Pangolin is an identity-aware VPN and tunneled reverse proxy platform built on WireGuard that enables secure remote access to infrastructure with granular access control.
The tool addresses the challenge of securely connecting to private resources and applications across networks without exposing infrastructure directly to the internet. It combines VPN and reverse-proxy capabilities, allowing both browser-based access to web applications and client-based access to private resources. The platform uses WireGuard as its foundation and includes site connectors that establish outbound tunnels with intelligent NAT traversal, enabling access to networks behind restrictive firewalls without requiring public IPs or open ports. Authentication and authorization are identity-based, supporting single sign-on through OIDC and PAM, with additional security controls including PIN codes, passcodes, email OTP, geoblocking, and allow-lists.
Pangolin suits organizations and individuals needing zero-trust network access to distributed infrastructure. It works well for teams managing remote resources across multiple networks, IoT deployments requiring secure connectivity, and scenarios where traditional VPN solutions are impractical due to firewall constraints. The platform offers flexibility in deployment: a managed cloud service requires no infrastructure, while self-hosting options include a free community edition under AGPL-3 and an enterprise edition with commercial licensing that remains free for personal use and businesses under a specified revenue threshold. The browser-based reverse proxy capability distinguishes it from traditional VPN tools, enabling users to access web applications, remote desktops via VNC and RDP, and SSH terminals without installing client software.
Development activity shows consistent engagement with regular commits and pull requests being merged. The project maintains active documentation and provides multiple installation pathways including marketplace integrations. Community contributions are accepted and integrated into the codebase. The maintainers actively support the project through documentation updates and respond to issues raised by users.
