/tags/tunneling/ Recent content in Tunneling on Hendrickx Consulting /images/papermod-cover.png /images/papermod-cover.png Hugo en-us Hendrickx Consulting Sun, 03 May 2026 13:11:34 +0200 /posts/exposing-internal-services-via-pangolin/ Sun, 03 May 2026 13:11:34 +0200 /posts/exposing-internal-services-via-pangolin/ <p><em>A pattern for homelab reverse proxy chaining over WireGuard tunnels</em></p> <h2 id="the-problem">The Problem</h2> <p><a href="https://docs.pangolin.net/">Pangolin</a> is a self-hostable tunneling reverse proxy, similar in spirit to Cloudflare Tunnel. You run Pangolin on a public VPS, deploy a lightweight agent called Newt inside your homelab, and Newt maintains an outbound WireGuard tunnel back to the VPS. Pangolin then proxies public traffic through that tunnel to your internal services, no open inbound ports required.</p> <p>The challenge arises when you want to route traffic to internal services by DNS name rather than by IP address. In a typical homelab, DNS names for internal services are resolved by a local DNS server (like Pi-hole). Pangolin runs on the VPS and it has no access to your internal DNS, so it cannot resolve those names.</p>