authentik
Reverse Proxy & GatewaysOpen-source identity provider with proxy outpost
Replaces Okta, Auth0
Best OAuth Reverse Proxy & Gateways for self-hosting
The 4 best OAuth reverse proxy & gateways you can self-host, ranked by community traction.
OAuth2 Proxy
Reverse Proxy & GatewaysReverse proxy that adds authentication to any web app
Replaces Cloudflare Access
Tinyauth
Reverse Proxy & GatewaysSimplest way to protect your apps with a login screen
Replaces Cloudflare Access
Pomerium
Reverse Proxy & GatewaysIdentity-aware reverse proxy for zero-trust access
Replaces Cloudflare Access, BeyondCorp
No apps match these filters.
At a glance
| App | Deploy effort | Difficulty | Min. RAM | License | ★ Stars |
|---|---|---|---|---|---|
| authentik | Under-an-hour setup | Medium | 1,024 MB | MIT | 25,950 |
| OAuth2 Proxy | Under-an-hour setup | Medium | 128 MB | MIT | 15,173 |
| Tinyauth | Under-an-hour setup | Easy | 64 MB | GPL-3.0 | 8,376 |
| Pomerium | Under-an-hour setup | Medium | 256 MB | Apache-2.0 | 5,042 |
Quick picks
- Most adopted: authentik (25,950 GitHub stars).
- Lightest footprint: Tinyauth (from 64 MB RAM, against 1,024 MB for the heaviest here).
- Licensing: 2 of 4 use MIT; check the rest individually if you plan to modify and redistribute.
Every option here is open-source and self-hostable, tagged OAuth within the reverse proxy & gateways category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.