fosrl/pangolin
Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
Backblaze Generative Media Hackathon
Build the next generation of AI media apps with Genblaze, stored on Backblaze B2. $10,000 in prizes.
Loading star history...
Use Cases & Benefits
- Provides an identity-aware VPN and tunneled reverse proxy for secure remote access using WireGuard technology.
- Enables seamless, encrypted access to applications across isolated networks without opening ports or requiring traditional VPN setups.
- Use for securely exposing internal applications to remote users with identity and context-aware access controls like SSO and OIDC.
- Use for connecting and routing traffic between multiple private networks behind restrictive firewalls via lightweight client tunnels.
- Use for managing and monitoring all remote services centrally with unified dashboards and advanced routing features like load balancing.
About pangolin
Start testing Pangolin at app.pangolin.net
Pangolin is a self-hosted tunneled reverse proxy server with identity and context aware access control, designed to easily expose and protect applications running anywhere. Pangolin acts as a central hub and connects isolated networks — even those behind restrictive firewalls — through encrypted tunnels, enabling easy access to remote services without opening ports or requiring a VPN.
Installation
Check out the quick install guide for how to install and set up Pangolin.
Deployment Options
| Description | |
|---|---|
| Self-Host: Community Edition | Free, open source, and licensed under AGPL-3. |
| Self-Host: Enterprise Edition | Licensed under Fossorial Commercial License. Free for personal and hobbyist use, and for businesses earning under $100K USD annually. |
| Pangolin Cloud | Fully managed service with instant setup and pay-as-you-go pricing — no infrastructure required. Or, self-host your own remote node and connect to our control plane. |
Key Features
Pangolin packages everything you need for seamless application access and exposure into one cohesive platform.
| Manage applications in one place Pangolin provides a unified dashboard where you can monitor, configure, and secure all of your services regardless of where they are hosted. | |
| Reverse proxy across networks anywhere Route traffic via tunnels to any private network. Pangolin works like a reverse proxy that spans multiple networks and handles routing, load balancing, health checking, and more to the right services on the other end. |  |
| Enforce identity and context aware rules Protect your applications with identity and context aware rules such as SSO, OIDC, PIN, password, temporary share links, geolocation, IP, and more. |  |
| Quickly connect Pangolin sites Pangolin's lightweight Newt client runs in userspace and can run anywhere. Use it as a site connector to route traffic to backends across all of your environments. |  |
Get Started
Check out the docs
We encourage everyone to read the full documentation first, which is available at docs.pangolin.net. This README provides only a very brief subset of the docs to illustrate some basic ideas.
Sign up and try now
For Pangolin's managed service, you will first need to create an account at app.pangolin.net. We have a generous free tier to get started.
Licensing
Pangolin is dual licensed under the AGPL-3 and the Fossorial Commercial License. For inquiries about commercial licensing, please contact us at [email protected].
Contributions
Please see CONTRIBUTING in the repository for guidelines and best practices.
Discover Repositories
Search across tracked repositories by name or description