Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

SNI Proxy

Free#29 of 33 in Reverse Proxy Software

SNI Proxy: A focused self-hosted router for hostname-based TLS pass-through. Ranked #29 of 33 in Reverse Proxy Software by our editors (5.9/10); pricing: Free plan; best for hostname-based TLS pass-through.

5.9/10Editor score
SNI Proxy5.9 Visit SNI Proxy

At a glance

  • Editor score
    5.9 / 10
  • Pricing
    Free plan
  • Best for
    Hostname-based TLS pass-through
  • Free plan
    Yes
  • Paid from
    Free
  • Deployment model
    Self-hosted
  • Facts checked
    20 Sep 2026
SNI Proxy screenshot
  • Where it wins

    • Routes HTTP and TLS by exact, wildcard, or regex hostname rules
    • Supports IPv4, IPv6, Unix sockets, and multiple listeners
    • Passes HTTPS traffic without TLS termination or private keys on the proxy
  • Where it doesn't

    • Does not terminate TLS on the proxy
    • Deprecated because it lacks HTTP/2, HTTP/3, and QUIC support
    • macOS support is best effort, with limited maintainer responses

Our verdict on SNI Proxy

SNI Proxy is a self-hosted reverse proxy for routing incoming HTTP and TLS connections by hostname. It is aimed at operators who need HTTPS name-based virtual hosting without decrypting traffic or placing private keys on the proxy. The project is open source, available on Linux and macOS, and can run in a self-hosted deployment. Routing rules support exact hostnames, wildcards, and regular expressions, with a configurable fallback backend for requests that do not include a hostname.

Its main strength is focused TLS pass-through. SNI Proxy reads the hostname from the initial TCP request and forwards the connection without terminating TLS. That keeps the proxy out of the encrypted traffic path while supporting IPv4 and IPv6 backends and listeners. Unix domain sockets, multiple listening sockets per instance, and HAProxy proxy protocol support add deployment flexibility. The file-based configuration fits environments where routing behavior is managed alongside other server configuration.

The trade-off is scope and project status. SNI Proxy does not provide TLS termination, so certificate handling and decrypted HTTP features remain outside the proxy. The maintainer marked the project deprecated in December 2023 because it does not support HTTP/2, HTTP/3, or QUIC. Linux installation is available from source or distribution packages, while macOS support is described as best effort. The project remains publicly available, but responses should not be expected except for significant security or reliability issues. Choose SNI Proxy for narrow hostname-based pass-through; choose an alternative when modern HTTP protocols, TLS termination, or an actively maintained project are requirements.

Your product? Our editors can test SNI Proxy in depth and publish a review, labelled as paid · from $149/mo →

SNI Proxy pricing

Plans Free planFree Free to use — no paid tier required for the core job.
See plans on github.com

SNI Proxy fact sheet

Free planYes
Paid fromFree
Deployment modelSelf-hosted
TLS terminationNo
Web application firewallNot verified
Response cachingNot verified
Configuration methodFile
WebSocket supportNot verified
Rate limitingNot verified
DeploymentSelf-hosted
PlatformsLinux, macOS
SupportEmail, Community
Built forSolo, Small business (editorial estimate)
PricingFree plan
Websitegithub.com
Facts checked20 Sep 2026

Alternatives to SNI Proxy

See all SNI Proxy alternatives →

Used SNI Proxy? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used SNI Proxy for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — SNI Proxy 5.9/10

SNI Proxy is listed in our Reverse Proxy Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/sni-proxy/"><img src="https://www.itechguides.com/best/badge/sni-proxy.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update