If you use this, it makes sense to run it at home. If you run it on a VPS, traffic is decrypted on VPS, the same privacy issue with Cloudflare tunnels. You have to trust the VPS provider.
Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
21–30 of 132 posts
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#22If you use this, it makes sense to run it at home. If you run it on a VPS, traffic is decrypted on VPS, the same privacy issue with Cloudflare tunnels. You have to trust the VPS provider.
This is true! But you have a little more control over who you might choose to trust. For example - you might trust AWS not to snoop in your VM more than you might trust CF to not collect valuable usage data about you when they decrypt your traffic.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#23I have been using pangolin for a few months already and it's awesome.
Installed in a small VPS (static IP) as an entry point for all the services I want to expose to friends and family from my homelab (dynamic IP), completely secure and very easy to manage.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#24Hello Eveyone, this is the other maintainer here. Just wanted to add some more detail about the other components of this system: Pangolin uses Traefik under the hood to do the actual HTTP proxying. A plugin, Badger, provides a way to authenticate every request with Pangolin. A second service, Gerbil, provides a WireGuard management server that Pangolin can use to create peers for connectivity. And finally, there is N…
Been using this for a few months for serving from home with a tiny VPS at Hetzner tunneling the traffic to Newt behind my home firewall.
My experience went very smooth and stable. The one issue I thought I had turned out to be not related to Pangolin at all.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#25This seems really interesting for managing a lot of remote dev boxes or something like that... so, kind of an uneducated question (from someone who isn't heavily involved in actual infrastructure)... I haven't used CF tunnels, and the extent of my proxying private services has pretty much been either reverse proxy tunnels over SSH, or Tailscale. Where pretty much any service I want to test privately is located on som…
I use CF tunnels pretty extensively with my home unraid server. The TL;DR is this - there are certain apps I host that I want to be public and don't want to onboard a Tailscale node (for example my sister uses my Plex server). So, instead of setting up a reverse proxy, I simply create a subdomain in DNS (via CF) and then route that subdomain to the CF tunnel. It's like 3 form entries to do all of this for one site/se…
Are you aware that serving media streams over the tunnel might be against the ToS? This is what kept me from using it tbh.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#26Amazing project. I have been using tail scale connected to an nginx proxy manager hosted on a VPS, to make my application public. Wrote about it here: https://hsps.in/post/how-i-host-public-apps-using-tailscale/
But pangolin seems to be similar to that setup with a good UI, and more control. Definitely trying it out.
Quick question: Can it handle multiple domain names? I point multiple domain to the vps hosting my npm it proxy's them from there. Does Pangolin, also support multiple domains pointing to it?
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#27Earlier quoted context omitted.
I use CF tunnels pretty extensively with my home unraid server. The TL;DR is this - there are certain apps I host that I want to be public and don't want to onboard a Tailscale node (for example my sister uses my Plex server). So, instead of setting up a reverse proxy, I simply create a subdomain in DNS (via CF) and then route that subdomain to the CF tunnel. It's like 3 form entries to do all of this for one site/se…
Out of curiosity why not give your sister restricted access to your tailnet instead? Then nothing is public.
My guess is that teaching and convincing someone to install tailscale on every device they need access is a lot harder than sending a link.
Thats why i use pangolin.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#28[flagged]
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#29Sorry if this is a noobish question, but would this allow me to access services on a VPS, that I do not want publicly accessible on the internet?
In other words: Let's say I have a VPS with eg. Keycloak running on it. I want to be able to access it for management purposes but don't want it exposed to other people on the internet. Would Pangolin be a way for me to do this?
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#30"Easily expose services on IoT and edge devices for field monitoring"
can you give more details, would this be adapted to IoT devices running on MCUs like ESP32 etc?