Pangolin
pangolin.net · Egress and tunnels · 1 record · JSON
Pangolin Egress and tunnels
paidemailno cardDvolume-quota
| Free tier | Basic Free: 'Up to 5 users', 'Custom domains', 'All resource types', 'No credit card required.' The limits row reads Users 5, Sites 5, Domains 5, Organizations 1, Public resources 15, Private resources 15, Machine clients 5. unit users; metered on identity-count |
|---|---|
| Price | USD 0 |
| Per-object cap | not applicable |
| Retention | not applicable |
| Egress | No byte allowance is published on any plan. The free tier is metered on users, sites, resources and machine clients, not bytes.; ingress: tcp+udp free_allowance: none published |
| Identity | email 'No credit card required.' The Cloud account is an email signup; the self-hosted Community Edition needs no vendor account at all. |
| Limits |
|
| Binding | volume-quota the software imposes no byte meter; what runs out is the monthly allowance of the host it runs on, and that host is a separate provider |
| Interface | cli the dashboard creates the resource and the newt connector joins the site to it |
| Tooling | newt site connector, browser dashboard, Docker |
| Composes with | Community Edition on a free-tier VPS (Oracle Always Free is already recorded in this corpus) turns that VPS into a public TCP/UDP ingress with no vendor byte quota; the VPS egress allowance then binds. |
| Reliability | TCP and UDP resources 'do not enforce Pangolin authentication or access rules', so the listener is unauthenticated at the proxy layer. |
| Notes | The count caps have no kind in the seven-value vocabulary, so limits[] is empty and the numbers are in free_stated: 15 public resources is what a reader hits first if they need many services. Three candidate readings of the Cloud/free conflict were tested: (1) the free tier ships raw resources, (2) raw resources are self-hosted only, (3) the docs are stale. The raw-resources page and the Cloud-vs-self-hosted page agree with each other and are dated after the pricing page, so (2) holds and 'All resource types' on the pricing page means the HTTP, SSH, RDP, VNC and AI Gateway families on Cloud. |
| Evidence rung | documented A live 1 GiB UDP transfer through a raw resource would raise this to measured. No host was stood up. |
| Checked | 2026-10-23 (live); stale on 2026-11-22 |
| Parsed numbers |
|
Evidence (3)
| date | source | what it proved |
|---|---|---|
| 2026-10-23 | pangolin.net/pricing | 'Basic' is 'Free' with 'Up to 5 users', 'All resource types' and 'No credit card required.'; the limits table gives Public resources 15 |
| 2026-10-23 | docs.pangolin.net/manage/resources/public/raw-resources.md | 'TCP and UDP public resources are protocol-agnostic proxies'; 'each resource binds to a port on the Pangolin server host'; 'This feature is only available in self-hosted Pangolin instances. If you're using Pangolin Cloud, you will need to deploy a remote node.' |
| 2026-10-23 | docs.pangolin.net/about/pangolin-cloud-vs-self-hosted.md | 'Public TCP/UDP listeners that bind a port on the Pangolin host are a self-hosted-server feature. On Cloud, deploy a remote node for that.' |
More fields (7)
{
"wg_path": "none",
"wg_detail": "The site connector (newt) holds the WireGuard tunnel and no page read today documents a .conf export, so only the vendor connector joins. The public listener is a port bound on the server host: 'Clients connect to <pangolin-server>:<port> and traffic is forwarded to the downstream service through a site connector.'",
"ingress": "tcp+udp",
"volume_tib_month": null,
"volume_stated": "No byte allowance is published on any plan. The free tier is metered on users, sites, resources and machine clients, not bytes.",
"bytes_transit": "yes",
"transit_note": "traffic enters the Pangolin server's public port, crosses the WireGuard tunnel to the site, and leaves from the site's own NIC"
}Unknown or withheld values (2)
$.per_object_cap.statednot-applicable$.retention.statednot-applicable