Fossorial Pangolin
Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted...
Features
Properties
- Privacy focused
Features
- Access Control
- Reverse Proxy
- Two-factor Authentication
- Supports SSL Certificates
- No Tracking
- Ad-free
- Time-based One-time Password
- Dark Mode
- WireGuard
- TCP Proxy
- SSL
- Mesh network
- Load balancing
Tags
- Tunnel Service
- access-management
- traefik
- crowdsec
- UDP
- LetsEncrypt
Fossorial Pangolin News & Activities
Recent News
- Fla published news article about Fossorial Pangolin
Pangolin 1.13.0: secure private network access with new networking modelFossorial Pangolin 1.13.0 debuts a new networking model, allowing user-device clients to connect se...
Recent activities
- wesapone reviewed Fossorial Pangolin
Extremely reliable and very easy to set up!
K0RR added Fossorial Pangolin as alternative to NPMplus- youlk1234 added Two-factor Authentication as a feature to Fossorial Pangolin
- youlk1234 reviewed Fossorial Pangolin
So i have a homelab, but i cannot access it from school computers with tools like Tailscale. Cloudflare requires a domain. This does not. Not only does it have free tunnels, subdomains and HTTPS certificates, and it delivers it in a simple interface. Supports auth by PIN code or SSO (supports LDAP, oAuth etc). Even with the internet tracking thing in Australia, this is amazing for easy access of private resources.
- youlk1234 liked Fossorial Pangolin
Fossorial Pangolin information
Developed by
Fossorial Licensing
Open Source and Free product.Written in
Alternatives
12 alternatives listedSupported Languages
- English
AlternativeTo Categories
Network & Admin, Security & Privacy, DevelopmentGitHub repository
- 17,666 Stars
- 520 Forks
- 68 Open Issues
- Updated
What is Fossorial Pangolin?
Pangolin is a self-hosted tunneled reverse proxy server with identity and access control, designed to securely expose private resources on distributed networks. Acting as a central hub, it connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports.
Key Features:
Reverse Proxy Through WireGuard Tunnel:
- Expose private resources on your network without opening ports (firewall punching).
- Secure and easy to configure site-to-site connectivity via a custom user space WireGuard client, Newt.
- Built-in support for any WireGuard client.
- Automated SSL certificates (https) via LetsEncrypt.
- Support for HTTP/HTTPS and raw TCP/UDP services.
- Load balancing.
Identity & Access Management:
- Centralized authentication system using platform SSO. Users will only have to manage one login.
- Define access control rules for IPs, IP ranges, and URL paths per resource.
- TOTP with backup codes for two-factor authentication.
- Create organizations, each with multiple sites, users, and roles.
- Role-based access control to manage resource access permissions.
- Additional authentication options include:
- Email whitelisting with one-time passcodes.
- Temporary, self-destructing share links.
- Resource specific pin codes.
- Resource specific passwords.
Simple Dashboard UI:
- Manage sites, users, and roles with a clean and intuitive UI.
- Monitor site usage and connectivity.
- Light and dark mode options.
- Mobile friendly.
Easy Deployment:
- Run on any cloud provider or on-premises.
- Docker Compose based setup for simplified deployment.
- Future-proof installation script for streamlined setup and feature additions.
- Use any WireGuard client to connect, or use Newt, our custom user space client for the best experience.
Modular Design:
- Extend functionality with existing Traefik plugins, such as CrowdSec and Geoblock.
- Automatically install and configure Crowdsec via Pangolin's installer script.
- Attach as many sites to the central server as you wish.
Comments and Reviews
So i have a homelab, but i cannot access it from school computers with tools like Tailscale. Cloudflare requires a domain. This does not. Not only does it have free tunnels, subdomains and HTTPS certificates, and it delivers it in a simple interface. Supports auth by PIN code or SSO (supports LDAP, oAuth etc). Even with the internet tracking thing in Australia, this is amazing for easy access of private resources.
Extremely reliable and very easy to set up!