Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| clash-verge-rev/clash-verge-rev Clash Verge Rev is a cross-platform desktop GUI client for the Clash Meta (mihomo) proxy core, built with Tauri 2 and Rust. It manages prox… | 94 | 150420 | active |
| v2rayN v2rayN is a free, open-source GUI proxy client for Windows, Linux, and macOS built in C#. It manages multiple proxy cores including Xray, s… | 98 | 117675 | stable |
| fatedier/frp frp is a fast reverse proxy written in Go that lets you expose services running behind NAT or firewalls to the public internet. It supports… | 92 | 109887 | active |
| Caddy Caddy is a fast, extensible HTTP/1‑2‑3 web server written in Go that provides automatic HTTPS by default. It can serve static sites, act as… | 94 | 77555 | active |
| Pi-hole Pi-hole is an open‑source DNS sinkhole that blocks advertising and tracking domains for every device on a network. It runs on modest Linux … | 93 | 61062 | active |
| chen08209/FlClash FlClash is a multi-platform proxy client built on ClashMeta with a Flutter-based Material You interface. It supports subscription links, mu… | 95 | 55006 | active |
| bannedbook/fanqiang Fanqiang is a comprehensive repository of proxy tools, tutorials, and configuration scripts for bypassing internet censorship. It provides … | 65 | 53980 | active |
| MHSanaei/3x-ui 3x-ui is an open‑source web control panel for managing Xray‑core proxy servers. It provides a graphical dashboard and REST API to configure… | 98 | 47834 | active |
| V2Ray V2Ray (Project V) is a network proxy platform written in Go for building proxies to bypass network restrictions and censorship. It supports… | 64 | 46932 | active |
| copyparty Copyparty is a portable, Python‑based file server that supports resumable uploads, deduplication, and a wide range of protocols. It provide… | 94 | 46908 | active |
| mitmproxy/mitmproxy mitmproxy is an interactive, SSL/TLS-capable intercepting proxy for HTTP/1, HTTP/2, HTTP/3, and WebSockets, offered as a console tool (mitm… | 89 | 45113 | stable |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 100 | 44768 | active |
| curl Docker images curl is a command-line tool and libcurl is a C library for transferring data to or from servers using URL syntax, supporting dozens of prot… | 95 | 43152 | stable |
| aria2/aria2 aria2 is a lightweight, cross-platform command-line download utility supporting HTTP/HTTPS, FTP, SFTP, BitTorrent, and Metalink with multi-… | 59 | 42970 | stable |
| Xray Xray-core is a high-performance, modular proxy platform written in Go. It supports multiple protocols (VLESS, VMess, Shadowsocks, Trojan, e… | 89 | 42060 | active |
| GyulyVGC/sniffnet Sniffnet is a free, open-source cross-platform GUI application for monitoring and analyzing network traffic, written in Rust. It lets users… | 87 | 41559 | active |
| schollz/croc croc is a command‑line utility for fast, simple, and secure file transfers between computers. It uses peer‑to‑peer connections with optiona… | 97 | 40458 | active |
| Istio Service Mesh Istio is an open-source service mesh that provides a uniform way to connect, secure, control, and observe microservices. It runs as a contr… | 95 | 38442 | active |
| SagerNet/sing-box sing-box is a universal proxy platform that supports a wide range of proxy protocols and can run as a service or CLI tool. It is written in… | 93 | 38331 | active |
| AdguardTeam/AdGuardHome AdGuard Home is a free, open‑source DNS server that blocks ads, trackers, and malicious domains across an entire network. It supports moder… | 96 | 37244 | active |
| Tailscale Tailscale is an open‑source zero‑trust networking platform built on WireGuard that provides secure, identity‑based connectivity across devi… | 98 | 37016 | active |
| Netty Netty is an asynchronous event‑driven network application framework written in Java. It provides a flexible, high‑performance foundation fo… | 96 | 35065 | active |
| Netty Netty is an asynchronous event-driven network application framework for the JVM, enabling rapid development of high-performance protocol se… | 96 | 35065 | stable |
| Flowseal/zapret-discord-youtube A Windows batchfile-based utility bundling bol-van's zapret and WinDivert to bypass DPI-based blocking and throttling of Discord and YouTub… | 88 | 34724 | active |
| V2Ray V2Ray (Project V) is a Go-based network proxy platform for building tunnels that bypass network restrictions and protect privacy. It suppor… | 95 | 34662 | active |
