Security

Pangolin – tunneled mesh reverse proxy server with access control

Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks.

Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.

This is free and open source software.

Features include:

  • Reverse Proxy Through WireGuard Tunnel:
    • Expose private resources on your network without opening ports (firewall punching).
    • Secure and easy to configure site-to-site connectivity via a custom user space WireGuard client, Newt.
    • Built-in support for any WireGuard client.
    • Automated SSL certificates (https) via LetsEncrypt.
    • Support for HTTP/HTTPS and raw TCP/UDP services.
    • Load balancing.
  • Identity & Access Management:
    • Centralized authentication system using platform SSO. Users will only have to manage one login.
    • Define access control rules for IPs, IP ranges, and URL paths per resource.
    • TOTP with backup codes for two-factor authentication.
    • Create organizations, each with multiple sites, users, and roles.
    • Role-based access control to manage resource access permissions.
    • Additional authentication options include:
      • Email whitelisting with one-time passcodes.
      • Temporary, self-destructing share links.
      • Resource specific pin codes.
      • Resource specific passwords.
  • Simple Dashboard UI:
    • Manage sites, users, and roles with a clean and intuitive UI.
    • Monitor site usage and connectivity.
    • Light and dark mode options.
    • Mobile friendly.
  • Easy Deployment:
    • Run on any cloud provider or on-premises.
    • Docker Compose based setup for simplified deployment.
    • Future-proof installation script for streamlined setup and feature additions.
    • Use any WireGuard client to connect, or use Newt, our custom user space client for the best experience.
  • Modular Design:
    • Extend functionality with existing Traefik plugins, such as CrowdSec and Geoblock.
    • Automatically install and configure Crowdsec via Pangolin’s installer script.
    • Attach as many sites to the central server as you wish.

Website: github.com/fosrl/pangolin
Support:
Developer: Fossorial
License: GNU Affero General Public License v3.0 and the Fossorial Commercial license

Pangolin
Click image for full size

Pangolin is written in TypeScript. Learn TypeScript with our recommended free books and free tutorials.


Popular series
Free and Open Source SoftwareThe largest compilation of the best free and open source software in the universe. Each article is supplied with a legendary ratings chart helping you to make informed decisions.
ReviewsHundreds of in-depth reviews offering our unbiased and expert opinion on software. We offer helpful and impartial information.
The Big List of Active Linux Distros is a large compilation of actively developed Linux distributions.
Alternatives to Proprietary SoftwareReplace proprietary software with open source alternatives: Google, Microsoft, Apple, Adobe, IBM, Autodesk, Oracle, Atlassian, Corel, Cisco, Intuit, and SAS.
GamesAwesome Free Linux Games Tools showcases a series of tools that making gaming on Linux a more pleasurable experience. This is a new series.
Artificial intelligence iconMachine Learning explores practical applications of machine learning and deep learning from a Linux perspective. We've written reviews of more than 40 self-hosted apps. All are free and open source.
Guide to LinuxNew to Linux? Read our Linux for Starters series. We start right at the basics and teach you everything you need to know to get started with Linux.
Alternatives to popular CLI tools showcases essential tools that are modern replacements for core Linux utilities.
System ToolsEssential Linux system tools focuses on small, indispensable utilities, useful for system administrators as well as regular users.
ProductivityLinux utilities to maximise your productivity. Small, indispensable tools, useful for anyone running a Linux machine.
AudioSurveys popular streaming services from a Linux perspective: Amazon Music Unlimited, Myuzi, Spotify, Deezer, Tidal.
Saving Money with LinuxSaving Money with Linux looks at how you can reduce your energy bills running Linux.
Home ComputersHome computers became commonplace in the 1980s. Emulate home computers including the Commodore 64, Amiga, Atari ST, ZX81, Amstrad CPC, and ZX Spectrum.
Now and ThenNow and Then examines how promising open source software fared over the years. It can be a bumpy ride.
Linux at HomeLinux at Home looks at a range of home activities where Linux can play its part, making the most of our time at home, keeping active and engaged.
Linux CandyLinux Candy reveals the lighter side of Linux. Have some fun and escape from the daily drudgery.
DockerGetting Started with Docker helps you master Docker, a set of platform as a service products that delivers software in packages called containers.
Android AppsBest Free Android Apps. We showcase free Android apps that are definitely worth downloading. There's a strict eligibility criteria for inclusion in this series.
Programming BooksThese best free books accelerate your learning of every programming language. Learn a new language today!
Programming TutorialsThese free tutorials offer the perfect tonic to our free programming books series.
Linux Around The WorldLinux Around The World showcases usergroups that are relevant to Linux enthusiasts. Great ways to meet up with fellow enthusiasts.
Stars and StripesStars and Stripes is an occasional series looking at the impact of Linux in the USA.
Subscribe
Notify of
guest

This site uses Akismet to reduce spam. Read our Comment FAQ.

0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments