BunkerWeb vs Sōzu
BunkerWeb
bunkerweb.io
Sōzu
sozu.ioSide by side
| Figure | BunkerWeb | Sōzu |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 0 |
| Spec score · Reverse Proxy Software | 8.2 (#11) | 6.8 (#28) |
| Headquarters | France | Nantes, France |
| Limits | Kubernetes Gateway API mode is currently beta. | The project says Sōzu uses fixed resource and connection limits to help avoid out-of-memory kills and increased latency under high connection counts. |
| Product | BunkerWeb is an open-source web application firewall and NGINX-based web server that protects web services as a reverse proxy. | Sōzu is an open source TCP and HTTP reverse proxy built in Rust for highly demanding web infrastructure. |
| Security | Core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior. | The project describes Rust as providing memory safety and says Sōzu workers are sandboxed, with backends shielded behind the proxy. |
Plans
In their own words
BunkerWeb
BunkerWeb is an open-source web application firewall and NGINX-based server that protects web services as a reverse proxy. Its core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set and automatic bans for suspicious behavior. It can block known malicious IPs through external blacklists and DNS-based blackhole lists. Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA or Turnstile. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes and Linux. An optional web UI manages instances and configurations, though it is currently supported with Docker and Linux integrations. The open-source plan costs nothing under the AGPLv3 license. A PRO version has pricing based on the number of protected services; Standard has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is in beta. For API access, the documentation recommends an IP whitelist and optionally an API token. Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault and Super User; professional support and consulting are also offered.