#1
Caddy is a fast, extensible Go web server and reverse proxy with automatic HTTPS (ACME), HTTP/1.1, HTTP/2, and HTTP/3 support, and a JSON config API.
75.2k stars4.9k forksApache-2.0last commit Actively maintained
13 self-hosted ngrok alternatives
ngrok is a cloud tunneling service that creates secure public URLs to expose local HTTP and TCP services. It provides TLS termination, access controls, connection multiplexing, request inspection/replay, and webhook forwarding for development, testing, demos, and remote access.
Alternatives to ngrok
#2
Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.
22.5k stars765 forkslast commit Actively maintained
CLI tool to create Cloudflare Tunnels and route traffic through Cloudflare’s edge.
15.4k stars1.4k forksApache-2.0last commit Actively maintained
#4
A general-purpose HTTP reverse proxy and forwarding tool for homelabs, offering web UI, ACME/TLS, stream proxy, plugins and realtime monitoring.
5.4k stars320 forksAGPL-3.0last commit Actively maintained
#5
sish is an open-source Serveo/ngrok alternative that exposes local HTTP(S), WebSockets, and TCP services to the internet using SSH reverse tunnels.
4.7k stars333 forksMITlast commit Actively maintained
13 Feet Ladder is a self-hosted 12ft.io-style server that retrieves readable article pages by requesting them as a search crawler, helping reduce paywalls and clutter.
4.3k stars225 forksMITlast commit Actively maintained
#7
High-performance reverse proxy for self-hosted apps with Web UI, Docker/Podman auto-routing, HTTPS via Let's Encrypt, access control, and OIDC/ForwardAuth support.
4.1k stars188 forkslast commit Actively maintained
#8
LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.
3.7k stars276 forksGPL-3.0last commit Actively maintained
Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.
1.7k stars87 forksAGPL-3.0last commit Slowing down
#10
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.
1.6k stars77 forksApache-2.0last commit Actively maintained
#11
NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.
890 stars47 forksAGPL-3.0last commit Actively maintained
#12
Publishes Docker container label-based service definitions into Redis so a central Traefik instance can discover and route services across multiple Docker hosts.
510 stars27 forksMITlast commit Actively maintained
#13
Integrated installer and platform for home infrastructure. Provides VPN relay for NAT traversal, preconfigured email, automatic HTTPS, reverse proxy, and a web management utility.
69 stars7 forksGPL-3.0last commit Actively maintained
What replacing ngrok actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 12 of 13 shipped a commit in the last six months. Licences in this list: Apache-2.0, AGPL-3.0, MIT, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Edge & Traffic (Reverse Proxy, Load Balancing, Web Servers).
