slackhq/nebula
A scalable overlay networking tool with a focus on performance, simplicity and security
Recommended between 2025-10-29 and 2026-08-27. Last pushed 2026-10-30.
▲ 4 recommend · ▼ 0 criticisms
What hackers say
“I've been using it for years and it has been flawless.”
— dave78, 2026-04-01 · strong recommendation · original comment on Hacker News ↗
show original comment
> I don't see mention of open source alternatives Check out Nebula (created by Slack) - https://github.com/slackhq/nebula Fundamentally very similar to Tailscale. I've been using it for years and it has been flawless. It doesn't have as many bells and whistles as Tailscale but it does what it does very well.
“I’ve used nebula for years and can recommend it”
— aaronds, 2026-02-01 · strong recommendation · original comment on Hacker News ↗
show original comment
A bit lower level than most things discussed here but on the topic of overlay networks, I’ve used nebula for years and can recommend it https://github.com/slackhq/nebula
“In contrast, Nebula, another Go peer-to-peer project encourages peers to run their own rendezvous server”
— 1vuio0pswjnm7, 2026-08-27 · original comment on Hacker News ↗
show original comment
…of operation for DERP." https://github.com/tailscale/tailscale/tree/main/cmd/derper Unclear why the company markets peer-to-peer networking but wants traffic going to their own third party servers In contrast, Nebula, another Go peer-to-peer project encourages peers to run their own rendezvous server ("lighthouse") https://github.com/slackhq/nebula "To set up a Nebula network, you'll need: 2. (Optional, but you really should..) At least one discovery node with a routable IP address, which we call a lighthouse." The comparison to nc seems off. Original netcat has no required third party dependencies, no recommended third party dependencies, and not enough complexity to be linked to a c…
“Nebula[0] addresses this and is IMO an improvement over WireGuard.”
— HowardStark, 2025-10-29 · original comment on Hacker News ↗
show original comment
Nebula[0] addresses this and is IMO an improvement over WireGuard. Came out of Slack originally, and it supports peer discovery, NAT hole punching, and some other cool features. Also still uses the Noise Protocol. In practice, the extra networking features + better first class peer config management baked in is very nice (Nebula’s “lighthouses” are configured with a tool similar to DSNet for Wireguard[1]) [0] https://github.com/slackhq/nebula [1] https://github.com/naggie/dsnet
Badge for your README
[](https://hackerrepos.org/repo/slackhq/nebula)