fosrl/pangolin
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
From the publisher
README & documentation
Source previewRead the project’s overview, installation instructions and usage examples. The original README is the source of truth.
[](https://discord.gg/HCJR8Xhme4) [](https://pangolin.net/slack) [](https://hub.docker.com/r/fosrl/pangolin) [](https://www.youtube.com/@pangolin-net) Pangolin is an open-source SASE platform, built on WireGuard®, with a simple mission: connect and protect your users, wherever they are. It brings networking and security together as one system including a zero-trust VPN, zero-trust reverse proxy, privileged access management, and an identity-aware AI gateway, all sharing one identity and policy model. It's the same idea behind platforms like Cloudflare One, Zscaler, and Prisma but open, self-hostable, and built to stay light and easy to deploy. Legacy SASE platforms got the idea right: connectivity and security belong together. But they delivered it as a heavyweight, closed, cloud-locked stack assembled from years of patchwork. Pangolin exists to do that unification differently, in the open, self-hostable, and simple enough that administrators actually enjoy running it. Pangolin's site connectors provide gateways into networks so you can access any networked resources. Sites use outbound tunnels and intelligent NAT traversal to…
Read the full README ↗ · Preview checked 2026-10-31T11:45:22.159Z
Inside the original README — Document outline
- Networking and security that's unified, open, and simple
- Installation
- Deployment Options
- Key Features
- Connect remote networks with sites and NAT traversal
- Browser-based reverse proxy access
- Client-based private resource access
- Identity-aware AI gateway
- Give users and roles access to resources
- Find and launch resources from a personalized home page
- Download Clients
- Get Started
Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.
Links from the README
References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.
Documentation belongs to its respective authors. Reported project/model license: Other. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.
What this repository does
Modern networking and security platform providing secure access and connectivity to apps, infrastructure, and AI workloads. Connect and protect your users.
Repository facts
- Owner
- fosrl
- Primary language
- TypeScript
- Stars
- 23,287
- Forks
- 807
- Open issues + pull requests
- 125
- License
- Other
- Archived
- No
- Default branch
- main
- Created
- 2024-09-27T02:16:47.000Z
- Last push
- 2026-10-30T22:32:45.000Z
Topics and intended use
Owner-supplied topics: ai-gateway, gateway, nat-traversal, oidc, pam, pangolin, remote-access, reverse-proxy, sase, self-hosted, single-sign-on, ssh, sso, tunneling, vpn, wireguard, wireguard-vpn, zero-trust, zero-trust-network-access, ztna
Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.
Evaluate before installing
Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.
Source and freshness
Source: GitHub. Metadata observed 2026-11-01T12:20:37.856Z. Daily imports are snapshots, not real-time monitoring.
Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.