https://github.com/netgoat-xyz/netgoat
A Cloudflare alternative for local and cloud use, can be used ontop of cloudflare for cloudflares paid features, but for free!
https://github.com/netgoat-xyz/netgoat
cloudflare dns foss hackclub homelab javascript nameserver nextjs reverse-proxy tailwindcss typescript
Last synced: 2 months ago
JSON representation
A Cloudflare alternative for local and cloud use, can be used ontop of cloudflare for cloudflares paid features, but for free!
- Host: GitHub
- URL: https://github.com/netgoat-xyz/netgoat
- Owner: netgoat-xyz
- License: mit
- Created: 2025-07-01T02:02:32.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-10-04T08:49:30.000Z (8 months ago)
- Last Synced: 2025-10-04T10:32:57.117Z (8 months ago)
- Topics: cloudflare, dns, foss, hackclub, homelab, javascript, nameserver, nextjs, reverse-proxy, tailwindcss, typescript
- Language: JavaScript
- Homepage: https://netgoat.xyz
- Size: 12.6 MB
- Stars: 492
- Watchers: 11
- Forks: 20
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
Awesome Lists containing this project
README
# NetGoat — Self-Hostable Cloudflare Alternative (Reverse Proxy Engine)
## 💖 Special Thanks
A huge thank you to **Cozy Critters Society** and **Snow** for being our first donors! Their support means the world to us. Check out their nonprofit here: [Cozy Critters Society](https://opencollective.com/cozy-critters-society).
> *“The team at Cozy Critters Society is happy to support the development of NetGoat in hopes that we can help them succeed in making their self-hostable Cloudflare alternative.”*
---
## TLDR: Work In Progess
Hii! Its ducky the project is Work In Progress and will be publicly working beta at December
**NetGoat** is a **blazing-fast, self-hostable reverse proxy and traffic manager** designed for developers, homelabbers, and teams who want **Cloudflare-like features** without the cost.
Key Features:
* **Zero Trust Networking** – secure your services without hassle.
* **DDoS Protection** – keep your traffic safe from attacks.
* **SSL Termination** – handle certificates automatically.
* **Rate Limiting** – control traffic and prevent abuse.
* **WebSocket Support** – real-time apps? No problem.
Built with **modern tools** for maximum performance and developer experience:
* **Bun** for super-fast runtime.
* **Next.js** for robust front-end.
* **Fastify** for high-performance backend.
* **TailwindCSS** for sleek, responsive UI.
**NetGoat** gives you full control over your traffic, security, and performance—**all self-hosted**.
            
> Built for [HackClub Summer of Making](https://summer.hackclub.com)
> Join our discord for support, annoucements, updates & bugs!! [Click Me To Join!](https://discord.com/invite/3aJ7MdJsZV) 
NetGoat is an advanced reverse proxy engine designed to act as an **additional layer** on top of Cloudflare — enabling **premium-grade features**, **zero-cost scaling**, and **maximum control** for power users and homelabbers.
---
## Screenshots
Say cheese!
## Features
- **Anti-DDoS & WAF** — Filters like a hawk. Blocks malicious requests, bots, and common exploits.
- **Rate Limiting & Request Queuing** — Your API won’t get nuked.
- **Auto SSL & TLS Termination** — Free SSL with auto-renew.
- **Load Balancing & Failover** — Multinode routing with zero-downtime.
- **Real-Time Metrics Dashboard** — Monitor traffic, bandwidth, errors, and hits.
- **Dynamic Rules Engine** — Write custom rules in JS/TS to handle routing, caching, filtering, etc.
- **WebSocket & HTTP/2 Ready** — Handles modern protocols like a beast.
- **Per-Domain Configs** — Define behavior per site with regex/wildcard support.
- **Plugin System** — Extend NetGoat with custom plugins or middlewares.
- **Cloudflare Zero Trust Support** — Acts as a trusted upstream in Zero Trust setups.
- **Smart Caching Layer** — Custom cache policies per route, endpoint, or asset.
## Seamless intergration
- **DNS Searching** — Automatically scans your domains to automatically create a suitable Proxy record
- **Cloudflare** — Manage cloudflare tunnels and more with our UI
- **Bandwidth Limits** — Limit or throttle specific domains or proxy's
## Quick Start
We recommend [datalix](https://datalix.eu/a/netgoat) for cheap and highly avaliable vps'ses
https://docs.netgoat.xyz (not published yet)
## Running Services with systemd (Linux)
Prefer systemd over PM2? You can automate unit creation with the included script.
Automated one-liner (installs units for core, LogDB, CTM and Frontend):
Note: requires Bun installed and root privileges.
curl -fsSL https://raw.githubusercontent.com/cloudable-dev/NetGoat/main/scripts/install-systemd.sh | sudo bash -s -- --root-dir /opt/netgoat
Or run locally from the repo:
sudo bash scripts/install-systemd.sh --root-dir "$(pwd)" --build-frontend
Useful flags:
- --user / --group : system user/group to run services (default: netgoat)
- --no-netgoat, --no-logdb, --no-ctm, --no-frontend: skip specific services
- --include-docs: also install the docs site service from ./docs
- --dev-frontend / --dev-docs: run Next.js in dev mode instead of prod
- --build-frontend / --build-docs: run bun run build before creating units
- --no-start: write units but do not enable/start them
Services created:
- netgoat.service (root)
- netgoat-logdb.service (./LogDB)
- netgoat-ctm.service (./CentralMonServer)
- netgoat-frontend.service (./reactbased)
- netgoat-docs.service (./docs, optional)
Ports to allow (typical): 80, 443, 1933, 3000, 3010, 2222.
## Open Source Projects That Helped me Build
* [Bun](https://bun.sh) - [Github](https://github.com/oven-sh/bun) - MIT License
* [ShadCN](https://ui.shadcn.com) - [Github](https://github.com/shadcn-ui/ui) - MIT License
* [NextJS](https://nextjs.org/) - [Github](https://github.com/vercel/next.js/) - MIT License
* [Fastify](https://fastify.dev) - [Github](https://github.com/fastify/fastify) - MIT License
* [TailwindCSS](https://tailwindcss.com) - [Github](https://github.com/tailwindlabs/tailwindcss) - MIT License
## Star History
