← Directory

Newt

For new deployments, our official recommendation is to use the Pangolin Site template which utilizes the Pangolin CLI rather than this template.

  • Network Services
  • Security
  • Tools & Utilities
For new deployments, our official recommendation is to use the Pangolin Site template which utilizes the Pangolin CLI rather than this template. Newt acts as a tunneled gateway for your local network, enabling seamless zero-trust remote access through the Pangolin (https://github.com/fosrl/pangolin) platform. It securely routes traffic to your Unraid services without complex port forwarding or exposure to the public internet. Chat with us on Discord! https://pangolin.net/discord

Platform availability

Available on 5 of 9 platforms

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

82/100 Excellent

Maintained
100last commit 13 days ago
Popular
59911 GitHub stars
Easy to install
755 install platforms, install notes, Docker image
Light to run
No data

Based on 3 of 4 factors.

Availability: platform listings confirmed today, links checked 15 days ago

GitHub stars
911
Open issues
32
Last commit
2026-10-01
Latest release
1.18.1
License
AGPL-3.0
Activity
steady

Checked 9 days ago - source: GitHub (fosrl/newt)

Resources & Compatibility

ARM (e.g. Raspberry Pi) is supported.

Checked 17 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Fill in endpoint, ID, and secret before starting Set --endpoint, --id, and --secret (or use a config file) so Newt knows which server to connect to and can prove your identity. If any are wrong, Newt can’t start a tunnel. source
  • Keep your config file private and in place If you start Newt with --config-file (for example /etc/newt/config.json), make sure the file exists, is readable by Newt, and stays protected because it may contain your secret key. Missing or too-loose permissions can block startup or leak access. source
  • Add mTLS certificate files if you use them If your setup uses mTLS (two-way client and server certificate checking), provide the client certificate, client key, and CA file (the trusted root certificate) paths, and make sure those files exist and aren’t blocked by permissions. Without all three, Newt can’t complete the secure connection. source

Fetched 16 days ago - each note links to its source

Alternatives

No alternatives collected yet.

Common questions

Should I use the Newt template for a new deployment?

For new deployments, the recommendation is to use the Pangolin Site template with the Pangolin CLI rather than the Newt template. Newt acts as the tunneled gateway to your local network.

What must I configure before Newt can start a tunnel?

Provide the server endpoint, connector ID, and secret using flags or a config file. If any of those values are missing or wrong, Newt cannot start the tunnel.

Can Newt expose local services behind CGNAT without opening router ports?

Yes. Self-hosting Pangolin with Newt can expose home services over the internet without opening router ports or publishing your home IP. It also avoids CGNAT limitations.

How do remote users authenticate for access?

Users connect with their existing identity. Pangolin enforces identity- and context-aware rules for zero-trust access to specific applications.

Answers sourced from fossengineer.com, github.com, github.com, pangolin.net

Community

Collected 16 days ago - public community threads