Open Source In Development
NexusHub is coming soon
A self-hosted WireGuard management platform with a Go backend, React dashboard, API and CLI workflows, observability, and programmable eBPF security rules. NexusHub is currently under active development.
Features, screenshots, and release packages may change before the first stable version.
Heads up — v2.0.0 is a full rewrite. The v1.0.0 bash installer + Python WebGUI is being replaced. Legacy files remain in git history for reference.
NexusHubBandwidth OverviewDownload Upload
Bandwidth by Location
- New York 38%
- Frankfurt 27%
- Singapore 18%
- London 17%
UserLocationLast HandshakeTransfer
john.doeNew York2 minutes ago12.4 GB
alice.smithFrankfurt3 minutes ago8.7 GB
mark.jonesSingapore5 minutes ago6.1 GB
100% Open SourceTransparent, community driven, and GPL-3.0 licensed.
Under Active DevelopmentNew features, fixes, and improvements are landing.
Privacy FirstSelf-hosted by design. Your data stays yours.
WireGuard ManagementManage locations, peers, and configurations with ease.
Access ControlCreate groups and define powerful access rules.
MonitoringReal-time bandwidth and connection insights.
Security2FA, audit logs, and eBPF-powered protection.
Features
Everything needed to operate WireGuard securely
Peer lifecycle
Create, rotate, revoke, and export peers with QR-code and WireGuard config handoff.
Interface management
Manage multiple wg interfaces with IP pool allocation, DNS push, and endpoint handling.
eBPF security rules
Enforce filters, bandwidth metering, connection limits, and log actions directly in the kernel.
Role-based access
Separate super-admin, admin, and user workflows with audit logging for every mutation.
API, CLI, dashboard
Operate NexusHub from the web UI, REST API, or the nexushub CLI with the same capabilities.
Observability
Export Prometheus metrics, OpenTelemetry traces, Grafana dashboards, and alert examples.
Deploy anywhere
Run with Docker Compose, bare-metal systemd, or Kubernetes Helm using production-ready guides.
Security operations
TOTP, encrypted peer keys, retention-managed audit logs, and backup guidance for operators.
Modern stack
Go, PostgreSQL, React, TypeScript, Tailwind, Recharts, Playwright, and GitHub Actions.
Screenshots
Dashboard views ready for real project captures
Operations Dashboard
Replace this preview with the final NexusHub dashboard screenshot once the application UI is ready.
Peer Management
Peer creation, config export, QR handoff, and PSK rotation.
Rule Editor
Allow, deny, log, and rate-limit rules for eBPF enforcement.
Docs
Deployment and day-to-day administration
User guide
First login, creating interfaces, adding peers, eBPF rules, 2FA, audit logs, and backup basics.
Read docDeployment guide
Docker Compose, bare-metal systemd, and Helm deployment paths with required secrets and operational notes.
Read docAPI reference
Rendered OpenAPI docs and the embedded raw API spec served from running NexusHub instances.
Read docBackup and restore
Postgres dumps, encryption key handling, restore checks, and disaster recovery drill guidance.
Read doc
Roadmap
Path to NexusHub v2.0.0
Foundation and dataplane
Repo scaffolding, database, auth, WireGuard core, and most eBPF rule loading work are complete upstream.
Product surface
Backend API, frontend dashboard, and CLI workflows are largely implemented, including rules, metrics, and admin pages.
Testing and observability
Frontend tests, load baseline, Prometheus, Grafana, tracing, audit retention, and alert examples are in place.
Packaging and deployment
Multi-arch images, systemd units, install scripts, Docker+Caddy, Helm, and backup docs are being finalized.
Launch readiness
Screenshots, release notes, changelog, v2.0.0 tag, and final launch content remain before GA.
Contribute
Help build a secure open-source WireGuard control plane
Open issues, review pull requests, test deployments, write docs, or sponsor development once the donation target is finalized.