Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| sta/websocket-sharp websocket-sharp is a C# library implementing the WebSocket protocol (RFC 6455) for both client and server, with support for per-message com… | 74 | 6077 | maintenance |
| ViaVersion/ViaVersion ViaVersion is a Minecraft server plugin that allows newer client versions to connect to older server versions by translating protocol diffe… | 97 | 1637 | stable |
| ghostop14/sparrow-wifi Sparrow-WiFi is a Python 3 GUI-based WiFi and Bluetooth analyzer for Linux that combines 2.4/5 GHz scanning, BLE/Classic discovery, SDR spe… | 76 | 1635 | active |
| monkeyWie/proxyee Proxyee is a Java library built on Netty that implements an HTTP proxy server supporting HTTP, HTTPS, and WebSocket protocols. It provides … | 26 | 1635 | active |
| chr0nzz/traefik-manager Traefik Manager is a self-hosted web UI for managing Traefik reverse proxy configurations, covering routes, middlewares, certificates, plug… | 77 | 1630 | active |
| WireGuard/wireguard-android The official Android GUI application for WireGuard, a fast and modern VPN. It opportunistically uses the in-kernel WireGuard implementation… | 69 | 1628 | stable |
| eooce/Gla-deploy A JavaScript-based tool for deploying proxy server configurations to free cloud/PaaS platforms, enabling personal censorship circumvention.… | 39 | 1625 | active |
| Nornir Nornir is a pure Python automation framework for operating collections of network devices, providing pluggable inventory management and mul… | 82 | 1624 | active |
| wiredoor/wiredoor Wiredoor is a self-hosted ingress-as-a-service platform that exposes services running in private or local networks to the internet via reve… | 85 | 1622 | active |
| jselbie/stunserver STUNTMAN is an open source STUN server and client implementation in C++, compliant with RFCs 5389, 5769, and 5780 with backwards compatibil… | 65 | 1616 | stable |
| quantumsheep/sshs sshs is a terminal user interface (TUI) for SSH that reads ~/.ssh/config to list and connect to configured hosts. It is written in Rust and… | 94 | 1614 | active |
| fofapro/fapro FaPro is a free, cross-platform, single-file mass network protocol server simulator written in Python. It can start or stop many fake netwo… | 23 | 1614 | active |
| miniupnp/miniupnp MiniUPnP is a lightweight ANSI C implementation of the UPnP Internet Gateway Device (IGD) specifications, comprising a client library (mini… | 96 | 1612 | stable |
| nautobot/nautobot Nautobot is an open-source Network Source of Truth and Network Automation Platform built as a Django web application with PostgreSQL or MyS… | 92 | 1612 | stable |
| xtaci/smux Smux is a stream multiplexing library for Go that runs many logical streams over a single reliable connection such as TCP or KCP. It minimi… | 63 | 1607 | stable |
| FireHOL FireHOL is a Linux firewall management tool built on iptables/ipsets, paired with a repository of IP blocklists dynamically updated via the… | 52 | 1604 | active |
| larryli/PuTTY A Chinese-localized fork of PuTTY, the free Telnet/SSH client and xterm terminal emulator for Win32 and Unix. It tracks upstream PuTTY rele… | 85 | 1601 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 50 | 1599 | active |
| libssh2/libssh2 libssh2 is a client-side C library implementing the SSH2 protocol, licensed under the revised BSD license. It provides session establishmen… | 68 | 1596 | stable |
| EmbarkStudios/quilkin Quilkin is a non-transparent UDP proxy built in Rust for large-scale multiplayer dedicated game server deployments. It adds security, acces… | 92 | 1594 | active |
| StamusNetworks/Clear-NDR-ISO Clear NDR Community (formerly SELKS) is a Debian-based Linux distribution for network detection and response built around Suricata, OpenSea… | 38 | 1592 | active |
| FDio/vpp FD.io's Vector Packet Processing (VPP) is an extensible, high-performance packet-processing framework providing production-quality switch a… | 77 | 1587 | stable |
| nzymeorg/nzyme Nzyme is an open-source intrusion detection system that monitors WiFi, Bluetooth, and Ethernet networks for threats such as rogue access po… | 79 | 1586 | active |
| lmc999/auto-add-routes A set of Windows batch scripts and route tables that add China IP/domain split routing to full-tunnel VPN clients like WireGuard and OpenVP… | 76 | 1583 | active |
| Waujito/youtubeUnblock A C-based tool that bypasses YouTube's SNI-based detection systems, originally created to work around YouTube throttling in Russia. It runs… | 74 | 1582 | active |
