A Web Application Firewall, rate limiter, and proxy server for modern web apps and services. Compatible with all runtimes and cloud providers.

Secure your web app with one command—no extra code required

Simple to use and free from surprise costs. Don’t wait until your cloud bills skyrocket with firewall services like AWS Network Firewall and others. With TurboWall, you can secure and launch your app on your cloud provider for the price of a VPS—no subscription or credit card required.

TurboWall Web Application Firewall with a rate limiter

Main Features

Works with any cloud provider or your own hardware
WAF (Web Application Firewall) with a set of generic attack detection rules recommended by OWASP
Built-in proxy server (connect your own domains to your projects with HTTPS/WSS)
Rate limiting
Can be installed on a separate server or on the same server as your web app
Load balancer (distributes requests and load across multiple servers)
Works with Docker, without Docker, or using standalone executable files
Uses only around 40 MB of RAM
Free with no registration required for projects with total revenue under €100/$100. Purchase a lifetime license (one-time payment of €59/$65) once revenue exceeds €100/$100.

How does TurboWall work?

No registration, no credit card, and no GitHub/Bitbucket permissions required.

What You Need

A server (e.g., from Hetzner, DigitalOcean, Scaleway, etc.) with a public IP (at least one per project), SSH access, and Ubuntu 22.04
A domain name

Install TurboWall

Run the setup command on your development machine (replace server_public_ip with your server’s IP address; SSH access to the server is required):


                curl https://turbocloud.dev/quick-start | bash -s -- -i server_public_ip

Once installation is complete, open console.turbocloud.dev in your browser to connect domains to your apps/services and manage firewall and rate limiter rules.

If you install TurboWall on the same server as your app, link a domain to the port your app listens on.
If you install TurboWall on a separate server, link domains to the private IP addresses of the servers running your apps or containers. (All major cloud providers support private networks with private IPs.)

A Web Application Firewall, rate limiter, and proxy server for modern web apps and services.

Secure your web app with one command—no extra code required

Main Features

How does TurboWall work?

What You Need

Install TurboWall

Products

Docs & Guides

Social & Blog