Pangolin

medium

Identity-aware tunnel and reverse proxy for securely exposing private services through WireGuard.

1 GB RAM Docker ActiveAGPL-3.0

Source Docs Website

Replaces

Cloudflare WAF Tailscale

Pros

Strong self-hosted alternative to hosted tunnels and access proxies
Combines WireGuard networking with app-level access controls
Useful for exposing homelab services without opening broad ports

Cons

More moving parts than a simple reverse proxy
Requires careful DNS, tunnel, and identity setup
Younger ecosystem than Tailscale or Cloudflare Access

Tags

tunnel reverse-proxy wireguard zero-trust remote-access

Need a server? Hosting recommendations

Related

Similar Apps

AdGuard Home

Network-wide ad and tracker blocker that acts as a DNS sinkhole.

Angie

Drop-in nginx replacement by former core nginx developers. Adds built-in ACME, HTTP/3, and a REST API for monitoring.

Blocky

Fast DNS proxy and ad blocker configured with YAML for advanced home networks.