BO

boringproxy

Simple self-hosted reverse proxy and tunnel manager

Remote Access & VPN ★ 1.4k stars Easy setup MIT

boringproxy is a simple but powerful tool for tunneling from a public server to a private machine, with automatic HTTPS. It is designed to be boringly reliable and easy to run.

Key features

  • Automatic HTTPS
  • Single binary
  • Web admin UI
  • Self-hosted tunneling

Strengths

  • Released under the MIT license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Active community (1.4k GitHub stars)

Is boringproxy secure?

2 known vulnerabilities affect boringproxy's latest release (v0.10.0) according to OSV.dev; the most severe is rated high.

Affecting v0.10.0

AdvisorySeveritySummary
CVE-2026-70615Highboringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation
CVE-2026-70616Highboringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint

Source: OSV.dev, checked 2026-10-14. How this is measured.

boringproxy replaces

Health badge

Maintain boringproxy? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 14 · at risk

Markdown
[![SelfHostIndex health score for boringproxy](https://selfhostindex.com/badge/boringproxy.svg)](https://selfhostindex.com/app/boringproxy/)
HTML
<a href="https://selfhostindex.com/app/boringproxy/"><img src="https://selfhostindex.com/badge/boringproxy.svg" alt="SelfHostIndex health score for boringproxy"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/boringproxy.svg
   :alt: SelfHostIndex health score for boringproxy
   :target: https://selfhostindex.com/app/boringproxy/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare boringproxy

12 head-to-head comparisons.

Similar remote access & vpn apps