Top pick · highest health
Pangolin
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
Comparison
We track 2 open-source Tailscale alternatives, of which 2 currently score 70 or above on Repoly's GitHub health scale and 2 ship a Docker image. Pangolin leads on health at 97/100 with 1058 commits in the last 90 days; across all 2 projects you are choosing between AGPL-3.0, Apache-2.0.
Showing 2 of 2 tools
Top pick · highest health
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
Pangolin edges Firezone 97 to 96, and most of the difference is stars: 23k stars against 9.1k stars. Firezone is the busier codebase, though, with 1,270 commits in 90 days to 1,058.
The most recent release is Firezone gateway-1.6.4, published yesterday. None of the measured options scores under 40. By stack, Elixir (1) is the most common. Firezone is permissively licensed; Pangolin is copyleft.
Pangolin scores highest at 97/100, with 1058 commits in the last 90 days, 23k stars on GitHub and its latest release (1.25.3) published 7 days ago. Firezone has the most raw commit activity at 1270 commits in 90 days.
1 of 2 are permissively licensed (MIT, Apache, BSD or similar): Firezone (Apache-2.0). 1 use copyleft licences such as GPL or AGPL, which require you to publish changes if you distribute a modified version.
2 of 2 publish a Docker image or Compose file: Pangolin, Firezone. Docker support contributes 10 of the 100 available health points, because it is the clearest signal that self-hosting is a supported path rather than an afterthought.
On measured health Pangolin leads, 97 to 96. Pangolin has 1,058 commits in 90 days, 23k stars and 1.25.3 from 7 days ago; Firezone has 1,270 commits in 90 days, 9.1k stars and gateway-1.6.4 from yesterday. Pick Firezone if licensing matters: it is Apache-2.0, while Pangolin is AGPL-3.0.
2 of the 2 measured options score 70 or above. Every measured option had commits in the last 90 days. None scores under 40.
Elixir: Firezone. The stack matters if you plan to extend or patch the tool yourself.