Alternatives to Pomerium

Apache Traffic Server

It suits enterprises, internet service providers, backbone providers, and large intranets that need a self-hosted HTTP caching proxy or load balancer.

Fabio suits teams running their own infrastructure that need Consul-driven routing for internet-facing frontend services.

HAProxy suits operators running high-traffic TCP or HTTP services who want a self-hosted load balancer and reverse proxy.

It suits teams that need self-hosted HTTP, mail, or TCP/UDP proxying and can manage file-based configuration.

It suits designers, engineers, testers, and operators who need to expose local services, including people using CI pipelines, Docker containers, or scripts.

Openport suits people who need remote access to a device or want to manage IoT devices through a web interface or API.

It suits developers and operators who need to expose local servers, APIs, webhooks, or devices remotely.

Traefik Proxy

It suits teams deploying services or APIs who want dynamic routing and a self-hosted proxy across containers, Kubernetes, virtual machines, or bare metal.

BunkerWeb

BunkerWeb suits teams that want a self-hosted reverse proxy with web application firewall protections.

frp may suit operators who want to expose intranet services through a self-hosted client-server proxy.

Caddy

Caddy suits operators who need a self-hosted web server or reverse proxy with automatic HTTPS and configurable deployment options.

Envoy Proxy

Envoy suits teams operating large service-oriented architectures that need edge proxying or service-to-service communication.

NGINX

NGINX suits people running their own web infrastructure on Linux, macOS, or Windows.

Varnish Cache

Varnish Cache suits teams running Linux services that want a self-hosted reverse caching proxy and can configure caching in VCL.