Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| t-io t-io is a Java network programming framework built on Java AIO that simplifies building high-performance TCP/UDP and WebSocket servers. It … | 32 | 1851 | active |
| Place1/wg-access-server wg-access-server is a single-binary WireGuard VPN server with a built-in web UI for managing and registering devices. It supports user auth… | 32 | 1850 | active |
| h44z/wg-portal WireGuard Portal is a self-hosted, web-based configuration portal for managing WireGuard VPN servers and peers. It is a single Go binary wi… | 93 | 1847 | active |
| GoodCoder666/GoogleTranslate_IPFinder A GUI tool that scans and speed-tests IP addresses of the Google Translate API server (translate.googleapis.com) and can write the best IPs… | 92 | 1847 | active |
| K0p1-Git/cloudflare-ddns-updater A pure Bash script that updates Cloudflare DNS records with your current public IP, acting as a dynamic DNS (DDNS) updater. It is designed … | 40 | 1847 | active |
| freedomofdevelopers/fod A free proxy service (fodev.org:8118) run by an independent non-profit to help Iranian developers bypass software sanctions when accessing … | 32 | 1845 | active |
| sbwml/luci-app-mosdns A LuCI web interface plugin for OpenWrt that manages MosDNS, a plugin-based DNS forwarder. It lets users configure encrypted DNS upstreams … | 96 | 1843 | active |
| Jrohy/multi-v2ray A Python-based management script for deploying and administering multi-user V2Ray/Xray proxy servers on Linux. It provides a wizard-driven … | 23 | 6944 | maintenance |
| jkfran/killport killport is a Rust command-line tool that kills processes and containers listening on specified ports. It supports multiple container runti… | 90 | 1842 | active |
| VaalaCat/frp-panel FRP-Panel is a web-based management dashboard for FRP (Fast Reverse Proxy) that centralizes configuration and monitoring of multiple frp cl… | 71 | 1840 | active |
| bvcyber/CVE-2020-1472 A Python CLI script that tests domain controllers for the ZeroLogon vulnerability (CVE-2020-1472) using the Impacket library. It attempts t… | 41 | 1837 | stable |
| pirxthepilot/wtfis wtfis is a Python command-line tool that performs passive lookups of hostnames, domains, and IP addresses using OSINT services like VirusTo… | 72 | 1836 | active |
| crossxx-labs/free-proxy A repository that publishes free Clash subscription links for SSR, VMess, VLESS, Trojan, and Hysteria2 proxy servers, refreshed every few h… | 73 | 1835 | active |
| MortezaBashsiz/CFScanner A multi-language tool (Bash, Python, Go, Kotlin/Android, Docker) that scans millions of Cloudflare IP addresses to find ones that work with… | 85 | 1829 | active |
| bakito/adguardhome-sync A Go tool that synchronizes AdGuard Home configuration from an origin instance to one or more replica instances. It supports scheduled sync… | 97 | 1827 | active |
| roxy-wi/roxy-wi Roxy-WI is a self-hosted web interface for managing HAProxy, Nginx, Apache, and Keepalived servers from a single control plane. It provides… | 96 | 1827 | active |
| surgioproject/surgio Surgio is a Node.js-based proxy rule generator that produces configuration rules for Surge, Clash, Quantumult X, Loon, Stash, and sing-box.… | 95 | 1826 | active |
| giampaolo/pyftpdlib pyftpdlib is a pure-Python FTP server library providing a high-level, portable interface for writing fast, scalable, asynchronous FTP serve… | 64 | 1824 | stable |
| petronny/gfwlist2pac A tool that automatically converts the gfwlist proxy rules into a PAC (Proxy Auto-Config) file every day. The generated gfwlist.pac is serv… | 75 | 1819 | active |
| antrea-io/antrea Antrea is a Kubernetes-native CNI plugin that provides pod networking and NetworkPolicy enforcement using Open vSwitch as the data plane. I… | 96 | 1813 | stable |
| ntop/nProbe nProbe is a high-performance NetFlow/IPFIX probe and network sensor from ntop that captures traffic and exports flow data for monitoring an… | 74 | 1813 | active |
| rekryt/iplist A self-hosted async PHP service (built on AMPHP) that collects and continuously updates IPv4/IPv6 addresses and CIDR zones for specified do… | 66 | 1813 | active |
| mschwager/fierce Fierce is a Python 3 DNS reconnaissance tool that locates non-contiguous IP space and hostnames for specified domains. It enumerates subdom… | 32 | 1813 | active |
| dreadl0ck/netcap Netcap is a Go framework that converts network packets into structured, type-safe Protocol Buffer audit records for security monitoring, fo… | 98 | 1809 | active |
