> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to create a tunnel in Nebius Tunnels

A *tunnel* is the Nebius AI Cloud resource that receives public traffic and forwards it to a tunnel agent.

## Prerequisites

<Tabs group="interfaces">
  <Tab title="Web console">
    Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console.
  </Tab>

  <Tab title="CLI">
    1. [Install and configure](/cli/install) the Nebius AI Cloud CLI.

    2. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration:
       ```bash theme={null}
       cat ~/.nebius/config.yaml
       ```

    3. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console.
  </Tab>
</Tabs>

## Creating a tunnel

<Tabs group="interfaces">
  <Tab title="Web console">
    1. In the [web console](https://console.nebius.com), go to <Icon icon="https://mintcdn.com/nebius-ai-cloud/rOlLZ_MFvrheaI-h/_assets/sidebar/networking.svg?fit=max&auto=format&n=rOlLZ_MFvrheaI-h&q=85&s=7a4fe6d935f68131371d7b49a9bd595f" width="16" height="16" data-path="_assets/sidebar/networking.svg" /> **Networking** → **Tunnels**.

    2. Click **Create tunnel**.

    3. Specify a name for the tunnel.

    4. (Optional) Add a description.

    5. Click **Create**.
  </Tab>

  <Tab title="CLI">
    Create a tunnel:

    ```bash theme={null}
    nebius tunnel create \
      --title <tunnel_title>
    ```

    The command uses the [project ID](/iam/manage-projects#how-to-get-a-project-id) from your CLI profile configuration.
  </Tab>
</Tabs>

After you create a tunnel, you can [connect a service to it](/tunnels/connect) by configuring and running a tunnel agent.