Istio
Reverse Proxy & GatewaysFull-featured service mesh for traffic and security control
Replaces AWS App Mesh
Best Real-Time Reverse Proxy & Gateways for self-hosting
The 12 best Real-Time reverse proxy & gateways you can self-host, ranked by community traction.
SafeLine
Reverse Proxy & GatewaysSelf-hosted web application firewall with a web console
Replaces Cloudflare WAF
Apache APISIX
Reverse Proxy & GatewaysDynamic, real-time, high-performance API gateway
Replaces Kong, AWS API Gateway
CrowdSec
Reverse Proxy & GatewaysCollaborative open-source intrusion prevention system
Replaces Cloudflare WAF, Fail2ban
Linkerd
Reverse Proxy & GatewaysUltralight, security-first service mesh for Kubernetes
Replaces Istio, AWS App Mesh
FrankenPHP
Reverse Proxy & GatewaysModern PHP application server built on Caddy
Replaces nginx, Apache HTTP Server
Tyk
Reverse Proxy & GatewaysOpen-source API gateway and management platform
Replaces Apigee, AWS API Gateway
ExternalDNS
Reverse Proxy & GatewaysSynchronize Kubernetes services with DNS providers
Replaces Route 53 manual records
Kuma
Reverse Proxy & GatewaysUniversal service mesh for Kubernetes and VMs
Replaces Istio, Linkerd
Traefik Mesh
Reverse Proxy & GatewaysLightweight service mesh built on Traefik
Replaces Istio, Linkerd
Gravitee API Management
Reverse Proxy & GatewaysOpen-source API management platform
Replaces Apigee, MuleSoft
HAProxy Data Plane API
Reverse Proxy & GatewaysREST API for dynamic HAProxy configuration
Replaces NGINX Plus API
No apps match these filters.
At a glance
| App | Deploy effort | Difficulty | Min. RAM | License | ★ Stars |
|---|---|---|---|---|---|
| Istio | Read-the-docs project | Hard | 1,024 MB | Apache-2.0 | 38,437 |
| SafeLine | Under-an-hour setup | Medium | 1,024 MB | GPL-3.0 | 22,743 |
| Apache APISIX | Under-an-hour setup | Medium | 512 MB | Apache-2.0 | 17,219 |
| CrowdSec | Under-an-hour setup | Medium | 256 MB | MIT | 15,168 |
| Linkerd | Read-the-docs project | Medium | 256 MB | Apache-2.0 | 11,514 |
| FrankenPHP | Under-an-hour setup | Medium | 256 MB | MIT | 11,400 |
| Tyk | Under-an-hour setup | Medium | 512 MB | MPL-2.0 | 10,861 |
| ExternalDNS | Read-the-docs project | Medium | 128 MB | Apache-2.0 | 9,115 |
| Kuma | Read-the-docs project | Hard | 1,024 MB | Apache-2.0 | 4,012 |
| Traefik Mesh | Read-the-docs project | Medium | 512 MB | Apache-2.0 | 2,100 |
Quick picks
- Most adopted: Istio (38,437 GitHub stars).
- Lightest footprint: ExternalDNS (from 128 MB RAM, against 2,048 MB for the heaviest here).
- Licensing: 8 of 12 use Apache-2.0; check the rest individually if you plan to modify and redistribute.
Every option here is open-source and self-hostable, tagged Real-Time within the reverse proxy & gateways category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.