[Feature Request] Allow Outgoing Traffic via Pangolin Tunnel (VPN-like) #421

Closed
opened 2025-11-13 11:59:54 -06:00 by GiteaMirror · 4 comments
Owner

Originally created by @kielerdotdev on GitHub (Jun 7, 2025).

Problem: Some applications (e.g., game servers like CS2, Rust) require their outbound connections to originate from the same public IP that handles incoming connections. Pangolin currently focuses on tunneling inbound requests to local services.

Solution: Extend Pangolin's functionality to allow specific outgoing traffic from the local network/host to be routed through the established WireGuard tunnel, effectively using the Pangolin egress point as its source IP for those connections. This would address scenarios where the source IP of outgoing game server traffic needs to match the public IP.

My ideal solution would be using wireguard with AllowedIps = 0.0.0.0/0 and just use pangolin as a normal "vpn"

Originally created by @kielerdotdev on GitHub (Jun 7, 2025). Problem: Some applications (e.g., game servers like CS2, Rust) require their outbound connections to originate from the same public IP that handles incoming connections. Pangolin currently focuses on tunneling inbound requests to local services. Solution: Extend Pangolin's functionality to allow specific outgoing traffic from the local network/host to be routed through the established WireGuard tunnel, effectively using the Pangolin egress point as its source IP for those connections. This would address scenarios where the source IP of outgoing game server traffic needs to match the public IP. My ideal solution would be using wireguard with AllowedIps = 0.0.0.0/0 and just use pangolin as a normal "vpn"
GiteaMirror added the stale label 2025-11-13 11:59:54 -06:00
Author
Owner

@Anders0210 commented on GitHub (Jun 8, 2025):

Would be awesome ngl

@Anders0210 commented on GitHub (Jun 8, 2025): Would be awesome ngl
Author
Owner

@lakemike commented on GitHub (Jun 9, 2025):

I would support this too.
(Q: Could this already be done with wireguard connecting to pangolin?)

@lakemike commented on GitHub (Jun 9, 2025): I would support this too. (Q: Could this already be done with wireguard connecting to pangolin?)
Author
Owner

@kielerdotdev commented on GitHub (Jun 9, 2025):

I would support this too.
(Q: Could this already be done with wireguard connecting to pangolin?)

I tried, the wireeguard setup does not seem to allow this right now.

Tried changing allowedips to 0.0.0.0/0, that resulted in no connection

@kielerdotdev commented on GitHub (Jun 9, 2025): > I would support this too. > (Q: Could this already be done with wireguard connecting to pangolin?) I tried, the wireeguard setup does not seem to allow this right now. Tried changing allowedips to 0.0.0.0/0, that resulted in no connection
Author
Owner

@oschwartz10612 commented on GitHub (Jun 24, 2025):

Moving this to a discussion to track. Interesting idea but might be covered with some upcoming stuff with clients.

@oschwartz10612 commented on GitHub (Jun 24, 2025): Moving this to a discussion to track. Interesting idea but might be covered with some upcoming stuff with clients.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#421