Dwaar replaces nginx + Plausible + fail2ban + certbot with a single process. Built on Cloudflare's Pingora.
No YAML. No JSON. No 200-line nginx.conf.
Write what you mean, Dwaar handles the rest —
TLS certificates, OCSP stapling, HTTP/3, compression.
example.com {
reverse_proxy localhost:8080
}
api.example.com {
reverse_proxy {
to backend1:3000 backend2:3000
lb_policy least_conn
health_uri /healthz
}
rate_limit 100/s
encode gzip zstd br
}~296 MB, 4 processes
dwaar
One process. Everything included.
Let's Encrypt + Google Trust. HTTP-01, DNS-01. OCSP stapling. Zero config.
Same-origin injection. HyperLogLog visitors, Web Vitals, TopK pages. ~30 KB/domain.
Cloudflare's framework. Lock-free routing, zero-copy buffers, jemalloc.
Rate limiting, bot detection, IP filtering, security headers, forward auth.
Extend in any language that compiles to WebAssembly. Sandboxed.
Ingress controller. Leader election. Helm chart. Drop-in replacement.
QUIC transport. 0-RTT resumption. Multiplexed streams.
22+ field JSON. Batch-written. File rotation, Unix socket.
Auto-discover backends from container labels. Zero-config.
curl -fsSL https://dwaar.dev/install.sh | sh sudo apt install dwaar docker run -p 443:443 ghcr.io/permanu/dwaar brew install permanu/dwaar/dwaar Ready?
Read the docs