diff --git a/syslog-ng/apkbuild/axoflow/syslog-ng/APKBUILD b/syslog-ng/apkbuild/axoflow/syslog-ng/APKBUILD
index e0c62c5f9a..211dfba20e 100644
--- a/syslog-ng/apkbuild/axoflow/syslog-ng/APKBUILD
+++ b/syslog-ng/apkbuild/axoflow/syslog-ng/APKBUILD
@@ -51,7 +51,9 @@ subpackages="
 	$pkgname-python3:_python3
 	$pkgname-grpc:_grpc
 	"
-source="https://github.com/syslog-ng/syslog-ng/releases/download/syslog-ng-$pkgver/syslog-ng-$pkgver.tar.gz"
+source="https://github.com/syslog-ng/syslog-ng/releases/download/syslog-ng-$pkgver/syslog-ng-$pkgver.tar.gz
+	axosyslog-python-modules.tar.gz
+	"
 builddir="$srcdir/$pkgname-$pkgver"
 
 _modules="
diff --git a/syslog-ng/axopython-modules/axohttp/__init__.py b/syslog-ng/axopython-modules/axohttp/__init__.py
new file mode 100644
index 0000000000..8ccf273a6a
--- /dev/null
+++ b/syslog-ng/axopython-modules/axohttp/__init__.py
@@ -0,0 +1,5 @@
+from .source import HTTPSource
+
+__all__ = [
+    "HTTPSource"
+]
diff --git a/syslog-ng/axopython-modules/axohttp/scl/http.conf b/syslog-ng/axopython-modules/axohttp/scl/http.conf
new file mode 100644
index 0000000000..2b5f882a46
--- /dev/null
+++ b/syslog-ng/axopython-modules/axohttp/scl/http.conf
@@ -0,0 +1,65 @@
+#############################################################################
+# Copyright (c) 2024 László Várady
+#
+# This program is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License version 2 as published
+# by the Free Software Foundation, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+# As an additional exemption you are allowed to compile & link against the
+# OpenSSL libraries as published by the OpenSSL project. See the file
+# COPYING for details.
+#
+#############################################################################
+
+block source axohttp(
+    port("")
+    auth_token("")
+    tls_key_file("")
+    tls_cert_file("")
+    ...
+)
+{
+    python(
+        class("syslogng.modules.http.HTTPSource")
+        options(
+            "port" => "`port`"
+            "auth_token" => "`auth_token`"
+            "tls_key_file" => "`tls_key_file`"
+            "tls_cert_file" => "`tls_cert_file`"
+        )
+        `__VARARGS__`
+    );
+};
+
+block source axohttp-json(
+    port("")
+    auth_token("")
+    tls_key_file("")
+    tls_cert_file("")
+    prefix("")
+    ...
+)
+{
+    channel {
+        source {
+            axohttp(
+                port("`port`") auth_token("`auth_token`")
+                tls_key_file("`tls_key_file`") tls_cert_file("`tls_cert_file`")
+                `__VARARGS__`
+            );
+        };
+
+        parser {
+            json-parser(prefix("`prefix`"));
+        };
+    };
+};
diff --git a/syslog-ng/axopython-modules/axohttp/source.py b/syslog-ng/axopython-modules/axohttp/source.py
new file mode 100644
index 0000000000..66836db101
--- /dev/null
+++ b/syslog-ng/axopython-modules/axohttp/source.py
@@ -0,0 +1,139 @@
+#############################################################################
+# Copyright (c) 2024 László Várady
+#
+# This program is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License version 2 as published
+# by the Free Software Foundation, or (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+# As an additional exemption you are allowed to compile & link against the
+# OpenSSL libraries as published by the OpenSSL project. See the file
+# COPYING for details.
+#
+#############################################################################
+
+from syslogng import LogSource, LogMessage
+
+import logging
+import asyncio
+import threading
+import tornado
+import ssl
+import signal
+from typing import Any
+
+signal.signal(signal.SIGINT, signal.SIG_IGN)
+signal.signal(signal.SIGTERM, signal.SIG_IGN)
+
+class Handler(tornado.web.RequestHandler):
+    def initialize(self, source) -> None:
+        self.source = source
+
+    @tornado.web.authenticated
+    async def post(self) -> None:
+        # racy, but the client should retry
+        if self.source.suspended.is_set():
+            self.set_status(503)
+            await self.finish({"status": "flow-controlled"})
+            return
+
+        self.source.post_message(LogMessage(self.request.body))
+        await self.finish({"status": "received"})
+
+    def set_default_headers(self) -> None:
+        self.set_header("Server", "syslog-ng");
+
+    def get_current_user(self):
+        if not self.source.auth_token:
+            return True
+
+        token = self.request.headers.get("Authorization", "").split(" ")
+        if len(token) != 2:
+            return False
+
+        token = token[1]
+        return self.source.auth_token == token
+
+    def write_error(self, status_code: int, **kwargs: Any) -> None:
+        self.set_status(status_code)
+
+class HTTPSource(LogSource):
+    def init(self, options: dict[str, Any]) -> bool:
+        self.logger = logging.getLogger("http")
+        self.set_transport_name("http")
+        if not self.init_options(options):
+            return False
+
+        self.ssl_ctx = None
+        if self.tls_key_file:
+            self.ssl_ctx = ssl.create_default_context(ssl.Purpose.CLIENT_AUTH)
+            self.ssl_ctx.load_cert_chain(self.tls_cert_file, self.tls_key_file)
+
+        if not self.port:
+            self.port = 443 if self.tls_key_file else 80
+
+        self.port = int(self.port)
+
+        self.suspended = threading.Event()
+        self.event_loop = asyncio.new_event_loop()
+        self.request_exit = asyncio.Event()
+        self.app = tornado.web.Application(
+            [
+                (r"/.*", Handler, {"source": self}),
+            ],
+            log_function=self.log_access,
+            autoreload=False,
+            compress_response=False,
+        )
+        self.server = None
+
+        return True
+
+    async def runServer(self) -> None:
+        self.logger.info(f"HTTP(S) server started on port {self.port}")
+        self.server = self.app.listen(self.port, decompress_request=True, ssl_options=self.ssl_ctx)
+        await self.request_exit.wait()
+
+        self.server.stop()
+        await self.server.close_all_connections()
+
+    async def stopServer(self) -> None:
+        self.request_exit.set()
+
+    def deinit(self) -> None:
+        pass
+
+    def run(self) -> None:
+        self.event_loop.run_until_complete(self.runServer())
+
+    def suspend(self) -> None:
+        self.suspended.set()
+
+    def wakeup(self) -> None:
+        self.suspended.clear()
+
+    def request_exit(self) -> None :
+        asyncio.run_coroutine_threadsafe(self.stopServer(), self.event_loop)
+        pass
+
+    def log_access(self, req: tornado.web.RequestHandler):
+        self.logger.debug(f"{req.get_status()} {req._request_summary()}")
+
+    def init_options(self, options: dict[str, Any]) -> bool:
+        try:
+            self.port = options.get("port")
+            self.auth_token = options.get("auth_token")
+            self.tls_key_file = options.get("tls_key_file")
+            self.tls_cert_file = options.get("tls_cert_file")
+            return True
+        except KeyError as e:
+            self.logger.error(f"Missing option '{e.args[0]}'")
+            return False