I have been interested in Pangolin for quite sometime. I think if I understood this correctly that the tcp proxy is merely a proxy passthrough. Is there a way for Pangolin to help with tls offloading for tcp connections (http proxy can already do that), given the upstream service is already secured using wireguard connection?
My usecase is to expose RabbitMQ AMQP service over tls. Not a networking expert, but would like some calculated opinions on whether Pangolin can offload initial connection and proxy pass the rest to the upstream target?
Originally created by @ocrumbs on GitHub (May 4, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/660
Hi all,
I have been interested in Pangolin for quite sometime. I think if I understood this correctly that the tcp proxy is merely a proxy passthrough. Is there a way for Pangolin to help with tls offloading for tcp connections (http proxy can already do that), given the upstream service is already secured using wireguard connection?
My usecase is to expose RabbitMQ AMQP service over tls. Not a networking expert, but would like some calculated opinions on whether Pangolin can offload initial connection and proxy pass the rest to the upstream target?
@oschwartz10612 commented on GitHub (May 5, 2025):
Thanks for the suggestion!
I believe Traefik supports TLS on routers for raw TCP resources. This is something we would have to add to pangolin to return in the Traefik config but would be easy!
I am going to move this to a discussion so it can be upvoted and prioritized for addition!
<!-- gh-comment-id:2849662631 -->
@oschwartz10612 commented on GitHub (May 5, 2025):
Thanks for the suggestion!
I believe Traefik supports TLS on routers for raw TCP resources. This is something we would have to add to pangolin to return in the Traefik config but would be easy!
I am going to move this to a discussion so it can be upvoted and prioritized for addition!
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @ocrumbs on GitHub (May 4, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/660
Hi all,
I have been interested in Pangolin for quite sometime. I think if I understood this correctly that the tcp proxy is merely a proxy passthrough. Is there a way for Pangolin to help with tls offloading for tcp connections (http proxy can already do that), given the upstream service is already secured using wireguard connection?
My usecase is to expose RabbitMQ AMQP service over tls. Not a networking expert, but would like some calculated opinions on whether Pangolin can offload initial connection and proxy pass the rest to the upstream target?
@oschwartz10612 commented on GitHub (May 5, 2025):
Thanks for the suggestion!
I believe Traefik supports TLS on routers for raw TCP resources. This is something we would have to add to pangolin to return in the Traefik config but would be easy!
I am going to move this to a discussion so it can be upvoted and prioritized for addition!