Open source API gateways and reverse proxies, tested

API gateways and reverse proxies you can run yourself. The list is ordered by whether each project came up when Argusic installed it fresh, with the recording of that attempt one click away.

Tested between and . Each row shows its own test date; a project can change after that day.

43 of 50 tested projects run. 81 more waiting for a test.

In short: 31 of the 50 tested projects started as-is on a fresh machine: frp, traefik, one-api, nginx, tengine, shenyu, gost, and gpt-load, and 23 more. 12 more started once a stand-in replaced a service they expect, such as a database: cloudflared, claudia, gateway, workbuddy2api-panel, APIPark, tsdproxy, wiredoor, and WordOps, and 4 more. 7 could not be verified: higress, nginx-proxy, api-umbrella, kgateway, axonhub, agentgateway, and agent-router; the log shows where each one stopped.

Measured by Argusic on a fresh machine every time. Every number links to its evidence.

#projectverdictArgusic Scorelanguagestarstested on
1frpRuns100 / 100Go109,780

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

What the test found: frp v0.71.0 builds successfully, all 36 unit test packages pass, and frps/frpc correctly proxy TCP traffic end-to-end. 6 minutes.

2traefikRuns100 / 100Go65,111

The Cloud Native Application Proxy

What the test found: Traefik binary builds successfully with Go 1.26.8 and all 108 unit test packages pass; the binary starts, listens on configured entry points, and serves the API (version, routers, and overview endpoints) returning valid JSON, dashboard WebUI is unavailable because Docker is absent for asset generation. 34 minutes.

3one-apiRuns100 / 100JavaScript37,094

LLM API 管理 & 分发系统,支持 OpenAI、Azure、Anthropic Claude、Google Gemini、DeepSeek、字节豆包、ChatGLM、文心一言、讯飞星火、通义千问、360 智脑、腾讯混元等主流模型,统一 API 适配,可用于 key 管理与二次分发。单可执行文件,提供...

What the test found: One API v0.0.0 builds from source, starts on port 3999 with SQLite, serves web UI at HTTP 200, and all 5 Go test packages pass with zero failures. 16 minutes.

4nginxRuns100 / 100C31,809

The official NGINX Open Source repository.

What the test found: nginx 1.31.7 built from source, configured with PCRE2 and zlib, launches and serves HTTP 200 on port 8000. 5 minutes.

5tengineRuns100 / 100C13,385

A high-performance web server and reverse proxy, 100% compatible with nginx.

What the test found: Tengine 3.2.0 is built from source, installed under /work/repo/build-install, runs as a HTTP server on port 8080 answering 200 OK, and passes the nginx-tests and tengine-tests test suites (554 total assertions across 22 test files, all pass). 13 minutes.

6shenyuRuns100 / 100Java8,844

Apache ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance.

What the test found: Apache ShenYu 2.7.2-SNAPSHOT builds from source, all 2190 unit tests pass across 8 modules, and the Admin service runs on port 9095 with H2 in-memory database responding to health checks and login API. 33 minutes.

7gostRuns100 / 100Go7,591

GO Simple Tunnel - a simple tunnel written in golang

What the test found: gost 3.3.1 binary builds from source with Go 1.26.8 and runs as an HTTP proxy, SOCKS5 proxy, and file server, with config parsing and output working. 8 minutes.

8gpt-loadRuns100 / 100Go7,055

Self-hosted AI gateway for multi-channel, multi-credential setups, API keys and subscription accounts, scheduling, failover, request logs and usage. 自托管 AI...

What the test found: GPT-Load 2.0 binary builds, web UI compiles, server starts on 127.0.0.1:3001, health endpoint returns HTTP 200, auto-generates AUTH_KEY, and shuts down gracefully with all database migrations completed and catalog synced. 8 minutes.

