// Compare

ingressd vs Pangolin.

Pangolin is a self-hosted tunnelled reverse proxy: a dashboard and Traefik on your VPS, with the Newt connector at each site over WireGuard. ingressd follows the same self-hosted model. It adds failover across several nodes, a WAF and game-server presets, and offers a free hosted panel so you do not run a dashboard yourself.

// Which to choose

Both are good at different things.

Pick the one that matches where you want your traffic to run.

Choose Pangolin if

  • You want the dashboard itself self-hosted on your VPS.
  • You prefer an AGPL-3.0 project with its own user and role system.
  • One VPS in front of your sites is enough.

Choose ingressd if

  • You want several edge nodes with failover DNS without an enterprise licence.
  • You want a WAF with the OWASP Core Rule Set and bot challenges per app.
  • You want game-server presets and login-to-play for Minecraft and FiveM.
Start free →
// Side by side

The differences that matter.

Taken from the full comparison of ingressd with the alternatives.

FeatureingressdPangolin
Public edge runs onYour own VPS nodesYour VPS, or Pangolin Cloud
TLS for web apps ends atYour nodeYour VPS
Open sourceNode, edge and connector: Apache-2.0. The hosted panel is optional and proprietary.Community Edition: AGPL-3.0. Enterprise Edition is commercial.
No inbound ports at the originYesYes
HTTP and HTTPS appsYesYes
Public TCPYesYes
Public UDP (game servers, VoIP)YesYes
Your own domainYesYes
Failover across several edgesYes: failover DNS across your nodesEnterprise Edition and Pangolin Cloud
Sign-in in front of appsEmail code, Google, Microsoft, Discord, Steam or passkeyBuilt-in users, roles and SSO
Web application firewallCoraza with the OWASP Core Rule Set, per appNot built in
Managed fromA free hosted panel, or one config file and the CLIIts own self-hosted dashboard
CostFree and open source; you pay for your VPSCommunity Edition is free; you pay for your VPS

Checked against each product’s own docs in November 2026. Plans and features change; if something here is out of date, tell us on GitHub. Sources: Pangolin docs, Pangolin clustering, Pangolin on GitHub.

See ingressd against all the alternatives

Your network stays closed. Your services don’t.