[Go to site: main page, start]

Go HTTPS

Open-source Go projects categorized as HTTPS
HTTP Golang Go TLS HTTP2

Top 23 Go HTTPS Projects

  1. Caddy

    Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

    Project mention: I got tired of setting up SSL for every side project, so I made a 60-second Docker deploy kit | dev.to | 2026-05-19

    The secret is Caddy. Unlike Nginx, Caddy handles SSL automatically — it requests certificates from Let's Encrypt and renews them without any configuration. The entire reverse proxy config is 3 lines:

  2. SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
  3. mkcert

    A simple zero-config tool to make locally trusted development certificates with any names you'd like.

    Project mention: mkdev: trusted HTTPS for localhost, mapped by name | dev.to | 2026-05-24

    On install it generates an ECDSA P-256 root CA at ~/.mkdev/ca/ (private key written 0o400, owner-read only) and installs it into the OS-native trust store. The trust-store integration — Keychain via security on macOS, the CA-bundle dirs plus update-ca-* on Linux, the ROOT store via crypt32.dll on Windows — is adapted from mkcert (BSD-3, credited in LICENSE-MKCERT). That layer is the genuinely OS-specific part and reusing it saved a lot of pain.

  4. nps

    一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发,可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面,内网dns解析、内网socks5代理等等……,并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)

  5. Echo

    High performance, minimalist Go web framework

    Project mention: Go Web Frameworks in Production: Performance Benchmarks and Real-World Trade-offs | dev.to | 2026-03-19

    Echo is a high-performance web framework that strikes an excellent balance between performance and features. It supports HTTP/2 out of the box and provides flexible middleware options.

  6. gopeed

    A fast, modern download manager for HTTP, BitTorrent, Magnet, and ed2k. Cross-platform, built with Golang and Flutter.

    Project mention: Gopeed – A Modern Download Manager | news.ycombinator.com | 2025-06-25
  7. gost

    GO Simple Tunnel - a simple tunnel written in golang (by go-gost)

  8. certmagic

    Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

    Project mention: LetsEncrypt – Expiration Notification Service Has Ended | news.ycombinator.com | 2025-06-30

    It's unfortunate to see this go away, but understandable given the costs involved. If you use a web server like Caddy, you can automate certificate renewal (https://caddyserver.com/docs/automatic-https). If notifications are important, they also provide an event subscription system (https://github.com/caddyserver/certmagic#events) so you can subscribe to cert-related events, run custom code, trigger event handlers, etc.

  9. sish

    HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

    Project mention: Best Ngrok Alternatives in 2025 | dev.to | 2025-08-29

    sish is an SSH-based solution that is simple to deploy and use.

  10. hoverfly

    Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

    Project mention: The Top API Mocking Frameworks of 2025 | dev.to | 2025-09-03
  11. gock

    HTTP traffic mocking and testing made easy in Go ༼ʘ̚ل͜ʘ̚༽

  12. Armor

    Uncomplicated, modern HTTP server

  13. CycleTLS

    Spoof TLS/JA3 fingerprints in GO and Javascript

    Project mention: Cloudflare Turnstile requiring fingerprintable WebGL | news.ycombinator.com | 2026-05-31

    Cloudflare is known to use fingerprinting to detect scrapers For example, they use JA3 fingerprints and match them against the UA to block stuff like cURL while allowing OkHttp (Android clients) - but this can be easily be spoofed with packages such as CycleTLS [1].

    I don't want to defend them, because they gate away a good chunk of the internet with their "bot protection", but unless you do PoW (which is also ecologically a nightmare), probably fingerprinting is the way to go - completely destroying the privacy of everyone involved.

    Cromite, a privacy conscious fork of Chromium for Android, has constantly issues with CloudFlare Turnstile [2] because they (Cloudflare) try to fingerprint it in multiple ways in order to pass the challenge. The only way to get it to work would be to join the CloudFlare Browser Developer program - which requires signing an NDA. Rightfully so, the project maintainer didn't want to do it.

    I understand both sides, but at least CloudFlare could be flexible enough to fall back to PoW instead of just blocking people from sending forms or accessing websites...

    [1]: https://github.com/Danny-Dasilva/CycleTLS

    [2]: https://github.com/uazo/cromite/issues/2365

  14. dumbproxy

    Simple, scriptable, secure HTTP/SOCKS5 forward proxy

    Project mention: Dumbproxy 1.42.0 released with TrustTunnel support | news.ycombinator.com | 2026-02-09
  15. forwardproxy

    Forward proxy plugin for the Caddy web server

  16. mirrorbits

    Mirrorbits is a geographical download redirector written in Go for distributing files efficiently across a set of mirrors.

  17. tcpprobe

    Modern TCP tool and service for network performance observability.

  18. aws-s3-proxy

    Reverse proxy for AWS S3 with basic authentication.

  19. go-boilerplate

    Production-ready Go RESTful API boilerplate with Echo

  20. govcr

    HTTP mock for Golang: record and replay HTTP/HTTPS interactions for offline testing

  21. chissl

    A tool to create HTTPS reverse tunnels

  22. serve

    Simple http server for localhost development with flags for enabling gzip and http2 (by rhardih)

  23. ssl-handshake

    A command-line tool for testing SSL/TLS handshake latency, written in Go.

  24. inca

    INternal CA is an API around Certificate Authority flows to handle internal and global certificates at ease

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go HTTPS discussion

Log in or Post with

Go HTTPS related posts

  • mkdev: trusted HTTPS for localhost, mapped by name

    3 projects | dev.to | 24 May 2026
  • Self-Signed Certificates for localhost Development

    1 project | dev.to | 6 May 2026
  • Docker basics: Using mkcert and caddy with docker compose to host web services over HTTPS for local development

    4 projects | dev.to | 21 Apr 2026
  • Deploying Mercure alongside Caddy on a shared VPS

    3 projects | dev.to | 29 Mar 2026
  • Setting up HTTPS on my home lab

    1 project | dev.to | 8 Mar 2026
  • Show HN: I ported Tree-sitter to Go

    5 projects | news.ycombinator.com | 25 Feb 2026
  • Dumbproxy 1.42.0 released with TrustTunnel support

    2 projects | news.ycombinator.com | 9 Feb 2026
  • A note from our sponsor - SaaSHub
    www.saashub.com | 12 Jun 2026
    SaaSHub helps you find the best software and product alternatives Learn more →

Index

What are some of the best open-source HTTPS projects in Go? This list will help you:

# Project Stars
1 Caddy 73,224
2 mkcert 58,813
3 nps 34,065
4 Echo 32,430
5 gopeed 24,831
6 gost 6,913
7 certmagic 5,565
8 sish 4,645
9 hoverfly 2,496
10 gock 2,215
11 Armor 1,661
12 CycleTLS 1,460
13 dumbproxy 905
14 forwardproxy 721
15 mirrorbits 582
16 tcpprobe 354
17 aws-s3-proxy 342
18 go-boilerplate 293
19 govcr 199
20 chissl 192
21 serve 103
22 ssl-handshake 75
23 inca 35

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com