Caddy

Caddy is a free, extensible server platform used as a web server or proxy. By default, it obtains and renews TLS certificates for sites and redirects HTTP traffic to HTTPS. Its reverse proxy supports HTTP, HTTPS, WebSockets, gRPC, and FastCGI, as well as load balancing and health checks. Configuration options include JSON through a RESTful API, the Caddyfile, and other adapters. Compile-time plugins can extend its static binary, and DNS challenge integrations include providers such as Cloudflare, DigitalOcean, and Route 53 through libdns. Caddy can run as a command-line process, system service, container, Kubernetes workload, or embedded component. The project says the software has no paywalled features; sponsorship plans add services and support without changing the software license. Community help is available through a forum. Caddy says its TLS defaults meet PCI DSS, NIST, and HIPAA compliance requirements, and that dependencies are verified with Go modules while release artifacts are cryptographically signed. It is self-hosted and listed for Android, API, Linux, macOS, web, and Windows.

Caddy offers configurable server and proxy functions with automatic HTTPS and multiple deployment options. Consider the self-hosted model and whether its listed proxy capabilities meet your requirements.

Caddy suits people deploying a web server or proxy who want automatic HTTPS and configurable reverse-proxy capabilities. It can run in several deployment forms, including as a container or Kubernetes workload.

Overview

Caddy is a self-hosted server platform for serving websites and routing traffic between services. It suits operators who want flexible proxy and configuration options alongside automatic HTTPS. Its strengths are broad protocol support and deployment flexibility; running it yourself means taking responsibility for the surrounding infrastructure.

Automatic HTTPS is a practical advantage: Caddy obtains and renews TLS certificates for sites and redirects HTTP traffic to HTTPS by default. The maker says its TLS defaults meet PCI DSS, NIST, and HIPAA requirements. That can help simplify secure deployment, though compliance still depends on the system as a whole.

For a wider category comparison, see Reverse Proxy Software.

Key features

Proxying and configuration

The reverse proxy handles HTTP, HTTPS, WebSockets, gRPC, and FastCGI, with load balancing and health checks. That breadth makes Caddy a practical fit when one server needs to route different kinds of application traffic. It also terminates TLS, but does not provide response caching.

Operators can configure Caddy with JSON through a RESTful API, the Caddyfile, or other configuration adapters. This gives teams a choice between API-driven management and file-based configuration. DNS challenges integrate through libdns with Cloudflare, DigitalOcean, Route 53, and dozens of other providers.

Extensibility and deployment

Compile-time plugins extend the static binary, so the required extensions are built into the deployed Caddy executable. Caddy can run as a command-line process, system service, container, Kubernetes workload, or embedded component. That range serves both standalone deployments and software that incorporates Caddy, while keeping operations self-hosted.

Dependencies are verified with Go modules and release artifacts are cryptographically signed. These measures strengthen software supply-chain integrity. Community help is free through the forum; paid sponsorship tiers add private support and other services, with benefits varying by tier. Caddy says sponsorship does not change the software license or put features behind a paywall.

Pricing

Caddy's software is free, with no paid feature tiers. Paid sponsorship plans buy support, access to Expert Caddy, onboarding, or other services. Prices are monthly as stated:

The free software is the sensible choice for individuals and teams able to manage their own deployments and rely on community help. Indie and Indie Pro are aimed at those seeking Expert Caddy access, with Indie Pro adding occasional email support. Startup adds an onboarding call, while Startup Pro adds publicity, triage priority, and a services discount. Business is the first tier with team access to Expert Caddy and private development chat. The higher tiers add varying degrees of dedicated support, priority, custom development, and business services. Their monthly prices make sense only when those services match an organization's support needs. Enterprise+ is especially constrained, with only one available.

Platforms

Caddy is listed for Android, API, Linux, macOS, self-hosted, web, and Windows. Its deployment options include command-line, system service, container, Kubernetes, and embedded use. Self-hosting is central to the product, so it fits users who want control over deployment and operations more than a managed service.

Who it's for

Caddy is a strong fit for developers and infrastructure teams that need a self-hosted web server or reverse proxy, especially when automatic certificate handling, multiple proxy protocols, or several deployment formats matter. Its API and configuration choices suit teams with different management workflows, and plugin support offers a route to extend the binary.

It is less suitable for users seeking a hosted service, built-in response caching, or a paid plan that unlocks software features. The free forum may be enough for capable operators; organizations needing private or dedicated support should weigh the sponsorship tiers against their budgets and response requirements.

Pros and cons

• Automatic HTTPS by default: Caddy obtains and renews certificates and redirects HTTP, reducing routine certificate work.
• Broad reverse proxy coverage: Support for HTTP, HTTPS, WebSockets, gRPC, and FastCGI, plus load balancing and health checks, handles varied routing needs.
• Flexible configuration and deployment: JSON API, Caddyfile, adapters, and options from command-line to Kubernetes accommodate different operating models.
• No paid software features: The free self-hosted software remains the same across sponsorship levels.
• No response caching: Teams that need caching will have to address that requirement elsewhere.
• Self-hosted operations: Users must manage deployment themselves; private and dedicated support is tied to paid sponsorships.
• High-cost support tiers: Business and enterprise services rise to $999 a month and above, which may be difficult to justify for smaller deployments.

Alternatives

Choose frp if you want free, open-source reverse proxy software with self-hosted client and server binaries. PageKite is a freemium alternative with a free plan, trial, and a pay-what-you-want option priced at $3 a month for individuals; it can be free for non-commercial users.

F5 BIG-IP APM is a paid alternative with a free trial and perpetual licensing across virtual, hardware, or hybrid environments. Fabio is a free MIT-licensed option that requires Consul for service discovery. freenginx is free software distributed with its sources and documentation under a 2-clause BSD-like license.

ngrok may suit users looking for a freemium service with a free tier capped at three online endpoints and 1GB of data transfer, plus $5 one-time usage. Zoraxy is an intended-to-be-free, AGPL open-source option. LocalXpose offers a free Starter tier with two active HTTP or HTTPS tunnels, SSL/TLS encryption, unique subdomains, time limits, and an interstitial warning page.

Verdict

Choose Caddy if you want a capable self-hosted server and reverse proxy with automatic HTTPS, broad protocol support, and deployment flexibility, and can run the infrastructure yourself. Its free software avoids feature gates, while paid sponsorships give organizations options for support and services. Look elsewhere if you need response caching, managed hosting, or support without a substantial monthly sponsorship.