| MetaCubeX/mihomo MetaCubeX/mihomo (formerly Clash.Meta) is a cross-platform rule-based proxy core written in Go that supports multiple proxy protocols and f… | 96 | 34391 | active |
| NginxProxyManager/nginx-proxy-manager Nginx Proxy Manager is a Docker-based application that provides a web UI for managing Nginx reverse proxy hosts, redirections, streams, and… | 91 | 34206 | active |
| Shadowsocks Shadowsocks for Windows is a C# implementation of the Shadowsocks proxy client. It provides system proxy configuration, PAC mode, and suppo… | 23 | 33535 | active |
| XX-net/XX-Net XX-Net is an open-source proxy tool designed to bypass the Great Firewall (GFW) of China by disguising traffic as ordinary web traffic. It … | 86 | 33450 | active |
| tokio-rs/tokio Tokio is an event-driven, non-blocking I/O runtime for writing asynchronous applications in Rust. It provides a multithreaded work-stealing… | 94 | 33290 | stable |
| Certbot Certbot is a command‑line tool that automates the acquisition and renewal of TLS certificates from Let’s Encrypt and any ACME‑compatible ce… | 93 | 33262 | active |
| Hiddify Hiddify is an open-source, ad-free multi-platform proxy/VPN client built on the Sing-box toolchain, supporting protocols like VLESS, VMess,… | 85 | 33224 | active |
| NGINX NGINX is a high‑performance open‑source web server that also acts as a reverse proxy, load balancer, and content cache. It supports HTTP, H… | 96 | 31710 | active |
| coolsnowwolf/lede Lean's LEDE repository provides source code and build system for creating custom OpenWrt firmware. It supports a variety of hardware platfo… | 68 | 31591 | active |
| WebTorrent WebTorrent is a streaming BitTorrent client written entirely in JavaScript that runs in Node.js (using TCP/UDP) and in the browser (using W… | 94 | 31424 | active |
| StevenBlack/hosts StevenBlack/hosts is a curated collection of unified hosts files that block ads, trackers, malware, and other unwanted domains. It provides… | 93 | 31123 | active |
| openssl/openssl OpenSSL is a robust, commercial‑grade cryptographic toolkit written in C. It provides a full‑featured implementation of TLS/SSL, DTLS, QUIC… | 99 | 30985 | active |
| Algo VPN Algo is a collection of Ansible scripts that automate the deployment of a personal VPN server in the cloud. It supports modern protocols li… | 73 | 30406 | active |
| Consul Consul is a distributed service networking platform that provides service discovery, health checking, and a service mesh. It offers a contr… | 94 | 30087 | active |
| Consul HashiCorp Consul is a distributed, highly available service networking solution providing service discovery, health checking, service mesh … | 94 | 30087 | stable |
| 521xueweihan/GitHub520 GitHub520 is a lightweight Python-based utility that provides ready-to-use hosts entries to speed up GitHub access and fix broken images. I… | 77 | 30003 | active |
| 233boy/v2ray A one-click V2Ray installation and management shell script for Linux servers. It automates installing the V2Ray core, configuring protocols… | 57 | 29693 | active |
| NetBird NetBird is an open‑source zero‑trust networking platform that creates a WireGuard‑based overlay network for secure private connectivity. It… | 92 | 29443 | active |
| NetBird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 92 | 29443 | active |
| XIU2/CloudflareSpeedTest CloudflareSpeedTest is a command‑line utility written in Go that measures latency and download speed of Cloudflare (and other) CDN IPs. It … | 89 | 29257 | active |
| Envoy Envoy is an open‑source, high‑performance edge and service proxy written in C++. It provides dynamic routing, load‑balancing, TLS terminati… | 95 | 29082 | active |
| Envoy Envoy is a CNCF-hosted, high-performance C++ edge, middle, and service proxy designed for cloud-native and AI-native applications. It provi… | 95 | 29082 | stable |
| OpenWrt OpenWrt is a Linux-based operating system for embedded devices, primarily routers. It provides a writable filesystem, package manager, and … | 95 | 28793 | active |
| hwdsl2/setup-ipsec-vpn A shell script that fully automates the installation and configuration of an IPsec/L2TP/IKEv2 VPN server on supported Linux distributions. … | 76 | 28740 | active |
| ValdikSS/GoodbyeDPI GoodbyeDPI is a Windows command-line utility that bypasses Deep Packet Inspection (DPI) systems used by ISPs to block websites. It manipula… | 48 | 28689 | active |
