BunkerWeb vs Fabio

BunkerWeb is an open-source web application firewall and NGINX-based server that protects web services as a reverse proxy. Its core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set and automatic bans for suspicious behavior. It can block known malicious IPs through external blacklists and DNS-based blackhole lists. Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA or Turnstile. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes and Linux. An optional web UI manages instances and configurations, though it is currently supported with Docker and Linux integrations. The open-source plan costs nothing under the AGPLv3 license. A PRO version has pricing based on the number of protected services; Standard has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is in beta. For API access, the documentation recommends an IP whitelist and optionally an API token. Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault and Super User; professional support and consulting are also offered.

Fabio is a self-hosted HTTP and TCP reverse proxy that builds its routing from Consul service data. Services can announce accepted paths with tags such as `urlprefix-/user`; Fabio then refreshes its routing table when Consul changes, without restarting or reloading. Its main role is distributing incoming HTTP(S) and TCP traffic from the internet to frontend services. It is not intended for frontend-to-backend or backend-to-backend routing, where Consul service discovery is used instead. Fabio provides route-specific access control, authorization, customizable logs, redirects, compression, header injection, path changes, WebSockets, server-sent events, and transparent gRPC proxying. It supports TLS termination, dynamic certificate stores, HTTPS upstreams, raw TCP, TCP-SNI forwarding, and traffic shaping by percentage. A web UI shows the active routes, with metrics integrations. Fabio is free, open-source software for Linux, macOS, and Windows, and requires Consul for service discovery.