| google/gopacket GoPacket is a Go library that provides packet decoding and processing capabilities, originally forked from the gopcap project. It enables G… | 34 | 6793 | maintenance |
| lxzan/gws GWS is a high-performance, feature-complete WebSocket server and client library for Go, supporting TCP, KCP, and Unix domain socket transpo… | 91 | 1804 | stable |
| Timmoth/RackPeek RackPeek is a CLI tool and web UI for documenting and managing home lab and small-scale IT infrastructure. It tracks hardware, services, ne… | 81 | 1803 | stable |
| loki-47-6F-64/sunshine Sunshine is a self-hosted Gamestream host server for the Moonlight streaming client, implemented in C++. It captures the screen and streams… | 23 | 1803 | active |
| Lojii/Knot Knot is a full-featured iOS app for capturing and analyzing HTTP/HTTPS network traffic using MITM (man-in-the-middle) techniques, built ent… | 70 | 1801 | active |
| Project Conncept A layer 4 (TCP/UDP) app for Caddy that enables composable handling of raw connections based on connection properties or stream content. It … | 91 | 1799 | active |
| nyakang/nyaterm NyaTerm is a modern desktop remote terminal workspace built with Tauri, React, and Rust. It combines SSH, local shells, Telnet, serial, RDP… | 81 | 1798 | active |
| x011/smtp-tunnel-proxy A Python-based covert tunneling tool that disguises TCP traffic as SMTP email sessions to evade Deep Packet Inspection firewalls. It expose… | 37 | 1795 | active |
| emp3r0r emp3r0r is an open-source post-exploitation framework and command-and-control (C2) system written in Go, targeting Linux and Windows hosts.… | 95 | 1790 | active |
| immortalwrt-mt798x An ImmortalWrt (OpenWrt fork) variant targeting MediaTek MT798x family routers, providing a full embedded Linux firmware build system with … | 55 | 1788 | active |
| DanielLavrushin/b4 B4 (Bye Bye Big Bro) is a Linux service that bypasses Deep Packet Inspection (DPI) censorship by rewriting network packets via fragmentatio… | 81 | 1787 | active |
| GoSecure/pyrdp PyRDP is a Python Remote Desktop Protocol (RDP) Monster-in-the-Middle (MITM) tool and library. It intercepts RDP connections to capture cre… | 56 | 1786 | active |
| ogham/dog dog is a command-line DNS client written in Rust, serving as a modern alternative to dig. It supports DNS-over-TLS and DNS-over-HTTPS, colo… | 23 | 6691 | maintenance |
| jasonwong1991/easy_proxies Easy Proxies is a Go-based proxy pool manager built on sing-box that aggregates many upstream proxy nodes into a single stable, health-chec… | 84 | 1783 | active |
| TimothyYe/godns GoDNS is a self-hosted dynamic DNS (DDNS) client written in Go that automatically updates DNS records when your IP address changes. It supp… | 93 | 1780 | active |
| vnStat vnStat is a console-based network traffic monitor for Linux and BSD that tracks bandwidth usage using kernel interface statistics rather th… | 66 | 1780 | stable |
| simsong/tcpflow tcpflow is a C++ command-line tool that captures TCP connection data and demultiplexes it into per-flow files, one per direction, for proto… | 48 | 1778 | active |
| Allenxuxu/gev gev is a lightweight, high-performance non-blocking TCP network library and WebSocket server for Go, built on the Reactor pattern with epol… | 30 | 1774 | active |
| openelb/openelb OpenELB is an open-source load balancer implementation for exposing Kubernetes LoadBalancer-type Services in bare-metal, edge, and virtuali… | 30 | 1774 | active |
| Septrum101/zteOnu A Go CLI tool that opens factory/telnet mode on ZTE ONU (fiber optic modem) devices via their webFac interface. It authenticates with facto… | 88 | 1767 | active |
| weaveworks/weave Weave Net is a container networking solution that creates a virtual overlay network connecting Docker containers across multiple hosts, clo… | 10 | 6610 | maintenance |
| lwip-tcpip/lwip lwIP is a lightweight, independent implementation of the TCP/IP protocol suite written in C, designed to minimize RAM and ROM usage. It pro… | 74 | 1764 | stable |
| ronf/asyncssh AsyncSSH is a Python library providing asynchronous client and server implementations of the SSHv2 protocol, including SFTP and SCP, built … | 76 | 1760 | stable |
| flik6/Free-Node A repository that aggregates free proxy node information from various public sources and publishes hourly-updated Clash and v2ray subscript… | 74 | 1757 | active |
| ryfineZ/carrier-ims-for-pixel TurboIMS is a multilingual (Chinese/English) Android app for Google Pixel devices that lets users tune carrier IMS features like VoLTE, VoW… | 70 | 1753 | active |
