Expose your private services without opening your firewalls
A sovereign alternative to Cloudflare Tunnel powered by Pangolin and Newt, installed and maintained by DINAO. Your traffic flows through encrypted WireGuard tunnels on our French servers — never through a US proxy.
What is Pangolin + Newt?
Pangolin is a reverse proxy tunnel and identity-aware tool that allows you to securely expose private services behind a NAT or firewall, without opening a single incoming port. Installed on a public IP entry point, it routes traffic through WireGuard encrypted tunnels running in user space, and relies on Traefik for reverse proxying, load balancing, health checks, and automatic Let's Encrypt certificates.
Its companion Newt is a lightweight agent installed on each remote server or site: it establishes an outgoing tunnel to Pangolin, making internal machines invisible from the outside while making them publishable. Together, they form a credible self-hosted alternative to Cloudflare Tunnel and Tailscale Funnel.
Pangolin includes an admin dashboard, user and role management, and access control per resource (PIN, password, SSO/OIDC, IP rules). Developed by Fossorial, the ecosystem is actively maintained and designed for professional self-hosting.
Host Pangolin + Newt at DINAO
Resource tiers compatible with Pangolin + Newt prerequisites (minimum 1 vCPU / 1 Go / 10 Go). Hosted in France, fully managed.
- 1 dedicated vCPU
- 2 Go RAM
- 20 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 2 dedicated vCPU
- 4 Go RAM
- 40 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 4 dedicated vCPU
- 8 Go RAM
- 80 GB NVMe
- Daily backups
- Managed & monitored by DINAO
- 8 dedicated vCPU
- 16 Go RAM
- 160 GB NVMe
- Daily backups
- Managed & monitored by DINAO
Technical details
You might be wondering…
How is this different from Cloudflare Tunnel?
The principle is similar — exposing a private service without opening a port — but here the entry point is your DINAO instance in France. Your traffic does not pass through a US network, keeping you in control of the chain.
Do I need to open ports on my firewall?
No. The Newt agent installed on your servers establishes an outgoing tunnel to Pangolin. No incoming ports are exposed on your machines, even behind a NAT.
Where are the data hosted?
On DINAO infrastructure in France, in one of the available datacenters. The entry point and routing metadata do not leave the territory.
Do I need technical skills?
For everyday use, no : DINAO installs Pangolin and configures the entry point. You manage your resources from the dashboard. Installing the Newt agent on your servers is simple and documented.
Can I connect multiple sites or servers?
Yes. Newt can be deployed on as many servers and remote sites as needed (depending on your tier), each establishing its own tunnel to Pangolin.
