SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Go HTTPS Projects
-
Project mention: I got tired of setting up SSL for every side project, so I made a 60-second Docker deploy kit | dev.to | 2026-05-19
The secret is Caddy. Unlike Nginx, Caddy handles SSL automatically — it requests certificates from Let's Encrypt and renews them without any configuration. The entire reverse proxy config is 3 lines:
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
On install it generates an ECDSA P-256 root CA at ~/.mkdev/ca/ (private key written 0o400, owner-read only) and installs it into the OS-native trust store. The trust-store integration — Keychain via security on macOS, the CA-bundle dirs plus update-ca-* on Linux, the ROOT store via crypt32.dll on Windows — is adapted from mkcert (BSD-3, credited in LICENSE-MKCERT). That layer is the genuinely OS-specific part and reusing it saved a lot of pain.
-
nps
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发,可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面,内网dns解析、内网socks5代理等等……,并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)
-
Project mention: Go Web Frameworks in Production: Performance Benchmarks and Real-World Trade-offs | dev.to | 2026-03-19
Echo is a high-performance web framework that strikes an excellent balance between performance and features. It supports HTTP/2 out of the box and provides flexible middleware options.
-
gopeed
A fast, modern download manager for HTTP, BitTorrent, Magnet, and ed2k. Cross-platform, built with Golang and Flutter.
-
-
Project mention: LetsEncrypt – Expiration Notification Service Has Ended | news.ycombinator.com | 2025-06-30
It's unfortunate to see this go away, but understandable given the costs involved. If you use a web server like Caddy, you can automate certificate renewal (https://caddyserver.com/docs/automatic-https). If notifications are important, they also provide an event subscription system (https://github.com/caddyserver/certmagic#events) so you can subscribe to cert-related events, run custom code, trigger event handlers, etc.
-
sish is an SSH-based solution that is simple to deploy and use.
-
hoverfly
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers
-
-
-
Project mention: Cloudflare Turnstile requiring fingerprintable WebGL | news.ycombinator.com | 2026-05-31
Cloudflare is known to use fingerprinting to detect scrapers For example, they use JA3 fingerprints and match them against the UA to block stuff like cURL while allowing OkHttp (Android clients) - but this can be easily be spoofed with packages such as CycleTLS [1].
I don't want to defend them, because they gate away a good chunk of the internet with their "bot protection", but unless you do PoW (which is also ecologically a nightmare), probably fingerprinting is the way to go - completely destroying the privacy of everyone involved.
Cromite, a privacy conscious fork of Chromium for Android, has constantly issues with CloudFlare Turnstile [2] because they (Cloudflare) try to fingerprint it in multiple ways in order to pass the challenge. The only way to get it to work would be to join the CloudFlare Browser Developer program - which requires signing an NDA. Rightfully so, the project maintainer didn't want to do it.
I understand both sides, but at least CloudFlare could be flexible enough to fall back to PoW instead of just blocking people from sending forms or accessing websites...
[1]: https://github.com/Danny-Dasilva/CycleTLS
[2]: https://github.com/uazo/cromite/issues/2365
-
Project mention: Dumbproxy 1.42.0 released with TrustTunnel support | news.ycombinator.com | 2026-02-09
-
-
mirrorbits
Mirrorbits is a geographical download redirector written in Go for distributing files efficiently across a set of mirrors.
-
-
-
-
-
-
serve
Simple http server for localhost development with flags for enabling gzip and http2 (by rhardih)
-
-
inca
INternal CA is an API around Certificate Authority flows to handle internal and global certificates at ease
Go HTTPS discussion
Go HTTPS related posts
-
mkdev: trusted HTTPS for localhost, mapped by name
-
Self-Signed Certificates for localhost Development
-
Docker basics: Using mkcert and caddy with docker compose to host web services over HTTPS for local development
-
Deploying Mercure alongside Caddy on a shared VPS
-
Setting up HTTPS on my home lab
-
Show HN: I ported Tree-sitter to Go
-
Dumbproxy 1.42.0 released with TrustTunnel support
-
A note from our sponsor - SaaSHub
www.saashub.com | 12 Jun 2026
Index
What are some of the best open-source HTTPS projects in Go? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | Caddy | 73,224 |
| 2 | mkcert | 58,813 |
| 3 | nps | 34,065 |
| 4 | Echo | 32,430 |
| 5 | gopeed | 24,831 |
| 6 | gost | 6,913 |
| 7 | certmagic | 5,565 |
| 8 | sish | 4,645 |
| 9 | hoverfly | 2,496 |
| 10 | gock | 2,215 |
| 11 | Armor | 1,661 |
| 12 | CycleTLS | 1,460 |
| 13 | dumbproxy | 905 |
| 14 | forwardproxy | 721 |
| 15 | mirrorbits | 582 |
| 16 | tcpprobe | 354 |
| 17 | aws-s3-proxy | 342 |
| 18 | go-boilerplate | 293 |
| 19 | govcr | 199 |
| 20 | chissl | 192 |
| 21 | serve | 103 |
| 22 | ssl-handshake | 75 |
| 23 | inca | 35 |