Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| byJoey/Actions-bbr-v3 A Shell-based interactive management script that installs and maintains custom Linux kernel packages with fixed BBRv3 congestion-control pa… | 84 | 1444 | active |
| myxuchangbin/dnsmasq_sniproxy_install A one-click shell script that installs and configures Dnsmasq and SNIproxy on CentOS, Debian, or Ubuntu servers. It redirects DNS resolutio… | 60 | 1442 | active |
| inlets A Kubernetes operator that gives local clusters (kind, k3d, minikube) real public TCP LoadBalancer IPs by provisioning cloud VMs running in… | 88 | 1439 | active |
| Tencent/tquic TQUIC is a high-performance, lightweight, cross-platform library implementing the IETF QUIC and HTTP/3 protocols, written in Rust with APIs… | 48 | 1438 | active |
| dirkjanm/ldapdomaindump A Python CLI tool that dumps Active Directory information (users, groups, computers, policies, trusts) via LDAP and renders it as human-rea… | 26 | 1436 | stable |
| jawj/IKEv2-setup A Bash script that configures a fresh Ubuntu Server LTS install as an IKEv2 VPN server using strongSwan, with Let's Encrypt certificates an… | 53 | 1435 | active |
| zoujingli/ip2region A PHP library for offline IP geolocation lookups based on the ip2region XDB data format, supporting IPv4 and IPv6 with multiple caching str… | 97 | 1432 | active |
| Sitoi/ClashBar ClashBar is a native macOS menu bar proxy client built with SwiftUI and AppKit, powered by the mihomo (Clash Meta) core. It provides a ligh… | 80 | 1432 | active |
| CFnat A Windows GUI wrapper (written in C#) around the CFnat tool, which automatically finds and tests Cloudflare datacenter IPs and sets up loca… | 24 | 1430 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 64 | 1429 | active |
| dockovpn/dockovpn DockOvpn is a stateless, out-of-the-box OpenVPN server packaged as a Docker image that starts in under two seconds and requires no persiste… | 23 | 1429 | active |
| netsniff-ng/netsniff-ng netsniff-ng is a free, high-performance Linux networking toolkit written in C, often described as a Swiss army knife for network packets. I… | 31 | 1426 | stable |
| traefik/whoami A tiny Go web server that echoes back OS information and details of the incoming HTTP request. It is commonly used as a lightweight test ba… | 78 | 1425 | stable |
| tun2proxy/tun2proxy tun2proxy is a Rust tool that creates a TUN network interface and routes traffic through SOCKS4/5 or HTTP proxies, effectively turning a pr… | 98 | 1423 | active |
| v2ray-worker A TypeScript solution for deploying V2Ray proxy configurations (VLESS and Trojan) on Cloudflare Workers. It generates proxy configs and man… | 19 | 1423 | active |
| benoitc/hackney hackney is an HTTP client library for Erlang supporting HTTP/1.1, HTTP/2, and experimental HTTP/3, with connection pooling, streaming, asyn… | 98 | 1420 | active |
| rosenpass/rosenpass Rosenpass is a post-quantum-secure key exchange tool written in Rust that establishes symmetric keys and feeds them to WireGuard via its pr… | 82 | 1417 | active |
| mpetazzoni/ttorrent Ttorrent is a pure-Java implementation of the BitTorrent protocol providing a tracker, a download client, and torrent metainfo file creatio… | 23 | 1417 | active |
| PrismarineJS/node-minecraft-protocol A Node.js library that parses and serializes Minecraft protocol packets, with support for authentication and encryption. It enables buildin… | 95 | 1416 | active |
| Gu1llaum-3/sshm SSHM is a Go-based command-line tool with an interactive TUI for managing SSH hosts directly in your ~/.ssh/config file. It supports quick … | 84 | 1413 | active |
| WireGuard/wireguard-apple The official WireGuard VPN client application for iOS and macOS, written in Swift, including the WireGuardKit Swift package for integrating… | 32 | 1411 | active |
| micahmo/WgServerforWindows Wg Server for Windows (WS4W) is a desktop application that automates setting up and managing a WireGuard VPN server endpoint on Windows. It… | 71 | 1404 | active |
| cisco/libsrtp libSRTP is Cisco's open-source C library implementing the Secure Real-time Transport Protocol (SRTP, RFC 3711) along with a supporting cryp… | 86 | 1401 | stable |
| gerbera/gerbera Gerbera is a free, open-source UPnP/DLNA media server that streams digital media across a home network to compatible devices like TVs, game… | 94 | 1396 | active |
| Maasea/sgmodule A collection of Surge modules (sgmodule files) written in JavaScript that enhance or modify mobile apps and network behavior, such as remov… | 70 | 1395 | active |
