Alternatives to Pangolin
Self-hosted tunnelled reverse proxy and zero-trust VPN built on WireGuard. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
Pangolin
Self-hosted tunnelled reverse proxy and zero-trust VPN built on WireGuard.
Replacements
Listings that take over the same core job as Pangolin.
Warpgate
Centralize access to internal services through a bastion host.
Warpgate is an Apache-2.0 bastion host that centralizes access to internal services with recorded sessions, rather than using WireGuard tunnels and a VPN.
No-IP
Dynamic DNS and managed DNS provider with free hostnames and paid plans for remote access.
No-IP is a hosted freemium dynamic DNS service whose paid Public Tunnels give access without port forwarding, so there is no server to run but it is closed source.
Also worth comparing
These listings name Pangolin as their own alternative, so the relationship runs both ways.
Devolutions Gateway
Relay remote-access connections through a dedicated gateway.
Pangolin exposes internal services through authenticated WireGuard tunnels under AGPL-3.0, acting as a reverse proxy and VPN, and needs a public server to terminate the tunnels.
Similar software
Related functionality, not a direct replacement.
Apache Guacamole
A self-hosted remote desktop gateway that gives browser access to machines over VNC, RDP and SSH.
MeshCentral
A self-hosted remote monitoring and management server with web-based remote desktop, terminal and file transfer for every machine you run an agent on.
