Pangolin
Identity-Aware Tunneled Reverse Proxy Server with Dashboard UI
...It allows you to connect applications and resources behind firewalls or NATs to a central hub, using encrypted tunnels rather than opening public ports or relying entirely on VPNs. With Pangolin you can route traffic from across distributed networks, enforce contextual access rules (such as SSO, geolocation, time of day, IP restrictions), and manage all of your exposed resources in one dashboard. It supports multi-site deployments and highly-available node architectures, enabling you to own your infrastructure yet still get orchestration and control benefits. Pangolin works well for individuals, teams or organizations that need to expose internal web apps, APIs, or services, while maintaining strong authentication, auditing and governance.