oschwartz10612

4 ms·

1. 1.▲
   by oschwartz10612 1mo ago

   Other Pangolin maintainer here! A little more on how the WireGuard connection authenticates the connection if you are curious: the client makes a websocket connection to the server to receive command and control. That is authed with the use
2. 2.▲
   by oschwartz10612 8mo ago

   We do not support LDAP directly right now. We do support any OIDC / OAUTH enabled endpoint though like Entra, Google, Okta. You can use something like Authentik to pull in LDAP users into a OIDC enabled endpoint.
3. 3.▲
   by oschwartz10612 8mo ago

   We have a helm chart for newt (the site connector which goes into K8S) https://artifacthub.io/packages/helm/fosrl/newt ! Its pretty basic right now but we have plans to connect RBAC and the API to pull in reso
4. 4.▲
   by oschwartz10612 8mo ago

   Co-maintainer here: we also did this cool thing where we reused the same go codebase across our clients. We have a go package called olm (on our Github and following our animal theme) that implements all of the VPN capabilities. It creates
5. 5.▲
   by oschwartz10612 1y ago

   Haha valid concern. We are actually using Traefik to do the reverse proxying which is a pretty standard reverse proxy written in Go! Our tunnel client Newt is also written in Go. The pangolin UI and control plane is typescript though.
6. 6.▲
   by oschwartz10612 1y ago

   We are coming for them!
7. 7.▲
   by oschwartz10612 1y ago

   Pangolin is "public ingress to private networks" and not a mesh VPN/network builder. As you say I think NetBird is an alternative to Tailscale and we are an alternative to Cloudflare tunnels, Ngrok, or Zscaler. It is more abo
8. 8.▲
   by oschwartz10612 1y ago

   Thanks! I think what you are using (SSH, Tailscale) is great for your use case! We see this as more of a static and permanent tunnel to a service - less ephemeral than a ssh tunnel - and more to get public users into your application. Meani
9. 9.▲
   by oschwartz10612 1y ago

   Hello Eveyone, this is the other maintainer here. Just wanted to add some more detail about the other components of this system: Pangolin uses Traefik under the hood to do the actual HTTP proxying. A plugin, Badger, provides a way to authen