BunkerWeb vs Openport

BunkerWeb is an open-source web application firewall and NGINX-based server that protects web services as a reverse proxy. Its core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set and automatic bans for suspicious behavior. It can block known malicious IPs through external blacklists and DNS-based blackhole lists. Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA or Turnstile. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes and Linux. An optional web UI manages instances and configurations, though it is currently supported with Docker and Linux integrations. The open-source plan costs nothing under the AGPLv3 license. A PRO version has pricing based on the number of protected services; Standard has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is in beta. For API access, the documentation recommends an IP whitelist and optionally an API token. Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault and Super User; professional support and consulting are also offered.

Openport lets users make a local TCP port reachable from the internet without opening a firewall port. It builds a tunnel between a device and the outside world for remote access, and its web service and API can show online IoT devices and manage a fleet. Access can be controlled by user groups. The `--http-forward` option assigns a hostname to a session for serving a local port over HTTP and HTTPS with a valid certificate. Custom-domain forwarding requires a CNAME record and works over HTTPS only. With TLS passthrough, TLS ends on the user's machine, keeping tunnelled traffic encrypted end to end. Forwarded ports require visitors to click a token link by default; a clicked link remains valid for 24 hours. Openport also lists brute-force blocking and port-scanning detection. It supports API, Linux, macOS, web, and Windows. Since client 2.3.0, sessions can forward UDP as well as TCP on the same port when the server supports it. The service was founded in 2014 and offers a free plan, a 30-day trial, and paid plans from $1/mo.