Pangolin

Pangolin (https://github.com/fosrl/pangolin) is the identity-aware remote access platform.

  • Network Services
  • Security
  • Tools & Utilities
Pangolin (https://github.com/fosrl/pangolin) is the identity-aware remote access platform. It's an authenticated reverse proxy and a zero-trust VPN. Chat with us on Discord! https://pangolin.net/discord

Platform availability

Available on 2 of 9 platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

83/100 Excellent

Maintained
100last commit 12 days ago
Popular
8723,019 GitHub stars
Easy to install
602 install platforms, install notes, setup guide, Docker image
Light to run
602 GB minimum RAM, runs on ARM
Security check
82no serious findings, 3 minor, CI, tests

Availability: platform listings confirmed today, links checked 13 days ago

GitHub stars
23,019
Open issues
112
Last commit
2026-10-01
Latest release
1.24.0
Activity
declining

Checked 7 days ago - source: GitHub (fosrl/pangolin)

Resources & Compatibility

Minimum requirements: 2 GB RAM, 1 CPU core(s), 8 GB disk. ARM (e.g. Raspberry Pi) is supported.

Checked 15 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Run the installer from your target folder Download the Pangolin installer, then move it into the folder where you want Pangolin installed before running it with sudo. It installs into the current folder, so choosing the folder first avoids ending up with files in an unexpected place. source
  • Start Pangolin with Docker Compose After the site files are set up, run docker compose up -d in the folder with docker-compose.yml. Docker Compose (a tool that starts packaged services from one file) starts the Newt container and any other configured services in the background, so skipping this leaves the app not running. source
  • Install the Olm client If you are setting up Olm clients, use the documented curl command to install Olm on each computer that needs it. It detects the system architecture and adds Olm to PATH (where the shell looks for commands), avoiding “command not found” errors. source

Fetched 15 days ago - each note links to its source

Alternatives (12)

  • BunkerWeb - BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
  • Haproxy - HAProxy is a TCP proxy and a HTTP reverse proxy.
  • NetBird - NetBird is an open-source Zero Trust networking platform that makes it easy for engineers to create fast, secure, and private networks with…
  • Nginx Proxy Manager - Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
  • OpenVPN Connect - OpenVPN Connect provides flexible VPN solutions to secure your data communications, whether it's for Internet privacy, remote access for em…
  • Remote.it - Remote.it is a tool that lets you securely access your home or office computer from anywhere.
  • Tailscale - Private networks made easy.
  • Træfik Proxy - The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
  • Twingate-Connector - Twingate makes Zero Trust Network Access easy to deploy, even easier to use, and always secure.
  • WG Tunnel - This is an alternative Android Application for WireGuard and Amnezia VPN with added features.
  • WireGuard - WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote acces…
  • ZeroTier - Zerotier is an open source, cross-platform virtual LAN / VPN

Checked yesterday - source: AlternativeTo

Common questions

Is there a one-click self-hosted installer for Pangolin?

Yes, the DigitalOcean marketplace offers a one-click pre-configured installer. You can also use the quick install guide to self-host.

Does Pangolin support raw TCP and UDP traffic?

The 1.0.0-beta.9 release added support for raw TCP and UDP traffic.

Can I integrate an identity provider for access?

Yes, it includes identity provider integration, role-based access control, and full audit logging.

What license applies to self-hosted Community Edition?

The Community Edition is licensed under AGPL-3.

Answers sourced from github.com, www.redditmedia.com

Community

Collected 9 days ago - public community threads

Install guides