| Feature | ProxyAuth | NGINX | Traefik |
|---|---|---|---|
| Main Purpose | 🔐 Security & Authentication | 🚀 High-performance forwarding | ☁️ Dynamic routing & forwarding |
| Built-in Authentication | ✅ Yes | ❌ No | ⚠️ Partial |
| TOTP Authentication | ✅ Yes | ⚠️ Yes via external service | ⚠️ Yes via external service |
| External Lib | ✅ Yes (ppauth for python) | ❌ No | ❌ No |
| Ease of Configuration | ✅ Easy | ⚠️ Moderate | ✅ Very Easy |
| Load Balancing | ✅ Advanced | ✅ Basic | ✅ Advanced |
| SSO / OIDC Integration | ⚠️ In development | ❌ Complex | ⚠️ Plugin |
| Protocol Support | HTTP/1.1, HTTP/2, h2c | HTTP/1.1, HTTP/2, TCP | HTTP/1.1, HTTP/2, HTTP/3 |
| Token Management | ✅ Native | ❌ Not native | ⚠️ Partial |
| Routing Flexibility | ⚠️ Basic (via prefix) | ✅ Very Flexible | ✅ Label-Based Routing |
| Rate Limiting | ✅ Built-in (actix-governor) | ✅ With module | ✅ Native (middleware) |
| Installation | Binary / Docker | Package / Docker | Docker / Kubernetes |
| Performance (RPS) | ~ 150K-200K RPS Load balancing (round-robin) ~ 250K-400K RPS Failover mode ~ 500K+ RPS (No secure route) | ~ 250K–350K RPS Load balancing (round-robin) ~ 300K–400K RPS Failover (proxy_pass + fallback) ~ 500K+ RPS (optimized C) | ~ 150K–250K RPS (Loadbalancer) ~ 200K–250K RPS (Failover mode) ~ 300K RPS (No secure route) |
| Community | Small | Huge | Very Active |
| Programming Language | Rust | C | Go |
| Grafana Integration | ✅ Native via Loki | ⚠️ External plugin | ⚠️ Plugin / Middleware |
tracing-loki