| vernesong/OpenClash OpenClash is a LuCI plugin that runs the Mihomo (Clash) proxy client on OpenWrt routers. It supports protocols like Shadowsocks, VMess, Tro… | 95 | 27664 | active |
| cloudflare/pingora Pingora is a Rust framework from Cloudflare for building fast, reliable, and programmable network services such as HTTP proxies and load ba… | 85 | 27603 | stable |
| libuv/libuv libuv is a cross-platform C library providing asynchronous I/O via a full-featured event loop backed by epoll, kqueue, IOCP, and event port… | 90 | 27272 | stable |
| oldj/SwitchHosts SwitchHosts is a free, open-source desktop application for managing and quickly switching between hosts file configurations. Built with Tau… | 91 | 27212 | active |
| BeyondDimension/SteamTools Watt Toolkit (formerly Steam++) is an open-source, cross-platform multi-purpose Steam toolbox written in C#/.NET. It provides utilities for… | 81 | 27080 | active |
| wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad… | 95 | 27046 | active |
| mihomo-party-org/clash-party Clash Party is an Electron-based cross-platform desktop GUI for the Mihomo (Clash Meta) proxy core. It offers subscription management, conf… | 91 | 26873 | active |
| robertdavidgraham/masscan Masscan is an Internet-scale TCP port scanner written in C that transmits 10 million SYN packets per second, capable of scanning the entire… | 54 | 26042 | active |
| Cilium Cilium is an open-source networking, security, and observability solution for Kubernetes and container workloads built on an eBPF-based dat… | 94 | 25622 | stable |
| dev-sidecar DevSidecar is an Electron‑based desktop application that acts as a local proxy to accelerate access to GitHub, Stack Overflow, npm and othe… | 94 | 24442 | active |
| dev-sidecar Dev-sidecar is an Electron desktop proxy tool that accelerates access to GitHub, Stack Overflow, and npm for developers in China by interce… | 94 | 24442 | active |
| Pangolin Pangolin is an open‑source SASE platform that unifies a WireGuard‑based VPN, zero‑trust reverse proxy, privileged access management, and an… | 85 | 23082 | active |
| Pangolin Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilit… | 85 | 23082 | active |
| ws ws is a fast, thoroughly tested WebSocket client and server library for Node.js implementing RFC 6455. It passes the extensive Autobahn tes… | 97 | 22806 | stable |
| MatsuriDayo/NekoBoxForAndroid NekoBox for Android is a universal proxy toolchain app for Android built on the sing-box core. It supports a wide range of proxy protocols … | 62 | 22802 | active |
| SafeLine SafeLine is a self‑hosted Web Application Firewall and reverse‑proxy written in Go. It protects web services by filtering malicious HTTP tr… | 96 | 22725 | active |
| HyNetworks/hysteria Hysteria is an open‑source proxy solution built on a custom QUIC implementation. It provides SOCKS5, HTTP, TCP/UDP forwarding and TUN/TProx… | 99 | 22671 | active |
| mack-a/v2ray-agent v2ray-agent is a shell-based one‑click script that installs and configures multiple proxy cores (Xray, sing‑box, etc.) with support for man… | 100 | 22135 | active |
| netbox-community/netbox NetBox is an open‑source web application that serves as a source of truth for network and data‑center infrastructure. It provides a rich da… | 95 | 21724 | active |
| hwanz/SSR-V2ray-Trojan A community‑maintained repository that curates and continuously updates recommendations for VPN/proxy services (often called "airports") su… | 72 | 20788 | active |
| Nyr/openvpn-install A Bash script that automates the installation and configuration of an OpenVPN server on popular Linux distributions. It provides an interac… | 75 | 20642 | active |
| GoogleHosts GoogleHosts is an open-source project that automatically generates hosts files for ad‑blocking and domain filtering. It provides a CLI to d… | 32 | 20558 | active |
| bee-san/RustScan RustScan is a modern, fast port scanner written in Rust. It can scan all 65k ports in seconds and pipe results to Nmap or custom scripts. | 67 | 20516 | active |
| yanue/V2rayU V2rayU is a native macOS client built with Swift that leverages the V2Ray core for proxying network traffic. It supports multiple protocols… | 86 | 20156 | active |
| bettercap Bettercap is a powerful, extensible framework and command‑line tool written in Go for network reconnaissance and man‑in‑the‑middle attacks.… | 82 | 20111 | active |