9aws-sam-cliRuns100 / 100Python6,735

CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM

What the test found: SAM CLI v1.166.2 builds, all 9435 unit tests pass at 94% coverage, and the CLI validates SAM templates successfully. 12 minutes.

10bfeRuns100 / 100Go6,268

A modern layer 7 load balancer from baidu

What the test found: BFE Server 1.8.8 compiled from source, passed all tests, and launched on ports 8080/8443/8421 with all 19 built-in modules registered and the monitor endpoint returning HTTP 200. 6 minutes.

11easegressRuns100 / 100Go5,867

A Cloud Native traffic orchestration system. (CNCF Project)

What the test found: Go 1.26.1 installed, all 3 Easegress binaries build cleanly, unit tests pass, server starts and serves its admin API with embedded etcd, and egctl can query it. 18 minutes.

12pomeriumRuns100 / 100Go5,029

Pomerium is an identity and context-aware access proxy.

What the test found: Pomerium builds and runs as a CLI binary, reporting its version and envoy version. The Go test suite passes for all packages except three that require Docker containers (Postgres, S3-compatible storage) which are unavailable in this environment. 83 minutes.

13spring-cloud-gatewayRuns100 / 100Java4,912

An API Gateway built on Spring Framework and Spring Boot providing routing and more.

What the test found: Spring Cloud Gateway builds fully from source; the WebFlux server module passes 791 tests with 0 failures and 0 errors; WebMVC module fails integration tests requiring Docker, and Docker-dependent integration tests are correctly excluded via the withoutDockerTests profile. 69 minutes.

14zrokRuns100 / 100Go4,763

Secure internet sharing made simple.

What the test found: The zrok2 binary builds, runs, displays its version and help, and all 14 Go test suites pass with zero failures using only local resources (SQLite, in-memory stores). 11 minutes.

15proxy.pyRuns100 / 100Python3,553

💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse &...

What the test found: proxy.py installed from source in a venv, 247/247 tests pass, the proxy server launches and successfully proxies real HTTP requests, and the CLI reports its version. 9 minutes.

16cc-gatewayRuns100 / 100TypeScript3,061

AI API identity gateway, reverse proxy that normalizes device fingerprints and telemetry for privacy-preserving API proxying

What the test found: Installs and builds cleanly, all 16 unit tests pass, gateway server starts and responds on /_health with status ok, proxy rewrites request bodies (device_id, env, billing header) and headers (auth, user-agent) correctly. 5 minutes.

17krakend-ceRuns100 / 100Go2,689

KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.

What the test found: KrakenD v2.13.11 binary built, all 58 integration tests pass, server listens on port 8080 and responds to /__health with 200. 4 minutes.

18angieRuns100 / 100C2,581

Angie - drop-in replacement for nginx

What the test found: Angie 1.13.0 built from source with PCRE2 and zlib statically linked, SSL/HTTP2 support enabled; binary serves HTTP on IPv4; broad test suite (access_log, auth_basic, charset, empty_gif, geo, grpc, gzip, headers, h2, http_doh, http_metric, index, limit_conn, limit_req, map, proxy, range, referer, rewrite, ssi... 16 minutes.

19pikoRuns100 / 100Go2,195

An open-source alternative to Ngrok, designed to serve production traffic and be simple to host (particularly on Kubernetes)

What the test found: The Piko reverse proxy binary builds, all 268 inline + system tests pass, the CLI version command produces output, and the server node starts on all four ports with no errors. 6 minutes.

20tricksterRuns100 / 100Go2,091

Open Source HTTP Reverse Proxy Cache and Time Series DB Query Accelerator

What the test found: Trickster binary builds, runs as HTTP reverse proxy/cache on port 8480, passes all unit tests with 92.05% coverage, and proxies HTTP requests to upstream origins. 13 minutes.

21serverless-java-containerRuns100 / 100Java1,565

A Java wrapper to run Spring, Spring Boot, Jersey, and other apps inside AWS Lambda.

