Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

github.com

Post reply on HN
Print view View original

101–110 of 132 posts

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#101

Post by FuriouslyAdrift »

1vuio0pswjnm7 wrote: post #96
oschwartz10612 wrote: post #2

Hello Eveyone, this is the other maintainer here. Just wanted to add some more detail about the other components of this system: Pangolin uses Traefik under the hood to do the actual HTTP proxying. A plugin, Badger, provides a way to authenticate every request with Pangolin. A second service, Gerbil, provides a WireGuard management server that Pangolin can use to create peers for connectivity. And finally, there is N…

The official traefik v3.4.4 amd64 binary from Github is only 207MB. https://github.com/traefik/traefik/releases/expanded_assets/...

An entire docker image for HAProxy is only 41 MB... deb is 1.6 MB

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#103

Post by sgarland »

FuriouslyAdrift wrote: post #101
1vuio0pswjnm7 wrote: post #96

Earlier quoted context omitted.

The official traefik v3.4.4 amd64 binary from Github is only 207MB. https://github.com/traefik/traefik/releases/expanded_assets/...

An entire docker image for HAProxy is only 41 MB... deb is 1.6 MB

Welcome to modern development, where no one gives a shit about binary size. It’s awful.

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#104

Post by 1vuio0pswjnm7 »

FuriouslyAdrift wrote: post #101
1vuio0pswjnm7 wrote: post #96

Earlier quoted context omitted.

The official traefik v3.4.4 amd64 binary from Github is only 207MB. https://github.com/traefik/traefik/releases/expanded_assets/...

An entire docker image for HAProxy is only 41 MB... deb is 1.6 MB

I compile static-pie HAproxy binaries using different TLS libraries. Size varies a little based on the versions and compile-time options for those libraries

For example, max sizes for the largest and smallest TLS libraries I have tried

OpenSSL 9.0MB

WolfSSL 4.6MB

OpenSSL bloat is unfortunate

Does Traefik allow any TLS libraries other than OpenSSL

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#105

Post by nirav72 »

Great seeing Pangolin posted on Show HN. I just got pangolin installed and configured this afternoon on a VPS. With Newt running locally on a cheap mini-pc to establish wireguard tunnel. It was a fairly easy process. Watched couple of videos on YT and then went through the well documented procedure on their site. So far everything seems to be working. I currently only have couple of apps exposed. Plus a private relay for Rustdesk. All working great. Plan on exposing/moving stuff off CF in the coming days. Once I lock down my home network and isolate stuff on separate VLANs.

While CF tunnels were nice and solved my ISP imposed issue with exposing ports via their crappy fiber gateway for couple of years. But I wanted more control. Specifically control over what I can expose without worrying about violating cloudflare’s TOS and ambiguity around media streaming. (Jellyfin/Emby).

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#106

Post by fossorialowen »

kbumsik wrote: post #102

How does it compare to frp, one of the most popular Open Source Cloudflare Tunnel alternative? https://github.com/fatedier/frp

I think with the web UI it is a little more user friendly but not as super familiar with FRP. I think we might have a little more authentication control on top of the tunnel for web traffic as well.

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#107

Post by Lord_Zero »

j45 wrote: post #59
noduerme wrote: post #5

This seems really interesting for managing a lot of remote dev boxes or something like that... so, kind of an uneducated question (from someone who isn't heavily involved in actual infrastructure)... I haven't used CF tunnels, and the extent of my proxying private services has pretty much been either reverse proxy tunnels over SSH, or Tailscale. Where pretty much any service I want to test privately is located on som…

Tailscale (and headscale) is great for internal access to something that night not have public internet access. Others have mentioned an example of keeping a NAS off the public internet. Cloudflare tunnels help expose a service to the internet with a bit more protection. I have seen folks use both tailscale to access the backend and the public side is only Cloudflare tunnels. It’s not unreasonable to point Cloudflare…

I'm using caprover on a Linux VM with tailscale and cloudflare. Works great, it does require some tinkering because caprover doesn't like not being in control of SSL, and the nginx configs need to be manually edited per app if you want to set up headers for cloudflare real ip and stuff.

Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels

#109

Post by qskousen »

I've been trying to get something like this working with frp and now sish but I'm not there yet. My use case is a little weird, I need to run the tunnel behind a traefik instance in k8s, with that traefik doing TLS termination, and I haven't been able to get anything working correctly yet. Maybe I'll give pangolin a try.
Post reply on HN