69b28b9 What's Changed
- Add client tunneling capabilities to Pangolin!
- Allow entering password even if security keys are present on an account
- Add basic member portal dashboard with links to visit resources
- Bug fixes related to resource domain create and update
- Clean up resources when deleting an org
Full Changelog: 1.7.3...1.8.0
New Contributors
- @ivenos made their first contribution in #1097
- @Xentrice made their first contribution in #1111
- @wayneyaoo made their first contribution in #1041
- @SigmaSquadron made their first contribution in #1138
- @jackrosenberg made their first contribution in #1104
How to Update
Important
For the clients to work you need to add port 21820 to the docker-compose.yml and update Gerbil. Please see a detailed guide here
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.
Client tunneling
Introducing Pangolin Clients ("Olm")
We're excited to introduce Pangolin Clients (nicknamed "Olm") - a CLI-based peer-to-peer or relay VPN solution that transforms your Newt site into a secure connectivity hub without requiring open ports.
What are Pangolin Clients?
Pangolin Clients are a lightweight VPN solution built on a hub-and-spoke model:
- Your Newt site acts as the hub, with clients as the spokes
- Unlike mesh-based systems (Tailscale, NetBird), this centralized approach provides VPN capabilities without opening ports
- Data relays through Gerbil on your VPS, with optional
--holepunchfor direct NAT hole-punching connections
Key Features
Cross-Platform Support: CLI clients available for macOS, Windows, and Linux
Flexible Access Control:
- Grant clients access to one or more sites (requires
--accept-clientsflag in Newt) - Control specific network resources or allow full network access
- Define clients with secret credentials (similar to defining sites in Pangolin)
Secure Connectivity: Leverages the same port-free security model as Newt's browser-based access
Use Cases
- Multi-network connectivity: Connect home, office, and cloud VPCs
- Remote management: Use Newt as a jump box for SSH and other remote access
- Lightweight VPN alternative: Secure connectivity without complex mesh configurations
- Self-hosted remote access: Maintain control over your VPN infrastructure
Current Status
This is an early-stage release designed to gather community feedback. The clients are currently minimal and CLI-only, not yet tied to user accounts. We're releasing this basic version to see if the community finds it useful - if so, we'll continue to refine and expand the feature set!
Getting Started
Ready to try Pangolin Clients? Update to version 1.8.0 and follow our migration guide to update all components.
Resources:
We're excited to see how you use this new capability and welcome your feedback as we continue building the best self-hosted remote access solution!