# tobychui/zoraxy

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/tobychui-zoraxy).**

5,268 stars · 304 forks · HTML · AGPL-3.0

## Links

- GitHub: https://github.com/tobychui/zoraxy
- Homepage: https://zoraxy.aroz.org
- awesome-repositories: https://awesome-repositories.com/repository/tobychui-zoraxy.md

## Topics

`cluster-gateway` `golang` `homelab` `http-proxy` `port-forward` `proxy` `redirect` `reverse-proxy` `server` `stream-proxy` `subdomain` `tcp-proxy` `virtual-directory` `web-server` `websocket-proxy` `zoraxy`

## Description

Zoraxy is a network administration tool centered on HTTP reverse proxy management. It provides a centralized graphical interface for routing web traffic from public domains to internal backend services, utilizing a Go-based proxy to intercept and forward requests.

The project extends beyond standard web routing by offering a browser-based SSH interface for remote server administration and command execution. It also supports transport-layer TCP and WebSocket forwarding to manage non-HTTP traffic between external clients and internal ports.

Broad capabilities include automated TLS certificate lifecycle management via ACME, network access control using CIDR-based filtering, and user authentication integration. The system further incorporates network infrastructure tools for IP and port scanning, service availability monitoring, and traffic statistics analysis.

## Tags

### Networking & Communication

- [HTTP Reverse Proxies](https://awesome-repositories.com/f/networking-communication/http-reverse-proxies.md) — Provides a centralized graphical interface for managing HTTP reverse proxies to route public domains to internal services.
- [Multi-Backend Routing](https://awesome-repositories.com/f/networking-communication/backend-proxies/multi-backend-routing.md) — Maps public domain requests to specific internal IP addresses and ports for backend service delivery. ([source](https://github.com/tobychui/zoraxy/wiki/Getting-Started))
- [Stateless Proxies](https://awesome-repositories.com/f/networking-communication/database-proxying/stateless-proxies.md) — Utilizes a stateless proxy architecture to route traffic based on host headers and path patterns.
- [HTTP Request Forwarders](https://awesome-repositories.com/f/networking-communication/http-proxies/proxy-request-routers/http-request-forwarders.md) — Ships a Go-based proxy that intercepts and forwards incoming HTTP requests to internal backend servers.
- [Proxy Traffic Management](https://awesome-repositories.com/f/networking-communication/traffic-proxying/proxy-traffic-management.md) — Forwards HTTP, WebSocket, and TCP stream traffic from external clients to internal backend servers. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))
- [Traffic Routing](https://awesome-repositories.com/f/networking-communication/traffic-routing.md) — Directs incoming web requests to internal backend services using flexible proxy configurations. ([source](https://github.com/tobychui/zoraxy/wiki/Screenshots))
- [Transport Layer Forwarding](https://awesome-repositories.com/f/networking-communication/ip-forwarding/transport-layer-forwarding.md) — Proxies non-HTTP network traffic at the transport layer between external clients and internal destination ports. ([source](https://github.com/tobychui/zoraxy/wiki/Screenshots))
- [Browser-Based](https://awesome-repositories.com/f/networking-communication/remote-access-control/ssh-clients/browser-based.md) — Allows administrators to open secure SSH sessions to remote servers directly within a web browser. ([source](https://github.com/tobychui/zoraxy/wiki/Screenshots))
- [Layer 4 TCP Routing](https://awesome-repositories.com/f/networking-communication/traffic-routing/layer-4-tcp-routing.md) — Directs raw TCP traffic at the transport layer, bypassing the HTTP layer for non-web services.
- [TCP and UDP Forwarders](https://awesome-repositories.com/f/networking-communication/traffic-routing/tcp-and-udp-forwarders.md) — Forwards raw TCP and WebSocket streams between external clients and internal server ports.

### Web Development

- [Traffic Routing](https://awesome-repositories.com/f/web-development/traffic-routing.md) — Offers a centralized graphical interface for defining and managing web routing and traffic forwarding rules. ([source](https://zoraxy.aroz.org))

### Security & Cryptography

- [SSL/TLS Certificate Management](https://awesome-repositories.com/f/security-cryptography/cryptography/ssl-tls-certificate-management.md) — Provides automated generation and renewal of SSL/TLS certificates via the ACME protocol for multiple domains. ([source](https://github.com/tobychui/zoraxy/wiki/Getting-Started))
- [Network-Based Access Controls](https://awesome-repositories.com/f/security-cryptography/access-authentication/network-based-access-controls.md) — Restricts network traffic access based on IP addresses, CIDR blocks, and country-level blacklists. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))
- [External Authentication Integrations](https://awesome-repositories.com/f/security-cryptography/external-authentication-integrations.md) — Secures backend services via Basic Auth, OAuth2, reCAPTCHA, and external forward-authentication providers. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))
- [HTTPS Enforcements](https://awesome-repositories.com/f/security-cryptography/network-infrastructure-security/web-network-security/security-https/https-enforcements.md) — Automatically redirects incoming unencrypted HTTP requests on port 80 to secure HTTPS connections. ([source](https://github.com/tobychui/zoraxy/wiki/Getting-Started))
- [Network Traffic Filtering](https://awesome-repositories.com/f/security-cryptography/network-traffic-filtering.md) — Provides network traffic filtering capabilities based on IP addresses and CIDR blocks to control access.
- [SSL Certificate Automation](https://awesome-repositories.com/f/security-cryptography/ssl-certificate-automation.md) — Automates the deployment and renewal of SSL/TLS certificates using ACME and DNS challenges. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))

### Business & Productivity Software

- [Remote Server Administration Tools](https://awesome-repositories.com/f/business-productivity-software/remote-server-administration-tools.md) — Offers tools for managing remote Linux systems through a browser-based shell interface.

### Development Tools & Productivity

- [SSH Web Terminals](https://awesome-repositories.com/f/development-tools-productivity/shell-command-execution/web-based-command-interfaces/ssh-web-terminals.md) — Provides a browser-based SSH interface for secure remote command execution and server administration.

### DevOps & Infrastructure

- [Dynamic Configuration Engines](https://awesome-repositories.com/f/devops-infrastructure/configuration-management/dynamic-runtime-injectors/dynamic-configuration-engines.md) — Implements a control plane that updates proxy routing rules in real-time without requiring service restarts.

### System Administration & Monitoring

- [ACME Certificate Lifecycle Managers](https://awesome-repositories.com/f/system-administration-monitoring/administrative-operations/configuration-control-utilities/system-administration-tools/instance-settings/identity-customizers/identity-certificate-configuration/automated-certificate-rotation/acme-certificate-lifecycle-managers.md) — Automates the full lifecycle of TLS certificates using the ACME protocol for secure domain routing.
- [Infrastructure Health Monitors](https://awesome-repositories.com/f/system-administration-monitoring/database-health-monitors/infrastructure-health-monitors.md) — Tracks service uptime and analyzes network infrastructure health to ensure backend availability.
- [Service Uptime Monitors](https://awesome-repositories.com/f/system-administration-monitoring/monitoring-and-observability/observability-platforms/availability-uptime-trackers/service-uptime-monitors.md) — Monitors the availability and uptime of backend services to notify administrators of outages. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))
- [Remote Command Execution](https://awesome-repositories.com/f/system-administration-monitoring/remote-command-execution.md) — Enables the execution of administrative shell commands on remote Linux systems through a web interface. ([source](https://cdn.jsdelivr.net/gh/tobychui/zoraxy@main/README.md))