Allow TLS on raw tcp proxy #1532

New Issue

MrUnknownDE · 2026-04-05T19:33:25+02:00

MrUnknownDE commented

2026-04-05 19:33:25 +02:00

Originally created by @ocrumbs on 5/4/2025

Hi all,

I have been interested in Pangolin for quite sometime. I think if I understood this correctly that the tcp proxy is merely a proxy passthrough. Is there a way for Pangolin to help with tls offloading for tcp connections (http proxy can already do that), given the upstream service is already secured using wireguard connection?

My usecase is to expose RabbitMQ AMQP service over tls. Not a networking expert, but would like some calculated opinions on whether Pangolin can offload initial connection and proxy pass the rest to the upstream target?

*Originally created by @ocrumbs on 5/4/2025* Hi all, I have been interested in Pangolin for quite sometime. I think if I understood this correctly that the tcp proxy is merely a proxy passthrough. Is there a way for Pangolin to help with tls offloading for tcp connections (http proxy can already do that), given the upstream service is already secured using wireguard connection? My usecase is to expose RabbitMQ AMQP service over tls. Not a networking expert, but would like some calculated opinions on whether Pangolin can offload initial connection and proxy pass the rest to the upstream target?

MrUnknownDE closed this issue

2026-04-05 19:33:25 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1532