I've had pangolin running for a while, doing tunneling to some self hosted resources, and I'm confused by this announcement and update. It seems like they're suggesting to use an Android/iOS client to connect to Pangolin protected resources, which seems like a shitload more work and overhead than just using wireguard to do the same thing. Am i missing something here?
this post was submitted on 24 Jan 2026
67 points (100.0% liked)
Selfhosted
55014 readers
771 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
-
No low-effort posts. This is subjective and will largely be determined by the community member reports.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
It looks similar to tailscale and netbird, in that it offers NAT traversal, relays, and proper authentication and access control. Whether or not you need that depends on your circumstances (how many users and their technical proficiency, CG-NAT prevalence, whether you need mesh support, etc).
If you're just hosting for yourself and you have public ipv4 and ipv6 there's not much benefit.
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:
| Fewer Letters | More Letters |
|---|---|
| NAS | Network-Attached Storage |
| NAT | Network Address Translation |
| SSD | Solid State Drive mass storage |
| VPN | Virtual Private Network |
[Thread #1018 for this comm, first seen 25th Jan 2026, 01:35] [FAQ] [Full list] [Contact] [Source code]
When did this become a VPN?
AFAIK it always has been one https://dbtechreviews.com/2025/01/15/exploring-pangolin-the-self-hosted-cloudflare-tunnel-alternative/
It's a WireGuard VPN with a bunch of automation to make using it as a reverse proxy easier
Its interesting that the VPN is exposed now
AFAIK connecting to the VPN was the functionality of that older desktop app. Now they only added mobile apps
The option to connect a client to the VPN has been there in webgui since at least a month
No f-droid? I'm very disappointed
Put this in obtanium as an alternative 🫶
It's great that Obtainium exists but that's not my point. Behind pangolin is a company. Which in a way claims to be "one of us" - distributes open source code, with one of proper licenses, etc. Yet, when they deliver a binary, they only put it on big tech service. They didn't say "f-droid coming", which is normal as putting up f-droid builds sometimes takes time, not even "f-droid will be evaluated". Maybe I've become a hardliner but in my book thats a few "sus points" from me
I use pangolin. I use their cloud offer and I'm preparing to move to self-hosted one. But I say: don't throw away wireguard notes yet, pangolin might enshittify once they get a following
fuck yeah been waiting on this!! yay for grandmother!