Open source alternatives to Cloudflare Tunnel

One project on starwire does the same job. Ranked by how much of what Cloudflare Tunnel does each one covers, read from its README and website. Ties go to the most active.

What Cloudflare Tunnel does

Expose private services without open portscore
Secure outbound tunnelcore
Access control and SSO
Custom domains
Private network access
DDoS protection

Each dot in the table is one job, in this order. Square dots are core jobs and count double. Full means yes, half means partly. "See the evidence" under a project shows the line behind each one. Coverage is what a project documents, not how well it works or how hard it is to move to. How we score this

Project	Covers	Stars	Commits, 12 weeks	Last release	Closed vs opened	Setup	License
pangolinSelf-hosted reverse proxy and WireGuard tunnel with SSO for exposing private apps	Replaces it75%	24k+321	856	10 days ago	90%	Hosted, free plan	Custom license
Covers all 2 core jobs. Not shown: Custom domains; DDoS protection.See the evidence Expose private services without open portscoreYesDoesn't require open ports or a public IP Secure outbound tunnelcoreYesSites use outbound tunnels and intelligent NAT traversal Access control and SSOYesSingle sign-on across all resources Custom domainsNot shownNeither the README nor the website mentions it. Private network accessYesAccess private resources like SSH servers, databases, RDP DDoS protectionNot shownNeither the README nor the website mentions it.

Vital signs from GitHub, checked weekly. How we read these · How setup is read

These also replace

Tailscale2

All repos

Sort

Form Platform Works with Theme License Setup Language

New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter