acme.sh
Reverse Proxy & GatewaysPure shell ACME client for TLS certificates
Replaces Certbot
Best Cross-Platform Reverse Proxy & Gateways for self-hosting
The 20 best Cross-Platform reverse proxy & gateways you can self-host, ranked by community traction.
mitmproxy
Reverse Proxy & GatewaysInteractive HTTPS proxy for inspection and debugging
Replaces Charles Proxy, Fiddler
AdGuard Home
Reverse Proxy & GatewaysNetwork-wide DNS ad and tracker blocker
Replaces Pi-hole, NextDNS
NPS
Reverse Proxy & GatewaysLightweight proxy server for intranet penetration
Replaces ngrok
Nginx
Reverse Proxy & GatewaysHigh-performance web server and reverse proxy
Replaces Apache, IIS
Pingora
Reverse Proxy & GatewaysRust framework to build fast, reliable network services
Replaces Nginx
DDNS-Go
Reverse Proxy & GatewaysAutomatic dynamic DNS updater with a web interface
Replaces No-IP, DynDNS
dnscrypt-proxy
Reverse Proxy & GatewaysEncrypted DNS proxy supporting DNSCrypt and DoH
Replaces Cloudflare WARP
Technitium DNS Server
Reverse Proxy & GatewaysSelf-hosted DNS server with ad-blocking and a web console
Replaces Pi-hole, AdGuard Home
lego
Reverse Proxy & GatewaysLet's Encrypt and ACME client written in Go
Replaces Certbot
YARP
Reverse Proxy & GatewaysReverse proxy toolkit for building proxies in .NET
Replaces Nginx
iodine
Reverse Proxy & GatewaysIPv4 over DNS tunnel solution, enabling you to start up a socks5 proxy
Apache HTTP Server
Reverse Proxy & GatewaysThe world's most widely used web server
Replaces Nginx, IIS
Squid
Reverse Proxy & GatewaysCaching and forwarding HTTP web proxy
Replaces Cloudflare Gateway
Apache Traffic Server
Reverse Proxy & GatewaysFast, scalable caching proxy server
Replaces Varnish, Squid
Maza ad blocking
Reverse Proxy & GatewaysLocal ad blocker
ctrld
Reverse Proxy & GatewaysFlexible DNS forwarding proxy with per-client policy
Replaces NextDNS
g3proxy
Reverse Proxy & GatewaysForward proxy server supporting proxy chaining, protocol inspection,
Privoxy
Reverse Proxy & GatewaysPrivacy-enhancing web proxy with content filtering
Replaces commercial ad-filtering proxies
Wakupator
Reverse Proxy & GatewaysWake On LAN Machine Manager based on network traffic
No apps match these filters.
At a glance
| App | Deploy effort | Difficulty | Min. RAM | License | ★ Stars |
|---|---|---|---|---|---|
| acme.sh | Read-the-docs project | Easy | 32 MB | GPL-3.0 | 47,812 |
| mitmproxy | Under-an-hour setup | Easy | 256 MB | MIT | 45,545 |
| AdGuard Home | ≈5-minute setup | Easy | 128 MB | GPL-3.0 | 37,403 |
| NPS | Under-an-hour setup | Medium | 64 MB | GPL-3.0 | 34,244 |
| Nginx | Under-an-hour setup | Medium | 64 MB | BSD-2-Clause | 31,884 |
| Pingora | Read-the-docs project | Hard | 128 MB | Apache-2.0 | 27,615 |
| DDNS-Go | Under-an-hour setup | Easy | 64 MB | MIT | 17,416 |
| dnscrypt-proxy | Read-the-docs project | Medium | 64 MB | ISC | 13,738 |
| Technitium DNS Server | ≈5-minute setup | Easy | 256 MB | GPL-3.0 | 10,108 |
| lego | Under-an-hour setup | Easy | 64 MB | MIT | 9,936 |
Quick picks
- Most adopted: acme.sh (47,812 GitHub stars).
- Lightest footprint: acme.sh (from 32 MB RAM, against 512 MB for the heaviest here).
- Fastest to deploy: AdGuard Home (verified single-container compose).
- Licensing: 6 of 20 use MIT; check the rest individually if you plan to modify and redistribute.
Every option here is open-source and self-hostable, tagged Cross-Platform within the reverse proxy & gateways category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.