NexusPanel
Start trial
01 Overview

Operate VPN
like infra|
structure.

A multi-tenant operator panel with a real-time dashboard, per-user IP & device limits, and a built-in anti-censorship IP stack that keeps you reachable when domains get blocked. One-command Marzban migration — not a single sub URL breaks.

v0.8.4 Self-hosted Auto-updates Bilingual EN/RU
nexuspanel.store / dashboard
NexusPanel operator dashboard — live users, traffic, nodes and license status
the real panel — not a mockup
02Flagship

When your IP dies,
the panel has already moved.

The IP-Defender watches your edges, follows live competitor CDN ranges, and reroutes every host to a reachable IP — automatically, around the clock. Built for RU / IR / CN / TM, where a static IP is a dead IP.

nexuspanel.store / dashboard / ip-defender
IP-Defender tracking live competitor CDN edges and rotating every host to a reachable IP
CF
Cloudflarefront + DNS
AWS
CloudFrontedge fronting
G
Cloud Runserverless front
F
Fastlyedge fronting
H
Hostingerregistrar API
Middle serverDNAT relay + warm standby
Domain buy + rotateauto-procured & swapped
Rival-IP trackingfollow live competitor edges
IP poolvalidated, ready to swap
60s host rotationevery host, always reachable

Cloudflare · AWS CloudFront · Google Cloud Run · Fastly · Hostinger — orchestrated as one self-healing mesh. Marzban & Remnawave: none of this exists.

03Capabilities

The whole operation,
in one panel.

Not a feature list — the actual screens. Click any to open it full.

User management with real device and IP limits
Users & real limitsCreate, bulk-manage and hand out sub-links — device & IP caps enforced from real Xray logs, not checkboxes.
Admin management with per-admin pricing and a debt ledger
Admins, resellers & debtRole-isolated dashboards, per-admin pricing and a built-in debt ledger — run resellers without spreadsheets.
Multi-node fleet with live status and traffic
Multi-node fleetAdd nodes in any region — live status, traffic, version and one-click control across the fleet.
Inbound host and protocol set configuration
Hosts & inbound setsCompose Xray & Hysteria2 inbounds into reusable sets and assign them per admin.
Real-time analytics: online now, traffic over time
Real-time analyticsOnline-now, traffic over time and the full user lifecycle — at a glance, no add-ons.
Full audit log of every admin action
Full audit logEvery admin action recorded — who did what, when, to which account. Filter by admin or action.
04Censorship resilience

Stay reachable where
the internet fights back.

Static IPs die, domains get null-routed, protocols get fingerprinted. NexusPanel keeps your customers connected through all of it — purpose-built for RU / IR / CN / TM.

nexuspanel.store / dashboard / middle-vps
Warm-standby middle servers: PRIMARY live, STANDBY warm, promote instantly

Warm-standby middle-servers

Subscription traffic points at your own nginx fronts. Keep a STANDBY warm — when the live front is blocked, promote it in one click. A downed front never drops a paying customer.

H2
Hysteria2 · QUICSalamander obfuscation across the whole fleet — fast where TCP gets throttled.
One-command DNAT relayStand up a relay on a fresh VPS in one command — even from inside a censored network.

Subscription URLs that survive a domain block

Clients keep pulling their config from censorship-resistant mirrors even when your panel domain is dead — auto-republished within 30 s of every change. Marzban & Remnawave: panel URL or nothing.

GFirebase✓ live
CFCloudflare R2✓ live
GHGitHub Gist✓ live
TGTelegram✓ live
01 / Install

Install panel + nodes

One command per host. Docker-native, SSL via Let's Encrypt, runs on a fresh VPS in under 5 minutes.

# on the panel host
$ curl -sL nexuspanel.store/install | bash
 docker      installed
 SSL         issued for panel.example.com
 panel       up — https://panel.example.com:8443
02 / Migrate

Move from Marzban

14-stage atomic state machine imports users, admins, hosts, JWT secret, Telegram notifications, NOTIFY_* flags. Existing sub URLs keep working — zero customer churn.

$ nexus migrate run --dry-run
  rehearsing — zero side effects
$ nexus migrate run --yes
 14/14 stages (5m 11s)
03 / Provision

Create & manage users

Spin up users and sub-accounts, set traffic & device limits, and hand out subscription links — with bulk actions across your whole fleet, all from one dashboard.

user limits sub link
04 / Operate

Run it from your phone

Mobile-installable PWA with bottom-tab nav, bilingual EN/RU. The full panel in your pocket — audit log and bulk-ops UI work one-handed.

PWA Bottom-nav EN/RU
06 Pricing

One panel, three tiers.

Start free. Upgrade when you need more. Live tier data — pulled from the license server, not hardcoded marketing.

07 Where we win

What you get that
other panels don't.

Concrete things shipped in NexusPanel that you'd otherwise build yourself, buy separately, or live without.

Marzban migration that doesn't break

JWT-compat. Existing sub URLs keep working day one. Marzban: n/a · Remnawave: partial.

Real device & IP limits

Enforced from real Xray access logs — account-sharing stops eating your bandwidth. Marzban & Remnawave: UI checkboxes only.

Multi-tenant admins & resellers

Owner / admin / reseller roles with quotas and data isolation at the panel level. Marzban: basic · Remnawave: partial.

Mobile-installable PWA

Add-to-home-screen, offline-aware, bottom-tab nav. Both alternatives: desktop-first only.

Auto-update every 6h

Panel and node images pull silently. Both alternatives: manual git pull.

We patch & ship

Bugs, CVEs, edge cases — our problem, not yours. Both alternatives: it's your problem.

Sub URLs that survive censorship

Firebase, R2, Gist, Telegram — clients keep pulling updates even when your panel domain is blocked in RU/IR/CN/TM. Marzban & Remnawave: panel URL or nothing.

IP-Defender — stay reachable under blocks

Follows rival CDN edges, fronts via Cloudflare/CloudFront/Google/Fastly, rotates every host to a live IP each 60s, even buys & rotates domains. Marzban & Remnawave: build it yourself.

Hysteria2 + middle-server relays

QUIC + Salamander obfs, managed fleet-wide, one-command DNAT relays with warm-standby failover. Marzban: manual · Remnawave: partial.

If you self-host already and like reading source code, pick Marzban or Remnawave. If you'd rather buy a panel with the censorship-resistance and operations already wired up, that's the trade we offer.

08 Roadmap

What's coming.

Public dev plans. Edited live from the admin panel — no separate changelog.

Loading…
09 Get started

7-day trial.
Issued in a minute.

No card. No signup form. Start the trial, paste the install one-liner, and your panel is live.

Live in minutes — day one you get
Panel + nodes installedlive
Real-time dashboard onlineok
IP & device limits enforcingon
Anti-censorship sub deliveryon
Auto-updates every 6hon