Your edge,
rerouted.
Geo-aware routing, URL replacement, and a firewall for every request — programmable from a single dashboard.
Built for the whole lifecycle of a request.
Reverse Proxy
Multi-port ingress with per-port backends, long-stream timeouts, and a hot-reloadable http.Server.
Geo URL Replacements
Route per country using a City GeoIP DB. Configurable rules with a default fallback.
ASN URL Replacements
Route by originating AS number to target or exclude specific network providers.
Edge Nodes
Managed edge proxies installed over SSH from the dashboard, with live health, capacity and host preflight.
CDNs
Pool edge nodes or raw IPs behind one destination. Weighted split; offline nodes are skipped automatically.
Traffic Routes
Send everyone from a country or network to a node or CDN. Any redirect host, no per-origin rule.
Country Blocking
Deny-list traffic by country, globally or scoped to a single port. Bypass list for trusted users.
Firewall
Rate limits, VPN/proxy detection, IP whitelist, and manual bans with TTL for surgical control.
Device Protection
Per-MAC rate limits, bot detection, and device binding that pins a box to its country and IP count.
Multi-Server
One dashboard orchestrates many gateways. Customer accounts see only their assigned servers.
Logs & Monitoring
/health, /metrics, and a time-ranged log viewer with search and one-click download.
IP Tester
Preview geo and ASN lookups before touching production traffic.
Three steps, from cold metal to serving traffic.
Install
One-click SSH install from the dashboard provisions Ubuntu 22.04 or 24.04 targets.
Configure
Define ports, geo and ASN rules, firewall policies, and country blocks from the web UI.
Operate
Watch live firewall stats, search logs, and export metrics to any Prometheus-compatible stack.
Shipped, in order.
- v3.1.12026-10current
Fresh-Install Fix
- +Fresh installs can save every config page straight away: the gateway serialises empty lists as [] instead of null, so Save no longer fails until Trusted Proxies has been saved once
- +Allowed countries on edge nodes: limit a managed node to viewers from chosen countries, answered with 403 before the upstream (edge agent v0.1.14)
- +A failed config save keeps its error on screen for 8 s and survives a non-JSON reply
- v3.1.02026-10
Multi-IP Edges
- +Outbound IPs: a managed edge node fetches from the origin through each of its addresses in turn, so the origin sees several client IPs
- +Multi-address nodes count once per public address in every CDN pool, with a per-pool switch to count them as one node
- +Every address of a managed node is trusted for forwarded client IPs automatically, with a per-address inbound self-check
- +Excluded users can keep the original host: a switch on the Excluded Users page leaves their redirects untouched
- +Installer owns the gateway license block; heartbeat and edge-health loops arm themselves when a license appears
- v3.0.02026-09
Edge & CDN
- +CDNs: pool edge nodes or raw IPs behind one destination, weighted split, offline nodes skipped via heartbeat health
- +Traffic routes: send a whole country or network to a node or CDN, any redirect host, one most-specific-wins priority ladder
- +Edge nodes: dashboard SSH auto-install, connection limits with overflow, CPU/pressure history, host preflight checks
- +Destination picker offers edge nodes and CDNs in every replacement rule
- +Fixes: ASN selector data restored; first request from an IP no longer runs with an unknown ASN
- v2.24.02026-06
Device Binding
- +Device binding anti-theft: pin a MAC to its first-seen country and cap its IP count
- +Trusted proxies: real client IP behind Cloudflare or your own proxy
- +Country-aware firewall views for bans, devices and top blockers
- v2.20.02026-05
MAC Protection
- +Per-device MAC rate limiting for MAG/STB endpoints
- +Bot detection via MAC-per-IP tracking with auto-ban
- +Configurable protected paths (/c, /b, etc.)
- +Full MAC request logging with country and ban reason
- v2.0.02026-04
Proxima Gateway
- +Rebrand to Proxima Gateway with multi-server SaaS dashboard
- +One-click SSH auto-installer for Ubuntu 22.04 / 24.04
- +Customer accounts with per-server scoping and roles
- +Allowed-domains whitelist per port
- v1.42026-02
ASN & Logging
- +ASN-based URL replacements via GeoLite2-ASN
- +Time-ranged log viewer with search and download
- +Redirect and URL-modification tracking
- v1.32026-01
Firewall
- +Rate limiting, global and per-path
- +VPN / proxy detection and IP whitelist
- +Sliding-window brute-force auto-ban
- v1.22025-11
Config API
- +Thread-safe configuration management API
- +Optional names for URL replacements
- +Image URL handling and redirect rewriting
- v1.02025-09
First Proxy
- +Reverse proxy with GeoIP-based URL replacements
- +Country blocklist and per-port backends
One plan. Everything in.
No feature gates, no per-rule metering. A single subscription includes every capability — scoped to one managed server.
- One managed gateway server
- Unlimited ports and backends
- Unlimited geo & ASN URL replacements
- Unlimited country blocks
- Unlimited firewall rules and whitelist entries
- Unlimited logs and metrics retention
- Transaction verification included
- One-click SSH installer and upgrades
- Priority support
Billed via rika.host