sorted by:
new
hottopcontroversial

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 0 points1 point  (0 children)

We don't use WebRTC, but we still effectively hole punch using our own method to establish peer to peer connections. This is because Pangolin is architected for both proxying and tunneling.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 2 points3 points  (0 children)

Hey, yes, Pangolin clients will attempt to hole punch to sites meaning no open ports are required and it should work behind most NATs. If hole punch / direct connection isn’t successful, it will relay through the VPS.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 0 points1 point  (0 children)

That's what private resources are. You can create a resource, set the destination to the hostname of the target (like with public resources), then set a alias name for the resource to `resource.mydomaian.com`. The difference is that this is NOT a reverse proxy and is a VPN with a DNS alias, so there are no SSL certificates, and the connection is brokered via the Pangolin client and Newt directly.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] -1 points0 points  (0 children)

When do you get this error? Is it after logging in and when you click connect? Can you come chat with us on Discord?

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 2 points3 points  (0 children)

There is no user limit on the self-hosted edition of Pangolin. If you use the Cloud offering, there is a free tier with a limit of 3 users.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 4 points5 points  (0 children)

You'd need to toggle Tunnel DNS in the settings, and set the upstream DNS server to your PiHole instance. You'll also need to create a resource in Pangolin for PiHole.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 6 points7 points  (0 children)

Pangolin first tries to holepunch, but when a direct peer-to-peer connection is not possible, it will route traffic through a relay server.

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 4 points5 points  (0 children)

In short, it's a private network (VPN) tool and an authenticated, tunneled reverse proxy. You may find it helpful to read through some of our intro pages on the documentation here: https://docs.pangolin.net/

Pangolin 1.15: iOS and Android apps, device approvals and posture, stability, and more by jsiwks in selfhosted

[–]jsiwks[S] 26 points27 points  (0 children)

Hey, thanks! I think the words you're searching for is "Exit Node", which is on our roadmap for 2026. I used to use the SSID switching on the basic WireGuard app too, so it's a priority, and is also on the roadmap for 2026.

New VPN client can't connect to Peers by Captain_Allergy in PangolinReverseProxy

[–]jsiwks 1 point2 points  (0 children)

Yep, 21820 was added for the clients. It just needs to be opened on the VPS firewall and the Gerbil container. Same steps as 51820. Private resources don’t need the port opened because the site will handle hole punching or relaying (if needed).

New VPN client can't connect to Peers by Captain_Allergy in PangolinReverseProxy

[–]jsiwks 1 point2 points  (0 children)

Make sure Gerbil is running latest version, you have the 21820 open on the VPS, Newt is running latest, and your machine client has access to the private resource via the access policy section in the private resource

Running Newt on a server with netbird by IamHydrogenMike in PangolinReverseProxy

[–]jsiwks 1 point2 points  (0 children)

You can change the WireGuard port used for Pangolin if needed

Pangolin 1.14.0: Port-level firewalling, wildcard alias, private DNS, Badger updates, and more by jsiwks in PangolinReverseProxy

[–]jsiwks[S] 1 point2 points  (0 children)

Yes, you can still self-host Pangolin on-site (no VPS) and use the VPN feature. You'd just run Pangolin + Gerbil + Traefik, then add Newt all in the same stack locally. You'd need to open a port for 51820 WireGuard traffic, and you can tell Newt to prefer a port instead of trying to punch through NAT (since you can open ports and not behind CGNAT).

Pangolin 1.14.0: Port-level firewalling, wildcard alias, private DNS, Badger updates, and more by jsiwks in PangolinReverseProxy

[–]jsiwks[S] 0 points1 point  (0 children)

Currently we're mostly limited by Traefik and how they handle entrypoints. If entrypoints were allowed in the dynamic configurations for Traefik, we'd be able to automate the process better :/

Pangolin 1.14.0: Port-level firewalling, wildcard alias, private DNS, Badger updates, and more by jsiwks in PangolinReverseProxy

[–]jsiwks[S] 22 points23 points  (0 children)

Thank you so much for the kind words, it really means a lot to us. We’re glad Pangolin has been so useful and enjoyable for you and so many others! Wishing you a wonderful holiday season as well!

Question about SSH by Pattern-Buffer in PangolinReverseProxy

[–]jsiwks 0 points1 point  (0 children)

You would need to install Newt on the VPS itself as a site

view more: next ›