| google/cloudprober Cloudprober is an open-source active (synthetic) monitoring tool built at Google that runs continuous probes—HTTP, gRPC, DNS, PING, TCP, UD… | 10 | 1395 | stable |
| Jafaral/bmon bmon is a command-line bandwidth monitor and rate estimator that captures network interface statistics and displays them visually. It offer… | 85 | 1393 | active |
| GtxFury/FlyClash FlyClash is a modern, visually polished proxy client built on the Clash (mihomo) kernel, developed with Tauri, Next.js, and Tailwind CSS. I… | 88 | 1392 | active |
| fhmq/hmq HMQ is a high-performance MQTT broker written in Go, supporting MQTT 3.1.1 with QoS 0/1, retained and will messages, WebSockets, and TLS. I… | 81 | 1389 | active |
| jamesmcm/vopono Vopono is a Rust CLI tool that runs individual applications through VPN tunnels using temporary network namespaces on Linux. It supports mu… | 97 | 1388 | active |
| tmoonlight/NSmartProxy NSmartProxy is an open-source NAT traversal / reverse proxy tool that creates secure tunnels from a public endpoint to services running beh… | 63 | 1387 | active |
| boringproxy/boringproxy boringproxy is a tunneling reverse proxy written in Go that exposes local web servers securely via public HTTPS URLs. It includes a web UI,… | 23 | 1386 | active |
| zfl9/chinadns-ng ChinaDNS-NG is a rewritten and enhanced version of ChinaDNS that splits DNS queries between domestic (China) and trusted upstream DNS serve… | 42 | 1383 | active |
| remittor/zapret-openwrt OpenWrt packages (ipk/apk) of Zapret, an anti-DPI utility that bypasses deep packet inspection on routers, with a LuCI web interface. It is… | 73 | 1382 | active |
| Anubis Anubis is a Python CLI tool for subdomain enumeration and information gathering that aggregates results from sources like HackerTarget, Vir… | 62 | 1382 | active |
| Psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1382 | active |
| YukiCoco/ToMoon ToMoon is a Decky Loader plugin for SteamOS that provides an out-of-the-box Clash proxy client written in Rust. It automatically configures… | 35 | 1381 | active |
| Peng-YM/Loon-Gallery A plugin gallery for the Loon iOS proxy app, distributed as a Loon plugin script that provides a browsable interface for discovering and on… | 10 | 1381 | active |
| unjs/untun untun is a Node.js CLI and library that exposes a local HTTP(s) server to the internet via Cloudflare Quick Tunnels (cloudflared). It provi… | 79 | 1378 | active |
| 3lvis/Networking Networking is a Swift HTTP networking library built on URLSession with a simple, singleton-free API. It offers built-in request stubbing/mo… | 80 | 1377 | active |
| tidwall/neco Neco is a small, fast C library providing concurrency via stackful coroutines with channels, mutexes, condition variables, and deadline/can… | 60 | 1376 | active |
| aws/s2n-quic s2n-quic is a Rust implementation of the IETF QUIC transport protocol, offering a simple API with configurable providers for TLS (s2n-tls o… | 99 | 1375 | active |
| qr243vbi/nekobox NyameBox (a rebrand of NekoBox) is a cross-platform Qt-based desktop GUI proxy utility powered by the sing-box core. It supports a wide ran… | 76 | 1374 | active |
| mullvad/gotatun GotaTun is a userspace WireGuard implementation in Rust, forked from Cloudflare's BoringTun, providing both a library and a standalone tunn… | 90 | 1371 | active |
| tty228/luci-app-wechatpush A LuCI plugin for OpenWrt routers that sends notifications to WeChat, Telegram, or email about network events like IP changes, device onlin… | 85 | 1371 | active |
| google/nftables A pure Go library for programmatically interacting with Linux nftables, the iptables successor, without wrapping libnftnl. It provides data… | 69 | 1370 | active |
| Passepartout Passepartout is an OpenVPN and WireGuard VPN client app for iPhone, iPad, Mac, and Apple TV, built on the Partout tunnel framework. It offe… | 93 | 1368 | active |
| SpiderLabs/Responder Responder is a Python-based LLMNR, NBT-NS, and mDNS poisoner with built-in rogue authentication servers (SMB, HTTP/S, MSSQL, FTP, LDAP, POP… | 10 | 4889 | maintenance |
| chili-chips-ba/wireguard-fpga An open-source, wire-speed hardware implementation of the WireGuard VPN protocol on a low-cost Artix-7 FPGA, written in Verilog with an ope… | 66 | 1366 | active |
| alphasoc/flightsim flightsim is a lightweight Go CLI utility that safely generates malicious network traffic patterns such as DNS tunneling, DGA domains, C2 c… | 23 | 1366 | active |
