Zoraxy
HTTP reverse proxy and gateway with web UI and real-time analytics
5.4k stars 320 forks last commit first released AGPL-3.0
Actively maintained
Last commit 22 Aug 2026.
Zoraxy is a general-purpose HTTP reverse-proxy and forwarding gateway designed for homelab and self-hosted services. It provides a web UI for configuring proxies, TLS, routing and runtime utilities so users can expose and manage services from a single gateway.
Key Features
- HTTP reverse proxy supporting virtual directories, alias hostnames and custom headers.
- Automatic WebSocket proxying and stream proxy support for TCP/UDP forwarding.
- TLS/SSL management with ACME (Let's Encrypt) support, auto-renew and SNI/SAN certificate handling; includes DNS challenge integrations.
- Load balancing, basic auth, redirection rules and blacklist/whitelist controls (IP/CIDR/country).
- Real-time analytics and uptime monitoring with instant network/visitor statistics and no-reload access control.
- Plugin system and built-in utilities (mDNS scanner, Wake-on-LAN, IP/port scanners, debug forward proxy).
- Web-based SSH terminal for in-browser administration.
Use Cases
- Expose and route multiple self-hosted web apps (home server, NAS, media servers) behind a single, manageable reverse proxy.
- Provide TLS/ACME certificate automation and DNS-challenge workflows for services without manual cert management.
- Monitor service availability and traffic in real time, and run network utilities (scans, WOL) from the gateway UI.
Limitations and Considerations
- Some advanced modules are community-maintained or seeking maintainers (notably ACME integration improvements and an extended logging/analysis module), which may affect feature completeness for large-scale deployments.
Zoraxy is lightweight and targeted at homelab users and small deployments that need a single gateway for routing, TLS and basic observability. It is distributed with prebuilt binaries and Docker artifacts and can be built from source with Go, making it suitable for ARM/SBC and x86 environments.
Categories:
Tags:
Tech Stack:
Similar to Zoraxy
Self-Hosted Gateway
Docker-native reverse proxy over WireGuard to expose local services
Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.
Ferron
Fast, memory-safe web server with automatic TLS and modern protocol support
A Rust-written, memory-safe web server offering automatic Let's Encrypt TLS, KDL configuration, HTTP/2/HTTP/3, reverse proxying, and built-in tooling for serving web apps.
GoDoxy
Reverse proxy and container orchestrator for self-hosters
High-performance reverse proxy and container orchestrator with Web UI, automatic Docker/Podman route discovery, idle-sleep, access control, and automated Let's Encrypt support.
Static Web Server
High-performance static file web server with TLS and HTTP/2
Static Web Server (SWS) is a lightweight, cross-platform Rust web server for serving static files with HTTP/2, TLS, compression, caching headers, and SPA fallbacks.
sish
SSH-based reverse tunneling for HTTP(S), WebSockets, and TCP
sish is an open-source Serveo/ngrok alternative that exposes local HTTP(S), WebSockets, and TCP services to the internet using SSH reverse tunnels.
Traefik Proxy
Cloud-native reverse proxy, load balancer, and ingress controller
Traefik Proxy is a dynamic reverse proxy and load balancer that auto-discovers services from Docker, Kubernetes, and other providers, with HTTPS, routing, and observability built in.
