#1
Caddy is a fast, extensible Go web server and reverse proxy with automatic HTTPS (ACME), HTTP/1.1, HTTP/2, and HTTP/3 support, and a JSON config API.
75.2k stars4.9k forksApache-2.0last commit Actively maintained
12 self-hosted Packetriot alternatives
Cloud-based reverse-tunneling and proxy service that exposes local HTTP/S and TCP applications and devices to the public internet. Provides automatic TLS (Let's Encrypt), custom domains, authentication and access controls, routing, logging, and NAT/CGNAT traversal.
Alternatives to Packetriot
#2
Open-source identity-based remote access platform combining WireGuard VPN and tunneled reverse proxy access with granular zero-trust controls.
22.5k stars765 forkslast commit Actively maintained
CLI tool to create Cloudflare Tunnels and route traffic through Cloudflare’s edge.
15.4k stars1.4k forksApache-2.0last commit Actively maintained
#4
iodine is a DNS tunneling tool that forwards IPv4 traffic through DNS queries and replies, providing a TUN interface to route IP traffic when only DNS is allowed.
8k stars596 forksISClast commit Slowing down
#5
sish is an open-source Serveo/ngrok alternative that exposes local HTTP(S), WebSockets, and TCP services to the internet using SSH reverse tunnels.
4.7k stars333 forksMITlast commit Actively maintained
#6
LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.
3.7k stars276 forksGPL-3.0last commit Actively maintained
Self-hosted web dashboard for WireGuard and AmneziaWG to manage configs, peers, and access with a simple UI and optional 2FA.
3.7k stars452 forksApache-2.0last commit Actively maintained
Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.
1.7k stars87 forksAGPL-3.0last commit Slowing down
#9
Self-hosted ingress platform that exposes internal HTTP/TCP services to the internet through reverse WireGuard tunnels, with NGINX routing and automatic TLS certificates.
1.6k stars77 forksApache-2.0last commit Actively maintained
#10
NetGoat is a self-hostable reverse proxy and traffic management platform offering Cloudflare-like features such as TLS termination, rate limiting, WAF-style filtering, and dashboards.
890 stars47 forksAGPL-3.0last commit Actively maintained
#11
Publishes Docker container label-based service definitions into Redis so a central Traefik instance can discover and route services across multiple Docker hosts.
510 stars27 forksMITlast commit Actively maintained
#12
Integrated installer and platform for home infrastructure. Provides VPN relay for NAT traversal, preconfigured email, automatic HTTPS, reverse proxy, and a web management utility.
69 stars7 forksGPL-3.0last commit Actively maintained
What replacing Packetriot actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 10 of 12 shipped a commit in the last six months. Licences in this list: Apache-2.0, ISC, MIT, GPL-3.0, AGPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Edge & Traffic (Reverse Proxy, Load Balancing, Web Servers).
