February 15, 2026
Scales vs tales: VPN cage match
Show HN: Pangolin: Open-source identity-based VPN (Twingate/Zscaler alternative)
Pangolin drops as a DIY VPN—fans cheer, then shout “not open source”
TLDR: Pangolin is a new self-hostable remote access tool with a managed cloud option, earning praise for easy setup and reliability. The big debate: its Enterprise license isn’t truly “open source,” and some fear cloud-only features, while others just love that it replaces flaky tunnels.
Pangolin just slithered onto the scene promising simple, secure remote access to your stuff—think logins to home servers or work apps—built on WireGuard (a fast, modern VPN). The crowd went wild at first: one self-hoster beamed, “set up was easy” and never had issues, while another said they ditched flaky Cloudflare tunnels and are finally happy. The co‑maintainer showed off a nerdy flex: their cross‑platform “olm” engine in Go that powers every client. Translation: one tiny core runs the whole thing, like a universal remote for your connections.
Then the comments caught fire. Licensing drama exploded when someone called out Pangolin’s Enterprise edition: despite the team saying it’s open-source under a commercial license, a critic fired back, “that’s not Open Source.” Cue the penguins vs pangolins meme war. A skeptic poked at the pitch, asking why hide your home IP if your risk doesn’t change, and tossed shade about features being gated behind the cloud. Fans shot back that Pangolin’s zero‑trust setup—only letting people into specific apps, not the whole network—feels safer than old‑school VPNs.
So we’ve got a split screen: smooth setups and reliable tunnels on one side, licensing semantics and feature‑gate suspicion on the other. The vibe? Scales up, eyebrows up. Check it at app.pangolin.net and docs.
Key Points
- •Pangolin combines reverse proxy and VPN functionality to provide identity-based, zero-trust remote access.
- •Built on WireGuard, it offers secure connectivity to private and public resources with granular access controls.
- •Features include site connectors, browser-based reverse proxy with auto SSL, and client-based access with NAT traversal and DNS aliases.
- •Deployment options: Self-Host Community (AGPL-3), Self-Host Enterprise (commercial license), and fully managed Pangolin Cloud.
- •Clients are available for macOS, Windows, Linux, iOS, and Android; docs and a free tier for the managed service are provided.