Free, open-source alternatives to Cloudflare Tunnel
Reach your services without opening ports. 2 apps you can run yourself instead of Cloudflare Tunnel, sorted by how well they replace it. Each one is open source, so your data stays with you.
PangolinBest match
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
sish
HTTP(S)/WS(S)/TCP tunnels to localhost using only SSH (serveo/ngrok alternative).
Side by side
Why replace Cloudflare Tunnel?
Cloudflare Tunnel works, but your data lives in someone else's account, the price can change at any time, and features can disappear. An open-source app you run yourself is yours: you choose where it runs, who can see the data, and when to update.
Questions
What is the best free alternative to Cloudflare Tunnel?
Pangolin is the closest open-source replacement for Cloudflare Tunnel in our list. sish are worth a look too, depending on what you need.
Can I self-host an alternative to Cloudflare Tunnel?
Yes. All 2 apps on this page are open source and can run on your own server, usually with Docker, or on a managed host that installs them for you.