Overview
Pangolin at its core is a self-hosted tunneled reverse proxy with identity and access management, designed to securely expose private resources through encrypted WireGuard tunnels running in user space. Think self hosted Cloudflare tunnels.
Description
Pangolin is a self-hosted, WireGuard-based tunneling reverse proxy that securely exposes private services to the internet with built-in identity and access management (IAM). Designed as a self-hosted alternative to Cloudflare Tunnels, it encrypts traffic via user-space WireGuard tunnels, eliminating the need for public IPs or complex firewall rules. With support for OAuth2, API keys, and multi-factor authentication (MFA), Pangolin ensures secure access control while maintaining full user ownership of data. Lightweight and cross-platform, it’s ideal for developers, DevOps teams, and enterprises needing private, zero-trust-compliant remote access to internal applications, IoT devices, or hybrid cloud resources—all without relying on third-party cloud providers.