Pomerium
Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet.
Homepage
Source code
Other self-hosted web servers
Small self-contained pure-Go web server with Lua, Markdown, HTTP/2, QUIC, Redis and PostgreSQL support.
Secure, efficient and extensible server that provides HTTP services in sync with the current HTTP standards.
Next-gen Web Application Firewall (WAF) that will protect your web services.
Powerful, enterprise-ready, open source web server with automatic HTTPS.
Fast, memory-safe web server written in Rust.
Lightweight, simple, and performant reverse proxy with WebUI, Docker integration, automatic shutdown/startup for container based on traffic.
High-performance reverse proxy and container orchestrator for self-hosters.
Very fast and reliable reverse-proxy offering high availability, load balancing, and proxying for TCP and HTTP-based applications.
Secure, fast, compliant, and very flexible web server that has been optimized for high-performance environments.
Docker container for managing Nginx proxy hosts with a simple, powerful interface.
HTTP and reverse proxy server, mail proxy server, and generic TCP/UDP proxy server.
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
Run it with Docker
Spin up Pomerium on a VPS in minutes. Use the docker-compose generator to get a starter snippet, or grab a server below.