| wiire-a/pixiewps Pixiewps is a C command-line utility that brute-forces Wi-Fi Protected Setup (WPS) PINs offline, exploiting low- or non-entropy software im… | 54 | 1750 | active |
| kanyun-inc/YTKNetwork YTKNetwork is a high-level network request utility for iOS built on top of AFNetworking, using the Command Pattern where each request is a … | 23 | 6532 | maintenance |
| ImMALWARE/bash-warp-generator A shell script that generates Cloudflare WARP VPN configuration files for AmneziaWG (WireGuard-based) and Clash (MASQUE-based) clients. It … | 66 | 1747 | active |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 76 | 1745 | active |
| RackulaLives/Rackula Rackula is a self-hostable, drag-and-drop server rack layout designer for planning and visualizing rack deployments. It uses real device im… | 83 | 1744 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 99 | 1738 | active |
| envoyproxy/go-control-plane A Go library implementing the Envoy xDS discovery service APIs (data-plane-api) as a gRPC API server with an in-memory configuration cache.… | 100 | 1735 | active |
| SierraSoftworks/tailscale-unifi A set of shell scripts that install and run Tailscale as a persistent systemd service on UniFi OS devices such as UniFi Cloud Gateways. It … | 95 | 1734 | active |
| Whitelist Bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 81 | 1731 | active |
| SpigotMC/BungeeCord BungeeCord is a layer 7 proxy server that links multiple Minecraft servers together, teleporting players between them while maintaining con… | 75 | 1731 | stable |
| endel/NativeWebSocket NativeWebSocket is a dependency-free WebSocket client library for .NET that works in Unity, MonoGame, Godot (C#), and any other .NET projec… | 91 | 1728 | active |
| Shadow Simulator Shadow is a discrete-event network simulator that directly executes real, unmodified application code as native Linux processes, interposin… | 68 | 1727 | active |
| davrodpin/mole Mole is a Go-based CLI application for creating SSH tunnels with a focus on resiliency and user experience. It supports automatic port sele… | 23 | 1727 | stable |
| zalexdev/strykerapp StrykerOSS is a free, open-source mobile penetration testing suite for rooted Android devices that bundles network, wireless, and web secur… | 98 | 1726 | active |
| P2P Media Loader P2P Media Loader is an open-source JavaScript/TypeScript library that enables peer-to-peer delivery of live and on-demand HLS and MPEG-DASH… | 95 | 1724 | active |
| apache/guacamole-client Apache Guacamole client is the Maven-based superproject containing the HTML5 web application, official authentication extensions, and JavaS… | 76 | 1723 | active |
| lede-project/source The LEDE Project source tree, a fork that later reunified with OpenWrt, providing a Linux operating system build system for embedded device… | 77 | 1716 | active |
| openucx/ucx Unified Communication X (UCX) is a production-grade, open-source communication framework for high-bandwidth, low-latency networks. It expos… | 90 | 1715 | stable |
| fonoster/routr Routr is a lightweight, programmable SIP proxy, location server, and registrar for building scalable VoIP infrastructure. It is cloud-nativ… | 90 | 1714 | active |
| almeidapaulopt/tsdproxy TSDProxy is a self-hosted service that automatically exposes Docker containers on a Tailscale network via a single reverse proxy. Container… | 89 | 1710 | active |
| xeefei/X-Panel X-Panel is a self-hosted web panel built on Xray Core for managing multi-protocol, multi-user proxy servers (VLESS, XTLS, Reality, XHTTP, V… | 88 | 1704 | active |
| inverse-inc/packetfence PacketFence is a free and open source network access control (NAC) solution with a captive portal for registration and remediation, 802.1X … | 86 | 1704 | stable |
| FastTunnel/FastTunnel FastTunnel is a high-performance, cross-platform intranet penetration (NAT traversal) tool written in C#/.NET that exposes local network se… | 89 | 1703 | active |
| duanhf2012/origin Origin is a distributed game server engine written in Go, organized around three core abstractions: Node, Service, and Module. It provides … | 80 | 1702 | active |
| ZeroDeng01/sublinkPro SublinkPro is a self-hosted proxy subscription management and conversion platform built with a Go backend and React web UI. It provides sma… | 81 | 1697 | active |
| nanomsg/nanomsg nanomsg is a C library implementing lightweight 'scalability protocols' for common messaging patterns such as request/reply, publish/subscr… | 90 | 6297 | maintenance |