| ZhiXuanWang/cf-speed-dns A Python tool that dynamically discovers the fastest Cloudflare CDN IPs by running CloudflareSpeedTest on a schedule (every 5 minutes via G… | 72 | 1582 | active |
| homeassistant-apps/app-cloudflared A Home Assistant add-on that runs Cloudflared to create a secure Cloudflare Tunnel to your Home Assistant instance. It enables remote acces… | 98 | 1578 | active |
| hakluke/hakrevdns hakrevdns is a small, fast Go CLI tool that performs reverse DNS (PTR) lookups on large batches of IP addresses. It maps IPs to hostnames, … | 71 | 1577 | stable |
| lqqyt2423/go-mitmproxy A Golang implementation of mitmproxy that intercepts, parses, monitors, and tampers with HTTP/HTTPS traffic via a man-in-the-middle proxy. … | 95 | 1576 | active |
| aleskxyz/reality-ezpz A single-command bash installer that deploys sing-box or xray proxy servers (vless, TUIC, hysteria2, shadowtls) with reality or TLS encrypt… | 54 | 1573 | active |
| moq-dev/moq An open-source implementation of Media over QUIC (MoQ), a next-generation live media protocol delivering WebRTC-like real-time latency at m… | 95 | 1572 | active |
| hcavarsan/kftray kftray is a cross-platform Kubernetes port-forward manager with a desktop tray GUI (Tauri) and a companion terminal UI (kftui), built in Ru… | 91 | 1571 | active |
| anderspitman/SirTunnel SirTunnel is a minimal, self-hosted, zero-configuration alternative to ngrok built on Caddy, OpenSSH, and a 50-line Python script. It expos… | 32 | 1571 | stable |
| Leon406/SubCrawler A Kotlin-based tool that automatically crawls and health-checks (via Google ping) free public proxy nodes for protocols like V2Ray, Shadows… | 77 | 1570 | active |
| wikiZ/RedGuard RedGuard is a C2 front flow control tool written in Go that acts as a filtering reverse proxy in front of command-and-control servers. It h… | 23 | 1569 | active |
| zhanghanyun/backtrace A Go-based command-line tool that tests return (backhaul) routing paths across China's three major ISPs (China Telecom, China Unicom, China… | 30 | 1568 | active |
| SagerNet/SagerNet SagerNet is a universal proxy toolchain application for Android, written in Kotlin, supporting multiple proxy protocols for circumventing i… | 10 | 5733 | maintenance |
| MikeWang000000/FakeHTTP FakeHTTP is a Linux command-line tool that obfuscates TCP connections by disguising them as HTTP traffic using Netfilter Queue (NFQUEUE). I… | 31 | 1563 | active |
| system-linux/FazJammer FazJammer is an ESP8266-based firmware project that turns a NodeMCU plus an NRF24L01+ radio module into a device that jams Wi-Fi, BLE, and … | 39 | 1562 | active |
| ThisSeanZhang/landscape Landscape is a Linux router application built in Rust with eBPF that routes traffic by domain rather than just IP. It uses a userspace DNS … | 87 | 1561 | active |
| sharmajv/vpn A completely free Android VPN client (小三VPN / 3VPN) that requires no registration, has no speed or traffic limits, and shows no ads. It sup… | 32 | 5709 | maintenance |
| v-byte-cpu/sx sx is a fast, UNIX-philosophy command-line network scanner written in Go that supports ARP/NDP host discovery, ICMP, TCP SYN/FIN/NULL/Xmas,… | 77 | 1559 | active |
| arloor/iptablesUtils A shell script that sets up iptables port forwarding rules on Linux servers, with automatic rule updates when a DDNS domain's resolved IP c… | 42 | 1558 | stable |
| kffl/speedbump Speedbump is a TCP proxy written in Go that simulates variable, predictable network latency using configurable sine and sawtooth wave summa… | 23 | 1557 | active |
| Avahi Avahi is a free LGPL implementation of mDNS/DNS-SD (Zeroconf) service discovery for Linux, compatible with Apple Bonjour. It provides a dae… | 68 | 1556 | stable |
| creazyboyone/FastGithub FastGithub is a local proxy tool that accelerates access to GitHub by resolving clean IPs, speed-testing them, and proxying HTTPS traffic t… | 29 | 1556 | active |
| hyperium/h2 H2 is a Tokio-based HTTP/2 client and server implementation for Rust that implements the full HTTP/2 specification. It serves as the low-le… | 94 | 1555 | stable |
| google/seesaw Seesaw v2 is a Linux Virtual Server (LVS) based load balancing platform written in Go. It supports advanced features like anycast, Direct S… | 70 | 5675 | maintenance |
| ymyuuu/Cloudflare-Workers-Proxy A Cloudflare Workers script that acts as a simple reverse proxy, forwarding client requests to a target URL and returning the response. It … | 46 | 1551 | active |
| azimjohn/jprq JPRQ is a free, open-source tunneling tool written in Go that exposes local servers to the public internet via HTTP or TCP tunnels, with cu… | 73 | 1549 | active |