What the test found: All 7 Maven modules build and test successfully under JDK 21 + Maven 3.9.9. The core container library, Jersey adapter, Spring adapter, Spring Boot 4 adapter, and all three archetype generators compile, pass their unit tests, and install cleanly. 13 minutes.

22numaRuns100 / 100Rust1,528

Portable DNS resolver in Rust, .numa local domains, ad blocking, developer overrides

What the test found: Numa v0.23.1 builds from source, passes 727/727 tests, starts as a DNS forwarder with ad blocking and HTTP API, and responds to HTTP requests on port 5380. 6 minutes.

23lambda-apiRuns100 / 100JavaScript1,469

Lightweight web framework for your serverless applications

What the test found: npm install completed, project builds to dist/cjs and dist/esm, all 28 Jest test suites pass (531 passed, 4 skipped), type tests (tsd) pass, and lint passes. 2 minutes.

24pingapRuns100 / 100Rust1,389

A reverse proxy like nginx, built on pingora, simple and efficient.

What the test found: Pingap 0.14.3 reverse proxy binary builds, test suite passes (413/413), binary serves HTTP requests on a configured port, responds to /ping with 200 'pong', and handles graceful shutdown. 16 minutes.

25caddyRuns97.5 / 100Go77,526

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

What the test found: Caddy binary built from source, serves HTTP requests correctly, and all 34 test packages pass with race detection enabled including integration tests. 6 minutes.

26serverless-expressRuns90 / 100JavaScript5,260

Run Express and other Node.js frameworks on AWS Serverless technologies such as Lambda, API Gateway, Lambda@Edge, and more.

What the test found: All 12 test suites pass (228 tests, 5 skipped) and the module loads correctly as a CommonJS function with getCurrentInvoke exposed. 2 minutes.

27emissaryRuns90 / 100Python4,524

open source Kubernetes-native API gateway for microservices built on the Envoy Proxy

What the test found: Python packages install and 173 unit tests pass; Go binary builds and entrypoint tests pass; diagd CLI runs; integration tests requiring Docker skipped. 21 minutes.

28apintoRuns82.9 / 100Go1,679

基于golang开发的网关。具有各种插件,可以自行扩展,即插即用。此外,它可以快速帮助企业管理API服务,提高API服务的稳定性和安全性。

What the test found: Apinto API gateway v0.x builds from source, starts as a daemon, serves the admin API on :9400 and the proxy gateway on :8099, and passes 15 of its 15 functional test packages (checker, auth, plugins, strategies, protobuf parsing). 14 minutes.

29optillmRuns60 / 100Python4,308

Optimizing inference proxy for LLMs

What the test found: OptiLLM package installed in a venv, plugins load correctly, CLI entry point works, test suite runs 153/163 passing (10 skipped due to MLX/environment conditions), and the local inference server starts, accepts HTTP requests, and generates real LLM responses with the codelion/dhara-250m model. 22 minutes.

30fusioRuns60 / 100PHP2,125

Self-Hosted API Management for Builders

What the test found: Fusio v8.8.7 API server running on PHP 8.4 with SQLite at http://127.0.0.1:8084; CLI commands work; backend admin UI at /apps/fusio/ returns 200; system/health endpoint returns healthy: true. 18 minutes.

31mcp-context-forgeRuns33.3 / 100Python4,584

An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails...

What the test found: ContextForge gateway installed in .venv, server launches and responds on HTTP, 592+ unit tests pass against real SQLite and auth infrastructure. 32 minutes.

32cloudflaredRuns with mocks92 / 100Go16,060

Cloudflare Tunnel client

What the test found: cloudflared builds from source with Go 1.27.1, the binary reports version f9676c5, and 36 of 38 test packages pass (6 ICMP tests skipped due to container ping permissions, quic passes individually but can timeout under combined CPU load). 44 minutes.

