Support "Domain" for Resource Access Allowlisting #1729

New Issue

MrUnknownDE · 2026-04-05T19:40:18+02:00

MrUnknownDE commented

2026-04-05 19:40:18 +02:00

Originally created by @gokussjx on 3/9/2025

Resource access allowlisting currently looks like this:

This is great for static IP, however, this cannot work for systems with a dynamic IP address.
Adding support for a "Domain" would be very beneficial.

The use-case I'm thinking of is for self-hosted services which have a dynamic IP address, often bound with dynamic DNS services such as DynDNS, DuckDNS, etc. Since the host requests the upstream DNS to update the IP address, all Pangolin has to do is query it on the fly and allow that IP access. One potential implementation around the TTL is to cache the old IP for a short period of time.

*Originally created by @gokussjx on 3/9/2025* Resource access allowlisting currently looks like this: ![Image](https://github.com/user-attachments/assets/1c637f67-4f7f-4319-aecd-61cb378e8b0a) This is great for static IP, however, this cannot work for systems with a dynamic IP address. Adding support for a "Domain" would be very beneficial. The use-case I'm thinking of is for self-hosted services which have a dynamic IP address, often bound with dynamic DNS services such as DynDNS, DuckDNS, etc. Since the host requests the upstream DNS to update the IP address, all Pangolin has to do is query it on the fly and allow that IP access. One potential implementation around the TTL is to cache the old IP for a short period of time.

MrUnknownDE closed this issue

2026-04-05 19:40:18 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1729