使用 Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper 安装 nebula

项目链接

• 主页
• 上游文档
• 软件包管理器页面

命令和别名

• nebula
• nebula-cert

项目历史

The project came out of Slack's attempt to replace IPSec for inter-region encrypted connectivity. Slack's engineering post says IPSec initially worked but became an operational burden and added routing hops through tunnel hosts, so Slack built a system that combined certificates, encryption, security groups, peer discovery, and tunneling into one operational model.

The public GitHub repository was created on 2019-11-16. The README credits Nebula to Slack Technologies, Inc. by Nate Brown and Ryan Huber, with additional contributors, and describes the design as a mutually authenticated peer-to-peer software-defined network based on the Noise Protocol Framework.

采用历史

Nebula's adoption signal is unusually strong for a Homebrew networking package because it was production-proven before release: Slack said in 2019 that Nebula ran on every server at Slack. The GitHub repository showed 17,472 stars and 1,157 forks via the GitHub API on 2026-07-01, reflecting durable open-source visibility in the mesh-VPN and overlay-networking space.

Homebrew's formula page listed stable version 1.10.3 and showed 1,724 installs over 365 days, 171 over 90 days, and 60 over 30 days when checked on 2026-07-01. That is modest compared with mainstream CLIs but healthy for self-hosted network infrastructure.

使用方式

Package users install the `nebula` daemon and `nebula-cert` helper, generate a CA plus host certificates, designate one or more lighthouse nodes for discovery, then run hosts from YAML configuration files. Practical usage centers on private service networks, remote admin access, multi-cloud host reachability, and replacing static VPN concentrator patterns with direct encrypted peer paths where NAT traversal works.

The official docs make the operational shape clear: configuration covers PKI, static host maps, lighthouse discovery, UDP listening, NAT keepalives, relay fallback, TUN setup, firewall rules, logging, and metrics. Package nerds tend to compare Nebula with Tailscale, WireGuard mesh tooling, and classic IPSec/OpenVPN, valuing its self-hosted CA and explicit group-based firewall model.

为什么软件包爱好者会关心

Nebula matters because it is not just another VPN wrapper: it packages Slack's internal overlay-network design as a small Go tool with cross-platform release artifacts and distro packages. In package indexes it sits at the intersection of VPN, mesh networking, zero-trust-ish host identity, and SRE-friendly private networking.

时间线

• 2017-2019: Slack operated Nebula internally before public release.
• 2019-11-16: Public GitHub repository created.
• 2019-11-19: Slack announced Nebula as an open-source global overlay network.
• 2026-07-01: Homebrew formula stable version observed as 1.10.3.

Related projects

• Noise Protocol Framework
• WireGuard
• Tailscale
• Defined Networking

来源

• https://api.github.com/repos/slackhq/nebula
• https://formulae.brew.sh/formula/nebula
• https://github.com/slackhq/nebula
• https://nebula.defined.net/docs/config/
• https://slack.engineering/introducing-nebula-the-open-source-global-overlay-network-from-slack/