boringproxy
Simple self-hosted reverse proxy and tunnel manager
boringproxy is a simple but powerful tool for tunneling from a public server to a private machine, with automatic HTTPS. It is designed to be boringly reliable and easy to run.
Key features
- Automatic HTTPS
- Single binary
- Web admin UI
- Self-hosted tunneling
Strengths
- Released under the MIT license
- Easy to set up — beginner-friendly
- First-class Docker support for quick deployment
- Active community (1.4k GitHub stars)
Is boringproxy secure?
2 known vulnerabilities affect boringproxy's latest release (v0.10.0) according to OSV.dev; the most severe is rated high.
Affecting v0.10.0
| Advisory | Severity | Summary |
|---|---|---|
| CVE-2026-70615 | High | boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation |
| CVE-2026-70616 | High | boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint |
Source: OSV.dev, checked 2026-10-14. How this is measured.
boringproxy replaces
Health badge
Maintain boringproxy? Add its health score to your README. The badge links back to this page.
Compare boringproxy
12 head-to-head comparisons.
Similar remote access & vpn apps
RustDesk
Remote Access & VPNOpen-source remote desktop alternative to TeamViewer
Replaces TeamViewer, AnyDesk
frp
Remote Access & VPNFast reverse proxy to expose local servers behind NAT
Replaces ngrok
Headscale
Remote Access & VPNOpen-source self-hosted Tailscale control server
Replaces Tailscale
Sunshine
Remote Access & VPNSelf-hosted game-stream host for Moonlight clients
Replaces NVIDIA GameStream, Parsec
Tailscale
Remote Access & VPNZero-config mesh VPN built on WireGuard
Replaces ZeroTier
JumpServer
Remote Access & VPNOpen-source bastion host and PAM platform
Replaces CyberArk, Teleport