01 Overview

Operate VPN
like infra|
structure.

Install in one command, add a node by pasting a VPS's credentials, and front every host through Cloudflare, AWS, Google, Fastly, Bunny & Azure so blocks don't stick. Sell it white-labeled, bill per admin, and let a Telegram bot run your resellers — a whole VPN-subscription business in one panel.

Start 7-day trial See how it works

v0.8.4 Self-hosted White-label Auto-updates Bilingual EN/RU

nexuspanel.store / dashboard

NexusPanel operator dashboard — live users, traffic, nodes and license status

the real panel — not a mockup

02Flagship

When your IP dies,
the panel has already moved.

The IP-Defender watches your edges, follows live competitor CDN ranges, and reroutes every host to a reachable IP — automatically, around the clock. Built for RU / IR / CN / TM, where a static IP is a dead IP.

nexuspanel.store / dashboard / ip-defender

IP-Defender tracking live competitor CDN edges and rotating every host to a reachable IP

CF

Cloudflarefront + DNS

AWS

CloudFrontedge fronting

G

Cloud Runserverless front

F

Fastlyedge fronting

B

Bunnyedge fronting

H

Hostingerregistrar API

↪

Middle serverDNAT relay + warm standby

Az

Azure relayrotatable region VM

⟳

Domain buy + rotateauto-procured & swapped

◎

Rival-IP trackingfollow live competitor edges

▤

IP poolvalidated, ready to swap

⏱

60s host rotationevery host, always reachable

Cloudflare · AWS CloudFront · Google Cloud Run · Fastly · Bunny · Azure · Hostinger — orchestrated as one self-healing mesh. Marzban & Remnawave: none of this exists.

03Capabilities

The whole operation,
in one panel.

Not a feature list — the actual screens. Click any to open it full.

User management with real device and IP limits — Users & real limitsCreate, bulk-manage and hand out sub-links — device & IP caps enforced from real Xray logs, not checkboxes.

Admin management with per-admin pricing and a debt ledger — Admins, resellers & debtRole-isolated dashboards, per-admin pricing, a debt ledger and a live income / profit report — plus a Telegram management bot resellers use to check earnings and manage their own users. Run resellers without spreadsheets.

Multi-node fleet with live status and traffic — Multi-node fleetAdd nodes in any region — live status, traffic, version and one-click control across the fleet.

Inbound host and protocol set configuration — Hosts & inbound setsCompose Xray & Hysteria2 inbounds into reusable sets and assign them per admin.

Real-time analytics: online now, traffic over time — Real-time analyticsOnline-now, traffic over time and the full user lifecycle — at a glance, no add-ons.

Full audit log of every admin action — Full audit logEvery admin action recorded — who did what, when, to which account. Filter by admin or action.

04Censorship resilience

Stay reachable where
the internet fights back.

Static IPs die, domains get null-routed, protocols get fingerprinted. NexusPanel keeps your customers connected through all of it — purpose-built for RU / IR / CN / TM.

nexuspanel.store / dashboard / middle-vps

Warm-standby middle servers: PRIMARY live, STANDBY warm, promote instantly

Warm-standby middle-servers

Subscription traffic points at your own nginx fronts. Keep a STANDBY warm — when the live front is blocked, promote it in one click. A downed front never drops a paying customer.

H2

Hysteria2 · QUICSalamander obfuscation across the whole fleet — fast where TCP gets throttled.

⇄

One-command DNAT relayStand up a relay on a fresh VPS in one command — even from inside a censored network.

Subscription URLs that survive a domain block

Clients keep pulling their config from censorship-resistant mirrors even when your panel domain is dead — auto-republished within 30 s of every change. Marzban & Remnawave: panel URL or nothing.

GFirebase✓ live

CFCloudflare R2✓ live

GHGitHub Gist✓ live

TGTelegram✓ live

05 Workflow

How it actually works.

From bare VPS to a running VPN operation in under 10 minutes. The 4 steps below are the entire operator loop.