| txthinking/zoro zoro is a Go CLI tool that exposes local TCP/UDP servers to the external network through a remote relay server, with zero-configuration set… | 52 | 1547 | active |
| wfb-ng WFB-NG is a long-range packet radio link that transmits video, MAVLink telemetry, and IP traffic over raw (unconnected) WiFi frames, bypass… | 82 | 1546 | active |
| ProxiFyre ProxiFyre is a Windows SOCKS5 proxifier that transparently routes TCP and UDP traffic of selected applications through SOCKS5 proxies using… | 93 | 1544 | active |
| adyanth/openwrt-tailscale-enabler A shell-based package that installs Tailscale on low-powered OpenWRT routers by downloading static binaries to /tmp and providing an init.d… | 71 | 1544 | active |
| wikihost-opensource/als ALS (Another Looking-glass Server) is a self-hosted looking-glass server that lets users run network diagnostics like ping, traceroute, and… | 23 | 1542 | active |
| Licoy/fetch-github-hosts A cross-platform tool that synchronizes GitHub-related DNS entries into the system hosts file to speed up or fix GitHub access. It ships as… | 93 | 1537 | active |
| contiki-ng/contiki-ng Contiki-NG is an open-source, cross-platform operating system for next-generation IoT devices, forked from the original Contiki OS. It focu… | 84 | 1532 | active |
| OpenSIPS/opensips OpenSIPS is a GPL-licensed, open-source SIP server/proxy implementation written in C, forked from the SER project. It provides carrier-grad… | 75 | 1532 | stable |
| Jonnyan404/zerotier-planet A Docker Compose-based project that lets you self-host a private ZeroTier planet (root) controller in about a minute, built on ztncui with … | 48 | 1528 | active |
| VirgilClyne/GetSomeFries A collection of JavaScript rewrite and script modules for proxy clients (Loon, Surge, Stash, Shadowrocket, Quantumult X) that unlock full A… | 65 | 1526 | active |
| AnalogJ/lexicon Lexicon is a Python CLI tool and library that manipulates DNS records across many DNS providers through a standardized, provider-agnostic i… | 23 | 1524 | active |
| anytls/anytls-go anytls-go is the Go reference implementation of the AnyTLS protocol, a proxy protocol designed to mitigate TLS-in-TLS nested handshake fing… | 73 | 1521 | active |
| ngtcp2/ngtcp2 ngtcp2 is a C library implementing the IETF QUIC transport protocol (RFC9000) with no external library dependencies for the core. It includ… | 94 | 1520 | active |
| Goby Goby is a network security assessment tool that maps an organization's attack surface and scans for known vulnerabilities and weak password… | 23 | 1519 | active |
| BoxJs Chavy Scripts is a collection of JavaScript utilities for iOS proxy apps, centered on BoxJs, a single-page application for managing script … | 94 | 5528 | maintenance |
| balena-os/wifi-connect WiFi Connect is a Rust utility that lets users configure WiFi credentials on Linux devices through a captive portal. The device creates a W… | 98 | 1509 | active |
| chihaya/chihaya Chihaya is a customizable, high-performance BitTorrent tracker written in Go that supports both HTTP and UDP announce protocols with IPv4 a… | 64 | 1509 | active |
| snltty/linker Linker is a self-hosted networking tool written in C# that combines P2P hole punching (UDP/TCP, IPv4/IPv6) with server relay to provide vir… | 89 | 1508 | active |
| olalie/tapmap TapMap is a self-hosted desktop application that inspects local socket data, enriches IP addresses with geolocation, and visualizes your co… | 80 | 1502 | active |
| zpl-c/librg librg is a single-header, cross-platform world replication library written in pure C99 for multiplayer game development. It acts as middlew… | 48 | 1502 | active |
| Mekotofeuka/MTPROTO_FIX_By_MEKO A shell-based one-click installer and manager for MTProto proxies and VPN tools such as Telemt, MTG, MTProtoZig, and MTProxyL. It fixes com… | 80 | 1500 | active |
| stealthcopter/AndroidNetworkTools A Java library for Android providing handy networking utilities such as port scanning, subnet device discovery, ping, and Wake-on-LAN. It f… | 23 | 1497 | active |
| SChernykh/p2pool P2Pool is a decentralized, peer-to-peer mining pool for Monero written in C++. It combines the regular payouts of centralized pools with th… | 97 | 1495 | active |
| Batfish Batfish is an open-source network configuration analysis tool that builds complete models of network behavior from device configurations to… | 85 | 1495 | active |
