NexusPanel
01 Overview

Operate VPN
like infra|
structure.

A multi-tenant operator panel with a real-time dashboard, per-user IP & device limits, and a built-in anti-censorship IP stack that keeps you reachable when domains get blocked. One-command Marzban migration — not a single sub URL breaks.

v0.8.4 Self-hosted Auto-updates Bilingual EN/RU
nexuspanel.store / dashboard
NexusPanel operator dashboard — live users, traffic, nodes and license status
the real panel — not a mockup
02Flagship

When your IP dies,
the panel has already moved.

The IP-Defender watches your edges, follows live competitor CDN ranges, and reroutes every host to a reachable IP — automatically, around the clock. Built for RU / IR / CN / TM, where a static IP is a dead IP.

nexuspanel.store / dashboard / ip-defender
IP-Defender tracking live competitor CDN edges and rotating every host to a reachable IP
CF
Cloudflarefront + DNS
AWS
CloudFrontedge fronting
G
Cloud Runserverless front
F
Fastlyedge fronting
H
Hostingerregistrar API
Middle serverDNAT relay + warm standby
Domain buy + rotateauto-procured & swapped
Rival-IP trackingfollow live competitor edges
IP poolvalidated, ready to swap
60s host rotationevery host, always reachable

Cloudflare · AWS CloudFront · Google Cloud Run · Fastly · Hostinger — orchestrated as one self-healing mesh. Marzban & Remnawave: none of this exists.

03Capabilities

The whole operation,
in one panel.

Not a feature list — the actual screens. Click any to open it full.

User management with real device and IP limits
Users & real limitsCreate, bulk-manage and hand out sub-links — device & IP caps enforced from real Xray logs, not checkboxes.
Admin management with per-admin pricing and a debt ledger
Admins, resellers & debtRole-isolated dashboards, per-admin pricing and a built-in debt ledger — run resellers without spreadsheets.
Multi-node fleet with live status and traffic
Multi-node fleetAdd nodes in any region — live status, traffic, version and one-click control across the fleet.
Inbound host and protocol set configuration
Hosts & inbound setsCompose Xray & Hysteria2 inbounds into reusable sets and assign them per admin.
Real-time analytics: online now, traffic over time
Real-time analyticsOnline-now, traffic over time and the full user lifecycle — at a glance, no add-ons.
Full audit log of every admin action
Full audit logEvery admin action recorded — who did what, when, to which account. Filter by admin or action.
04Censorship resilience

Stay reachable where
the internet fights back.

Static IPs die, domains get null-routed, protocols get fingerprinted. NexusPanel keeps your customers connected through all of it — purpose-built for RU / IR / CN / TM.

nexuspanel.store / dashboard / middle-vps
Warm-standby middle servers: PRIMARY live, STANDBY warm, promote instantly

Warm-standby middle-servers

Subscription traffic points at your own nginx fronts. Keep a STANDBY warm — when the live front is blocked, promote it in one click. A downed front never drops a paying customer.

H2
Hysteria2 · QUICSalamander obfuscation across the whole fleet — fast where TCP gets throttled.
One-command DNAT relayStand up a relay on a fresh VPS in one command — even from inside a censored network.

Subscription URLs that survive a domain block

Clients keep pulling their config from censorship-resistant mirrors even when your panel domain is dead — auto-republished within 30 s of every change. Marzban & Remnawave: panel URL or nothing.

GFirebase✓ live
CFCloudflare R2✓ live
GHGitHub Gist✓ live
TGTelegram✓ live
05 Workflow

How it actually works.

From bare VPS to a running VPN operation in under 10 minutes. The 4 steps below are the entire operator loop.

01 / Install

Install panel + nodes

One command per host. Docker-native, SSL via Let's Encrypt, runs on a fresh VPS in under 5 minutes.

# on the panel host
$ curl -sL nexuspanel.store/install | bash
 docker   installed
 SSL      issued for panel.example.com
 panel    up — panel.example.com:8443
02 / Migrate

Move from Marzban

14-stage atomic state machine imports users, admins, hosts, JWT secret, Telegram notifications, NOTIFY_* flags. Existing sub URLs keep working — zero customer churn.

$ nexus migrate run --dry-run
  rehearsing — zero side effects
$ nexus migrate run --yes
 14/14 stages (5m 11s)
03 / Provision

Create & manage users

Spin up users and sub-accounts, set traffic & device limits, and hand out subscription links — bulk actions across your whole fleet.

Create and manage users with real device and IP limits
04 / Operate

Run it from your phone

Mobile-installable PWA with bottom-tab nav, bilingual EN/RU. The full panel in your pocket — one-handed.

NexusPanel mobile PWA dashboard with bottom-tab navigation
06 Pricing

One panel, three tiers.

Start free. Upgrade when you need more. Live tier data — pulled from the license server, not hardcoded marketing.

🚀 Launch offer: use code LAUNCH50 for 50% off your first month.

Pay in the Telegram bot · License delivered instantly · Renew or stop anytime.

07 Where we win

What you get that
other panels don't.

Concrete things shipped in NexusPanel that you'd otherwise build yourself, buy separately, or live without.

NexusPanel
Marzban
Remnawave
Marzban migration that doesn't breakJWT-compat. Existing sub URLs keep working day one.
~
Real device & IP limitsEnforced from real Xray access logs — account-sharing stops eating your bandwidth.
~
~
Multi-tenant admins & resellersOwner / admin / reseller roles with quotas and data isolation at the panel level.
~
~
Mobile-installable PWAAdd-to-home-screen, offline-aware, bottom-tab nav.
Auto-update every 6hPanel and node images pull silently.
We patch & shipBugs, CVEs, edge cases — our problem, not yours.
Sub URLs that survive censorshipFirebase, R2, Gist, Telegram — clients keep pulling updates even when your panel domain is blocked in RU/IR/CN/TM.
IP-Defender — stay reachable under blocksFollows rival CDN edges, fronts via Cloudflare/CloudFront/Google/Fastly, rotates every host to a live IP each 60s, even buys & rotates domains.
Hysteria2 + middle-server relaysQUIC + Salamander obfs, managed fleet-wide, one-command DNAT relays with warm-standby failover.
~
~
Included Partial Not available

If you self-host already and like reading source code, pick Marzban or Remnawave. If you'd rather buy a panel with the censorship-resistance and operations already wired up, that's the trade we offer.

08 Roadmap

What's coming.

Public dev plans. Edited live from the admin panel — no separate changelog.

Loading…
09 Get started

7-day trial.
Issued in a minute.

No card. No signup form. Start the trial, paste the install one-liner, and your panel is live.

ssh root@your-vps
$bash <(curl -fsSL nexuspanel.store/install.sh)
✓ Docker & dependencies ready
✓ TLS issued · Let's Encrypt
✓ Panel + node containers up
✓ Anti-censorship sub delivery on
→ Panel live · https://panel.yourdomain4m 12s