Open-source infrastructure-as-code software
668 open-source libraries, tools and applications tagged infrastructure-as-code, ranked by how closely infrastructure-as-code is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
668 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| versity/versitygw VersityGW is a high-performance, Apache-2.0 licensed S3 gateway written in Go that exposes an S3-compatible API backed by a local POSIX fil… | 97 | 3021 | active |
| CanineHQ/canine Canine is an open-source, self-hosted PaaS that turns any Kubernetes cluster into a Heroku-like deployment platform. It provides git-push d… | 68 | 2938 | active |
| frain-dev/convoy Convoy is an open-source, high-performance webhooks gateway for reliably ingesting, persisting, debugging, and delivering webhook events at… | 95 | 2877 | active |
| envoyproxy/ratelimit A Go/gRPC rate limiting service from the Envoy project that provides centralized, generic rate limiting for distributed applications. It st… | 67 | 2707 | active |
| openlake-project/openlake OpenLake is a high-performance distributed storage engine written in Rust (built on io_uring, RDMA, and GPUDirect) designed to feed GPUs du… | 78 | 2662 | active |
| tobi/walgit Walgit is a self-hosted Git server implemented as a single Rust binary that uses S3- or GCS-compatible object storage as the source of trut… | 55 | 2601 | active |
| OpenMPTCProuter OpenMPTCProuter is an OpenWrt-based router distribution that aggregates multiple internet connections (fiber, ADSL, 4G/5G, etc.) using Mult… | 75 | 2513 | active |
| parseablehq/parseable Parseable is an open source, columnar data lake observability platform built in Rust that unifies logs, metrics, traces, and events in a si… | 96 | 2460 | active |
| syslog-ng/syslog-ng syslog-ng is an enhanced syslog daemon that collects, parses, filters, and routes log messages from a wide range of sources including syslo… | 88 | 2377 | stable |
| ava-labs/avalanchego AvalancheGo is the official Go implementation of an Avalanche full node, the core software for participating in the Avalanche blockchain ne… | 95 | 2361 | active |
| squat/kilo Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across … | 74 | 2294 | active |
| dstack dstack is an open-source, vendor-agnostic control plane for GPU provisioning and orchestration that works across GPU clouds, Kubernetes, an… | 95 | 2277 | active |
| supabase/supavisor Supavisor is a cloud-native, multi-tenant Postgres connection pooler built in Elixir/Erlang. It proxies millions of client connections into… | 96 | 2266 | active |
| envoyproxy/ai-gateway Envoy AI Gateway is an open-source, Kubernetes-native gateway built on Envoy Gateway that manages traffic from application clients to Gener… | 86 | 2261 | stable |
| miekg/dns A complete DNS library for Go supporting all resource record types including DNSSEC, with both client (resolver) and server (nameserver) si… | 76 | 8786 | maintenance |
| andydunstall/piko Piko is an open-source reverse proxy for tunneling traffic to services that are not publicly routable, serving as a self-hosted alternative… | 92 | 2195 | active |
| apache/libcloud Apache Libcloud is a Python library that provides a unified API for interacting with more than 50 cloud service providers, hiding differenc… | 75 | 2125 | stable |
| zarf-dev/zarf Zarf is a free, open-source CLI package manager for declaratively packaging and deploying Kubernetes applications and cloud-native workload… | 95 | 2070 | active |
| gocrane/crane Crane is a FinOps platform for cloud resource analytics and cost optimization in Kubernetes clusters. It provides cost insight, optimizatio… | 23 | 2060 | active |
| SREWorks SREWorks is Alibaba's open-source cloud-native operations and maintenance (O&M) SaaS platform built on Kubernetes, applying DataOps and AIO… | 44 | 2006 | active |
| valeriansaliou/vigil Vigil is a self-hosted, open-source status page written in Rust that monitors distributed infrastructure such as servers, apps, and microse… | 77 | 1950 | active |
| varnish/hitch Hitch is a scalable TLS/SSL termination proxy written in C by Varnish Software. It decrypts TLS connections and forwards unencrypted traffi… | 65 | 1944 | active |
| cloudpanel-io/cloudpanel-ce CloudPanel is a free, open-source server control panel for configuring and managing Linux servers with a focus on simplicity. It lets users… | 78 | 1878 | active |
| superfly/corrosion Corrosion is a Rust-based distributed system that propagates SQLite state across a cluster using gossip (SWIM membership via Foca) and CRDT… | 88 | 1859 | active |
| VaalaCat/frp-panel FRP-Panel is a web-based management dashboard for FRP (Fast Reverse Proxy) that centralizes configuration and monitoring of multiple frp cl… | 71 | 1840 | active |
| roxy-wi/roxy-wi Roxy-WI is a self-hosted web interface for managing HAProxy, Nginx, Apache, and Keepalived servers from a single control plane. It provides… | 96 | 1827 | active |
| beam-cloud/beta9 Beam (beta9) is an open-source serverless runtime for AI workloads, providing GPU inference endpoints, isolated sandboxes for running untru… | 91 | 1827 | active |
| RackulaLives/Rackula Rackula is a self-hostable, drag-and-drop server rack layout designer for planning and visualizing rack deployments. It uses real device im… | 83 | 1744 | active |
| SierraSoftworks/tailscale-unifi A set of shell scripts that install and run Tailscale as a persistent systemd service on UniFi OS devices such as UniFi Cloud Gateways. It … | 95 | 1734 | active |
| intentee/paddler Paddler is an open-source LLM/VLM load balancer and serving platform built around the llama.cpp (ggml) ecosystem, packaged as a single Rust… | 87 | 1679 | active |
| chr0nzz/traefik-manager Traefik Manager is a self-hosted web UI for managing Traefik reverse proxy configurations, covering routes, middlewares, certificates, plug… | 77 | 1630 | active |
| wiredoor/wiredoor Wiredoor is a self-hosted ingress-as-a-service platform that exposes services running in private or local networks to the internet via reve… | 85 | 1622 | active |
| nautobot/nautobot Nautobot is an open-source Network Source of Truth and Network Automation Platform built as a Django web application with PostgreSQL or MyS… | 92 | 1612 | stable |
| ipfs-cluster/ipfs-cluster IPFS Cluster is a distributed application that orchestrates pinsets across a swarm of IPFS daemons, allocating, replicating and tracking a … | 80 | 1562 | active |
| digitalocean/godo Godo is the official Go client library for the DigitalOcean V2 API, covering infrastructure services like Droplets, Kubernetes, and Volumes… | 95 | 1547 | stable |
| firedancer-io/firedancer Firedancer is Jump Crypto's from-scratch Solana validator client written in C, designed for extreme performance and security with a restric… | 95 | 1531 | active |
| enarx/enarx Enarx is an open-source command-line tool and runtime for running applications inside hardware Trusted Execution Environments (TEEs) such a… | 48 | 1429 | active |
| Metarget/metarget Metarget is a Python-based framework that automatically builds vulnerable cloud-native infrastructures, installing vulnerable versions of D… | 61 | 1423 | active |
| stripe/smokescreen Smokescreen is an HTTP CONNECT egress proxy written in Go, developed by Stripe to proxy outbound traffic such as webhooks. It enforces host… | 86 | 1349 | active |
| inetaf/tcpproxy A Go library and CLI (tlsrouter) for building TCP proxies that route connections based on static rules, HTTP/1 Host headers, and TLS SNI se… | 66 | 1301 | stable |
| FreeIPA FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li… | 77 | 1295 | stable |
| crocofied/PortNote PortNote is a self-hosted web application for documenting and tracking which services use which ports across servers and VMs. It provides a… | 27 | 1262 | active |
| distr-sh/distr Distr is an open-source software distribution platform (control plane) for delivering applications to self-hosted, BYOC, on-premises, air-g… | 86 | 1239 | active |
| khairul169/garage-webui A web-based admin UI for Garage, a self-hosted S3-compatible distributed object storage service. It provides cluster health monitoring, lay… | 41 | 1226 | active |
| run-house/kubetorch Kubetorch is a Python library that lets you distribute and run ML workloads (training, inference, data processing) on Kubernetes directly f… | 76 | 1225 | active |
| fog/fog fog is the Ruby cloud services library providing a unified interface to compute, storage, DNS, and other cloud services across many provide… | 23 | 4295 | maintenance |