33claudiaRuns with mocks92 / 100JavaScript3,882

Deploy Node.js projects to AWS Lambda and API Gateway easily

What the test found: npm install succeeds, 356 offline unit tests pass (0 failures), the CLI help and module load work; AWS-integration tests are skipped because real AWS credentials are not available in this container. 41 minutes.

34gatewayRuns with mocks92 / 100Go3,071

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

What the test found: Envoy Gateway builds and passes 56/56 test packages (all unit tests excluding wasm which hangs); the envoy-gateway and egctl binaries respond to --help and version commands. 22 minutes.

35workbuddy2api-panelRuns with mocks92 / 100Go2,221

把腾讯WorkBuddy账号变成 OpenAI 兼容 API 的多账号网关,同时自动完成任务中心全部任务,附 Web 管理面板(账号池可视化 / 积分任务 / 配置热更新)。基于 Sliverkiss/workbuddy2api 的增强分支

What the test found: WorkBuddy2API server v1.11.11-panel prebuilt binary launches, serves OpenAI-compatible model catalog (39 models), management panel, and auth. Loads 2 mock accounts but needs real CodeBuddy credentials for upstream chat. 27 minutes.

36APIParkRuns with mocks92 / 100TypeScript1,820

Cloud native, ultra-high performance AI&API gateway, LLM API management, distribution system, open platform, supporting all AI APIs.🦄云原生、超高性能 AI&API网关,LLM API...

What the test found: APIPark binary builds, starts on port 8288 with MySQL and Redis, serves HTTP 200 JSON API responses and embedded index.html, auto-creates all database tables, and passes 4 test packages. 57 minutes.

37tsdproxyRuns with mocks92 / 100Go1,712

Automatic Tailscale reverse proxy for Docker containers. Zero sidecars. Label-based config. Automatic HTTPS.

What the test found: Binary at tmp/tsdproxy builds, all 1900 unit tests pass, the server serves HTTP 200 on localhost:8080 for both the dashboard root and health/ready endpoints, and Tailscale proxy creation awaits real OAuth/AuthKey credentials. 7 minutes.

38wiredoorRuns with mocks92 / 100TypeScript1,622

Self hosted ingress-as-a-service platform that allows you to expose applications and services running in private or local networks to the internet

What the test found: All 10 test suites pass (88/88 tests), TypeScript compiles with no errors, and the application boots past database migration with a mock wg binary in PATH, failing only at system-level directory creation (/etc/wireguard, /etc/nginx) which requires root. 8 minutes.

39WordOpsRuns with mocks88.7 / 100Python1,570

Install and manage a high performance WordPress stack with a few keystrokes

What the test found: WordOps 3.23.1 Python package installs and CLI framework loads in a venv. All subcommands (stack, clean, info, secure) parse arguments and respond. 10 of 19 tests pass without root. The 9 failing tests require root privileges and installed system packages (nginx, MySQL, PHP). 13 minutes.

40frpmgrRuns with mocks71 / 100Go2,052

A user-friendly desktop GUI client for FRP on Windows.

What the test found: The repo builds and cross-compiles on Linux. Go 1.25.0 toolchain is available at /tmp/go/bin/go. All 5 natively-runnable tests pass. The Windows GUI binary cross-compiles successfully. One 2-line fix applied: pkg/util/net.go needed a '//go:build windows' build constraint (it imports Windows DLLs but was missing the... 17 minutes.

41ZappaRuns with mocks56 / 100Python3,695

Serverless Python

What the test found: Zappa 0.62.1 installed from source in a Python 3.12 virtualenv; CLI responds with version and help; 96 unit tests pass covering handler, middleware, ASGI, async, utilities, and placebo-mocked AWS interactions. 37 minutes.

42WindsurfAPIRuns with mocks56 / 100JavaScript3,071

Turn Windsurf / Devin Desktop's 100+ AI models (Claude, GPT, Gemini, DeepSeek, Kimi, GLM, SWE) into OpenAI-, Anthropic- & Gemini-compatible APIs...