| elecV2/elecV2P elecV2P is a self-hosted NodeJS network tool that lets users intercept and modify HTTP requests via JavaScript (MITM proxy) and run schedul… | 75 | 1362 | active |
| zxcvos/Xray-script A pure Shell management script for installing and configuring Xray proxy servers with protocols like VLESS-Vision-REALITY, VLESS-XHTTP-REAL… | 60 | 1359 | active |
| is-online A JavaScript library that checks whether the internet connection is actually up, unlike navigator.onLine which only reports local network s… | 76 | 1356 | active |
| haishanh/yacd yacd (Yet Another Clash Dashboard) is a web-based dashboard for managing and monitoring a Clash proxy instance through its external control… | 23 | 4839 | maintenance |
| mysteriumnetwork/node Mysterium Node is the official Go implementation of the Mysterium decentralized VPN (dVPN) network protocol, letting users run nodes that p… | 96 | 1354 | active |
| wotschofsky/domain-digger Domain Digger is a web application for in-depth domain analysis, offering DNS lookups across global resolvers, WHOIS queries, IP geolocatio… | 75 | 1354 | active |
| voyagermesh/voyager Voyager is a secure L7 and L4 ingress controller for Kubernetes built on top of HAProxy, developed by AppsCode. It provides load balancing,… | 56 | 1353 | active |
| openconnect/openconnect-gui A graphical VPN client built on the OpenConnect library, supporting Cisco AnyConnect-compatible VPNs. It is a Qt5-based desktop application… | 10 | 1353 | active |
| appneta/tcpreplay Tcpreplay is a suite of GPLv3 command-line utilities for editing and replaying captured network traffic (pcap files) back onto the network … | 92 | 1352 | active |
| Art-of-WiFi/UniFi-API-client A PHP API client class for interacting with Ubiquiti's UniFi Network Application (Controller) API over cURL. It exposes many UniFi endpoint… | 98 | 1349 | active |
| stripe/smokescreen Smokescreen is an HTTP CONNECT egress proxy written in Go, developed by Stripe to proxy outbound traffic such as webhooks. It enforces host… | 86 | 1349 | active |
| monosans/proxy-scraper-checker A fast async Rust CLI tool that scrapes HTTP, SOCKS4, and SOCKS5 proxies from arbitrary text, HTML, or JSON sources, verifies each proxy by… | 100 | 1344 | active |
| cloudflare/terraform-provider-cloudflare The official Terraform provider plugin for Cloudflare, letting users manage Cloudflare resources (zones, DNS records, load balancers, WAF r… | 98 | 1344 | active |
| pouriyajamshidi/tcping A cross-platform command-line tool written in Go that pings TCP ports instead of ICMP, inspired by Linux's ping utility. It measures latenc… | 79 | 1341 | active |
| Corvus-Malus/XKeen XKeen is a community-maintained CLI installer and management tool for setting up Xray and Mihomo proxy cores on Keenetic routers running En… | 49 | 1340 | active |
| holepunchto/hyperswarm Hyperswarm is a JavaScript library providing a high-level API for finding and connecting to peers interested in a shared 32-byte topic over… | 97 | 1338 | active |
| mpgirro/docker-pihole-unbound A Docker image that runs Pi-hole (network-wide ad blocker) with an integrated Unbound recursive DNS resolver in a single container. It is t… | 96 | 1338 | active |
| WhiteDNS WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 80 | 1337 | active |
| karam-ajaj/atlas Atlas is a self-hosted, containerized network infrastructure tool that scans Docker containers and subnet hosts to discover IPs, MACs, open… | 66 | 1335 | active |
| k8gb-io/k8gb K8GB (Kubernetes Global Balancer) is a CNCF Incubating, open-source global server load balancing (GSLB) solution for Kubernetes, implemente… | 95 | 1334 | active |
| SagerNet/sing-box-for-android SFA is the official Android client for sing-box, a universal proxy platform. It provides a graphical interface for managing and running sin… | 75 | 1333 | active |
| eclipse-paho/paho.mqtt.cpp The Eclipse Paho MQTT C++ client library lets modern C++ (C++17+) applications connect to MQTT brokers to publish messages, subscribe to to… | 73 | 1332 | stable |
| DnsChanger/dnsChanger-desktop An open-source desktop application for changing DNS server settings on Windows, macOS, and Linux. It is built with Electron, React, and Typ… | 92 | 1331 | active |
| GFW4Fun/x-ui-pro XUI-PRO is a shell-based auto-installer that sets up a censorship-resistant web proxy server combining the x-ui panel (Xray/V2ray), v2rayA,… | 72 | 1330 | active |
| tg123/sshpiper sshpiper is a reverse proxy for SSH that routes incoming SSH/SCP connections to upstream servers, with pluggable authentication mapping and… | 91 | 1329 | active |
