Product Information
What is Fossorial pangolin?
Pangolin is a self-hosted tunneling reverse proxy with identity and access control features, designed to securely expose private resources across distributed networks. Acting as a central hub, it connects isolated networks—even those behind restrictive firewalls—via encrypted tunnels, enabling easy access to remote services without the need to open ports.
**Key Features:**
**Reverse Proxy via WireGuard Tunnels:**
- Expose private resources on your network without opening ports (firewall hole-punching).
- Securely and easily configure site-to-site connections using Newt, a custom userspace WireGuard client.
- Built-in support for any WireGuard client.
- Automatic SSL certificates (HTTPS) via LetsEncrypt.
- Supports HTTP/HTTPS and raw TCP/UDP services.
- Load balancing.
**Identity & Access Management:**
- Centralized authentication using platform SSO—users manage their login once.
- Define access control rules per resource for IPs, IP ranges, and URL paths.
- TOTP with backup codes for two-factor authentication.
- Create organizations, each with multiple sites, users, and roles.
- Role-based access control to manage resource permissions.
Additional authentication options include:
- Email whitelisting with one-time passwords.
- Temporary, self-destructing share links.
- Resource-specific PINs.
- Resource-specific passwords.
**Simple Dashboard UI:**
- Manage sites, users, and roles with a clean, intuitive interface.
- Monitor site usage and connections.
- Light and dark mode options.
- Mobile-friendly.
**Easy Deployment:**
- Run on any cloud provider or on-premises.
- Docker Compose-based setup for simplified deployment.
- Future-proof installer scripts for easy setup and feature additions.
- Connect using any WireGuard client or our custom userspace client, Newt, for the best experience.
**Modular Design:**
- Extend functionality with existing Traefik plugins, such as CrowdSec and Geoblock.
- Automated installation and configuration of CrowdSec via Pangolin’s installer script.
- Attach as many sites as needed to the central server.
How to use Fossorial pangolin?
Fossorial Pangolin is a self-hosted tunneling reverse proxy server with identity and access control capabilities, designed to securely expose private resources on distributed networks through encrypted tunnels, enabling convenient remote service access.
Core Functions of Fossorial pangolin
Privacy-Focused
Two-Factor Authentication
Ad-Free
Time-Based One-Time Password
Dark Mode
No tracking
Usage Scenarios of Fossorial pangolin
- Securely Expose Private Resources on Distributed Networks
- Connect Isolated Networks via Encrypted Tunnels to Access Remote Services Even Behind Strict Firewalls
- Access Internal Network Resources from Outside Without Opening Ports
- Access Home Labs from Remote Locations (e.g., School)
- Easily Access Private Resources
Common Questions about Fossorial pangolin
What does Fossorial Pangolin do?
How do I use Fossorial Pangolin?
What are the core features of Fossorial Pangolin?
What are the use cases for Fossorial Pangolin?





















