
Pangolin
Self-hosted secure tunneling and access gateway

Pangolin is a self-hosted secure access gateway designed to publish internal web apps and services without directly exposing your network. It focuses on simplifying tunneled publishing, centralizing access control, and providing an admin UI for managing endpoints and users.
Key Features
- Secure tunneling to expose private services behind NAT/firewalls
- Reverse-proxy style routing to multiple apps/services under one gateway
- Identity-aware access controls for protected routes (authentication/authorization)
- Web-based admin UI for managing services, users, and configuration
- Designed for homelab and small-team deployments with straightforward setup
Use Cases
- Publish homelab dashboards and internal tools to the internet with access control
- Provide remote access to self-hosted business apps without opening inbound ports broadly
- Create a single entry point for multiple internal services with centralized policy
Limitations and Considerations
- Feature set and integrations may be less extensive than large, mature zero-trust platforms; validate required auth providers and policies before adopting.
Pangolin is a good fit when you want a single, manageable gateway to expose internal services via tunnels while keeping access policies centralized. It targets practical deployments where ease of operation and controlled access are more important than complex enterprise features.
Categories:
Tags:
Tech Stack:
Similar Services

Pi-hole
Network-wide ad blocking via DNS sinkhole
DNS sinkhole that blocks ads, trackers, and malicious domains network-wide with a web dashboard, per-client controls, and optional DHCP/DNS features.

CyberChef
The Cyber Swiss Army Knife for data analysis and decoding
Browser-based tool for decoding, encoding, encryption, and data analysis using a drag-and-drop “recipe” workflow for security, DFIR, and engineering tasks.

AdGuard Home
Network-wide ads and tracker blocking via DNS
Self-hosted DNS server with ad/tracker blocking, custom filtering, parental controls, encrypted DNS, and per-client statistics for home networks.

Nginx Proxy Manager
Web UI for Nginx reverse proxy with Let's Encrypt SSL
Web-based reverse proxy manager for Nginx with hosts, streams, access lists, and automatic Let's Encrypt certificates via an easy admin UI.

SafeLine
Self-hosted WAF for protecting web apps and APIs
SafeLine is an open-source web application firewall (WAF) that protects web apps and APIs from common attacks using HTTP traffic inspection, rules, and management UI.


Teleport
Identity-native infrastructure access for SSH, Kubernetes, RDP and DBs
Open-source platform that provides unified, audited, identity-based access to servers, Kubernetes clusters, databases, and desktops without static credentials.
TypeScript