| Upterm Upterm is an open-source CLI tool for instantly sharing terminal sessions over secure SSH tunnels to the public internet. It supports remot… | 100 | 1325 | active |
| DNSCrypt/encrypted-dns-server A high-performance Rust proxy that lets anyone run their own encrypted DNS server supporting DNSCrypt v2 (including post-quantum), Anonymiz… | 93 | 1325 | active |
| autobrr/netronome Netronome is a self-hosted network performance monitoring and speed testing tool built with Go and React, packaged as a single binary. It p… | 88 | 1324 | active |
| RedTeamPentesting/pretender Pretender is a Go-based penetration testing tool that gains machine-in-the-middle positions via spoofed local name resolution (mDNS, LLMNR,… | 86 | 1324 | active |
| microps microps is a small, educational implementation of a TCP/IP protocol stack written in C, covering Ethernet, ARP, IP, ICMP, UDP, and TCP with… | 77 | 1323 | active |
| seramo/v2ray-config-modifier A browser-based tool for generating bulk V2Ray/Xray proxy configurations from a base VMESS, VLESS, WireGuard, or Trojan config across multi… | 66 | 1320 | active |
| getdns Stubby is a local DNS Privacy stub resolver daemon that encrypts DNS queries using DNS-over-TLS (RFC 7858), built on the getdns library. It… | 33 | 1319 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 23 | 1319 | active |
| nccgroup/singularity Singularity of Origin is a DNS rebinding attack framework that includes a DNS server, a web server, a management UI, and sample attack payl… | 70 | 1318 | active |
| hemaju/Wireboy.Socket.P2PSocket A P2P NAT traversal tool written in C#/.NET that punches holes through firewalls to enable remote access between networks, e.g. controlling… | 49 | 1312 | active |
| umputun/reproxy Reproxy is a simple edge HTTP(s) server and reverse proxy written in Go, distributed as a single binary or Docker container. It supports mu… | 90 | 1308 | active |
| lanyi1998/DNSlog-GO DNSLog-GO is a self-hosted tool written in Go that monitors DNS resolution records, with a built-in web interface and API mode. It supports… | 86 | 1308 | active |
| yedf2/handy Handy is a simple, easy-to-use C++11 network server library supporting high-concurrency TCP/UDP servers with epoll on Linux and kqueue on m… | 23 | 4637 | maintenance |
| liamcottle/reticulum-meshchat Reticulum MeshChat is an Electron-based mesh network communications app built on the Reticulum Network Stack. It lets users exchange encryp… | 86 | 1303 | active |
| asbru-cm/asbru-cm Ásbrú Connection Manager is a free, open-source GUI application for organizing and launching remote terminal sessions, with automation feat… | 72 | 1302 | active |
| kubernetes/ingress-gce GLBC is the Google Cloud (GCE) L7 load balancer controller for Kubernetes, managing external load balancers configured through the Kubernet… | 68 | 1302 | active |
| inetaf/tcpproxy A Go library and CLI (tlsrouter) for building TCP proxies that route connections based on static rules, HTTP/1 Host headers, and TLS SNI se… | 66 | 1301 | stable |
| menacher/java-game-server Jetserver (Nadron) is a high-speed Java NIO socket server designed specifically for network-based multiplayer games, built on Netty 4.1 for… | 51 | 1301 | active |
| royhills/arp-scan arp-scan is a command-line network scanning tool that uses ARP requests to discover and fingerprint IPv4 hosts on a local network. It is wr… | 24 | 1301 | active |
| networktocode/ntc-templates A collection of TextFSM templates for parsing CLI show command output from network devices, plus a Python wrapper around TextFSM's CliTable… | 92 | 1298 | active |
| pahaz/sshtunnel A pure Python library for creating SSH tunnels and TCP port forwarding through remote servers, built on paramiko. It lets applications prog… | 36 | 1298 | stable |
| ycd/dstp dstp is a Go CLI tool that runs common networking tests (DNS resolution, ping, TLS/HTTPS connectivity) against a URL or IP address. It outp… | 49 | 1296 | active |
| FreeIPA FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li… | 77 | 1295 | stable |
| mbentley/docker-omada-controller A community-maintained Docker image that packages TP-Link's Omada Software Controller for centrally managing Omada networking hardware (acc… | 95 | 1294 | active |
| marvinvr/docktail DockTail is a Go-based Docker sidecar that watches container events, reads docktail.* labels, and exposes matching containers as native Tai… | 84 | 1291 | active |