# Pangolin

Pangolin is an open-source, self-hostable zero-trust remote access platform built on WireGuard that combines a secure VPN, an identity-aware reverse proxy, and privileged access management under a single identity and. It is open source and self-hosted, installable on Docker Hub, Proxmox and Unraid.

Canonical page: https://ourlocalhost.com/app/662/pangolin

## Description

Pangolin is an open-source, self-hostable zero-trust remote access platform built on WireGuard that combines a secure VPN, an identity-aware reverse proxy, and privileged access management under a single identity and policy model. It aims to deliver Cloudflare One- or Zscaler-style remote access for small teams and homelabbers that stays light and easy to deploy.

## Platform availability

Available on 2 of 9 platforms: Unraid, Proxmox.

## Health score

83/100 (Excellent), based on 5 of 5 factors.
- Maintained: 100 (last commit 23 days ago)
- Popular: 87 (23,019 GitHub stars)
- Easy to install: 60 (2 install platforms, install notes, setup guide, Docker image)
- Light to run: 60 (2 GB minimum RAM, runs on ARM)
- Security check: 82 (no serious findings, 3 minor, CI, tests)

## Links

- Docker Hub: https://hub.docker.com/r/fosrl/pangolin
- Proxmox: https://community-scripts.github.io/ProxmoxVE/scripts?id=pangolin
- Unraid: https://ca.unraid.net/apps/pangolin-0sb9s7z0pmujbf?q=Pangolin
- Official website: https://pangolin.net
- GitHub: https://github.com/fosrl/pangolin
- Documentation: https://docs.pangolin.net/

## Common questions

### Is there a one-click self-hosted installer for Pangolin?

Yes, the DigitalOcean marketplace offers a one-click pre-configured installer. You can also use the quick install guide to self-host.

### Does Pangolin support raw TCP and UDP traffic?

The 1.0.0-beta.9 release added support for raw TCP and UDP traffic.

### Can I integrate an identity provider for access?

Yes, it includes identity provider integration, role-based access control, and full audit logging.

### What license applies to self-hosted Community Edition?

The Community Edition is licensed under AGPL-3.

## Alternatives

- BunkerWeb: BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
- Haproxy: HAProxy is a TCP proxy and a HTTP reverse proxy.
- NetBird: NetBird is an open-source Zero Trust networking platform that makes it easy for engineers to create fast, secure, and private networks with…
- Nginx Proxy Manager: Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
- OpenVPN Connect: OpenVPN Connect provides flexible VPN solutions to secure your data communications, whether it's for Internet privacy, remote access for em…
- Remote.it: Remote.it is a tool that lets you securely access your home or office computer from anywhere.
- Seawise: Seawise is a Docker client that creates secure outbound connections to share self-hosted apps, such as Jellyfin, Plex, Immich, and Home Ass…
- Tailscale: Private networks made easy.
- Træfik Proxy: The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
- Twingate-Connector
- WG Tunnel: This is an alternative Android Application for WireGuard and Amnezia VPN with added features.
- WireGuard: WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote acces…

---
Source: Our Local Host (https://ourlocalhost.com/app/662/pangolin), the self-hosted and open-source app directory.