Envoy Proxy vs LocalXpose
Envoy Proxy
envoyproxy.ioLocalXpose
localxpose.ioSide by side
| Figure | Envoy Proxy | LocalXpose |
|---|---|---|
| Price from | Free | $8/mo |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Reverse Proxy Software | 8.0 (#14) | 8.3 (#7) |
| Integrations | The documentation names Envoy Gateway and Istio as control planes compatible with Envoy's API. | The maker describes CLI use in CI pipelines, Docker containers, and scripts, and lists a GitHub Actions resource on its site. |
| Purpose | Envoy is an open-source edge and service proxy designed for cloud-native and AI-native applications. | LocalXpose is a reverse proxy that exposes localhost services to the public internet through secure tunnels. |
| Security | Envoy supports TLS, JWT, role-based access control, and OAuth-related authentication and authorization features. | The maker says tunnel hosts terminate at its edge with TLS 1.2+ encryption and scoped access tokens; users can configure IP allow lists and authentication plugins. |
Plans
In their own words
Envoy Proxy
Envoy Proxy is a free, open-source proxy for edge traffic and service-to-service communication in cloud-native and AI-native applications. It runs as a self-contained process outside the application and can serve software written in different languages. Envoy handles HTTP/1.1, HTTP/2, gRPC, and HTTP/3, with HTTP/3 documented as alpha. Traffic features include routing, retries, circuit breaking, rate limiting, request shadowing, and outlier detection. It exposes subsystem statistics, an administration interface, and distributed tracing through third-party providers. Security features include TLS, JWT, role-based access control, and OAuth-related authorization and authentication. Operators must configure protections such as watermarks, overload management, and circuit breakers for availability resilience. Installation options include Docker images for amd64 and arm64, macOS Homebrew, and static binaries. Its API is compatible with Envoy Gateway and Istio.
LocalXpose
LocalXpose is a reverse proxy for making services on a local machine reachable from the public internet through tunnels. It supports HTTP and HTTPS, including WebSockets, alongside TCP, TLS, and UDP. Users can work through a command-line interface or graphical interfaces, including a desktop app for sharing previews. The product includes authentication, rate limiting, IP whitelisting, header editing, and a built-in file server on all plans. Traffic logs cover HTTP, TCP, and UDP, and webhook payloads can be inspected, modified, and replayed. Custom and wildcard domains and automatic Let's Encrypt certificates for custom domains are available. The maker says tunnel hosts terminate at its edge with TLS 1.2+ encryption; users can configure scoped access tokens, IP allow lists, and authentication plugins. Starter is free and allows two active HTTP or HTTPS tunnels, with time limits and an interstitial warning page. PRO costs $8 a month, billed annually at $96/yr, and supports 10 tunnels. LocalXpose runs on Linux, macOS, Windows, web, and self-hosted environments.