Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks.
Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.
This is free and open source software.
Key Features
- Reverse Proxy Through WireGuard Tunnel:
- Expose private resources on your network without opening ports (firewall punching).
- Secure and easy to configure site-to-site connectivity via a custom user space WireGuard client, Newt.
- Built-in support for any WireGuard client.
- Automated SSL certificates (https) via LetsEncrypt.
- Support for HTTP/HTTPS and raw TCP/UDP services.
- Load balancing.
- Identity & Access Management:
- Centralized authentication system using platform SSO. Users will only have to manage one login.
- Define access control rules for IPs, IP ranges, and URL paths per resource.
- TOTP with backup codes for two-factor authentication.
- Create organizations, each with multiple sites, users, and roles.
- Role-based access control to manage resource access permissions.
- Additional authentication options include:
- Email whitelisting with one-time passcodes.
- Temporary, self-destructing share links.
- Resource specific pin codes.
- Resource specific passwords.
- Simple Dashboard UI:
- Manage sites, users, and roles with a clean and intuitive UI.
- Monitor site usage and connectivity.
- Light and dark mode options.
- Mobile friendly.
- Easy Deployment:
- Run on any cloud provider or on-premises.
- Docker Compose based setup for simplified deployment.
- Future-proof installation script for streamlined setup and feature additions.
- Use any WireGuard client to connect, or use Newt, our custom user space client for the best experience.
- Modular Design:
- Extend functionality with existing Traefik plugins, such as CrowdSec and Geoblock.
- Automatically install and configure Crowdsec via Pangolin’s installer script.
- Attach as many sites to the central server as you wish.
Website: github.com/fosrl/pangolin
Support:
Developer: Fossorial
License: GNU Affero General Public License v3.0 and the Fossorial Commercial license
Pangolin is written in TypeScript. Learn TypeScript with our recommended free books and free tutorials.
Related Software
| Network Tunnels | |
|---|---|
| frp | Fast reverse proxy |
| Pangolin | Tunneled mesh reverse proxy server with access control |
| iodine | Tunnel IPv4 data through a DNS server |
| wstunnel | Tunnel traffic over Websocket or HTTP2 |
| Chisel | Fast TCP/UDP tunnel |
| GO Simple Tunnel | Provides proxying, port forwarding, and reverse proxy capabilities |
| Tuntox | Forwards TCP connections over the Tox protocol |
| rustunnel | Secure tunnelling platform |
| 6tunnel | Tunnelling for applications that don't speak IPv6 |
| Gurren | SSH tunnel manager |
| VTun | Create virtual tunnels over TCP/IP networks |
| Ping Tunnel | Tunnel TCP connections to a remote host using ICMP echo request |
| isatapd | Creates and maintains an ISATAP tunnel |
| ClashT | Rule-based tunnel in Go |
Read our verdict in the software roundup.
 LinuxLinks helps you discover the best free and open source software for Linux. Explore our extensive collection of recommended applications, including alternatives to popular proprietary software.We also publish software reviews, Linux tutorials, hardware reviews, free programming books and articles covering the wider open source community. Browse our Linux resources to discover more. Know a useful free and open source Linux application we haven't covered? Suggest a program for inclusion. Has your software been featured on LinuxLinks? Display one of our Featured on LinuxLinks badges on your website or GitHub README. |
Please read our Comment Policy before commenting.