Self-hosted · multi-tenant · Telegram billing · Marzban migration

A VPN panel
that runs the business too

You sell sub-accounts; your customers connect through any v2ray client; you manage it from one panel. The Telegram billing flow ships built-in. Marzban migration keeps every existing sub URL working — no client reconfiguration.

80+
API Endpoints
5
Proxy Protocols
16
Dashboard Pages
6h
Auto-Update Cycle
<5min
Deploy Time
Capabilities, by area

27 features across five tabs. Click through to see what's actually in each one.

///

Admin Isolation

Three-tier roles — owner, admin, reseller. Quota enforcement, traffic caps, full data separation per admin.

Multi-Node

Add nodes across countries. Dashboard generates a one-liner with cert baked in — paste on the node host, done. Grid view, reconnect, disconnect, uptime monitoring.

Protocols & Transports

Protocols: VLESS, VMess, Trojan, Shadowsocks, Hysteria 2.
Transports & obfuscation: XHTTP, Reality, ECH, TLS fragments, Finalmask. All configured from the UI.

One-Command Deploy

curl | bash installer. Auto Docker, SSL via Let's Encrypt, auto-renewal cron. PWA for mobile management.

Auto-Updates

Heartbeat checks every 6 hours. New versions pulled and restarted automatically. Zero manual maintenance.

JWT Compat for Marzban

Existing Marzban sub URLs keep working after migration — no end-user reconfiguration needed. Makes switching off Marzban commercially viable.

Grafana-Style Analytics

Traffic over time (6h–30d), user growth, protocol & status donuts, top consumers, per-node bandwidth load. Auto-refresh every 30s.

Live Session View

Every sub URL fetch logs device fingerprint, client (Happ / V2Ray / Clash), OS, IP, geo, last seen. Detect shared accounts, enforce device limits, answer "is my customer online?" in one click.

Audit Log

Immutable, paginated log of every admin action — who changed what and when. Searchable by actor, target, and action type. Essential for multi-admin teams.

Real Device & IP Limits

Enforced via Xray access log parsing — not just UI checkboxes. Over-cap users auto-flipped to limited. Per-user IP history.

User Groups

Segment users into groups with scoped inbound access, subscription template overrides, and custom host rows. Hide premium nodes from free-tier users.

Inbound Sets

Bundle inbounds into named sets and assign them to user groups. Grant a reseller access to exactly their tier of nodes — nothing more.

Bulk Operations

Select hundreds of users — enable, disable, reset, delete in one click. CSV import/export. Protocol sync.

Email Your Users

Assign emails per user, then bulk-notify all of them of their new subscription URL in one click when you rotate domains. SMTP (Brevo, SendGrid, Postmark) from env.

Security Suite

TOTP 2FA with QR codes (panel + license-server admin), built-in captcha, rate limiting, account lockout, security headers, Cython-compiled binaries.

Happ Encrypted Links

Real RSA-4096 encrypted subscriptions via Happ crypt4 deeplinks. Hide your sub URLs from end users.

Signed License Control

HMAC-signed license cache bound to your machine. Heartbeat every 6h — tampering locks the panel.

Webhooks

Signed HMAC-SHA256 event deliveries for user create, update, delete, status change, and data reset. Wire into your billing system or CRM without polling.

$_

Operator CLI

nexus on the panel, nexus-node on each node. up / down / restart / logs / update / edit-env / backup / core-update.

In-Panel Env Editor

Settings → Env. Edit SMTP, tokens, feature flags inline with live secret masking, then Save & Restart — the panel self-restarts and the page auto-reloads.

Crypto Billing

Pay with USDT, BTC, ETH, LTC, TRX and 200+ coins via NOWPayments. Coupon codes and multi-month discounts supported.

Mobile Ready

Fully responsive dashboard. Bottom-bar nav with overflow drawer. PWA installable on iOS and Android.

EN/RU

Bilingual Interface

Every screen translated to English and Russian. Switch languages from the header — no restart needed.

Regional Sub Reorder

Subscription links auto-sort by subscriber country — closest node first. Detected via CDN headers or MaxMind. Zero config.

Middle Server Relay

Run a NAT relay host to route traffic through an unblocked IP. Auto-generates iptables rules from panel DB state. Swap the relay host in minutes.

Telegram Subscriber Bot

Automated bot lets subscribers check their status, remaining traffic, and expiry — without contacting you. Configurable from env, no code needed.

Scale as you grow

Start free. Upgrade when you need more. All plans include the full dashboard, all protocols, and automatic updates.

What's coming

Our public dev plans. Updated from the admin panel — no separate changelog to maintain.

Loading…
Switch from Marzban in 5 minutes

Keep all your users, admins, proxies, and hosts. JWT compat means existing sub URLs work on day one — no end-user reconfiguration.

1

Install NexusPanel next to your Marzban

One-command installer. Sets up Docker + SSL. Doesn't touch your running Marzban.

2

Run nexus cli migrate

9-stage atomic resumable state machine. Imports users, admins, proxies, hosts, Xray config, templates, Telegram bot, all NOTIFY_* flags. Dry-run first; plan-before-action; rollback until finalize.

3

Zero end-user churn

JWT compatibility means every existing Marzban sub URL keeps working — your users never re-import anything. Stop Marzban, change DNS, done.

# 1. Get your license:
@nexuspanelpayment_bot → /start → Get License

# 2. Install NexusPanel (next to Marzban):
curl -sL nexuspanel.store/install | bash

# 3. Migrate from your live Marzban:
nexus cli migrate discover # what's there
nexus cli migrate run --dry-run # rehearse, zero side effects
nexus cli migrate run --yes # live cutover

# 4. Your panel is live — users unchanged.
nexus status
nexus — panel
vs Marzban & Remnawave

Both are excellent free, open-source panels with bigger communities. Here's exactly where NexusPanel differs — and where it doesn't.

NexusPanelMarzbanRemnawave
License Closed, paidAGPL, freeAGPL, free
Source code Private Open on GitHubOpen on GitHub
Self-host or managed You host You host You host
Community size Small (new) Very large Growing
Marzban migration JWT-compat, one commandn/apartial
Telegram buyer flow Built-in
Crypto billing (NOWPayments)Built-in
Multi-tenant admin isolationYes Partial Yes
Mobile-installable PWA Yes
Auto-updates Every 6 hoursManual Manual
Self-support burden Ours — we patch & shipYoursYours

If you self-host already and like reading source code, pick Marzban or Remnawave. If you'd rather buy a panel with the billing flow already wired up and a Marzban migration that just works, that's the trade we're offering.

7-day trial.
Issued by the Telegram bot in under a minute.

No card. No signup form. /start in the bot, paste the install one-liner on a fresh VPS, log in.

Important: NexusPanel is a management panel only. Server configurations, Xray core configs, and VPN client setups are not included. You must provide your own VPS and node infrastructure. Need help with server setup, custom configs, or full deployment? Contact the developer.