NetGoat - Self-Hostable Cloudflare Alternative (Reverse Proxy Engine)
[!IMPORTANT] NetGoat is currently in Active Alpha. We are refining the core proxy engine and self-hosting scripts for a stable public release. Follow our progress on Discord.
💖 Special Thanks
A huge thank you to Cozy Critters Society and Snow for being our first donors! Their support means the world to us. Check out their nonprofit here: Cozy Critters Society.
“The team at Cozy Critters Society is happy to support the development of NetGoat in hopes that we can help them succeed in making their self-hostable Cloudflare alternative.”
NetGoat is a blazing-fast, self-hostable reverse proxy and traffic manager designed for developers, homelabbers, and teams who want Cloudflare-like features without the cost.
Key Features:
- Zero Trust Networking – secure your services without hassle.
- DDoS Protection – keep your traffic safe from attacks.
- SSL Termination – handle certificates automatically.
- Rate Limiting – control traffic and prevent abuse.
- WebSocket Support – real-time apps? No problem.
Built with modern tools for maximum performance and developer experience:
- Bun for super-fast runtime.
- Next.js for robust front-end.
- Fastify for high-performance backend.
- TailwindCSS for sleek, responsive UI.
NetGoat gives you full control over your traffic, security, and performance—all self-hosted.
🛠 The Stack
- Engine: Go (High-concurrency proxying)
- Runtime: Bun (Fast scripting & automation)
- Control Plane: Next.js 15 & Shadcn/ui
- Storage: SQLite (Local-first) & MongoDB
Join our discord for support, annoucements, updates & bugs!! Click Me To Join!
NetGoat is an advanced reverse proxy engine designed to act as an additional layer on top of Cloudflare — enabling premium-grade features, zero-cost scaling, and maximum control for power users and homelabbers.
Screenshots
| Dashboard | Domain Home |
|---|---|
 |
 |
Features
- Anti-DDoS & WAF — Filters like a hawk. Blocks malicious requests, bots, and common exploits.
- Rate Limiting & Request Queuing — Your API won’t get nuked.
- Auto SSL & TLS Termination — Free SSL with auto-renew.
- Load Balancing & Failover — Multinode routing with zero-downtime.
- Real-Time Metrics Dashboard — Monitor traffic, bandwidth, errors, and hits.
- Dynamic Rules Engine — Write custom rules in JS/TS to handle routing, caching, filtering, etc.
- WebSocket & HTTP/2 Ready — Handles modern protocols like a beast.
- Per-Domain Configs — Define behavior per site with regex/wildcard support.
- Plugin System — Extend NetGoat with custom plugins or middlewares.
- Cloudflare Zero Trust Support — Acts as a trusted upstream in Zero Trust setups.
- Smart Caching Layer — Custom cache policies per route, endpoint, or asset.
Seamless intergration
- DNS Searching — Automatically scans your domains to automatically create a suitable Proxy record
- Cloudflare — Manage cloudflare tunnels and more with our UI
- Bandwidth Limits — Limit or throttle specific domains or proxy's
🏢 For Enterprise & Sponsors
NetGoat is building the future of open-source edge networking. We are looking for infrastructure partners (Bare Metal, VPS providers, Security firms) to help us battle-test the engine.
- Strategic Partnerships: Reach out via Discord or Gmail
- Financial Support: GitHub Sponsors | Open Collective
Quick Start
We recommend datalix for cheap and highly avaliable vps'ses
https://docs.netgoat.xyz (not published yet)
Open Source Projects That Helped me Build
-
TailwindCSS - Github - MIT License