3 best open source CORS proxy services you can self-host
On This Page
The best open source CORS proxy services
1. Corsfix
What is Corsfix?
- Created: 2024
- License: AGPLv3
Corsfix is the modern and secure CORS proxy platform, which includes several powerful features such as domain allowlisting, secrets management, cached responses, and more. It allows you to build powerful web applications without worrying about CORS errors.
Self-hosting process is well documented and supported via Docker services.
Pros and Cons
| Pros | Cons |
|---|---|
| Advanced CORS proxy features | Self-hosting can be complicated with multiple services |
| Easy-to-use management dashboard | |
| Secure against common CORS proxy vulnerabilities | |
| Free tier available on cloud |
2. CORS Anywhere
What is CORS Anywhere?
- Created: 2013
- License: MIT
CORS Anywhere is the most popular open source CORS proxy, with over 9,000 stars. It is simple and it works. It supports various ways to pass in the target URL for proxying, providing more flexibility.
Self-hosting is pretty straightforward. While it doesn’t support Docker, you can just clone the repository, run npm install, and execute the server.js file.
Pros and Cons
| Pros | Cons |
|---|---|
| Relatively easy self-hosting | No advanced features |
| Only requires a single server | Historically susceptible to SSRF |
| Supports origin blacklisting | |
| Rate limiting configuration |
3. Whatever Origin
What is Whatever Origin?
- Created: 2011
- License: -
Whatever Origin is the original open source CORS proxy, first built in 2011, even earlier than CORS Anywhere. It was created as an open source alternative to anyorigin.com. It supports basic proxying with GET requests and provides JSONP support.
Self-hosting is easy, you can use Docker with published images, or if you prefer a single file without dependencies, it’s possible too with Go build, making it lightweight and compilable into a single binary.
Pros and Cons
| Pros | Cons |
|---|---|
| Easy self-hosting without dependencies (Go build) | Only supports GET requests |
| Supports JSONP | Very basic features |
| Lightweight service |