Pangolin: Self-Hosted Zero Trust Tunneled Reverse Proxy

2025-07-11
Pangolin: Self-Hosted Zero Trust Tunneled Reverse Proxy

Pangolin is a self-hosted, tunneled reverse proxy server with identity and access control, designed to securely expose private resources across distributed networks. It acts as a central hub, connecting isolated networks – even those behind restrictive firewalls – via encrypted tunnels, enabling easy access to remote services without opening ports. Leveraging WireGuard, Pangolin offers robust features including centralized authentication (SSO, TOTP), role-based access control, and flexible deployment options. Extend its functionality with Traefik plugins. Use cases include bypassing port restrictions, deploying business applications, and managing IoT networks. A self-hosted alternative to Cloudflare Tunnels.

Development zero trust