Caddy is a fast, extensible Go web server and reverse proxy with automatic HTTPS (ACME), HTTP/1.1, HTTP/2, and HTTP/3 support, and a JSON config API.

74.4k stars4.8k forksApache-2.0last commit Actively maintained
LocalXpose is a tunneling service that exposes local or private servers to the public internet via HTTPS, TCP, and UDP tunnels. It provides public URLs, subdomains, access controls and forwarding for testing, demos, webhook delivery, and remote access.
Caddy is a fast, extensible Go web server and reverse proxy with automatic HTTPS (ACME), HTTP/1.1, HTTP/2, and HTTP/3 support, and a JSON config API.

74.4k stars4.8k forksApache-2.0last commit Actively maintained
Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.

21.9k stars745 forkslast commit Actively maintained
CLI tool to create Cloudflare Tunnels and route traffic through Cloudflare’s edge.

15k stars1.4k forksApache-2.0last commit Actively maintained
sish is an open-source Serveo/ngrok alternative that exposes local HTTP(S), WebSockets, and TCP services to the internet using SSH reverse tunnels.

4.7k stars332 forksMITlast commit Actively maintained
LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

3.7k stars277 forksGPL-3.0last commit Actively maintained
High-performance reverse proxy for self-hosted apps with Web UI, Docker/Podman auto-routing, HTTPS via Let's Encrypt, access control, and OIDC/ForwardAuth support.
3.5k stars150 forkslast commit Actively maintained
Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.

1.7k stars87 forksAGPL-3.0last commit Slowing down
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.

1.6k stars76 forksApache-2.0last commit Actively maintained
Publishes Docker container label-based service definitions into Redis so a central Traefik instance can discover and route services across multiple Docker hosts.
501 stars26 forksMITlast commit Actively maintained
Integrated installer and platform for home infrastructure. Provides VPN relay for NAT traversal, preconfigured email, automatic HTTPS, reverse proxy, and a web management utility.

65 stars7 forksGPL-3.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 9 of 10 shipped a commit in the last six months. Licences in this list: Apache-2.0, MIT, GPL-3.0, AGPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Edge & Traffic (Reverse Proxy, Load Balancing, Web Servers).