Cloudflare Tunnel
Publish internal services through Cloudflare's network, free and entirely dependent on Cloudflare.
2 self-hosted replacements in this index, ranked by GitHub stars in the dataset.
Replacements
Pangolin
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels.
23,289 stars Active
28 Oct 2026 1.25.3
Firezone
Secure remote access gateway that supports the WireGuard protocol. It offers a Web GUI, 1-line install script, multi-factor auth (MFA), and SSO.
9,155 stars Active
1 Nov 2026 headless-client-1.5.15
Popular comparisons
The most-starred pairings among these replacements, ranked by combined GitHub stars in the dataset.