to forward packets between hosts with tricky connectivity issues.
- tunTun device configuration reference for Nebula mesh networking.
- tunnelsConfigure tunnel lifecycle management for Nebula mesh networking.
- sshdEnable Nebula's built-in debugging console, accessible via SSH.
- loggingLogging configuration reference for Nebula mesh networking.
- firewallConfigure inbound and outbound firewall rules for a Nebula host
- routinesRoutines configuration reference for Nebula mesh networking.
- statsConfigure Prometheus or Graphite stats reporting in the Nebula client.
- handshakesConfiguration of the Nebula handshake manager subsystem.
- local_rangelocal_ranges has been deprecated in favor of preferred_ranges