DNClient

About

Managed Nebula connects your devices and servers over a private, encrypted network, even when they sit behind CGNAT, double NAT, or strict firewalls. Hosts connect directly to each other where possible and fall back to an encrypted relay only when no direct path exists, so no VPN gateway is required and no inbound ports need to be opened.

Access is controlled with mutual certificate authentication and firewall rules that deny inbound traffic by default and allow it by role and tag. Single sign-on works with providers such as Okta, Google, and Microsoft Entra ID, and the managed service handles the certificate authority, certificate rotation, and a lighthouse for host discovery.

Nebula is built on the open-source overlay originally created at Slack. Teams use Managed Nebula for remote access to internal apps and databases, multi-cloud deployments, and securing mobile and IoT fleets.