Fossorial Pangolin
Open-source platform enabling secure, seamless remote access via WireGuard tunnels with identity-based controls, a unified dashboard for monitoring and configuration, automatic SSL management, granular policy enforcement, and exposure of private resources behind firewalls.
Cost / License
- Free
- Open Source
Application types
Platforms
- Mac
- Windows
- Linux
- Online
- Self-Hosted
- Docker
- Android
- iPhone
Features
Properties
- Privacy focused
Features
- Supports SSL Certificates
- Access Control
- Reverse Proxy
- Two-factor Authentication
- No Tracking
- Ad-free
- Time-based One-time Password
- Dark Mode
- WireGuard
- TCP Proxy
- Free SSL support
- SSL encryption
- SSL
- Mesh network
- Load balancing
Tags
- Tunnel Service
- access-management
- traefik
- crowdsec
- UDP
- LetsEncrypt
Fossorial Pangolin News & Activities
Recent News
- Fla published news article about Fossorial Pangolin
Pangolin 1.15.0 introduces iOS and Android apps plus device security checksPangolin 1.15.0 introduces official iOS and Android apps, enabling zero-trust network access on mob...
- Fla published news article about Fossorial Pangolin
Pangolin 1.13.0: secure private network access with new networking modelFossorial Pangolin 1.13.0 debuts a new networking model, allowing user-device clients to connect se...
Recent activities
- Fla updated Fossorial Pangolin
- ALTERRA added Fossorial Pangolin as alternative to Webhook Relay, SocialVPN and playit.gg
- ALTERRA added Fossorial Pangolin as alternative to Remote.it
- ALTERRA added Fossorial Pangolin as alternative to Ten Forward, Raspberry Anywhere, tunnl.gg and sish
- ALTERRA added Fossorial Pangolin as alternative to StaqLab Tunnel, TunnlTo, tmate and OpenVPN Connect
- ALTERRA added Fossorial Pangolin as alternative to Openport, Yaler, Beeceptor and localhost.run
- ALTERRA added Fossorial Pangolin as alternative to Twingate, LocaltoNet and OpenXpress
- ALTERRA added Fossorial Pangolin as alternative to Wireskip, Packetriot, Pagekite and Optimistix Tunnel
- ALTERRA added Fossorial Pangolin as alternative to NetBird, Dataplicity, WireGuard and Spokes
What is Fossorial Pangolin?
Remote access networks anywhere Pangolin securely routes traffic over WireGuard tunnels to any private network. It works like a vpn and proxy that spans multiple networks. Just deploy the site connector to any network, and Pangolin will handle routing traffic to the right services on the other end.
Manage applications in one place Manage applications across all your systems in one simple place. Pangolin provides a unified dashboard where you can monitor, configure, and secure all your services regardless of where they're hosted. Automatic SSL certificates, domain management, and real-time monitoring make it easy to maintain your entire application infrastructure. Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.
Enforce identity and context-aware rules Protect your applications with enterprise-grade security. Pangolin supports SSO, OIDC, PIN authentication, passwords, and temporary share links. Enforce granular access rules based on IP addresses, paths, geographic location, and user roles.




Comments and Reviews
So i have a homelab, but i cannot access it from school computers with tools like Tailscale. Cloudflare requires a domain. This does not. Not only does it have free tunnels, subdomains and HTTPS certificates, and it delivers it in a simple interface. Supports auth by PIN code or SSO (supports LDAP, oAuth etc). Even with the internet tracking thing in Australia, this is amazing for easy access of private resources.
Pangolin is a very good, open source solution for selfhosters behind CGNAT. It's fast, easy to setup and lightweight.
Extremely reliable and very easy to set up!