Full operator panel
Real-time analytics, audit log, bulk ops, user groups, inbound sets, host editor — all in one dashboard. PWA-installable on iOS & Android.
A multi-tenant operator panel with a real-time dashboard, per-user IP & device limits, and a built-in anti-censorship IP stack that keeps you reachable when domains get blocked. One-command Marzban migration — not a single sub URL breaks.
Everything an operator needs that you'd otherwise wire up by hand — including the anti-censorship IP stack most panels make you build yourself. No add-ons, no upsells: it all ships in the panel.
Real-time analytics, audit log, bulk ops, user groups, inbound sets, host editor — all in one dashboard. PWA-installable on iOS & Android.
The panel keeps getting stronger. Recent releases added IP-Defender, Hysteria 2 and warm-standby relays — they land in your install automatically, no upgrade work.
JWT-compat keeps every existing sub URL working — so not a single customer has to reconfigure anything. Zero churn on day one.
$ nexus migrate run --yes ✓ users — 1,247 ✓ hosts — 42 ✓ JWT secret → compat ✓ finalize — 5m 11s
Owner / admin / reseller roles. Quotas + traffic caps + data isolation enforced at the panel level.
Panel and node images self-update from the license server. Zero maintenance window.
Enforced by parsing real Xray access logs — not just UI checkboxes. Over-cap users are throttled automatically, so account-sharing stops eating your bandwidth.
Firebase, Cloudflare R2, GitHub Gist, Telegram — subscription URLs that stay reachable in RU / IR / CN / TM even when your panel domain is blocked. Auto-republished within 30 s on every config change.
When a regulator nulls your IP, the IP‑Defender has already moved. It tracks live competitor CDN edges, fronts your nodes through Cloudflare, AWS CloudFront, Google Cloud Run & Fastly, and rotates every host to a reachable IP every 60 s — it even buys & rotates domains for you. Purpose-built for RU / IR / CN / TM.
QUIC-based Hysteria 2 with Salamander obfuscation, managed across your whole node fleet. Stand up a DNAT middle-server relay on a fresh VPS with one command — backed by warm-standby failover, so a downed node never drops a paying customer.
One command per host. Docker-native, SSL via Let's Encrypt, runs on a fresh VPS in under 5 minutes.
# on the panel host $ curl -sL nexuspanel.store/install | bash ✓ docker installed ✓ SSL issued for panel.example.com ✓ panel up — https://panel.example.com:8443
14-stage atomic state machine imports users, admins, hosts, JWT secret, Telegram notifications, NOTIFY_* flags. Existing sub URLs keep working — zero customer churn.
$ nexus migrate run --dry-run rehearsing — zero side effects $ nexus migrate run --yes ✓ 14/14 stages (5m 11s)
Spin up users and sub-accounts, set traffic & device limits, and hand out subscription links — with bulk actions across your whole fleet, all from one dashboard.
Mobile-installable PWA with bottom-tab nav, bilingual EN/RU. The full panel in your pocket — audit log and bulk-ops UI work one-handed.
Start free. Upgrade when you need more. Live tier data — pulled from the license server, not hardcoded marketing.
Concrete things shipped in NexusPanel that you'd otherwise build yourself, buy separately, or live without.
JWT-compat. Existing sub URLs keep working day one. Marzban: n/a · Remnawave: partial.
Enforced from real Xray access logs — account-sharing stops eating your bandwidth. Marzban & Remnawave: UI checkboxes only.
Owner / admin / reseller roles with quotas and data isolation at the panel level. Marzban: basic · Remnawave: partial.
Add-to-home-screen, offline-aware, bottom-tab nav. Both alternatives: desktop-first only.
Panel and node images pull silently. Both alternatives: manual git pull.
Bugs, CVEs, edge cases — our problem, not yours. Both alternatives: it's your problem.
Firebase, R2, Gist, Telegram — clients keep pulling updates even when your panel domain is blocked in RU/IR/CN/TM. Marzban & Remnawave: panel URL or nothing.
Follows rival CDN edges, fronts via Cloudflare/CloudFront/Google/Fastly, rotates every host to a live IP each 60s, even buys & rotates domains. Marzban & Remnawave: build it yourself.
QUIC + Salamander obfs, managed fleet-wide, one-command DNAT relays with warm-standby failover. Marzban: manual · Remnawave: partial.
If you self-host already and like reading source code, pick Marzban or Remnawave. If you'd rather buy a panel with the censorship-resistance and operations already wired up, that's the trade we offer.
Public dev plans. Edited live from the admin panel — no separate changelog.
No card. No signup form. Start the trial, paste the install one-liner, and your panel is live.