Fabio vs Zoraxy
Fabio
github.comZoraxy
zoraxy.aroz.orgSide by side
| Figure | Fabio | Zoraxy |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Reverse Proxy Software | 8.8 (#4) | 7.9 (#17) |
| Deployment | The project README lists installation from source, prebuilt binaries, Docker, and Homebrew. | The official download page lists Linux, Windows, single-board computers and source builds, with Linux instructions for x86, ARM and RISC-V architectures. |
| Integrations | The project README says Fabio integrates with Consul, Vault, Amazon ELB, and Amazon API Gateway. | Community-contributed features include forward-auth support for services such as Authelia and Authentik, OAuth2, and reCAPTCHA. |
| Proxy features | Fabio supports transparent gRPC proxying, HTTP compression, header injection, redirects, path prepending and stripping, WebSockets, and server-sent events. | Its HTTP/2 reverse proxy includes virtual directories, WebSocket proxying, basic authentication, alias hostnames, custom headers, and load balancing. |
| Purpose | Fabio is an HTTP and TCP reverse proxy that configures itself with data from Consul. | Zoraxy is an HTTP reverse proxy and forwarding tool with a web UI for managing self-hosted services. |
| Security | The README says release hashes are signed with a PGP key and describes TLS certificate verification behavior for upstream HTTPS connections. | The README warns that no-auth mode should only be used in a trusted environment or behind another authentication proxy. |
| TLS | Fabio supports dynamic certificate stores using files, HTTP servers, Consul, or Vault, and can forward HTTPS upstream requests. | The project lists TLS/SSL deployment, ACME certificate renewal, SNI, SAN certificates and DNS challenges. |
Plans
In their own words
Fabio
Fabio is a self-hosted HTTP and TCP reverse proxy that builds its routing from Consul service data. Services can announce accepted paths with tags such as `urlprefix-/user`; Fabio then refreshes its routing table when Consul changes, without restarting or reloading. Its main role is distributing incoming HTTP(S) and TCP traffic from the internet to frontend services. It is not intended for frontend-to-backend or backend-to-backend routing, where Consul service discovery is used instead. Fabio provides route-specific access control, authorization, customizable logs, redirects, compression, header injection, path changes, WebSockets, server-sent events, and transparent gRPC proxying. It supports TLS termination, dynamic certificate stores, HTTPS upstreams, raw TCP, TCP-SNI forwarding, and traffic shaping by percentage. A web UI shows the active routes, with metrics integrations. Fabio is free, open-source software for Linux, macOS, and Windows, and requires Consul for service discovery.