Reverse proxy in nodejs? How about no?
Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
71–80 of 132 posts
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#72Let’s say my server is running on a VPN and gets new IP once in a while. Would Pangolin be an option to publicly expose my services? Because I have this challenge now where I am currently ”forced” to expose my public IP to share some services. I use firewall rules to allow incoming traffic to my server and Traefik to route the user to the right service. I just don’t like the feeling of being exposed publicly like this.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#73Earlier quoted context omitted.
This is true! But you have a little more control over who you might choose to trust. For example - you might trust AWS not to snoop in your VM more than you might trust CF to not collect valuable usage data about you when they decrypt your traffic.
Agreed - there’s a big difference between “I actively asked CF to terminate my TLS” and “I suspect my provider is scraping unencrypted data out of my running VM”
I doubt there is less monitoring at a VPS than CF. Many VPS companies are less known and smaller, and may not have professional audit and access processes in place.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#74Let’s say my server is running on a VPN and gets new IP once in a while. Would Pangolin be an option to publicly expose my services? Because I have this challenge now where I am currently ”forced” to expose my public IP to share some services. I use firewall rules to allow incoming traffic to my server and Traefik to route the user to the right service. I just don’t like the feeling of being exposed publicly like thi…
You need a publicly routable address in the mix. You would need a way of knowing that address.
I have that same feeling with the self hosting I do. To alleviate the small amount of stress it would bring me I rent a VPS that’s public on the internet. I configure a persistent keep alive, on the client I run locally to keep a connection to the server open, no port forwarding needed.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#75This looks really nice. I have set up something similar just recently with an OPNSense box running DNS, the WireGuard instance and getting a wildcard Let's Encrypt cert that it pushes to my Synology reverse proxy (Nginx). So from my clients I can enable the WG tunnel only on my internal IP range, setting the internal DNS, so I don't have to have my public cert pointing to my IP. It works once setup for my home net. B…
EDIT: Sorry, I misread, Newt is the WireGuard client and is based on wireguard-go if I'm correct.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#76Cloudflare tunnels is such a poorly built product. The bar for quality is very low in this category. I struggled to make it work on an dell laptop running ubuntu, over wifi. It worked when I set it up at my home and then failed when it was deployed in the field. I literally had the experience of "well, it worked at my home, let's ship it!". I couldn't recover from the errors, either.
So, if you built something that is resilient enough to handle change in IP addresses, you've beaten CF tunnels.
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#77Is it called Pangolin because pangolin's have scale-y tails?
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#78Hello Eveyone, this is the other maintainer here. Just wanted to add some more detail about the other components of this system: Pangolin uses Traefik under the hood to do the actual HTTP proxying. A plugin, Badger, provides a way to authenticate every request with Pangolin. A second service, Gerbil, provides a WireGuard management server that Pangolin can use to create peers for connectivity. And finally, there is N…
Would be nice if there were a mini-tutorial in the doc for each of the use-cases you mention here, so we could quickly test it and see if it helps
Coming soon! We are going to do a docs revamp!
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#79Amazing project. I have been using tail scale connected to an nginx proxy manager hosted on a VPS, to make my application public. Wrote about it here: https://hsps.in/post/how-i-host-public-apps-using-tailscale/ But pangolin seems to be similar to that setup with a good UI, and more control. Definitely trying it out. Quick question: Can it handle multiple domain names? I point multiple domain to the vps hosting my np…
Yes it can! You can point them all to the VPS as you say then just add them to the config file domains list. You can add as many as you need. https://docs.fossorial.io/Pangolin/Configuration/config#doma...
Re: Show HN: Pangolin – Open source alternative to Cloudflare Tunnels
#80What is the difference between Pangolin and NetBird, which is also a self-hosted and fully open-source solution? https://github.com/netbirdio/netbird
Would love to understand it better too. It looks like the use cases are similar but the tech is different. NetBird is an alternative to Tailscale that uses Wireguard under the hood while these seem to use Traefik under the hood. I am personally a user of NetBird and love it. The design of the UI is very similar though :)
Pangolin is "public ingress to private networks" and not a mesh VPN/network builder. As you say I think NetBird is an alternative to Tailscale and we are an alternative to Cloudflare tunnels, Ngrok, or Zscaler. It is more about exposing things publicly with authentication in the browser for people to access than about building a network for disparate devices to communicate.