Tunneled Mesh Reverse Proxy Server with Identity and Access Control and Dashboard UI
Find a file
Owen Schwartz 81922f54d5
Merge pull request #2889 from fosrl/dev
Fix type imports
2026-04-21 22:18:14 -07:00
.github Merge pull request #2792 from fosrl/dependabot/github_actions/actions/setup-go-6.4.0 2026-04-21 21:34:26 -07:00
.vscode 🎨 use prettier for formatting typescript 2026-01-29 05:05:34 +01:00
cli Make sshCA GA 2026-02-25 16:04:47 -08:00
config Remove journal 2026-04-14 20:23:56 -07:00
install Bump golang.org/x/term in /install in the minor-updates group 2026-04-20 01:36:49 +00:00
messages New translations en-us.json (Spanish) 2026-04-21 21:35:26 -07:00
public Adding external actions 2026-04-21 11:52:15 -07:00
server Fix type imports 2026-04-21 22:17:49 -07:00
src Fix type imports 2026-04-21 22:17:49 -07:00
test Update year 2026-04-15 14:41:13 -07:00
.dockerignore Exclude migrations? 2026-02-24 19:48:08 -08:00
.editorconfig add .editorconfig and fix db imports in scripts 2024-09-28 17:42:07 -04:00
.eslintrc.json Format all files 2025-12-09 10:56:14 -05:00
.gitignore Merge branch 'dev' into feat/logo-path-in-enterprise 2026-02-13 17:16:25 -08:00
.nvmrc Update lock, downgrade to node 24 2025-12-06 15:12:58 -05:00
.prettierignore 🔨Add format script and install prettier 2025-12-08 19:57:08 +01:00
.prettierrc env context and refactor api support different ports 2024-12-12 22:46:58 -05:00
components.json Format all files 2025-12-09 10:56:14 -05:00
CONTRIBUTING.md change digpangolin.com to pangolin.net 2025-10-18 11:51:09 -07:00
crowdin.yml Add first i18n stuff 2025-05-04 15:11:42 +00:00
docker-compose.drizzle.yml 🔨 add drizzle in docker-compose DEV for viewing the postgres db in local development 2025-10-30 00:10:49 +01:00
docker-compose.example.yml Add default memory limits 2026-02-28 12:14:27 -08:00
docker-compose.pgr.yml 🔧 un comment volumes in docker compose 2026-03-23 18:50:09 +01:00
docker-compose.yml Update build process 2025-09-05 11:23:43 -07:00
Dockerfile Use ecr base to build 2026-02-26 21:43:14 -08:00
Dockerfile.dev update packages and node 2026-02-02 19:17:40 +00:00
drizzle.pg.config.ts Format all files 2025-12-09 10:56:14 -05:00
drizzle.sqlite.config.ts Format all files 2025-12-09 10:56:14 -05:00
esbuild.mjs Merge remote-tracking branch 'origin/dev' into update-packages 2026-02-07 08:14:16 +00:00
eslint.config.js Format all files 2025-12-09 10:56:14 -05:00
LICENSE Chungus 2025-10-04 18:36:44 -07:00
license_header_checker.py Add resource column to hc and remove — 2026-04-16 17:42:30 -07:00
Makefile Merge branch 'main' into dev 2026-01-11 14:19:59 -08:00
next.config.ts add org auth slug with device auth support 2025-12-19 17:04:37 -05:00
package-lock.json Merge pull request #2885 from fosrl/dev 2026-04-21 21:41:23 -07:00
package.json Merge pull request #2810 from fosrl/dependabot/npm_and_yarn/drizzle-orm-0.45.2 2026-04-21 21:33:43 -07:00
postcss.config.mjs Format all files 2025-12-09 10:56:14 -05:00
README.md Add resource column to hc and remove — 2026-04-16 17:42:30 -07:00
SECURITY.md Update security 2026-03-31 15:26:39 -07:00
tsconfig.enterprise.json update packages 2026-02-02 18:48:35 +00:00
tsconfig.oss.json update packages 2026-02-02 18:48:35 +00:00
tsconfig.saas.json update packages 2026-02-02 18:48:35 +00:00

Discord Slack Docker Stars YouTube

Get started with Pangolin at app.pangolin.net

Pangolin is an open-source, identity-based remote access platform built on WireGuard that enables secure, seamless connectivity to private and public resources. Pangolin combines reverse proxy and VPN capabilities into one platform, providing browser-based access to web applications and client-based access to any private resources with NAT traversal, all with granular access controls.

Installation

Pangolin

Deployment Options

  • Pangolin Cloud - Fully managed service - no infrastructure required.
  • Self-Host: Community Edition - Free, open source, and licensed under AGPL-3.
  • Self-Host: Enterprise Edition - Licensed under Fossorial Commercial License. Free for personal and hobbyist use, and for businesses making less than $100K USD gross annual revenue.

Key Features

Connect remote networks with sites and NAT traversal

Pangolin's site connectors provide gateways into networks so you can access any networked resources. Sites use outbound tunnels and intelligent NAT traversal to make networks behind restrictive firewalls available for authorized access without public IPs or open ports. Easily deploy a site as a binary or container on any platform.

Sites

Browser-based reverse proxy access

Expose web applications through identity and context-aware tunneled reverse proxies. Users access applications through any web browser with authentication and granular access control without installing a client. Pangolin handles routing, load balancing, health checking, and automatic SSL certificates without exposing your network directly to the internet.

Reverse proxy access

Client-based private resource access

Access private resources like SSH servers, databases, RDP, and entire network ranges through Pangolin clients. Intelligent NAT traversal enables connections even through restrictive firewalls, while DNS aliases provide friendly names and fast connections to resources across all your sites. Add redundancy by routing traffic through multiple connectors in your network.

Private resources

Give users and roles access to resources

Use Pangolin's built in users or bring your own identity provider and set up role based access control (RBAC). Grant users access to specific resources, not entire networks. Unlike traditional VPNs that expose full network access, Pangolin's zero-trust model ensures users can only reach the applications, services, and routes you explicitly define.

Users from identity provider with roles

Download Clients

Download the Pangolin client for your platform:

Get Started

Sign up now

Create a free account at app.pangolin.net to get started with Pangolin Cloud.

Check out the docs

We encourage everyone to read the full documentation first, which is available at docs.pangolin.net. This README provides only a very brief subset of the docs to illustrate some basic ideas.

Licensing

Pangolin is dual licensed under the AGPL-3 and the Fossorial Commercial License. For inquiries about commercial licensing, please contact us at contact@pangolin.net.

Contributions

Please see CONTRIBUTING in the repository for guidelines and best practices.