Pangolin Self-Hosted Reverse Proxy Service - Revision history

IlikeOpenSource at 00:22, 13 June 2026

2026-06-13T00:22:49Z

IlikeOpenSource at 00:08, 13 June 2026

2026-06-13T00:08:39Z

← Older revision		Revision as of 00:08, 13 June 2026
Line 5:		Line 5:
	\|Logo=Pangolin.png		\|Logo=Pangolin.png
	\|Website=https://pangolin.net/		\|Website=https://pangolin.net/
	\|Description=Identity-~~aware VPN and tunneled~~ reverse proxy ~~for~~ remote access based on WireGuard®.		\|Description=Identity-based reverse proxy and zero-trust remote access platform based on WireGuard®.
	}}		}}
	{{Ph-C-Int}}		{{Ph-C-Int}}
Line 12:		Line 12:
	{{Ph-C-CIS}}		{{Ph-C-CIS}}

	Pangolin is a self-hosted, open-source reverse proxy and ~~remote access~~ platform positioned as an alternative to ~~services such as~~ Cloudflare Tunnels.		Pangolin is a self-hosted open-source reverse proxy and identity-aware tunneling platform positioned as an alternative to Cloudflare Tunnels.

	While the core ~~software~~ remains ~~available under an~~ open-source ~~license~~, development has ~~increasingly shifted toward~~ a ~~multi-tier model consisting of~~ Community Edition ~~(self-hosted OSS core)~~ and Enterprise/Cloud editions ~~(managed and extended feature sets)~~.		While the core system remains open source, recent development has introduced a structured separation between Community Edition and Enterprise/Cloud editions. Over successive releases, major platform features have increasingly been introduced with explicit or implicit restrictions that place advanced functionality outside the Community Edition.

	As a ~~result~~, ~~the~~ Community Edition ~~increasingly functions as a~~ baseline ~~version,~~ while ~~many~~ newer platform~~-level features~~ are delivered ~~primarily~~ in Enterprise or Cloud ~~tiers~~.		This results in a functional divergence between the self-hosted GPL version and paid tiers, where Community Edition remains focused on baseline tunneling while newer platform capabilities are delivered in Enterprise/Cloud.

	==~~Community Edition~~ vs Enterprise ~~Feature Drift~~==		==Release-by-release CE vs Enterprise feature exclusion audit==

	{\| class="wikitable"		{\| class="wikitable"
	\|-		\|-

	! Feature ~~/ Capability~~ !! Community Edition (~~Self~~-~~Hosted~~) !! Enterprise / Cloud Edition !! ~~Notes / First Appearance~~		! Release !! Feature introduced !! Community Edition (GPL self-hosted) !! Enterprise / Cloud Edition !! Source
	~~Core reverse proxy / tunneling~~		1.13.0
	-		-
	~~Identity-aware access control~~		1.13.0
	-		-
	~~Role-based access control (RBAC)~~		1.17.0
	-		-
	~~Multi-site routing / HA features~~		1.17.0
	-		-
	~~Wildcard resources~~		1.18.0
	-		-
	~~Private resource HTTPS management~~		1.18.0
	-		-
	~~Alerting / uptime monitoring~~		1.18.0
	-		-
	~~Admin / action logs~~		1.18.0
	-		-
	~~Browser-based SSH~~		1.18.0
	-		-
	~~Browser-based RDP~~		1.19.0
	-		-
	~~Browser-based VNC~~		1.19.0
	-		-
	~~Integrated SSH system~~		1.19.0
	-		-
	~~Onboarding / hosted control plane~~		1.19.0
	-
	~~User limits / licensing scale~~
	}		}

	==~~Consumer~~-~~impact summary~~ (~~continued~~)==		==Timeline of product positioning shift==

			===Initial positioning (1.0.0 era)===
			Pangolin was introduced as a self-hosted alternative to Cloudflare Tunnels, designed for full user-controlled deployment of identity-aware reverse proxy infrastructure.

			Source: https://github.com/fosrl/pangolin/releases/tag/1.0.0

			===Feature expansion phase (1.13.0)===
			Private resource controls and device-based identity models expanded the system beyond simple tunneling into a broader access-control platform.

			Source: https://github.com/fosrl/pangolin/releases/tag/1.13.0

			===RBAC and identity segmentation (1.17.0)===
			Advanced RBAC features including multi-role support were introduced, forming the basis for later tier separation between Community and Enterprise editions.