What the test found: The Node.js HTTP server starts on port 3003 and all 4317 tests pass; the Language Server binary is unavailable in this container (requires Windsurf IDE binary), so the proxy functions as a Devin Connect gateway rather than a full Cascade/LanguageServer bridge, which is the expected state when DEVIN_CONNECT is not... 36 minutes.

43mangumRuns with mocks56 / 100Python2,140

AWS Lambda support for ASGI applications

What the test found: Mangum 0.22.0 installed in Python 3.12.3 venv; 106/110 unit/handler/protocol tests pass; 4 Docker-dependent integration tests skipped; adapter correctly processes ASGI apps through API Gateway, HTTP Gateway, ALB, and Lambda@Edge handlers. 8 minutes.

44higressCould not verify40 / 100Go9,498

🤖 AI Gateway | AI Native API Gateway

What the test found: Go controller binary and hgctl CLI build and respond to help; all Go unit tests pass (26 packages); WASM AssemblyScript SDK builds both debug and release wasm binaries. 15 minutes.

45nginx-proxyCould not verify20 / 100Python19,921

Automated Nginx Reverse Proxy for Docker

What the test found: could not be verified; the log shows where it stopped. 32 minutes.

46api-umbrellaCould not verify20 / 100Ruby2,201

Open source API management platform

What the test found: Build-deps and some deps staged (hugo v0.164.0, node v22.23.1, pnpm, cue, envoy, envoy-control-plane) but full build with Fluent Bit, OpenResty, TrafficServer from source could not complete within time/resources. 27 minutes.

47kgatewayCould not verify0 / 100Go5,700

The Cloud-Native API Gateway and AI Gateway

What the test found: could not be verified; the log shows where it stopped. 87 minutes.

48axonhubCould not verify0 / 100Go5,342

⚡️ Open-source AI Gateway, Use any SDK to call 100+ LLMs. Built-in failover, load balancing, cost control & end-to-end tracing.

What the test found: could not be verified; the log shows where it stopped. 87 minutes.

49agentgatewayCould not verify0 / 100Rust5,228

Next Generation Agentic Proxy for AI Agents and MCP servers

What the test found: could not be verified; the log shows where it stopped. 87 minutes.

50agent-routerCould not verify0 / 100Go2,199

Manages Unified Access to Generative AI Services built on Envoy Gateway

What the test found: could not be verified; the log shows where it stopped. 87 minutes.

