Life & fun · alternatives · 2026

24 alternatives to Single Command SSL/TLS Reverse Proxy with Autogen'd Certs (Golang)

:lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided) - suyashkumar/ssl-proxy

This is a Go-based reverse proxy tool that handles SSL/TLS encryption with automatically generated certificates, launched in 2018. It enables users to set up secure connections with a single command, eliminating the… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier. Single Command SSL/TLS Reverse Proxy with Autogen'd Certs (Golang) launched in 2018; newer entries below may have overtaken it.

1. 1
   Lightweight SSL/TLS Reverse Proxy with Autogen Certs (LetsEncrypt)▲5

   :lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided) - suyashkumar/ssl-proxy

   2019 · github.com · its alternatives →

2. 2
   Caddy, a cross-platform HTTP/2 web server▲208

   Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go

   2015 · caddyserver.com · its alternatives →

3. 3
   Golang DNS server, including DNSSEC and DNS-over-TLS▲283

   Recursive and authoritative DNS server in go, including DNSSEC and DNS-over-TLS - tenta-browser/tenta-dns

   2017 · github.com · its alternatives →

4. 4
   A HTTP2 web server with auto SSL certificate, Zero-Configuration▲16

   A HTTP3 web server for reverse proxy and single page application, automatically apply for ssl certificate, Zero-Configuration. - txthinking/nico

   2020 · github.com · its alternatives →

5. 5
   Lego – A Let's Encrypt Library and CLI in Go▲93

   Let's Encrypt/ACME client and library written in Go - go-acme/lego

   2015 · github.com · its alternatives →

6. 6
   CertMagic – Caddy's automagic HTTPS features as a Go library▲33

   Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal - caddyserver/certmagic

   2018 · github.com · its alternatives →

7. 7
   Encrypted VPN in 2k lines of Go▲123

   Simple, auditable & elegant VPN, built with TLS mutual authentication and TUN. - twitchyliquid64/subnet

   2017 · github.com · its alternatives →

8. 8
   Autocert – use TLS to access internal kubernetes services from anywhere▲12

   🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH. - certificates/autocert/README.md at master · smallstep/certificates

   2019 · github.com · its alternatives →

9. 9
   ssltun - simple secure HTTP proxy server with automic HTTPS in Golang▲16

   led - lehu daemon. Contribute to taoso/led development by creating an account on GitHub.

   2020 · github.com · its alternatives →

10. 10
    TinyCert▲237

    Free SSL certificates for your startup.

    2014 · tinycert.org · its alternatives →

11. 11
    Generating GraphQL servers for Go▲172

    go generate based graphql server library. Contribute to 99designs/gqlgen development by creating an account on GitHub.

    2018 · github.com · its alternatives →

12. 12
    A DNS over HTTPS proxy in 80 lines of Golang▲20

    DNS over HTTPS proxy written in golang. Contribute to satran/dohproxy development by creating an account on GitHub.

    2018 · github.com · its alternatives →

13. 13MW
    My Weekend Project, AutoSSL▲38

    2019 · autossl.co · its alternatives →

14. 14
    A simple Go utility to ease deployments via SSH and SCP▲50

    A simple golang application to automate the deployment of software releases. - skx/deployr

    2018 · github.com · its alternatives →

15. 15IR
    I rewrote my 2012 self-signed cert generator in Go – cert-depot.com▲9

    Back in 2012 I built https://cert-depot.com as a weekend project. Node.js + Express + jQuery, shelling out to OpenSSL for certificate generation. It worked but I eventually let it rot. https://news.ycombinator.com/item?id=4766743 Rewrote it from scratch in Go. The entire thing is a single binary with no external dependencies: 1. Certificate generation uses Go's crypto/x509 (no OpenSSL) 2. Certificates are generated in memory and streamed directly — nothing is stored on the server 3. RSA 2048/4096 and ECDSA P-256/P-384 4. Subject Alternative Names…

    Apr 2026 · its alternatives →

16. 16
    I made a script to generate self-signed SSL certs for local development▲107

    A bash script for generating trusted self-signed SSL certs for local development on your Mac - kingkool68/generate-ssl-certs-for-local-development

    2018 · github.com · its alternatives →

17. 17
    I built a DNS resolver from scratch in Rust – no DNS libraries▲115

    I built a DNS resolver that lets me use https://frontend.numa instead of localhost:5173 — auto-generated TLS certs, WebSocket passthrough, path routing. No mkcert, no nginx, no /etc/hosts.

    Apr 2026 · github.com · its alternatives →

18. 18
    Two grpc microservices with mutual TLS and token authentication in Go▲61

    grpc microservices with mutual TLS and token authentication in Go - 3n21c0/hello-auth-grpc

    2017 · github.com · its alternatives →

19. 19AR
    Anchor Relay – A faster, easier way to get Let's Encrypt certificates▲80

    From the cryptic terminal commands to the innumerable ways to shoot yourself in the foot, I always struggled to use TLS certificates. I love how much easier (and cheaper) Let's Encrypt made it to get certificates, but there are still plenty of things to struggle with. That's why we built Relay: a free, browser-based tool that streamlines the ACME workflow, especially for tricky setups like homelabs. Relay acts as a secure intermediary between your ACME client and public certificate authorities like Let's Encrypt. Some ways Relay provides a better experience: - really fast, streamlined…

    2025 · anchor.dev · its alternatives →

20. 20SD
    SSL Decoder – An open-source alternative for the SSL Labs server test▲160

    2015 · tls.so · its alternatives →

21. 21
    PGT-Proxy – A PostgreSQL Proxy in 277 Lines of Rust▲10

    It's time we talked about something many developers, data analysts, and even web application servers are guilty of: downgrading PostgreSQL connection security. Too often, we see connections dropped from full TLS verification to "any TLS" (i.e., sslmode=require) or, even worse, plain text connections. Why? Because most cloud providers, like AWS or Google Cloud SQL, use non-public Certificate Authorities for PostgreSQL. The result? Unverified TLS connections because no one has time to set up all devices across an organization to trust custom certificate authorities. And here's the most…

    2024 · github.com · its alternatives →

22. 22
    A Go Library for Better Access Control▲158

    A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon

    2017 · github.com · its alternatives →

23. 23
    ACME Let's Encrypt client – binary releases, works like 'make'▲83

    :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt) - hlandau/acmetool

    2015 · github.com · its alternatives →

24. 24
    Local development with .local domains and HTTPSfree tier, from $8/mo▲84

    Hi HN! I'm Jarek, and I've built this tool that allows publishing .local domains on the local network using mDNS. It also has a reverse proxy that handles HTTPS termination and port forwarding. I'm working on adding more features, like an index page with all available domains or allowing proxy redirects, so you could redirect from HTTP to HTTPS. Let me know if you have any questions or feedback!

    2023 · localcan.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →