Pangolin | Articles - Product Updates, Guides, and Insights

News & Articles

Stay up to date with the latest news, guides, and insights in the zero trust access industry by reading Pangolin’s articles.

All Product Guides Engineering

Latest

Meta

GitOps Workflow for Pangolin Blueprints: Continuous Access Control via CI/CD

Stop policy drift and manual dashboard overhead. This guide details a GitOps workflow for Pangolin Blueprints, using declarative YAML state in Git and automated application via GitHub Actions. By treating Git as the source of truth for access intent, teams gain crucial operational benefits like version history, pull request review, and the ability to manage resources at scale

Templated Provisioning and Rollouts for the Edge

Learn how to automate edge device management using Pangolin’s provisioning keys and declarative blueprints to achieve scalable, secure, and consistent remote access. This guide explores how to replace complex API scripting with a single "golden image" workflow for global fleet deployments.

Pangolin 1.18 - HTTPS Private Resources, Multi-Site Routing, and Alerting

Pangolin 1.18 brings HTTPS support for private resources, multi-site high availability routing, uptime tracking, health checks, alert rules, wildcard resources, and more. Let's dig in!

What Are Pangolin Remote Nodes? Cloud Control Plane, Self-Hosted Edge, and Failover

Pangolin remote nodes let you keep the traffic edge on infrastructure you control while Pangolin Cloud handles DNS, certificates, health checks, and failover.

IoT Device Provisioning at Scale with Golden Images for Edge Fleets

A practical way to provision IoT devices at scale: start with a golden image, keep bootstrap simple, let first boot handle setup, and use Pangolin sites and blueprints as one concrete model.

Ignition Remote Access Without Open Ports

A practical Ignition remote access model: keep the Gateway private, put browser access behind an authenticated front door, and stop defaulting every remote user to broad network access.

Pangolin Edge Devices - Drop-in Remote Access for IT/OT and IoT

Modernize your operations with Pangolin Edge, the zero-trust remote access gateway designed to eliminate the complexity of industrial, IT, and IoT networking. Devices arrive ready to protect and connect your critical infrastructure.

Remote PLC/SCADA Access Without Open Ports

A practical way to handle remote PLC/SCADA access without open ports: keep the SCADA interface private, keep PLC access off the public internet, and reserve deeper connectivity for engineering workflows.

Remote Access for Tridium Niagara Without Open Ports

A simpler way to handle Tridium Niagara remote access: keep Niagara private, put the web UI behind an authenticated front door, and stop using broad network access for every user.

Pangolin 1.17 - Full RBAC, Site Provisioning Keys, Log Streaming

Pangolin 1.17 brings a wave of quality-of-life improvements that strengthen existing functionality around roles, identity providers, site provisioning, logging, and more. Let's dig in!

What is an Identity-Aware Proxy (IAP)?

This article explains what an identity-aware proxy is, how it differs from reverse proxies, VPNs, and ZTNA, and where it fits in modern Zero Trust access. It also looks at how Pangolin supports this pattern for private web applications and broader private-resource access.

Getting Started with Pangolin SSH - Same-Host Setup with Newt

Learn how to get started with Pangolin SSH by setting up secure same-host access on a server running Newt, using private resource access, identity-based controls, and short-lived SSH certificates.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

What is a Tunneled Reverse Proxy? Architecture, Benefits, and Enterprise Use Cases

A tunneled reverse proxy lets enterprises securely publish private applications through outbound tunnels, without exposing internal networks or relying on broad VPN access.

Pangolin for MSPs - Simple, Secure Remote Access for Every Customer

Pangolin helps MSPs replace VPN sprawl with a multi-tenant, identity-based remote access platform built to scale across client environments.

Modernizing Enterprise SSH Access

Pangolin modernizes enterprise SSH access by shifting from legacy, key-based methods to a comprehensive, identity-driven private access model, reducing operational complexity and strengthening security.

No items found.

Templated Provisioning and Rollouts for the Edge

Learn how to automate edge device management using Pangolin’s provisioning keys and declarative blueprints to achieve scalable, secure, and consistent remote access. This guide explores how to replace complex API scripting with a single "golden image" workflow for global fleet deployments.

IoT Device Provisioning at Scale with Golden Images for Edge Fleets

A practical way to provision IoT devices at scale: start with a golden image, keep bootstrap simple, let first boot handle setup, and use Pangolin sites and blueprints as one concrete model.

Ignition Remote Access Without Open Ports

A practical Ignition remote access model: keep the Gateway private, put browser access behind an authenticated front door, and stop defaulting every remote user to broad network access.

Remote PLC/SCADA Access Without Open Ports

A practical way to handle remote PLC/SCADA access without open ports: keep the SCADA interface private, keep PLC access off the public internet, and reserve deeper connectivity for engineering workflows.

Remote Access for Tridium Niagara Without Open Ports

A simpler way to handle Tridium Niagara remote access: keep Niagara private, put the web UI behind an authenticated front door, and stop using broad network access for every user.

Self-hosted Remote Nodes - What Are They, and Why Do They Exist?

Learn about our new remote node self-hosted offering, which combines the best of self-hosted and cloud solutions.