01 / Install

Install the panel

One command on a fresh VPS. Docker-native, SSL via Let's Encrypt, panel up in under 5 minutes. Coming from Marzban? A 14-stage migration imports everything and keeps every existing sub URL alive.

# on the panel host
$ curl -sL nexuspanel.store/install | bash
✓ docker   installed
✓ SSL      issued for panel.example.com
✓ panel    up — panel.example.com:8443

02 / Add a node

Add nodes by pasting credentials

Paste a new VPS's IP and SSH login. The panel SSHes in, installs the node agent, issues its mTLS certificate and the node is serving traffic in minutes — nothing to set up on the box by hand.

# in the panel: Nodes → Add node
  ip 203.0.113.7   ssh root:••••••
✓ ssh      connected
✓ agent    installed + mTLS issued
✓ node     online — serving traffic

03 / Front

Front through CDNs

Turn on IP-Defender: every host fronts through Cloudflare, AWS CloudFront, Google Cloud Run, Fastly and Bunny — with rotatable Azure relays for regions the CDNs can't reach. When an edge IP dies, the panel has already rerouted every host to a live one, automatically.

IP-Defender fronting every host through Cloudflare, CloudFront, Google and Fastly

04 / Sell

Sell it — white-labeled

Hand out sub-links, onboard resellers with their own isolated dashboards and a Telegram bot, and track income & profit per admin. Rebrand the whole panel — name, logo and colors — as your own product.

Admins, resellers, per-admin pricing and a live income/profit report

06 Pricing

One panel, three tiers.

Start free. Upgrade when you need more. Live tier data — pulled from the license server, not hardcoded marketing.

Pay in the Telegram bot · License delivered instantly · Renew or stop anytime.

07 Where we win

What you get that
other panels don't.

Concrete things shipped in NexusPanel that you'd otherwise build yourself, buy separately, or live without.

NexusPanel

Marzban

Remnawave

Marzban migration that doesn't breakJWT-compat. Existing sub URLs keep working day one.

✓

—

~

Real device & IP limitsEnforced from real Xray access logs — account-sharing stops eating your bandwidth.

✓

~

~

Multi-tenant admins & resellersOwner / admin / reseller roles with quotas and data isolation at the panel level.

✓

~

~

White-label — sell it as your ownRebrand name, logo and accent color across the panel and Telegram bot from one setting.

✓

—

~

Mobile-installable PWAAdd-to-home-screen, offline-aware, bottom-tab nav.

✓

—

—

Auto-update every 6hPanel and node images pull silently.

✓

—

—

We patch & shipBugs, CVEs, edge cases — our problem, not yours.

✓

—

—

Sub URLs that survive censorshipFirebase, R2, Gist, Telegram — clients keep pulling updates even when your panel domain is blocked in RU/IR/CN/TM.

✓

—

—

IP-Defender — stay reachable under blocksFollows rival CDN edges, fronts via Cloudflare/CloudFront/Google/Fastly/Bunny, rotates every host to a live IP each 60s, even buys & rotates domains.

✓

—

—

Hysteria2 + middle-server relaysQUIC + Salamander obfs, managed fleet-wide, one-command DNAT relays with warm-standby failover, plus rotatable Azure region relays.

✓

~

~

Included Partial Not available

If you self-host already and like reading source code, pick Marzban or Remnawave. If you'd rather buy a panel with the censorship-resistance and operations already wired up, that's the trade we offer.

08 Roadmap

What's coming.

Public dev plans. Edited live from the admin panel — no separate changelog.

Loading…

~190 MB RAM idle bcrypt admin auth Role-based access · sudo & reseller tiers Certificate-pinned node channel Encrypted Happ subscriptions Self-hosted · your keys, your infra

09 Get started

7-day trial.
Issued in a minute.

No card. No signup form. Start the trial, paste the install one-liner, and your panel is live.

Start 7-day trial Read the docs

ssh root@your-vps

$bash <(curl -fsSL nexuspanel.store/install.sh)

✓ Docker & dependencies ready

✓ TLS issued · Let's Encrypt

✓ Panel + node containers up

✓ Anti-censorship sub delivery on

→ Panel live · https://panel.yourdomain4m 12s