| ellermister/mtproxy A one-click shell script and Docker image for installing MTProxy (MTProto proxy) with Fake TLS disguise for Telegram clients. It fronts MTP… | 70 | 1692 | active |
| mathiasbynens/punycode.js Punycode.js is a robust JavaScript library for converting between Punycode (ASCII) and Unicode strings, fully compliant with RFC 3492 and R… | 23 | 1691 | stable |
| rwbutler/Connectivity Connectivity is a Swift library that wraps Apple's Reachability to provide a reliable measure of actual Internet connectivity on iOS. It so… | 23 | 1687 | stable |
| alebeck/boring boring is a lightweight command-line SSH tunnel manager written in Go. It manages local, remote, and dynamic (SOCKS5) port forwarding tunne… | 89 | 1682 | active |
| palark/ovpn-admin A self-hosted web UI for managing OpenVPN users, certificates, and client routes on Linux servers. It is written in Go with a Vue.js fronte… | 76 | 1682 | active |
| NoDPI NoDPI is a Python utility that bypasses Deep Packet Inspection (DPI) censorship by running a local proxy server that fragments TLS ClientHe… | 78 | 1679 | active |
| FOGProject/fogproject FOG is a free open-source computer cloning, imaging, and management system that deploys and manages Windows, macOS, and Linux machines over… | 99 | 1678 | active |
| lissy93/AdGuardian-Term AdGuardian-Term is a terminal-based (TUI) tool written in Rust that provides real-time monitoring and statistics for an AdGuard Home instan… | 88 | 1677 | active |
| dirkjanm/krbrelayx A Python toolkit for abusing Kerberos in Active Directory environments, including Kerberos relaying and unconstrained delegation attacks. I… | 61 | 1676 | active |
| Asuswrt-Merlin Asuswrt-Merlin is an enhanced third-party firmware for Asus routers, based on Asus's stock Asuswrt firmware, focusing on bug fixes, tweaks,… | 75 | 6207 | maintenance |
| NettyGameServer A distributed mobile game server framework built on Netty 4.x in Java, supporting TCP, UDP, HTTP, and WebSocket connections with a custom p… | 54 | 1672 | active |
| Lozy/danted A shell script that automates installing and configuring the Dante SOCKS5 proxy server on Linux systems, with Docker support. It auto-detec… | 32 | 1672 | active |
| charmbracelet/wishlist Wishlist is a Go CLI and SSH server that acts as a directory of SSH endpoints, listing and connecting to hosts from ~/.ssh/config or a YAML… | 66 | 1669 | active |
| facebook/mvfst MVFST (move fast) is a C++ client and server implementation of the IETF QUIC transport protocol developed by Facebook. It provides a perfor… | 77 | 1667 | active |
| pkg/sftp A Go library providing SFTP client and server support on top of go.crypto/ssh. It enables file system operations on remote SSH servers and … | 80 | 1663 | stable |
| summitt/Nope-Proxy NoPE Proxy is a Burp Suite extension that adds TCP and UDP traffic interception, a configurable DNS server, and a non-HTTP man-in-the-middl… | 23 | 1660 | active |
| WangYihang/Platypus Platypus is a cross-platform reverse-shell and host management hub written in Go. Agents on managed machines dial back to a central server … | 68 | 1659 | active |
| sn4k3/NetSonar NetSonar is a cross-platform network diagnostics and monitoring application written in C#. It probes hosts and services over many protocols… | 88 | 1658 | active |
| jacklul/pihole-updatelists A PHP CLI script that automatically keeps Pi-hole's ad-blocking lists in sync with remote sources. It manages list additions and removals w… | 68 | 1656 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6122 | maintenance |
| x-falcon/Virtual-Hosts An Android app that lets users customize the hosts file on their device without root access by implementing a local VPN service. It support… | 46 | 1655 | active |
| chronoxor/CppServer CppServer is an ultra-fast, low-latency asynchronous socket server and client C++ library supporting TCP, SSL, UDP, HTTP, HTTPS, and WebSoc… | 81 | 1652 | stable |
| AltraMayor/gatekeeper Gatekeeper is the first open-source DDoS protection system, built on DPDK for high-performance packet processing. It uses a geographically … | 66 | 1649 | active |
| lovelaze/nebula-sync nebula-sync is a Go-based tool that synchronizes configuration across multiple Pi-hole v6.x instances, using a primary/replica model. It su… | 91 | 1647 | active |
| MayersScott/rkn-block-checker A Python CLI tool that diagnoses whether your connection is in an RKN/TSPU-blocked zone and classifies the type of block (DNS poisoning, TC… | 79 | 1646 | active |