| coder/wush wush is a command-line tool for transferring files and opening remote shells between computers over peer-to-peer WireGuard connections. It … | 37 | 1494 | active |
| halo/LinkLiar LinkLiar is a free, open-source macOS status menu application written in Swift for spoofing the MAC addresses of Wi-Fi and Ethernet interfa… | 35 | 1491 | active |
| yituorou/meatshell MeatShell is a lightweight, low-memory SSH and terminal client written in Rust with Slint, inspired by FinalShell. It offers multi-tab term… | 76 | 1490 | active |
| mitre/HTTP-Proxy-Servlet A single-file Java servlet that acts as an HTTP reverse proxy, built on Apache HttpClient. It lets Java web applications forward requests t… | 64 | 1488 | stable |
| Time-Appliances-Project/Time-Card Time Card is an open-source PCIe card design (with schematics, BOM, Gerbers, firmware, and Linux driver code) that serves as a precision ti… | 76 | 1485 | active |
| lance0/ttl ttl is a fast, modern traceroute and network diagnostic tool written in Rust with a real-time TUI, per-hop latency/loss/jitter statistics, … | 84 | 1481 | active |
| dotpcap/sharppcap SharpPcap is a fully managed, cross-platform .NET library for capturing packets from live network devices and reading/writing pcap capture … | 67 | 1481 | active |
| Tencent/nohost Nohost is a multi-user, multi-environment remote configuration and HTTP packet-capture debugging platform built on top of Whistle. It is de… | 32 | 1473 | active |
| openstack/neutron Neutron is OpenStack's Networking service, providing 'network connectivity as a service' for interface devices (vNICs) managed by other Ope… | 77 | 1471 | active |
| NHAS/reverse_ssh A Go-based SSH server and client that enables SSH-based reverse shells, letting operators manage and connect to remote targets with native … | 93 | 1470 | active |
| wukongdaily/gl-inet-onescript A shell script that transforms GL-iNet ARM64 routers into an iStoreOS-style system without flashing custom firmware. It auto-detects the ro… | 83 | 1470 | active |
| small (OpenWrt proxy plugin feed) A collection of commonly used OpenWrt package feeds (luci apps, themes, and proxy/DNS plugins) maintained for easy inclusion when compiling… | 94 | 1468 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 77 | 1468 | active |
| fabriziosalmi/certmate CertMate is a self-hosted certificate lifecycle management platform that issues and renews TLS certificates via ACME/Let's Encrypt across 2… | 82 | 1466 | active |
| linkerd/linkerd Linkerd 1.x is a transparent service mesh proxy for HTTP, gRPC, and Thrift traffic, built on Netty and Finagle, that provides load balancin… | 23 | 5307 | maintenance |
| tinygs/tinyGS TinyGS is an open-source firmware for ESP32-based LoRa ground stations that form a distributed network to receive transmissions from LoRa s… | 76 | 1463 | active |
| qq362946/Fantasy Fantasy is a zero-reflection, high-performance C# game server framework designed for large-scale multiplayer online games, built on an ECS … | 97 | 1461 | active |
| netcccyun/dnsmgr A self-hosted PHP (ThinkPHP) web application for managing DNS records across multiple providers (Alibaba Cloud, Tencent Cloud, Cloudflare, … | 86 | 1461 | active |
| qpoint-io/qtap Qtap is an eBPF agent that hooks TLS/SSL functions in the Linux kernel to capture network traffic before and after encryption, with full pr… | 63 | 1460 | active |
| abh/geodns GeoDNS is an authoritative DNS server written in Go that returns per-client targeted responses based on the geographic location of the requ… | 50 | 1460 | stable |
| Internet-Architecture-and-Security/PacketScope PacketScope is an open-source, eBPF-based protocol stack analysis and debugging tool for server-side network observability and defense. It … | 71 | 1458 | active |
| pritunl/pritunl-client Pritunl Client is a free, open-source cross-platform OpenVPN and WireGuard client with both graphical and command-line interfaces. It suppo… | 96 | 1457 | active |
| LorenEteval/Furious Furious is a cross-platform GUI proxy client built with PySide6 that wraps Xray-core and Hysteria as Python bindings. It supports protocols… | 95 | 1457 | active |
| COVESA/vsomeip vSomeIP is a C++ implementation of the SOME/IP (Scalable service-Oriented MiddlewarE over IP) protocol, built by BMW and maintained under C… | 96 | 1454 | active |
| trzsz trzsz (trz/tsz) is a simple file transfer tool for SSH terminals, similar to lrzsz (rz/sz), but compatible with tmux. It supports directory… | 93 | 1452 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 77 | 1448 | active |