bunkeritybunkerweb

Bunkerweb

BunkerWeb is a containerized suite of infrastructure tools that functions as a cloud-native web application firewall and Nginx reverse proxy. It provides a security layer for web applications, combining traffic routing with automated SSL certificate management and a web-based security dashboard for monitoring and configuration.

The project distinguishes itself through its deep integration with container orchestrators, serving as a Kubernetes ingress controller that automates security settings and service discovery via container labels. It features a plugin-based extension model and a management interface for real-time IP banning and attack monitoring.

The system covers a broad range of security and traffic capabilities, including signature-based threat detection, challenge-based bot mitigation, and identity-based access control. It manages network flow through load balancing, request rate limiting, and multi-tenant site isolation, while hardening browser-side security via HTTP response header configuration.

Features

Reverse Proxies - Functions as a high-performance Nginx reverse proxy for routing traffic to backend services.
Web Application Firewalls - Provides a cloud-native web application firewall that protects services from malicious traffic using signature-based filtering.
Dynamic Event Synchronization - Synchronizes security settings in real-time by monitoring container orchestrator events.
Ingress Controllers - Acts as a Kubernetes ingress controller managing external access and SSL termination.

Open-source alternatives to Bunkerweb

Similar open-source projects, ranked by how many features they share with Bunkerweb.

bunkerity/bunkerized-nginx
bunkerity/bunkerized-nginx
10,629View on GitHub
Bunkerized Nginx is a containerized security automation system that provides a secure reverse proxy and web application firewall. It focuses on protecting web applications by monitoring container labels within cloud-native orchestration systems to automatically update security settings and firewall rules. The system distinguishes itself through automated security operations, including the automatic management of SSL certificates and an automated client banning mechanism that blocks IP addresses based on HTTP status codes. It features bot challenge mechanisms using CAPTCHAs, JavaScript, or coo
Python
View on GitHub10,629
alibaba/higress
alibaba/higress
7,558View on GitHub
Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c
Goai-gatewayai-nativeapi-gateway
View on GitHub7,558
containous/traefik
containous/traefik
63,656View on GitHub
Traefik is a cloud-native load balancer and dynamic reverse proxy designed for microservices traffic routing. It automatically discovers services and generates network routes by listening to infrastructure changes in orchestrators and service registries. The project distinguishes itself through auto-configuring service routing, which eliminates manual configuration by updating routing rules in real time as infrastructure scales. It also provides automated SSL certificate management, utilizing ACME-based automation to request and renew certificates from remote authorities. Additional capabili
Go
View on GitHub63,656
jamesturland/jimsgarage
JamesTurland/JimsGarage
4,439View on GitHub
JimsGarage is a collection of shell scripts and automation tools designed to help individuals deploy and manage a wide range of self-hosted services on their own hardware. It provides a structured approach to setting up containerized applications, from media servers and document management systems to VPNs and monitoring stacks, all through automated Docker-based configurations. The project distinguishes itself by offering a comprehensive library of deployment recipes that cover the full lifecycle of a home server environment. This includes not just the services themselves, but also the suppor
Shell
View on GitHub4,439

See all 30 alternatives to Bunkerweb

Bunkerweb

Features

Open-source alternatives to Bunkerweb

bunkerity/bunkerized-nginx

alibaba/higress

containous/traefik

JamesTurland/JimsGarage

Star history

Open-source alternatives to Bunkerweb

bunkerity/bunkerized-nginx

alibaba/higress

containous/traefik

JamesTurland/JimsGarage