Fabio vs Sōzu
Fabio
github.com
Sōzu
sozu.ioSide by side
| Figure | Fabio | Sōzu |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · Reverse Proxy Software | 8.8 (#4) | 6.8 (#28) |
| Deployment | The project README lists installation from source, prebuilt binaries, Docker, and Homebrew. | The project publishes Linux binaries and Docker images for tagged releases and also documents building from source. |
| Metrics | The feature page lists support for Graphite, StatsD/DataDog, and Circonus metrics. | Metrics can be sent using a StatsD compatible protocol or aggregated locally for querying through the configuration socket. |
| Product | Fabio is an HTTP and TCP reverse proxy that configures its routing from Consul data. | Sōzu is an open source TCP and HTTP reverse proxy built in Rust for highly demanding web infrastructure. |
| Purpose | Fabio is an HTTP and TCP reverse proxy that configures itself with data from Consul. | Sōzu is an open-source TCP and HTTP reverse proxy built in Rust for demanding, dynamic web infrastructures. |
| Security | The README says release hashes are signed with a PGP key and describes TLS certificate verification behavior for upstream HTTPS connections. | The project describes Rust as providing memory safety and says Sōzu workers are sandboxed, with backends shielded behind the proxy. |
| TLS | Fabio supports dynamic certificate stores using files, HTTP servers, Consul, or Vault, and can forward HTTPS upstream requests. | Sōzu can act as a TLS endpoint and supports ring, AWS-LC, and OpenSSL cryptographic backends at compile time. |
Plans
In their own words
Fabio
Fabio is a self-hosted HTTP and TCP reverse proxy that builds its routing from Consul service data. Services can announce accepted paths with tags such as `urlprefix-/user`; Fabio then refreshes its routing table when Consul changes, without restarting or reloading. Its main role is distributing incoming HTTP(S) and TCP traffic from the internet to frontend services. It is not intended for frontend-to-backend or backend-to-backend routing, where Consul service discovery is used instead. Fabio provides route-specific access control, authorization, customizable logs, redirects, compression, header injection, path changes, WebSockets, server-sent events, and transparent gRPC proxying. It supports TLS termination, dynamic certificate stores, HTTPS upstreams, raw TCP, TCP-SNI forwarding, and traffic shaping by percentage. A web UI shows the active routes, with metrics integrations. Fabio is free, open-source software for Linux, macOS, and Windows, and requires Consul for service discovery.