Automatic SSL/HTTPS. One command to secure your site.
Open-source · Fast · Effortless. Auto certs + smart routing + security + admin panel.
Quickstart
Linux
curl -fsSL https://github.com/xurenlu/sslcat/releases/download/1.3.16-rc9/sslcat_1.3.16-rc9_linux-amd64.tar.gz -o sslcat.tgz
tar -xzf sslcat.tgz && sudo bash ./install-sslcat.shmacOS
# macOS (自动选择架构)
curl -fsSL https://github.com/xurenlu/sslcat/releases/download/1.3.16-rc9/sslcat_1.3.16-rc9_darwin-$(uname -m).tar.gz -o sslcat.tgz
tar -xzf sslcat.tgz && sudo bash ./install-sslcat.shDocker Compose
docker compose up -dSee GitHub for detailed docs.
Production‑ready capabilities
Automatic SSL certificates
Seamless integration with Let's Encrypt. One‑click issuance and automatic renewals.
Smart domain routing
Domain‑based reverse forwarding for HTTP/HTTPS/WebSocket with pooling and load balancing.
Security protections
IP blocking, access control, anti‑brute‑force, User‑Agent validation, and full logs.
Visual admin panel
Intuitive UI to manage routes, certificates, and security with real‑time metrics.
Graceful restarts
Zero‑downtime restarts with connection keep‑alive and graceful shutdown.
Static site hosting
Host pure static websites with cache control and large file delivery.
PHP via FastCGI
Connect to PHP‑FPM over FastCGI to run PHP applications with ease.
Architecture & Dataflow
FAQ
How does SSLcat request certificates?
ACME protocol and automated issuance process.
How does a CA validate domain ownership?
DNS/HTTP-based domain ownership validation.
Why can SSLcat get certificates for free?
Let's Encrypt and the open ecosystem.
Which operating systems does SSLcat support?
Full platform support for Linux, macOS, Windows.
How to configure reverse forwarding?
Domain-based intelligent forwarding configuration.
Does SSLcat support HTTP/3 and QUIC?
Latest protocol support and performance optimization.
Do certificates auto-renew?
Auto-renewal 30 days before expiry, zero manual intervention.
What security features does SSLcat have?
IP blocking, TLS fingerprinting, access control.
How to access the admin panel?
Forced password change on first login and path settings.
What is graceful restart?
Zero-downtime restart, maintaining existing connections.
What performance optimizations does SSLcat have?
Go goroutines, memory caching, connection reuse.
What deployment methods are available?
Docker, systemd service, direct execution.
Does it support wildcard certificates?
Support for *.example.com wildcard certificates.
How to manage multiple domains?
Unified management of SSL certificates for multiple business domains.
Does it support load balancing?
Intelligent connection pool management and failover.
Does it support WebSocket?
Full protocol support for HTTP/HTTPS/WebSocket.
How to view access logs?
Complete access trail tracking and monitoring.
What are the system requirements?
Minimum and recommended configuration specifications.
How to troubleshoot issues?
Common problem diagnosis and solutions.
How to serve static sites?
Built‑in static hosting and cache control.
Does it support PHP/FastCGI?
Connect to PHP‑FPM via FastCGI.
Topics
Automatic SSL
One‑click issuance and auto renewals.
Reverse Proxy
Domain‑based smart routing and load balancing.
Let's Encrypt
Free certificates and best practices.
Stop Paying for SSL
Use free certs + automation to cut costs.
Wildcard SSL
One cert for many subdomains.
HTTP/2 & QUIC
Faster transports, lower latency.