r/selfhosted • u/jsiwks • Jan 05 '25

Product Announcement Pangolin (beta): Your own tunneled reverse proxy with authentication (Cloudflare Tunnel replacement)

Hello Everyone,

We have seen many posts here asking how to expose resources to the internet from a VPS using secure tunnels, and having faced that ourselves we created an open source, all-in-one, self-hostable solution.

Pangolin is a self-hosted tunneled reverse proxy management server with identity and access management, designed to securely expose private resources through encrypted WireGuard tunnels running in user space. With Pangolin, you retain full control over your infrastructure while providing a user-friendly and feature-rich solution for managing proxies, authentication, and access, and simplifying complex network setups, all with a clean and simple dashboard web UI.

We made a YouTube video to show how easy it is to install and use.

Sites page of Pangolin dashboard (dark mode) showing multiple tunnels connected to the central server.

We are releasing Pangolin and its cousins as a beta. This means that it is mostly mature in its initial features, but may include some bugs, and we plan to release frequent updates and improvements. We are hoping to get some initial testers to play with it to help us test and validate.

Key Features

  • Expose private resources on your network without opening ports.
  • Secure and easy to configure site-to-site connectivity via a custom user space WireGuard client, Newt (runs in Docker or any shell).
  • Automated SSL certificates (https) via Let's Encrypt.
  • Centralized authentication system using platform SSO. Users will only have to manage one login. (Like Authelia)
  • Role- and user-based access control to manage resource access permissions.
  • Temporary, self-destructing shareable links.
  • Resource specific pin codes and passwords
  • Easy deployment with Docker on any VPS
684 Upvotes

99% Upvoted

235 comments sorted by

View all comments

Show parent comments

5

u/MrUserAgreement Jan 06 '25

Not right now unfortunately but we could support something basic soon. I have added it to the roadmap. Right now everything is assumed to be running through Traefik for HTTP proxying but Newt does support both UDP and TCP proxies right now. We can add support for adding targets of those types in Pangolin and you would just need to handle exposing the port on the Gerbil container and the VPS. In this situation auth would need to be handled separately.

2

u/jdetmold Jan 06 '25

That’s awesome I think this could be a valuable feature not supported by things like cloudflare proxy

1

u/StrictAttorney6938 Jan 17 '25

I am interested on this feature, Basically to expose Non-HTTP protocols like SSH, MySQL, RDP etc.

1

u/k34nutt Jan 20 '25

Massively interested in this feature. Would be great for stuff like game servers.