Caddy
Reverse Proxy & GatewaysFast, multi-platform web server with automatic HTTPS
Replaces Nginx, Apache
Best Encrypted Reverse Proxy & Gateways for self-hosting
The 39 best Encrypted reverse proxy & gateways you can self-host, ranked by community traction.
Traefik
Reverse Proxy & GatewaysCloud-native reverse proxy and load balancer
Replaces HAProxy, AWS ELB
Istio
Reverse Proxy & GatewaysFull-featured service mesh for traffic and security control
Replaces AWS App Mesh
Nginx Proxy Manager
Reverse Proxy & GatewaysEasy reverse proxy management with a web UI and free SSL
Replaces Cloudflare
Nginx
Reverse Proxy & GatewaysHigh-performance web server and reverse proxy
Replaces Apache, IIS
Envoy
Reverse Proxy & GatewaysCloud-native high-performance edge and service proxy
Replaces Nginx, HAProxy
Authelia
Reverse Proxy & GatewaysAuthentication and authorization server for reverse proxies
Replaces Okta, Cloudflare Access
Pingora
Reverse Proxy & GatewaysRust framework to build fast, reliable network services
Replaces Nginx
Pangolin
Reverse Proxy & GatewaysSelf-hosted tunneled reverse proxy with identity access
Replaces Cloudflare Tunnel
Ingress-NGINX
Reverse Proxy & GatewaysKubernetes ingress controller using NGINX
Replaces AWS ALB Ingress
Shadowsocks-libev
Reverse Proxy & GatewaysLightweight encrypted SOCKS5 proxy
Replaces commercial VPN proxies
cert-manager
Reverse Proxy & GatewaysAutomated TLS certificate management for Kubernetes
Replaces Certbot
OpenResty
Reverse Proxy & GatewaysScalable web platform extending Nginx with Lua
Replaces Nginx
dnscrypt-proxy
Reverse Proxy & GatewaysEncrypted DNS proxy supporting DNSCrypt and DoH
Replaces Cloudflare WARP
Tengine
Reverse Proxy & GatewaysNginx-derived web server with extra features
Replaces Nginx
Linkerd
Reverse Proxy & GatewaysUltralight, security-first service mesh for Kubernetes
Replaces Istio, AWS App Mesh
SmartDNS
Reverse Proxy & GatewaysLocal DNS server that picks the fastest results
Replaces Pi-hole, dnsmasq
lego
Reverse Proxy & GatewaysLet's Encrypt and ACME client written in Go
Replaces Certbot
YARP
Reverse Proxy & GatewaysReverse proxy toolkit for building proxies in .NET
Replaces Nginx
Technitium DNS Server
Reverse Proxy & GatewaysSelf-hosted DNS server with ad-blocking and a web console
Replaces Pi-hole, AdGuard Home
Blocky
Reverse Proxy & GatewaysFast DNS proxy and ad-blocker for local networks
Replaces Pi-hole, AdGuard Home
HAProxy
Reverse Proxy & GatewaysReliable, high-performance TCP/HTTP load balancer
Replaces F5 BIG-IP, AWS ELB
dae
Reverse Proxy & GatewayseBPF-based transparent proxy with traffic splitting
Replaces Clash
Zoraxy
Reverse Proxy & GatewaysGeneral-purpose HTTP reverse proxy and forwarding tool
Replaces Nginx Proxy Manager
WireGuard UI
Reverse Proxy & GatewaysWeb interface for managing WireGuard configurations
Replaces OpenVPN Access Server
Pomerium
Reverse Proxy & GatewaysIdentity-aware reverse proxy for zero-trust access
Replaces Cloudflare Access, BeyondCorp
go-shadowsocks2
Reverse Proxy & GatewaysModern Shadowsocks proxy implementation in Go
Replaces VPN
Caddy Docker Proxy
Reverse Proxy & GatewaysGenerate Caddy reverse proxy config from Docker labels
Replaces Traefik
Apache HTTP Server
Reverse Proxy & GatewaysThe world's most widely used web server
Replaces Nginx, IIS
Contour
Reverse Proxy & GatewaysKubernetes ingress controller powered by Envoy
Replaces AWS ALB Ingress
relayd
Reverse Proxy & GatewaysOpenBSD load balancer and relay daemon
Replaces HAProxy, F5 BIG-IP
Sozu
Reverse Proxy & GatewaysHot-reconfigurable HTTP reverse proxy in Rust
Replaces HAProxy, Nginx
SWAG
Reverse Proxy & GatewaysSecure web application gateway with Nginx and Certbot
Replaces Cloudflare
Gateway API
Reverse Proxy & GatewaysNext-generation Kubernetes traffic routing standard
Replaces Kubernetes Ingress
River
Reverse Proxy & GatewaysConfigurable reverse proxy from the Pingora project
Replaces nginx, HAProxy
Ehco
Reverse Proxy & GatewaysNetwork relay tool for forwarding traffic over many transports
Replaces Shadowsocks
ctrld
Reverse Proxy & GatewaysFlexible DNS forwarding proxy with per-client policy
Replaces NextDNS
HAProxy Kubernetes Ingress
Reverse Proxy & GatewaysKubernetes ingress controller based on HAProxy
Replaces AWS ALB Ingress
Pound
Reverse Proxy & GatewaysLightweight reverse proxy and HTTPS load balancer
Replaces NGINX, HAProxy
No apps match these filters.
Every option here is open-source and self-hostable, tagged Encrypted within the reverse proxy & gateways category. Compare them on the individual app pages for setup difficulty and resource requirements.