Viewing profile — fossorialowen
fossorialowen
HN member- Joined
- Fri, May 02, 2025, 9:46 PM UTC
- HN karma
- 45
- Public activity
- 24 items
- HN profile
- View on Hacker News ↗
About fossorialowen
No profile information was provided.
Recent public activity
-
comment
Comment #44538000
I think with the web UI it is a little more user friendly but not as super familiar with FRP. I think we might have a little more authentication control on top of the tunnel for we…
-
comment
Comment #44534862
We are always looking for security experts to review the code and to pen test the application. Please hammer it and let us know at privacy@fossorial.io if there are any issues! As …
-
comment
Comment #44534845
Good question. I think absolute worse case scenario the tunnel and VPS is compromised and someone is able to gain access to the private network. We advise people in the docs to alw…
-
comment
Comment #44534699
It looks like there might be some overlap. There are a bunch of solutions in this space! It looks like they do provide public access to resources which is what Pangolin does. We mi…
-
comment
Comment #44534670
From the little I understand about it I think you may be able to deploy Pangolin on it. Would need to do some research. But you could also use Pangolin to provide access to a self …
-
comment
Comment #44534631
Haha valid concern. We are actually using Traefik to do the reverse proxying which is a pretty standard reverse proxy written in Go! Our tunnel client Newt is also written in Go. T…
-
comment
Comment #44534616
It might be a bit too heavy for a MCU like ESPs. IoT we are thinking more like cellular modems, UPSs, cameras - devices that need remote access in the field at remote places that y…
-
comment
Comment #44534491
Yes we have had some PR and some active ones that we need to merge soon haha. We have not had any concern about the CLA that we are aware of. It was important that we found a way t…
-
comment
Comment #44534468
Great good to hear!
-
comment
Comment #44534459
Yes and they are a "Fossorial" animal. A fossorial animal is one that is adapted to digging and which lives primarily (but not solely) underground. It was kind of a fun name to cal…
-
comment
Comment #44534436
Thanks!
-
comment
Comment #44534428
We are coming for them!
-
comment
Comment #44534423
Yep thats correct. All based on wireguard-go. It is growing in what it can do now but at its core its just a Wireguard wrapper that coordinates with Pangolin to get the tunnel up. …
-
comment
Comment #44534385
Good advice in this thread. If its just you then ssh tunnels or tailscale or netbird or pure wireguard are all fine. You could use Pangolin for this and put auth in front of the we…
-
comment
Comment #44534302
Yes! Most people I think rent a VPS (some can be had for like $1 a month) and install this. Because it tunnels back to your network your network can be anywhere behind anything and…
-
comment
Comment #44534278
Pangolin is "public ingress to private networks" and not a mesh VPN/network builder. As you say I think NetBird is an alternative to Tailscale and we are an alternative to Cloudfla…
-
comment
Comment #44534244
Yes it can! You can point them all to the VPS as you say then just add them to the config file domains list. You can add as many as you need. https://docs.fossorial.io/Pangolin/Con…
-
comment
Comment #44534209
Coming soon! We are going to do a docs revamp!
-
comment
Comment #44528617
This is true! But you have a little more control over who you might choose to trust. For example - you might trust AWS not to snoop in your VM more than you might trust CF to not c…
-
comment
Comment #44528491
Yes! Thats where it excels I think. If you want public authenticated access for your users and / or need that tunneling component to get into your network or a set of distributed n…
-
comment
Comment #44528482
I think if that works for you then stick with it! Pangolin would mostly do the same thing. I think if you wanted more auth control like users and pin codes and OIDC and roles you m…
-
comment
Comment #44528304
Yes I think so. I know it works quiet well in compose but as you scale to swarm I am not sure if there would be pains. You can just pop the connector into your compose stack and it…
-
comment
Comment #44527967
Thanks! I think what you are using (SSH, Tailscale) is great for your use case! We see this as more of a static and permanent tunnel to a service - less ephemeral than a ssh tunnel…
-
comment
Comment #44526044
Hello Eveyone, this is the other maintainer here. Just wanted to add some more detail about the other components of this system: Pangolin uses Traefik under the hood to do the actu…