Open-source alternatives to Nginx Proxy Manager

The AWS Cloud Development Kit is an infrastructure-as-code framework that enables developers to define and provision cloud resources using familiar programming languages. By utilizing construct-based synthesis, it translates high-level, object-oriented code into declarative templates, allowing for the automated management of complex cloud environments through a centralized, code-driven control plane. The framework distinguishes itself through its ability to model infrastructure as a dependency-aware resource graph, ensuring that components are provisioned and updated in the correct order. It

This project is a web-based management interface designed for the administration, monitoring, and configuration of Nginx server instances. It functions as a centralized platform for managing reverse proxy settings, traffic routing, and server lifecycles, providing a visual dashboard to replace manual configuration file editing. The platform distinguishes itself through integrated infrastructure automation and observability tools. It supports distributed environments by synchronizing configuration states across multiple nodes and containerized services, while offering artificial intelligence a

This project is an HTTP reverse proxy toolkit and programmable proxy engine designed for building high-performance network gateways. It functions as an HTTP request pipeline framework that allows for the interception and modification of network requests and responses. The system provides an extensible core for developing specialized proxy applications, offering programmatic control over routing and traffic behavior. It enables the creation of custom reverse proxies through a flexible pipeline used to handle specialized request and response logic. The toolkit covers network traffic management

1Panel is a centralized server management and container orchestration platform designed to simplify the administration of Linux-based infrastructure. It provides a unified web interface for managing containerized workloads, automating system maintenance, and configuring server resources. By acting as a comprehensive control plane, the platform streamlines the deployment of applications, databases, and web services while offering granular control over host system internals and security settings. What distinguishes this platform is its integrated support for private artificial intelligence infr

Yarp is a .NET HTTP reverse proxy toolkit and framework used to build applications that route network traffic to backend servers. It provides a customizable routing engine for directing incoming requests to specific destination targets based on defined matching patterns. The project enables the implementation of API gateways and reverse proxies by providing tools for dynamic request routing and custom load balancing across pools of backend servers. The toolkit covers traffic management capabilities including cluster-based load balancing, configuration-driven route matching, and support for H

This project is a Kubernetes Ingress Controller that functions as a layer 7 traffic router and NGINX reverse proxy. It serves as a secure network gateway, directing external HTTP and HTTPS traffic to backend services within a cluster based on declarative routing rules. The controller acts as a TLS termination gateway to secure traffic and integrates with Prometheus to expose request metrics and latency data for cluster monitoring. It supports canary deployment workflows by implementing weight-based traffic splitting between different versions of a service. The system manages external access

Ocelot is a .NET API gateway that functions as an HTTP reverse proxy to route, balance, and secure traffic between clients and backend services. It serves as a centralized manager for incoming requests, providing a single entry point for traffic orchestration. The project differentiates itself through dynamic request orchestration, allowing it to aggregate multiple backend service responses into a single result to minimize client network round trips. It also supports dynamic gateway configuration, enabling updates to system behavior and operational parameters without requiring a service resta

Tengine is an enhanced Nginx web server distribution designed for high-traffic environments. It functions as a high-performance reverse proxy, dynamic load balancer, and HTTP/3 proxy server, integrating an embedded Lua scripting engine to allow for custom business logic and dynamic request processing. The project distinguishes itself through a focus on modern transport protocols and efficiency, featuring native support for QUIC and HTTP/3 to reduce connection latency. It implements userspace UDP forwarding to bypass the kernel for higher throughput and provides the ability to dynamically upda

Kamal is a deployment tool for containerized applications that manages Docker containers across a fleet of remote servers via SSH. It serves as a lightweight alternative to managed platforms, enabling the hosting of web applications on bare metal or virtual private servers without a heavy orchestrator. The tool orchestrates zero-downtime deployments by managing container rotations and using traffic switching to ensure applications remain available during updates. It utilizes a centralized command line interface to coordinate deployment sequences and execute commands across multiple remote des

Zoraxy is a network administration tool centered on HTTP reverse proxy management. It provides a centralized graphical interface for routing web traffic from public domains to internal backend services, utilizing a Go-based proxy to intercept and forward requests. The project extends beyond standard web routing by offering a browser-based SSH interface for remote server administration and command execution. It also supports transport-layer TCP and WebSocket forwarding to manage non-HTTP traffic between external clients and internal ports. Broad capabilities include automated TLS certificate

ZeroOmega is a web-based proxy orchestrator and manager designed for real-time updates to active network gateways. It functions as a system for configuring, storing, and switching between different network proxy profiles to direct internet traffic. The project features a PAC script generator that translates structured proxy profile data into auto-configuration files. These scripts automate network routing decisions by matching requested URLs against defined patterns. Administration is handled through a browser-based interface that allows for the modification of routing rules and the manageme

cfnew is a V2Ray subscription management system and network proxy orchestrator designed to route traffic across multiple protocols, including VLESS, Trojan, and xhttp. It functions as a latency testing tool and a web-based proxy controller for managing node configurations and preferred IP addresses. The project features a subscription format converter that uses user-agent detection to deliver network configurations in formats compatible with specific client applications. It also provides a web-based configuration interface backed by a key-value store for updating system settings and routing r

