Config Reference | Nebula Docs

📄️ pki

Defines the path of each file required for a Nebula host: CA certificate, host certificate, and host key. Each of these

The static host map defines a set of hosts with fixed IP addresses on the internet (or any network). A host can have

lighthouse.am_lighthouse

listen sets the UDP port Nebula will use for sending/receiving traffic and for handshakes.

punchy configures the sending of inbound/outbound packets at a regular interval to avoid expiration of firewall nat

This value must be identical on ALL NODES/LIGHTHOUSES. Nebula does not support use of different ciphers simultaneously!

preferred_ranges sets the priority order for underlay IP addresses. Two hosts on the same LAN would likely benefit

EXPERIMENTAL: relay support for networks that can’t establish direct connections.

tun.disabled

logging.level

sshd enables nebula's built-in debugging console, which can be accessed via ssh. It can expose informational and

The default state of the Nebula interface host firewall is deny all for all inbound and outbound traffic. Firewall

Default: 1

Nebula can provide stats for Graphite or Prometheus. Options

localrange has been deprecated in favor of preferredranges