# Gerbil

Gerbil is a WireGuard interface management server and relay that runs alongside Pangolin to enable secure tunneling. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/714/gerbil

## Description

Gerbil is a WireGuard interface management server and relay that runs alongside Pangolin to enable secure tunneling. Written in Go, it provides an HTTP API for creating WireGuard interfaces and managing peers on your homelab server.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

66/100 (Good), based on 4 of 4 factors.
- Maintained: 100 (last commit 25 days ago)
- Popular: 51 (337 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)
- Light to run: 40 (4 GB minimum RAM, runs on ARM)

## Links

- Docker Hub: https://hub.docker.com/r/fosrl/gerbil
- Documentation: https://docs.pangolin.net
- GitHub: https://github.com/fosrl/gerbil
- Unraid: https://ca.unraid.net/apps/gerbil-06yz3oe1agx1p6?q=Gerbil
- Official website: https://pangolin.net

## Common questions

### What TCP port does Gerbil’s SNI proxy use for incoming HTTPS traffic?

It listens on a TCP port such as 8443 and needs an upstream proxy address and port configured. If the port is blocked or the upstream is wrong, incoming HTTPS traffic won’t be delivered.

### Which UDP port must remain open for Gerbil’s WireGuard relay?

The relay listens on a UDP port such as 21820 and carries WireGuard packets. Keeping that UDP port open is required, otherwise some peer devices may not be able to connect.

### What must be provided to Gerbil before starting it?

Give it a config path, a key-saving path, and a reachable address so it can create its WireGuard key and be found. If the key isn’t saved or the address is wrong, remote management and client connections can fail.

## Alternatives

- BunkerWeb: BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
- Haproxy: HAProxy is a TCP proxy and a HTTP reverse proxy.
- NetBird: NetBird is an open-source Zero Trust networking platform that makes it easy for engineers to create fast, secure, and private networks with…
- Nginx Proxy Manager: Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
- OpenVPN Connect: OpenVPN Connect provides flexible VPN solutions to secure your data communications, whether it's for Internet privacy, remote access for em…
- Remote.it: Remote.it is a tool that lets you securely access your home or office computer from anywhere.
- Seawise: Seawise is a Docker client that creates secure outbound connections to share self-hosted apps, such as Jellyfin, Plex, Immich, and Home Ass…
- Tailscale: Private networks made easy.
- Træfik Proxy: The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
- Twingate-Connector
- WG Tunnel: This is an alternative Android Application for WireGuard and Amnezia VPN with added features.
- WireGuard: WireGuard is a fast, lightweight virtual private network (VPN) server that creates encrypted point-to-point tunnels for secure remote acces…

---
Source: Our Local Host (https://ourlocalhost.com/app/714/gerbil), the self-hosted and open-source app directory.