mholt/caddy-l4

Health v2 · maintenance only

Adoption not part of the score

1756 stars · 121 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A layer 4 (TCP/UDP) app for Caddy that enables composable handling of raw connections based on connection properties or stream content. It supports routing, TLS termination, proxying, echoing, blocking, and throttling via Caddy-style matchers and handlers.

Use cases

• proxy raw TCP traffic to a backend server
• route connections by TLS SNI or HTTP Host without terminating TLS
• terminate TLS then forward HTTP to one port and other protocols elsewhere
• block connections from specific IP ranges
• echo server for testing TCP/UDP clients
• multiplex SSH, HTTP, and HTTPS on a single port
• throttle bandwidth to simulate slow clients

When to choose

• you already use Caddy and need TCP/UDP routing alongside HTTP
• you need protocol sniffing and SNI-based routing on raw sockets
• you want declarative JSON or Caddyfile config for layer 4 proxying

When to avoid

• you need a battle-tested production L4 load balancer with zero breaking changes
• you need UDP-specific features beyond basic proxying
• you don't use Caddy and want a standalone proxy

Facets

plugin · maturity active

proxy routing middleware networking security networking backend self-hosted windows cross-platform go caddy layer4 tcp udp tls-termination stream-proxy protocol-detection sni-routing devops linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="mholt/caddy-l4")