Fossorial Pangolin
Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted...
Features
Properties
- Privacy focused
Features
- No Tracking
- Two-factor Authentication
- Ad-free
- Time-based One-time Password
- Dark Mode
- WireGuard
- TCP Proxy
- Access Control
- Reverse Proxy
- Supports SSL Certificates
- SSL
- Mesh network
- Load balancing
Tags
- Tunnel Service
- access-management
- traefik
- crowdsec
- UDP
- LetsEncrypt
Fossorial Pangolin News & Activities
Recent News
- Fla published news article about Fossorial Pangolin
Pangolin 1.13.0: secure private network access with new networking modelFossorial Pangolin 1.13.0 debuts a new networking model, allowing user-device clients to connect se...
Recent activities
K0RR added Fossorial Pangolin as alternative to NPMplus- youlk1234 added Two-factor Authentication as a feature to Fossorial Pangolin
- youlk1234 reviewed Fossorial Pangolin
So i have a homelab, but i cannot access it from school computers with tools like Tailscale. Cloudflare requires a domain. This does not. Not only does it have free tunnels, subdomains and HTTPS certificates, and it delivers it in a simple interface. Supports auth by PIN code or SSO (supports LDAP, oAuth etc). Even with the internet tracking thing in Australia, this is amazing for easy access of private resources.
- youlk1234 liked Fossorial Pangolin
POX added Fossorial Pangolin as alternative to DockFlare- bannert1337 updated Fossorial Pangolin
Fossorial Pangolin information
Developed by
Fossorial Licensing
Open Source and Free product.Written in
Alternatives
12 alternatives listedSupported Languages
- English
AlternativeTo Categories
Network & Admin, Security & Privacy, DevelopmentGitHub repository
- 16,770 Stars
- 490 Forks
- 67 Open Issues
- Updated
What is Fossorial Pangolin?
Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.
Key Features:
Reverse Proxy Through WireGuard Tunnel:
- Expose private resources on your network without opening ports (firewall punching).
- Secure and easy to configure site-to-site connectivity via a custom user space WireGuard client, Newt.
- Built-in support for any WireGuard client.
- Automated SSL certificates (https) via LetsEncrypt.
- Support for HTTP/HTTPS and raw TCP/UDP services.
- Load balancing.
Identity & Access Management:
- Centralized authentication system using platform SSO. Users will only have to manage one login.
- Define access control rules for IPs, IP ranges, and URL paths per resource.
- TOTP with backup codes for two-factor authentication.
- Create organizations, each with multiple sites, users, and roles.
- Role-based access control to manage resource access permissions.
- Additional authentication options include:
- Email whitelisting with one-time passcodes.
- Temporary, self-destructing share links.
- Resource specific pin codes.
- Resource specific passwords.
Simple Dashboard UI:
- Manage sites, users, and roles with a clean and intuitive UI.
- Monitor site usage and connectivity.
- Light and dark mode options.
- Mobile friendly.
Easy Deployment:
- Run on any cloud provider or on-premises.
- Docker Compose based setup for simplified deployment.
- Future-proof installation script for streamlined setup and feature additions.
- Use any WireGuard client to connect, or use Newt, our custom user space client for the best experience.
Modular Design:
- Extend functionality with existing Traefik plugins, such as CrowdSec and Geoblock.
- Automatically install and configure Crowdsec via Pangolin's installer script.
- Attach as many sites to the central server as you wish.
Comments and Reviews
So i have a homelab, but i cannot access it from school computers with tools like Tailscale. Cloudflare requires a domain. This does not. Not only does it have free tunnels, subdomains and HTTPS certificates, and it delivers it in a simple interface. Supports auth by PIN code or SSO (supports LDAP, oAuth etc). Even with the internet tracking thing in Australia, this is amazing for easy access of private resources.