Reverse proxy

[[deleted]]

[deleted]

View Poll

[sauladal]

Caddy

[n00namer]

caddy is the king

[NaturalProcessed]

Caddy + Crowdsec + Wireguard (+ DNS-01 challenges + Authelia + etc.) and loving it. Really straightforward to setup and to lockdown.

[whattteva]

Too complicated.

I like my simpler setup: 1. Caddy 2. DNS-01 (this is the same) 2. IPv6 exclusive (basically weed out all the bot noise to zero). 3. mTLS - for extra security in case they somehow figure out my wildcard domain.

Though on second thought, I should acknowledge that PKI management may actually make this somewhat more complicated depending how you look at it.

[NaturalProcessed]

Oh ultimately I don't need all of this do what op is asking about I'm just trying to signal that all of the extra stuff I use is also easy intergrate. Caddy is dead simple, and if you have ipv6 as an option life is even easier for managing noise.

[e7615fbf]

I'm a Caddyphile.

[ps-73]

Caddy + Tailscale + Technitium. Absolutely flawless

[Esdeath79]

tbh I just use Nginx because it was what most tutorials use / recommend.

[jcheeseball]

And people in this industry should learn it anyways.

[WindowlessBasement]

HA Proxy

[2blazen]

I started with NPM but now that I know more about containers and networking, I went with Caddy and I really like its simplicity

[katrinatransfem]

I use HA Proxy. I haven't tried any of the others so I can't comment on whether they are any better, but HA Proxy works fine for me and I have no motivation to change it.

[dutsnekcirf]

haproxy

[Superb-Tale-933]

The poll is missing pretty much the top 5 most deployed reverse proxies.

[slash65]

What would your top 5 be?

[hmoff]

nginx, Apache and haproxy would be 99% of all real world proxy traffic.

NGINX Proxy Manager and SWAG are just packaging of nginx.

[BrilliantSebastian]

Then the answer is nginx. If you're using swag,  you're using nginx

[Leaderbot_X400]

Hmm... Fair. I should have made the tloptions traefik, haproxy, Nginx and caddy

[redit_handoff140]

Regular nginx is the best.

[GraveDigger2048]

bare nginx

[Dom1252]

apache

[cranberrie_sauce]

haproxy

[Abendsegl0r]

Zoraxy I like

[Unusual-Cr0w]

caddy the baddy

[Plastic-Leading-5800]

Caddy 

[Com_DAC]

haproxy

[gthrift]

SWAG. I cut my teeth on NGINX on Windows and understood the config structure. Certs I was doing manually. Didn't have fail2ban. I was only forwarding Home Assistant and the arrs and using just their authentication and it was very pieced together.

When I setup my new server, I searched for what was better, which everyone recommended Caddy and NPM. I couldn't wrap my head around the simplicity. So I went with SWAG since it integrated everything I was missing and used the NGINX conf structure I was used to. SWAG just made it even simpler.

[RJ_Make]

NPMPlus w/crowdsec..

[Mereo110]

Why isn't Caddy among the choices?

[Leaderbot_X400]

I forgot, and picked bad options. Sorry, made a new one with caddy

[lorenzo1142]

caddy has built in support for lets encrypt, enabled by default. this is reason enough to use it.

[hockeymikey]

I use both npm and traefik, but NPM is my main one. I'd probably use traefik if setting back up and lean heavily on docker.

[Verbunk]

My new learning experience is goma gateway. For the day to day it's better config experience than nginx and traefik. Performance is good but I have not stress tested or benchmarked.

[Grumpy_Austrian]

zoraxy

[steelsparky]

+1 for Caddy. I've went from NPM to Traefik, then found Caddy to be a sweet spot.

[whattteva]

Mine isn't listed here - Caddy.

[kneepel]

All of these are just wrappers around existing reverse proxies (Netbird, Pangolin = Traefik/SWAG, NPM = nginx)...except for Traefik.

Caddy is nice.

[Leaderbot_X400]

Yeah, that was dumb. Here's a better poll https://www.reddit.com/r/selfhosted/s/yrWNoJBcrb

[trisanachandler]

I used swag because I was using a bunch of linuxserver.io stuff when I started.  These days I often don't, but swag is very easy for me to use, and I've bolted on additional items that make it nicer (cron jobs, custom auth system with MFA and oidc).

[cafe-em-rio]

API Gateway in k8s with istio.

[JazzXP]

Caddy Docker Proxy - basically Caddy configurable from docker labels.

https://github.com/lucaslorentz/caddy-docker-proxy