-sshpiperNot yet tested-Go1,330-
-reproxyNot yet tested-Go1,308-
-gateNot yet tested-Go1,078-
-proxelarNot yet tested-Rust1,077-
-pingooNot yet tested-Rust1,040-
-product-apimNot yet tested-Java1,033-
-CliRelayNot yet tested-Go1,030-
-serverless-domain-managerNot yet tested-TypeScript953-
-sppNot yet tested-Go916-
-gatewayNot yet tested-Go824-
-aralezNot yet tested-Rust799-
-rust-rpxyNot yet tested-Rust777-
-ssl-proxyNot yet tested-Go772-
-resgateNot yet tested-Go740-
-ttsfmNot yet tested-Python738-
-ghproxyNot yet tested-Go735-
-workbuddy2api-hubNot yet tested-Python722-
-agent-safe-pipelineNot yet tested-TypeScript687-
-tunnl.ggNot yet tested-Go659-
-api-firewallNot yet tested-Go655-
-lollms_hubNot yet tested-Python648-
-api-gatewayNot yet tested-Java647-
-scalecube-servicesNot yet tested-Java639-
-realityNot yet tested-Go632-
-reactive-interaction-gatewayNot yet tested-Elixir602-
-dubbo-go-pixiuNot yet tested-Go568-
-aws-lambda-fastifyNot yet tested-JavaScript560-
-port-buddyNot yet tested-Java537-
-connetNot yet tested-Go532-
-brambleNot yet tested-Go511-
-gemini-web-to-apiNot yet tested-Go502-
-mantraeNot yet tested-TypeScript493-
-s3-proxyNot yet tested-Go491-
-pyngrokNot yet tested-Python465-
-cmsNot yet tested-TypeScript464-
-gravitee-api-managementNot yet tested-Java459-
-SpireNot yet tested-Rust459-
-wormholeNot yet tested-Go431-
-ccLoadNot yet tested-Go418-
-fastify-http-proxyNot yet tested-JavaScript394-
-ngrok-rustNot yet tested-Rust392-
-vandium-nodeNot yet tested-JavaScript383-
-aws-microservicesNot yet tested-JavaScript345-
-cftunnelNot yet tested-Go345-
-fingerproxyNot yet tested-Go345-
-syncopeNot yet tested-Java342-
-ZBProxyNot yet tested-Go331-
-fast-gatewayNot yet tested-JavaScript323-
-product-microgatewayNot yet tested-Java317-
-reverse_proxy_plugNot yet tested-Elixir317-
-arc.codesNot yet tested-JavaScript316-
-esp-v2Not yet tested-Go308-
-digiRunner-Open-SourceNot yet tested-Java307-
-finchNot yet tested-Go307-
-turboNot yet tested-Go304-
-moleculer-webNot yet tested-JavaScript301-
-freebucks-proxyNot yet tested-Go300-
-frontierNot yet tested-Go300-
-CatGPT-GatewayNot yet tested-Python295-
-OpenFlareNot yet tested-Go288-
-stelvioNot yet tested-Python281-
-kostyNot yet tested-Python273-
-ngrok-operatorNot yet tested-Go272-
-apertureNot yet tested-Go271-
-heimdallNot yet tested-Go259-
-apiNot yet tested-JavaScript255-
-caddyuiNot yet tested-Go247-
-rate-my-openapiNot yet tested-TypeScript244-
-otunnelNot yet tested-Go243-
-doormanNot yet tested-Rust241-
-fasthttp-reverse-proxyNot yet tested-Go238-
-bitrouterNot yet tested-Rust235-
-cline-pass-switcherNot yet tested-JavaScript233-
-caddy-proxy-managerNot yet tested-TypeScript224-
-caddy-proxy-managerNot yet tested-TypeScript224-
-nest-turbo-starterNot yet tested-JavaScript224-
-proksiNot yet tested-Rust222-
-CaddyProxyManagerNot yet tested-Go217-
-JoyCode2ApiNot yet tested-Go212-
-reactivesearch-apiNot yet tested-Go212-
-qwengateNot yet tested-TypeScript201-

runs installed and started with its real dependencies. runs with mocks started after stand-ins replaced external services such as a database or a third-party API. could not verify neither the standard agent nor the stronger one got it running within the time limit; the log shows where it stopped.

How we tested

On this list as of the latest test: 31 projects ran as-is, 12 with mocks, 7 could not be verified, 81 still waiting. Languages tested: C, Go, Java, JavaScript, PHP, Python, Ruby, Rust, TypeScript. Every attempt used a clean single-use machine, the subject at a pinned version, and a 45-minute limit; the complete procedure is on the methodology page.

Frequently asked questions (FAQs)

How is this list ranked?

By measurement, not opinion: projects Argusic installed and launched on a fresh machine come first, then those that ran with mocks in place of external services, then those it could not verify. Ties go to the Argusic Score, then how popular it is on its own source.

Why are some projects unranked?

81 projects are still waiting for a test or for a finished attempt. They are listed without a rank until Argusic has measured them.

Where is the evidence?

Every row links to the project's Argusic page, where each run has a full log and a terminal recording stored with a sha256 fingerprint. The same pages exist for every one of the tested projects, on this list or not.

More lists in this category

All lists: Best. All tested projects: subjects.