CapRover is a self-hosted platform-as-a-service that provides a centralized dashboard for managing containerized applications and databases. It functions as a container orchestration platform, simplifying the deployment, scaling, and networking of services across server environments. By leveraging a reverse-proxy-based architecture, the platform handles domain mapping, traffic routing, and automated SSL certificate lifecycle management to ensure secure, encrypted access for hosted web services. The platform distinguishes itself through its integrated automation capabilities, which include aut

NodeBB is a real-time, self-hosted community forum platform built on Node.js. It is designed to support scalable discussion environments by utilizing a document-oriented database for content storage and an in-memory engine for high-speed data retrieval and session management. The platform provides a comprehensive administrative interface for managing user groups, forum settings, and system health. What distinguishes the platform is its native support for federated social networking via the ActivityPub protocol, allowing forums to exchange content, synchronize discussions, and interact with de

Argosbx is an automated deployment script and multi-protocol proxy manager designed to expose local services to the internet using Cloudflare Argo tunnels. It functions as a tool for installing and configuring network tunneling kernels, including Sing-box and Xray, to create secure proxies and bypass network restrictions without the need for open firewall ports. The project distinguishes itself by providing a proxy subscription generator that creates formatted and password-protected URLs for syncing configurations across client devices. It also manages diverse tunneling protocols, such as VLE

This project is an Ansible role and configuration framework designed to automate the installation and provisioning of network attached storage and self-hosted services. It functions as a home server orchestration tool for deploying media servers, cloud storage, and home automation tools on private hardware. The system includes a dynamic DNS configuration suite to expose local network services to the internet using custom hostnames. It allows for the deployment of interconnected application stacks and preconfigured service suites that are coordinated to achieve specific operational goals. The

Mbed TLS is an open-source TLS and DTLS library with a small footprint, designed for embedded systems and IoT devices. It provides a portable cryptographic library that includes symmetric ciphers, hashing, and public-key cryptography, along with a reference implementation of the PSA Cryptography API for standardized cryptographic operations across platforms. The library also offers X.509 certificate management for parsing, validating, and managing certificate chains in secure communications. The library is built around a platform abstraction layer that decouples it from OS-specific services t

acme.sh is a shell-based certificate manager and ACME SSL certificate client. It automates the issuance, renewal, and installation of digital security certificates using a portable Unix shell script to remove dependencies on heavy runtime environments. The project specializes in automated domain ownership verification through a DNS challenge automator that integrates with provider APIs. It supports the generation of diverse certificate types, including wildcard certificates and issuance based on pre-existing certificate signing requests. The tool covers the full certificate lifecycle, includ

This project provides a comprehensive guide and set of scripts for deploying and configuring a production-ready Kubernetes cluster from scratch. It centers on establishing a functional environment by installing core management components, storage, and networking across multiple nodes. The implementation emphasizes high availability for the control plane, utilizing layer-4 load balancing and leader election for the API server, scheduler, and controller manager. It further ensures reliability through the deployment of a distributed key-value store for persistent runtime data. The project cover

PeerTube is a decentralized, open-source video hosting platform that enables users to operate independent, interoperable servers. By utilizing the ActivityPub protocol, it connects these servers into a global, federated network where users can follow channels, discover content, and interact across different instances. The platform is designed to function as a self-hosted video content management system, providing a community-driven alternative to centralized media services. What distinguishes PeerTube is its hybrid approach to content delivery and infrastructure management. It integrates peer

Etherpad-lite is a web-based platform designed for real-time collaborative text editing. It enables multiple users to view and modify the same document simultaneously, utilizing an operational transformation engine to synchronize content across all connected client sessions. The platform distinguishes itself through a modular, plugin-based architecture that allows for the integration of third-party extensions to introduce custom functionality. It provides a comprehensive programmatic interface for document management, allowing users to automate the creation, update, and retrieval of text docu

nps is an intranet penetration proxy server that exposes internal network services to the public internet via secure TCP and UDP tunnels. It functions as a traffic forwarder and reverse proxy, enabling external access to local services, remote desktops, and internal APIs. The project is distinguished by a centralized web-based administration interface used to configure tunnels, manage user accounts, and monitor real-time bandwidth metrics. It supports domain-based request routing and provides a mechanism to secure public services using HTTPS encryption through digital certificates. The syste

Trailbase is a backend-as-a-service platform delivered as a single executable that integrates a realtime database engine, an identity and access manager, and a type-safe API generator. It provides a comprehensive backend environment including a SQLite-backed storage engine and a WebAssembly runtime server for executing custom logic. The platform distinguishes itself by automatically transforming database schemas into JSON APIs with cross-language client bindings and by allowing the execution of portable components for server-side rendering and custom HTTP routes. It further incorporates vecto

AdGuardHome is a network-wide software solution that provides centralized control over domain name resolution, content filtering, and local network management. It functions as a recursive DNS server and DHCP address server, intercepting network traffic to enforce security policies and block unwanted content across all connected devices. By acting as a central gateway, it ensures that every device on a home or office network benefits from consistent protection and private, authenticated name resolution. The software distinguishes itself through granular client management and robust security fe

Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using cust

Moltworker is an AI agent sandbox and model orchestrator designed for the secure execution of untrusted code and shell commands generated by large language models. It functions as a gateway proxy that routes requests to multiple AI providers through a unified interface, integrating a container runtime backed by S3-compatible object storage to persist state across ephemeral lifecycles. The system distinguishes itself by combining an AI model orchestrator with a headless browser controller for automated web scraping and screenshot capture. It manages the full lifecycle of AI agents, including m