Zoraxy

Free plan LinuxSelf-hostedWebWindows

What Zoraxy is

Zoraxy is a free, open-source HTTP reverse proxy and forwarding tool for people managing self-hosted services. Its web interface lets users change settings without restarting the service and includes in-system instructions. HTTP proxy features include HTTP/2, virtual directories, WebSocket proxying, Basic Auth, alias hostnames, custom headers, and load balancing; TCP and UDP stream proxying are also available. TLS options include certificate deployment and ACME renewal, SNI, SAN certificates, and DNS challenges. Access controls support country and IP allowlists or blocklists, including single addresses, CIDR ranges, and wildcards. Zoraxy also lists an uptime monitor, visitor statistics, network utilization information, a web SSH terminal, mDNS scanner, Wake-On-LAN, and IP and port scanners. It runs self-hosted, with downloads or builds listed for Linux, Windows, single-board computers, and source. The project is licensed under AGPL and intended to be free of charge. Community-contributed authentication options include forward-auth integrations, OAuth2, and reCAPTCHA.

Who it suits

Zoraxy is aimed at homelab owners and makers managing web services across multiple servers. Its project describes the tool as designed to make reverse proxy use accessible to beginners.

What it does well

Supports HTTP/2, WebSockets, and load balancing.
Includes TCP and UDP stream proxying.
Settings can be changed without restarting the service.
Provides IP and country access controls.
Available for Linux, Windows, single-board computers, and source builds.

What to know first

Disabling authentication is advised only in trusted environments or behind another authentication proxy.
Technical support is not provided for copies acquired from third-party sellers.
Private vulnerability reporting is temporarily closed.

Plans

Plan	Billed and limits	Price
Zoraxy	Intended to be free of charge · AGPL open source	Free

As zoraxy.aroz.org lists them, read 7 Oct 2026. The maker's own page has the final word.

Getting started

Visit the Zoraxy website.
Choose a deployment option for Linux, Windows, a single-board computer, or a source build.
For Linux, follow the instructions for x86, ARM, or RISC-V.
Manage proxy and service settings through the web interface.
Keep authentication enabled unless the environment is trusted or protected by another authentication proxy.

Verdict

Zoraxy brings several proxy types, access controls, and monitoring utilities into a self-hosted web interface. Authentication settings need care: the project warns against no-auth use outside trusted environments or setups protected by another authentication proxy.

Questions

How much does Zoraxy cost?

The Zoraxy plan is listed as free, and the project says it is intended to be free of charge.

Is Zoraxy open source?

Yes. The project says it is open-sourced under the AGPL license.

Where can Zoraxy run?

Deployment options include Linux, Windows, single-board computers, and source builds. Linux instructions cover x86, ARM, and RISC-V.

Does Zoraxy support WebSockets and TLS?

Yes. Its proxy features include WebSocket proxying, and its TLS options include SSL deployment, ACME renewal, SNI, SAN certificates, and DNS challenges.

Does Zoraxy integrate with authentication services?

Community-contributed options include forward-auth support for Authelia and Authentik, plus OAuth2 and reCAPTCHA.

Is technical support provided?

The README says the authors do not provide technical assistance or support for copies acquired from third-party sellers.

Facts from Zoraxy's own pages

Analytics: The official site describes real-time visitor statistics, network utilization overview and access control changes without reloading. · zoraxy.aroz.org, 7 Oct 2026
Audience: Standalone mode is intended for homelab owners and makers managing web services across multiple servers. · github.com, 7 Oct 2026
Authentication integrations: The README lists community-contributed forward authentication support such as Authelia and Authentik, plus OAuth2 and reCAPTCHA support. · github.com, 7 Oct 2026
Deployment: The official download page lists Linux, Windows, single-board computers and source builds, with Linux instructions for x86, ARM and RISC-V architectures. · zoraxy.aroz.org, 7 Oct 2026
Integrations: Community-contributed features include forward-auth support for services such as Authelia and Authentik, OAuth2, and reCAPTCHA. · github.com, 7 Oct 2026
Intended users: The project describes itself as a homelab networking toolbox for self-hosted services and says it is designed to make reverse proxy use accessible to beginners. · zoraxy.aroz.org, 7 Oct 2026
License and cost: The project says it is open-sourced under AGPL and intended to be free of charge. · github.com, 7 Oct 2026
Management: The official site says settings can be changed through its web UI without restarting the service. · zoraxy.aroz.org, 7 Oct 2026
Monitoring and tools: Listed utilities include an integrated uptime monitor, web SSH terminal, mDNS scanner, Wake-On-LAN, IP scanner, and port scanner. · github.com, 7 Oct 2026
Other proxy types: It includes TCP and UDP stream proxying and an integrated uptime monitor. · github.com, 7 Oct 2026
Platforms: The project lists Windows and Linux downloads and documents Docker, Raspberry Pi, other ARM single-board computers, and Android phones using Termux. · github.com, 7 Oct 2026
Plugins: Zoraxy has a plugin system and links to an official plugin list and plugin development guide. · zoraxy.aroz.org, 7 Oct 2026
Proxy features: Its HTTP/2 reverse proxy includes virtual directories, WebSocket proxying, basic authentication, alias hostnames, custom headers, and load balancing. · github.com, 7 Oct 2026
Purpose: Zoraxy is an HTTP reverse proxy and forwarding tool with a web UI for managing self-hosted services. · github.com, 7 Oct 2026
Reverse proxy: Its reverse proxy features include HTTP/2, virtual directories, WebSocket proxying, Basic Auth, alias hostnames, custom headers and load balancing. · github.com, 7 Oct 2026
Security: The README warns that no-auth mode should only be used in a trusted environment or behind another authentication proxy. · github.com, 7 Oct 2026
Security configuration: The README warns that disabling authentication should only be done in a trusted environment or behind another authentication proxy. · github.com, 7 Oct 2026
Security reporting: The README says private vulnerability reporting is temporarily closed and directs critical issue reports to the maintainer on Discord. · github.com, 7 Oct 2026
Support: The README says the authors do not provide technical assistance or support for copies acquired from third-party sellers. · github.com, 7 Oct 2026
TLS: The project lists TLS/SSL deployment, ACME certificate renewal, SNI, SAN certificates and DNS challenges. · github.com, 7 Oct 2026
Traffic controls: Zoraxy supports country or IP address blacklists and whitelists, including single IPs, CIDR ranges and wildcards. · github.com, 7 Oct 2026
Web interface: It provides a web interface with in-system instructions and supports changing settings without restarting. · zoraxy.aroz.org, 7 Oct 2026

Where Zoraxy stands on Freedom251

Reverse Proxy Software#20 of 33