| bettercap bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, w… | 82 | 20111 | active |
| lionsoul2014/ip2region ip2region is an offline IP-to-region localization library and IP data management framework supporting both IPv4 and IPv6 with city-level re… | 98 | 19713 | stable |
| µWebSockets µWebSockets is a C/C++ web server library providing highly optimized HTTP and WebSocket handling with a built-in URL router and pub/sub fea… | 92 | 18993 | stable |
| Swoole Swoole is a PHP extension that provides an event‑driven networking engine and coroutine runtime. It enables building high‑performance, conc… | 98 | 18917 | active |
| Swoole Swoole is an event-driven, asynchronous, coroutine-based concurrency library implemented as a PHP extension in C++. It enables PHP to run h… | 98 | 18917 | active |
| slackhq/nebula Nebula is a scalable overlay networking tool (mesh VPN) built on the Noise Protocol Framework, using certificates and security groups for m… | 93 | 18399 | stable |
| ginuerzh/gost GOST (GO Simple Tunnel) is a Go-based tunneling and proxy tool supporting HTTP/HTTPS/HTTP2/SOCKS4/SOCKS5/Shadowsocks protocols plus QUIC, K… | 64 | 18244 | active |
| netchx/netch Netch is a Windows GUI proxy client supporting protocols like Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, WireGuard, and SOCKS5. It of… | 65 | 17693 | active |
| apache/brpc Apache bRPC ("better RPC") is an industrial-grade C++ RPC framework for building reliable, high-performance services and clients. It suppor… | 93 | 17621 | stable |
| jeessy2/ddns-go DDNS-GO is a self-hosted dynamic DNS (DDNS) tool written in Go that automatically detects your public IPv4/IPv6 address and updates DNS rec… | 97 | 17430 | active |
| ZeroTier ZeroTier is a software-defined networking tool that creates secure virtual Ethernet networks spanning devices, VMs, containers, and clouds … | 78 | 17152 | stable |
| goproxy GoProxy is a high-performance, cross-platform proxy server written in Go supporting HTTP(S), SOCKS5, SS, WebSocket, TCP, UDP, and DNS proxy… | 88 | 17142 | active |
| tindy2013/subconverter subconverter is a C++ utility and HTTP service that converts proxy subscription links between formats such as Clash, Surge, Quantumult X, S… | 60 | 17084 | active |
| skywind3000/kcp KCP is a fast and reliable ARQ (Automatic Repeat reQuest) protocol implemented as a pure algorithm in C, consisting of just two source file… | 83 | 16920 | stable |
| stascorp/rdpwrap RDP Wrapper Library is a Windows system library that enables Remote Desktop Host support and concurrent RDP sessions on editions that ship … | 23 | 16884 | stable |
| Pion WebRTC Pion WebRTC is a pure Go implementation of the WebRTC API, enabling real-time audio, video, and data communication without cgo or external … | 97 | 16804 | active |
| MatrixTM/MHDDoS MHDDoS is a Python 3 command-line DDoS attack script offering 57 flood methods across Layer 7 (HTTP) and Layer 4 (TCP/UDP), including bypas… | 86 | 16730 | active |
| jpillora/chisel Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH, shipped as a single Go executable containing both client and ser… | 93 | 16662 | active |
| yonggekkk/Cloudflare-vless-trojan A set of Cloudflare Workers/Pages proxy scripts supporting Vless-ws(tls) and Trojan-ws(tls) nodes, plus a local Socks5/HTTP proxy script wi… | 62 | 16415 | active |
| fortra/impacket Impacket is a collection of Python classes for low-level programmatic access to network protocols, including full implementations of SMB1-3… | 79 | 16168 | active |
| angristan/openvpn-install A Bash script that installs and manages a self-hosted OpenVPN VPN server on many Linux distributions. It handles client certificate generat… | 76 | 16155 | active |
| byJoey/cfnew A Cloudflare Workers application that deploys VLESS/Trojan/xhttp proxy nodes with optimized IP selection, generating subscription configs f… | 84 | 16114 | active |
| cloudflare/cloudflared cloudflared is the command-line client and daemon for Cloudflare Tunnel, which creates outbound-only connections from your origin servers t… | 98 | 16080 | stable |
| Whistle Whistle is a cross-platform, Node.js-based network debugging and packet-capture proxy supporting HTTP, HTTPS, HTTP/2, WebSocket, and TCP tr… | 76 | 15720 | active |
| v2rayA v2rayA is a web GUI client for Project V (V2Ray/Xray) that supports VMess, VLESS, Shadowsocks, ShadowsocksR, Trojan, Tuic, and Juicity prot… | 98 | 15656 | stable |
page 1 / 22 next →