p2pstreamSelf-hosted public reverse proxy

Run public apps through direct or agent-selected route targets with a management UI, TLS automation, traffic controls, and live tracing.

Start with Docker Compose

Install the server

Start the Compose deployment, persist state, and open management over HTTPS.

Use the quickstart

Publish an app

Create a listener, route, target, and TLS mapping for a service the server can reach.

Publish a direct target

Use a remote agent

Expose a private-network service through an outbound agent connection.

Expose a home lab app

p2pstream is a self-hosted reverse proxy that routes public HTTPS traffic to direct route targets or to services on private networks through outbound agent connections. A single binary handles public TLS, ACME certificate automation, WAF rules, rate limiting, traffic shaping, and live request tracing — all configured through a browser management UI.