Pangolin

Pangolin provides identity‑aware remote access by combining reverse‑proxy and VPN functionality on top of WireGuard. It creates outbound tunnels that traverse NAT and firewalls, allowing browsers to reach web applications through a browser‑based reverse proxy and enabling client‑based connections to private services such as SSH, databases, RDP, or whole network ranges. Routing, load balancing, health checking and automatic SSL are handled automatically, while DNS aliases give friendly names to resources.

The platform enforces zero‑trust access with built‑in user management or external identity providers and role‑based access control, so users can be granted permission to specific applications rather than full network exposure. Granular policies can be defined based on identity and context, and multiple connectors can provide redundant paths.

Pangolin can be used as a fully managed cloud service, self‑hosted Community Edition (free, AGPL‑3.0), or Enterprise Edition for qualifying businesses. It runs on typical server platforms via binaries or containers and offers clients for macOS, Windows, Linux, iOS, Android, and other environments.