Top pick · highest health
Pangolin
97 GOODIdentity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
★ 23k · ⟳ today · 1.22.2 · AGPL-3.0
We track 2 open-source Tailscale alternatives, of which 2 currently score 70 or above on Repoly's GitHub health scale and 2 ship a Docker image. Pangolin leads on health at 97/100 with 1053 commits in the last 90 days; across all 2 projects you are choosing between AGPL-3.0, Apache-2.0.
Showing 2 of 2 tools
Top pick · highest health
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
★ 23k · ⟳ today · 1.22.2 · AGPL-3.0
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
★ 9.1k · ⟳ today · android-client-1.5.14 · Apache-2.0
Pangolin scores highest at 97/100, with 1053 commits in the last 90 days, 23k GitHub stars and its latest release (1.22.2) published 10 days ago. It is also the most active by raw commit count.
1 of 2 are permissively licensed (MIT, Apache, BSD or similar): Firezone (Apache-2.0). 1 use copyleft licences such as GPL or AGPL, which require you to publish changes if you distribute a modified version.
2 of 2 publish a Docker image or Compose file: Pangolin, Firezone. Docker support contributes 10 of the 100 available health points, because it is the clearest signal that self-hosting is a supported path rather than an afterthought.