August 29, 2025

How to Geo-block with Pangolin

Learn how to use the rules engine to enable geo-blocking for your resources.

August 29, 2025

Health Checks and Load Balancing on Targets for Resources

How to set up health checks and load balancing targets for resources.

August 29, 2025

Pangolin Single Sign-On with Google, Microsoft, and OAuth2/OIDC Identity Providers

You can now log in to Pangolin with your existing identity provider - including Google, Microsoft, and any OAuth2/OIDC compatible IdP.

February 17, 2026

Declarative Configuration with YAML and Docker Labels

Pangolin Blueprints let you manage resources as code with YAML or Docker labels, making configurations automated, consistent, and scalable.

September 23, 2025

Pangolin 1.18 - HTTPS Private Resources, Multi-Site Routing, and Alerting

Pangolin 1.18 brings HTTPS support for private resources, multi-site high availability routing, uptime tracking, health checks, alert rules, wildcard resources, and more. Let's dig in!

Pangolin Edge Devices - Drop-in Remote Access for IT/OT and IoT

Modernize your operations with Pangolin Edge, the zero-trust remote access gateway designed to eliminate the complexity of industrial, IT, and IoT networking. Devices arrive ready to protect and connect your critical infrastructure.

Pangolin 1.17 - Full RBAC, Site Provisioning Keys, Log Streaming

Pangolin 1.17 brings a wave of quality-of-life improvements that strengthen existing functionality around roles, identity providers, site provisioning, logging, and more. Let's dig in!

Pangolin for MSPs - Simple, Secure Remote Access for Every Customer

Pangolin helps MSPs replace VPN sprawl with a multi-tenant, identity-based remote access platform built to scale across client environments.

Modernizing Enterprise SSH Access

Pangolin modernizes enterprise SSH access by shifting from legacy, key-based methods to a comprehensive, identity-driven private access model, reducing operational complexity and strengthening security.

Comparison - Pangolin vs. WireGuard

While WireGuard is a superb, high-performance Layer 3 tunnel protocol, Pangolin is a full remote access platform built on WireGuard, integrating identity management, policy, and automation.

Comparison - Pangolin vs. Teleport

Pangolin is a network-first Zero Trust Access Platform built to secure the entire enterprise workforce including the engineering team, while Teleport is a protocol-first access broker focused on engineering infrastructure sessions.

How Pangolin Works

Pangolin is a zero-trust access platform that provides secure, identity-centric access to applications and infrastructure without opening firewall ports or deploying traditional VPNs. Let's walk through how the system works.

Comparison - Twingate vs. NetBird

How Twingate and NetBird are solving different problems in modern remote access.

February 23, 2026

Comparison - Pangolin vs. Zscaler

How a self-hostable open-source access platform and an enterprise cloud security suite differ in architecture, traffic routing, deployment, and fit.

Pangolin 1.16 - Certificate Based SSH

Managing SSH keys across teams is a nightmare. With version 1.16, Pangolin eliminates that pain entirely with certificate-based SSH authentication, just-in-time user provisioning via PAM, and terminal access that just works.

February 27, 2026

Comparison - Pangolin vs. Cloudflare One

How an open-source, self-hostable remote access platform compares to Cloudflare One (ZTNA, WARP, Access, and Tunnel).

February 23, 2026

Comparison - Pangolin vs. Pomerium

How an identity-based remote access platform and an identity-aware reverse proxy differ in scope, layer, and deployment.

February 23, 2026

Comparison - Twingate vs. Tailscale

How Twingate and Tailscale are solving different problems in modern remote access.

February 23, 2026

Comparison - Pangolin vs. Twingate

How two identity-based remote access platforms differ in architecture, web access, and deployment options.

February 3, 2026

Comparison - Pangolin vs. NetBird

A comparison of two WireGuard-powered remote access solutions and their differences in architecture, permissions, and use cases.

January 30, 2026

Pangolin 1.15 - iOS and Android Apps, Device Approvals and Posture

One year ago, we launched Pangolin as an open-source alternative to Cloudflare Tunnels. Today, with version 1.15, we celebrate our first anniversary with iOS and Android apps, device fingerprinting, posture tracking, and more.

January 23, 2026

Comparison - Pangolin vs. Tailscale

How two WireGuard-based tools for remote access differ in design, access control, and fit.

January 27, 2026

What is an Identity-Aware Proxy (IAP)?

This article explains what an identity-aware proxy is, how it differs from reverse proxies, VPNs, and ZTNA, and where it fits in modern Zero Trust access. It also looks at how Pangolin supports this pattern for private web applications and broader private-resource access.

Learn how ZTNA works, why it differs from VPN-based remote access, and how identity, device posture, and policy combine to protect private applications.

What is a Tunneled Reverse Proxy? Architecture, Benefits, and Enterprise Use Cases

A tunneled reverse proxy lets enterprises securely publish private applications through outbound tunnels, without exposing internal networks or relying on broad VPN access.

How Pangolin Punches Through NATs and Firewalls

A deep dive into how Pangolin establishes direct peer-to-peer connections through NAT devices and firewalls without opening ports.

February 26, 2026

Pangolin Cloud is Now Available in Europe

We've deployed dedicated points of presence in the EU for our European cloud users.

September 4, 2025