			Source: https://github.com/fosrl/pangolin/releases/tag/1.17.0

			===Infrastructure platform expansion (1.18.0)===
			Multi-site routing, wildcard resources, monitoring, and audit features were introduced, significantly expanding the system into infrastructure orchestration territory.

			Source: https://github.com/fosrl/pangolin/releases/tag/1.18.0

			===Enterprise-gated remote access layer (1.19.0)===
			Browser-based SSH, RDP, and VNC access were introduced and documented as Cloud/Enterprise-only features, excluding them from the Community Edition.

	~~The Community Edition remains functional for basic self-hosted tunneling, but receives fewer major feature additions over time compared to Enterprise and Cloud offerings~~.		Source: https://github.com/fosrl/pangolin/releases/tag/1.19.0
			Docs: https://docs.pangolin.net/manage/ssh

	~~For users adopting Pangolin specifically~~ as a self-hosted ~~alternative to commercial tunnel platforms~~, ~~this results in~~ a ~~widening gap~~ between ~~expected feature parity~~ and ~~actual Community Edition capabilities.~~		==Consumer impact==
			The Community Edition remains functional as a self-hosted tunneling system, but successive releases introduce major platform capabilities outside the GPL self-hosted version.

			This produces a consistent structural pattern:

			Community Edition retains core tunneling functionality
			Advanced identity, infrastructure, and remote access features are moved to Enterprise/Cloud tiers
			Feature parity between self-hosted and hosted versions decreases over time

	==See also==		==See also==
	~~{{Ph-C-SA}}~~

	Open-core software model		Open-core software model
	Self-hosted ~~software~~		Self-hosted infrastructure platforms
	WireGuard		WireGuard
	Cloudflare Tunnels		Cloudflare Tunnels
	Twingate		Twingate

	~~==References==~~
	~~{{reflist}}~~

	~~[[Category:Pangolin]]~~

IlikeOpenSource: Add article

2026-06-12T23:56:08Z

Add article

@@ Line 12: / Line 12: @@
 {{Ph-C-CIS}}
-==Incidents==
+Pangolin is a self-hosted, open-source reverse proxy and remote access platform positioned as an alternative to services such as Cloudflare Tunnels.
-===Example incident one (''date'')===
+While the core software remains available under an open-source license, development has increasingly shifted toward a multi-tier model consisting of Community Edition (self-hosted OSS core) and Enterprise/Cloud editions (managed and extended feature sets).
 ==See also==
 {{Ph-C-SA}}
 ==References==
 {{reflist}}
-[[Category:{{PAGENAME}}]]
+[[Category:Pangolin]]

IlikeOpenSource: Created page with "{{ProductCargo |Company=Fossorial Inc. |ProductLine=Reverse Proxy, Self Hosted, Open Source |InProduction=Yes |Logo=Pangolin.png |Website=https://pangolin.net/ |Description=Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®. }} {{Ph-C-Int}} ==Consumer-impact summary== {{Ph-C-CIS}} ==Incidents== {{Ph-C-Inc}} This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found..."

2026-06-12T23:27:08Z

Created page with "{{ProductCargo |Company=Fossorial Inc. |ProductLine=Reverse Proxy, Self Hosted, Open Source |InProduction=Yes |Logo=Pangolin.png |Website=https://pangolin.net/ |Description=Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®. }} {{Ph-C-Int}} ==Consumer-impact summary== {{Ph-C-CIS}} ==Incidents== {{Ph-C-Inc}} This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found..."

New page

{{ProductCargo
|Company=Fossorial Inc.
|ProductLine=Reverse Proxy, Self Hosted, Open Source
|InProduction=Yes
|Logo=Pangolin.png
|Website=https://pangolin.net/
|Description=Identity-aware VPN and tunneled reverse proxy for remote access based on WireGuard®.
}}
{{Ph-C-Int}}

==Consumer-impact summary==
{{Ph-C-CIS}}

==Incidents==
{{Ph-C-Inc}}
This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found in the [[:Category:{{PAGENAME}}|{{PAGENAME}} category]].

===Example incident one (''date'')===
{{Main|link to the main CR Wiki article}}
Short summary of the incident (could be the same as the summary preceding the article).
===Example incident two (''date'')===
...

==See also==
{{Ph-C-SA}}

==References==
{{reflist}}

[[Category:{{PAGENAME}}]]