← Directory

Gerbil

Gerbil (https://github.com/fosrl/gerbil) is the WireGuard interface management server and relay for Pangolin.

  • Network Services
  • Other
  • Security
  • Tools & Utilities
Gerbil (https://github.com/fosrl/gerbil) is the WireGuard interface management server and relay for Pangolin. It is required to run alongside Pangolin to enable tunneling. (https://github.com/fosrl/pangolin). Chat with us on Discord! https://pangolin.net/discord

Platform availability

Available on 1 of 9 platforms

  • Unraid
  • TrueNAS (not listed)
  • Umbrel (not listed)
  • ZimaOS (not listed)
  • Proxmox (not listed)
  • Helm (not listed)
  • Mac (not listed)
  • Windows (not listed)
  • Linux (not listed)

Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.

37/100 Low

Maintained
No data
Popular
No data
Easy to install
351 install platform, install notes, Docker image
Light to run
404 GB minimum RAM, runs on ARM

Based on 2 of 4 factors.

Availability: platform listings confirmed today, links checked 13 days ago

No GitHub repository data collected yet.

Resources & Compatibility

Minimum requirements: 4 GB RAM. ARM (e.g. Raspberry Pi) is supported.

Checked 14 days ago - source: Docker Hub image tags and published docs

First-install notes

  • Tell Gerbil its key and address Before starting, give Gerbil a config path (its settings file), a key-saving path, and a reachable address so it can create its WireGuard key (used for secure private networking) and be found. If the key isn't saved or the address is wrong, remote management and client connections can fail. source
  • Open the SNI proxy port The SNI proxy (a helper that routes HTTPS traffic by looking at the requested website) listens on a TCP port such as 8443 and needs an upstream proxy address and port set. If that port is blocked or the upstream is wrong, incoming HTTPS traffic won't be delivered. source
  • Open the UDP relay port The relay listens on a UDP port such as 21820 and carries WireGuard (secure private network) packets. Keep that UDP port open, otherwise some peer devices may not be able to connect. source

Fetched 14 days ago - each note links to its source

Alternatives (12)

  • BunkerWeb - BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
  • Haproxy - HAProxy is a TCP proxy and a HTTP reverse proxy.
  • NetBird - NetBird is an open-source Zero Trust networking platform that makes it easy for engineers to create fast, secure, and private networks with…
  • Nginx Proxy Manager - Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
  • OpenVPN Connect - OpenVPN Connect provides flexible VPN solutions to secure your data communications, whether it's for Internet privacy, remote access for em…
  • Remote.it - Remote.it is a tool that lets you securely access your home or office computer from anywhere.
  • Tailscale - Private networks made easy.
  • Træfik Proxy - The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
  • Twingate-Connector - Twingate makes Zero Trust Network Access easy to deploy, even easier to use, and always secure.
  • WG Tunnel - This is an alternative Android Application for WireGuard and Amnezia VPN with added features.
  • WireGuard - WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote acces…
  • ZeroTier - Zerotier is an open source, cross-platform virtual LAN / VPN

Checked yesterday - source: AlternativeTo

Common questions

What TCP port does Gerbil’s SNI proxy use for incoming HTTPS traffic?

It listens on a TCP port such as 8443 and needs an upstream proxy address and port configured. If the port is blocked or the upstream is wrong, incoming HTTPS traffic won’t be delivered.

Which UDP port must remain open for Gerbil’s WireGuard relay?

The relay listens on a UDP port such as 21820 and carries WireGuard packets. Keeping that UDP port open is required, otherwise some peer devices may not be able to connect.

What must be provided to Gerbil before starting it?

Give it a config path, a key-saving path, and a reachable address so it can create its WireGuard key and be found. If the key isn’t saved or the address is wrong, remote management and client connections can fail.

Answers sourced from github.com, github.com, github.com

Community

Collected 13 days ago - public community threads