| paralus/paralus Paralus is an open source, CNCF Sandbox zero-trust Kubernetes access manager that provides controlled, audited access to Kubernetes cluster… | 65 | 1213 | active |
| STRRL/cloudflare-tunnel-ingress-controller A Kubernetes ingress controller that exposes cluster services to the internet via Cloudflare Tunnel. It watches standard Ingress resources … | 89 | 1198 | active |
| i-am-bee/agentstack Agent Stack is open-source infrastructure (hosted by the Linux Foundation) for turning AI agents into running HTTP services, built on the A… | 78 | 1172 | active |
| itsmostafa/aws-agent-skills A collection of curated, LLM-optimized AWS knowledge skills for coding agents like Claude Code and Codex, covering 18 core AWS services inc… | 77 | 1164 | active |
| HariSekhon/Nagios-Plugins A large collection of 450+ Nagios monitoring plugins written primarily in Python, covering big data, cloud, databases, messaging, CI/CD, an… | 58 | 1155 | active |
| nsupdate-info/nsupdate.info nsupdate.info is a free dynamic DNS service and the self-hostable Django/Python software that powers it. It accepts dynamic DNS updates via… | 75 | 1134 | active |
| bolkedebruin/rdpgw An open-source implementation of the Microsoft Remote Desktop Gateway protocol (MS-TSGU) written in Go, allowing official Microsoft RDP cli… | 76 | 1127 | active |
| kernel/kernel-images Kernel is an open-source browser infrastructure platform that provides sandboxed, ready-to-use Chromium browsers as a service for browser a… | 66 | 1103 | active |
| kaito-project/kaito KAITO is a Kubernetes operator suite that automates LLM inference, fine-tuning, and RAG engine deployment using simplified CRD APIs. It aut… | 93 | 1028 | active |
| gophercloud/gophercloud Gophercloud is a Go SDK for the OpenStack cloud platform, providing clients for OpenStack services such as Keystone identity, Compute, and … | 94 | 1014 | stable |
| AthenZ/athenz Athenz is an open source platform for X.509 certificate-based service authentication and fine-grained role-based access control (RBAC) in d… | 100 | 1013 | active |
| flipt-io/reverst Reverst is a load-balanced reverse-tunnel server and Go client library built on QUIC and HTTP/3. It lets services behind restrictive networ… | 47 | 1005 | active |
| OpenShell NVIDIA OpenShell is an open-source runtime for executing autonomous AI agents (Claude Code, Codex, OpenCode, Copilot CLI) inside sandboxed … | 79 | 16462 | experimental |
| microsoft/pai OpenPAI is an open-source AI platform from Microsoft that provides resource scheduling and cluster management for machine learning workload… | 10 | 2700 | maintenance |
| systemd/casync casync is a content-addressable data synchronization tool that combines the rsync algorithm with content-addressable storage. It splits dat… | 39 | 1614 | maintenance |
| tenta-browser/tenta-dns Tenta DNS is a Go-based DNS server suite combining an authoritative DNS server, a recursive resolver with DNSSEC and DNS-over-TLS support, … | 32 | 1601 | maintenance |
| JetBrains/kotless Kotless is a Kotlin serverless framework that generates Terraform deployment code directly from application code, supporting its own DSL as… | 23 | 1169 | maintenance |
| seashell/drago Drago is a flexible configuration manager for WireGuard that provides a unified control plane for building secure network overlays across h… | 23 | 1120 | maintenance |
| sheepdog/sheepdog Sheepdog is a distributed storage system written in C that provides highly available block-level storage volumes for QEMU/KVM virtual machi… | 32 | 1021 | maintenance |
| NebulaiNetwork/OpenCompute Nebulai OpenCompute is a decentralized physical infrastructure (DePIN) computing network that lets workers contribute idle compute power di… | 52 | 2364 | experimental |
| memorysafety/river River is a reverse proxy application written in Rust, built on Cloudflare's Pingora library and developed under ISRG's Prossimo initiative … | 17 | 2353 | experimental |
| hipache/hipache Hipache is a distributed HTTP and WebSocket reverse proxy built on Node.js, originally developed at dotCloud to route high volumes of traff… | 32 | 2295 | abandoned |
← prev page 7 / 7