Inbound tunnels / Service mesh #1403

New Issue

MrUnknownDE · 2026-04-05T19:24:07+02:00

MrUnknownDE commented

2026-04-05 19:24:07 +02:00

Originally created by @3nprob on 6/5/2025

Currently, the tunnels are unidirectional: Resources can be added to (newt or wireguard) Sites and exposed via the public Traefik reverse-proxy but as far as I can see no way for Sites to access other Sites via the Pangolin network.

We would like to have Sites able to securely access select Resources at other select Sites over the internal Wireguard network instead of having to go via the public network and the Traefik gateway.

Use-cases are for internal service-to-service access.

This would make it possible to use Pangolin like a service mesh.

One way I imagine this could be implemented would be adding configuration to newt such that it can open ports listening on localhost which would be proxied to a corresponding Resource.

Bump the dev-patch-updates group across 1 directory with 2 updates (#771)

*Originally created by @3nprob on 6/5/2025* Currently, the tunnels are unidirectional: Resources can be added to (newt or wireguard) Sites and exposed via the public Traefik reverse-proxy but as far as I can see no way for Sites to access other Sites via the Pangolin network. We would like to have Sites able to securely access select Resources at other select Sites over the internal Wireguard network instead of having to go via the public network and the Traefik gateway. Use-cases are for internal service-to-service access. This would make it possible to use Pangolin like a service mesh. One way I imagine this could be implemented would be adding configuration to newt such that it can open ports listening on `localhost` which would be proxied to a corresponding Resource. Related: - #771

MrUnknownDE closed this issue

2026-04-05 19:24:07 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1403