fosrl/pangolin

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

22501 stars · 764 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilities. It provides zero-trust, granular access to web applications and private resources like SSH and databases, with NAT traversal so no public IPs or open ports are needed.

Use cases

• expose self-hosted apps securely without opening ports
• replace traditional VPN with zero-trust remote access
• access home lab services behind restrictive firewalls
• give team members SSO-based access to internal tools
• tunnel into private networks with NAT traversal
• secure remote SSH and RDP access to servers
• self-host a Cloudflare Tunnel alternative with identity controls

When to choose

• you need identity-based, per-resource access control instead of full-network VPN
• your servers sit behind NAT or firewalls without public IPs
• you want a self-hosted alternative to Tailscale, Cloudflare Access, or ZTNA products
• you want browser-based clientless access plus client-based private resource access in one platform

When to avoid

• you only need a simple site-to-site VPN without identity management
• you require a fully permissive open-source license (AGPL-3 core with commercial enterprise tiers)
• you need lightweight point-to-point tunneling without a management dashboard
• you cannot run a Docker-based or server deployment for the control plane

Facets

application · maturity active

vpn proxy auth security self-hosted networking security networking self-hosted privacy developer-tools windows self-hosted cross-platform wireguard zero-trust ztna reverse-proxy nat-traversal single-sign-on oidc tunneling remote-access typescript linux macos android ios docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="fosrl/pangolin")