Zoraxy

Zoraxy is an open-source HTTP reverse proxy and forwarding tool written in Go. It provides a web-based interface for managing web services, allowing users to route traffic to various backend servers through a centralized gateway. The software functions as a network controller that simplifies the process of directing incoming requests to specific internal services based on hostnames or directories.

The software is deployed as a standalone binary or via Docker on Linux, Windows, and ARM-based systems such as the Raspberry Pi. It is designed for homelab owners and developers who need to manage multiple web services across different servers using a single entry point. The interface includes in-system instructions to assist users who lack a background in web routing or reverse proxy configuration.

Key features

• HTTP/2 reverse proxy with support for virtual directories and alias hostnames
• Automatic WebSocket proxying without manual configuration
• ACME integration for automated TLS/SSL certificate issuance and renewal
• TCP and UDP stream proxying for non-HTTP traffic
• IP and country-based blacklisting and whitelisting
• Integrated uptime monitoring and a web-based SSH terminal
• Network utilities including port scanners, IP scanners, and mDNS scanning
• Support for Forward-Auth integrations such as Authelia and Authentik

Zoraxy includes a plugin system for extending functionality and offers two primary operation modes. Standalone mode provides a built-in authentication system for a single administrator, making it suitable for users growing their web services into multiple servers. Alternatively, noauth mode allows the software to be placed behind an existing external permission management system for those who already have an upstream proxy in place. The architecture supports various database backends, including LevelDB and BoltDB, to store configuration data and system settings.

Additional utilities integrated into the system include CIDR IP converters and Wake-On-Lan capabilities. The software also supports custom headers, basic authentication for protected sites, and load balancing to distribute traffic across multiple backends. For security, it supports SNI and SAN certificates to ensure encrypted connections across various subdomains.

This tool is positioned as a general-purpose network management utility for users hosting private or public web services.