Self-host super
v1.2.18Per-device isolated WiFi router with zero-trust networking
docker-compose up -d- Stars
- 874
What is super?
SPR (Secure Programmable Router) is a Linux-based self-hosted WiFi router platform designed for home and enterprise networks. It provides per-device micro-segmentation using VLAN isolation, unique WiFi passphrases per device, and default-deny firewall policies to prevent unauthorized lateral movement across devices. The software runs in Docker containers on various Linux systems including Raspberry Pi and x86-64 machines. Core features include Multi-PSK with WPA3 support, policy-based network access controls, per-device DNS rules with ad blocking, WireGuard VPN for remote access, REST API for programmatic control, and a Docker plugin ecosystem for extensibility. Advanced capabilities like scheduled firewall policies, domain-based rules, and mesh networking require a paid SPR Plus subscription.
Should you self-host super?
super scores 53/100 on selfhost.directory (how scoring works) and ranks #15 of 34 in Network Management. It has 874 GitHub stars.
It shipped 26 stable releases in the past year. The latest, rpios-v1.2.18, came out on 26 October 2026.
Setup is moderate: expect some configuration beyond a single command. It is BSD-3-Clause-licensed and written mostly in JavaScript.
Its closest alternative on selfhost.directory is 3x-ui (84/100, 48 772 stars). It scores higher overall, so compare the two before you pick. See super vs 3x-ui side by side.
super README
FAQ
Do you have a mobile app for the admin interface?
The iOS app is available on the App Store.
What is SPR?
SPR is Linux software for running a hardened wifi network that also makes it easy to add and manage devices. Devices are isolated into individual VLANs and then connected securely into the rest of the network.
What does SPR stand for?
SPR stands for Secure Programmable Router.
More in Network Management
TailGuardSelf-hosted Docker container that bridges WireGuard-only devices into a Tailscale network, advertising WG subnets to the tailnet with an optional monitoring web UI.
The-One-FileSelf-hosted offline-first network topology editor in a single HTML file with optional Docker collaboration.
Traefik ManagerSelf-hosted web UI for managing Traefik reverse proxy — create routes, services, middlewares, certificates, and monitor logs and CrowdSec without editing YAML by hand.
trishul-snmp-suiteSelf-hosted, open-source SNMP platform replacing Net-SNMP CLI with a web UI for agent simulation, device walking, trap handling, and MIB browsing.
ubnt-updateSelf-hosted nginx TLS stream proxy routing Ubiquiti firmware updates through a VPN tunnel when official servers are blocked. Runs via Docker Compose or manual nginx.
UniFi-API-BrowserSelf-hosted, open-source PHP tool to browse UniFi Controller API data: multiple classic or API-key controllers, site switching, JSON/PHP output.
UniFi Docker ContainerSelf-hosted Docker container for UniFi Network Application to manage Ubiquiti devices. Open-source Apache-2.0 with multi-arch support.
unifi-gatewaySelf-hosted Python daemon emulating a Ubiquiti UGW3 gateway so non-Ubiquiti routers appear in UniFi Controller with full network topology.
Unifi-Network-ApplicationSelf-hosted Docker deployment scripts and compose files for UniFi Network Application with MongoDB, supporting generic systems, DietPi, and CasaOS.
unifi-toolkitSelf-hosted, open-source toolkit for managing and monitoring UniFi networks with real-time dashboards, device tracking, threat monitoring, and firewall lockdowns.
unifi-voucher-siteSelf-hosted web app for creating and managing UniFi guest vouchers with OIDC, REST API, thermal printing, email, and kiosk mode.
WakupatorWakupator is a self-hosted Linux daemon that wakes up LAN machines via Wake-on-LAN when detecting traffic to spoofed IPs, reducing energy waste for home servers.
0 comments