Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| emiago/sipgo SIPGO is a Go library implementing a fast SIP stack (RFC 3261 and related RFCs) for building SIP services such as proxies and registrars. I… | 98 | 1074 | active |
| DNSCrypt/doh-server A fast, secure DNS-over-HTTPS (DoH) and Oblivious DoH (ODoH) server proxy written in Rust, formerly known as doh-proxy. It does not resolve… | 90 | 1073 | stable |
| SwarmCloud P2P Engine (CDNBye) A JavaScript library that layers a WebRTC datachannel-based peer-to-peer network on top of hls.js, letting viewers share HLS video segments… | 48 | 1072 | active |
| FusionPBX FusionPBX is a full-featured, domain-based multi-tenant PBX and voice switch web application built on top of FreeSWITCH. It provides a PHP-… | 87 | 1070 | active |
| tombcato/clash-ip-checker A Python automation tool for Clash proxy users that iterates through proxy nodes, checks each node's IP purity, bot ratio, and IP type via … | 38 | 1068 | active |
| ovn-kubernetes/ovn-kubernetes OVN-Kubernetes is an open-source CNI plugin that provides a robust networking solution for Kubernetes clusters, built on OVN (Open Virtual … | 87 | 1066 | active |
| pyroute2 A pure Python library for the Linux netlink protocol and BSD PF_ROUTE, providing message encoding/decoding and socket APIs for network conf… | 85 | 1066 | active |
| farrokhi/dnsdiag A Python-based toolset for measuring, troubleshooting, and auditing DNS. It includes dnsping for latency measurement, dnstraceroute for tra… | 92 | 1064 | active |
| IronsDu/brynet Brynet is a header-only, cross-platform C++11 TCP network library with no external dependencies. It supports multithreaded high-performance… | 57 | 1064 | active |
| brona/iproute2mac A Python CLI wrapper providing Linux iproute2-style commands (ip, bridge, ss) on macOS. It lets Linux-savvy admins perform basic network co… | 94 | 1063 | active |
| facebook/dhcplb dhcplb is Facebook's production DHCP v4/v6 load balancer and relayer, also usable as a multithreaded DHCP server framework. It balances DHC… | 73 | 1063 | active |
| furlongm/openvpn-monitor openvpn-monitor is a Flask web application that displays the status of OpenVPN servers, including all current client connections, their loc… | 66 | 1063 | active |
| kavehtehrani/cloudflare-speed-cli A Rust CLI tool that runs internet speed tests against Cloudflare's speed test service, showing download/upload throughput, latency, and ne… | 84 | 1062 | active |
| l7mp/stunner STUNner is a Kubernetes media gateway for WebRTC that lets you run WebRTC media servers in the cloud without fighting Kubernetes container … | 82 | 1062 | active |
| mwiede/jsch JSch (Java Secure Channel) is a pure Java implementation of the SSH2 protocol, maintained as an actively updated fork of the original JCraf… | 95 | 1061 | active |
| simdsoft/yasio yasio is a lightweight cross-platform C++ asynchronous socket I/O library focused on client-side networking for games and applications. It … | 89 | 1061 | active |
| ESP-Hosted ESP-Hosted is an open-source solution that lets Espressif SoCs like the ESP32 act as wireless communication co-processors, adding Wi-Fi and… | 79 | 1061 | active |
| public-ip A JavaScript library for Node.js and browsers that quickly retrieves the machine's public IP address (IPv4 or IPv6) via DNS queries to Open… | 66 | 1061 | active |
| aligungr/UERANSIM UERANSIM is an open source 5G UE (user equipment) and RAN (gNodeB) simulator implementing 3GPP R15 specifications. It simulates a 5G mobile… | 79 | 1060 | active |
| darkk/redsocks redsocks is a transparent TCP-to-proxy redirector written in C that uses firewall rules (iptables, pf, ipfw) to redirect any TCP connection… | 32 | 3622 | maintenance |
| lijiejie/subDomainsBrute A fast DNS subdomain brute-forcing tool for penetration testers, written in Python with multi-process and coroutine support. It enumerates … | 23 | 3622 | maintenance |
| DeedleFake/trayscale Trayscale is an unofficial GTK4/libadwaita GUI for the Tailscale daemon, built primarily for Linux desktops where no official graphical cli… | 99 | 1059 | active |
| TeraTermProject/teraterm Tera Term is a free, open-source terminal emulator for Windows supporting serial port, Telnet, and SSH connections. It includes a macro scr… | 87 | 1059 | active |
| darkoperator/Posh-SSH A PowerShell module built on a custom SSH.NET library that provides SSH, SFTP, and SCP functionality for automating tasks on remote systems… | 85 | 1058 | active |
| kubernetes/dns The Kubernetes DNS (kube-dns) project provides cluster-internal DNS resolution for Kubernetes services and pods. It ships containerized com… | 70 | 1058 | active |
| omrikiei/ktunnel Ktunnel is a Go CLI tool that establishes a reverse tunnel between a Kubernetes cluster and your local machine, exposing local resources as… | 94 | 1057 | active |
| shadowsocks/ChinaDNS ChinaDNS is a C-based local DNS server that prevents DNS poisoning by routing Chinese domain queries to local DNS servers and foreign domai… | 23 | 3603 | maintenance |
| karasevm/PrivateDNSAndroid An Android app that adds a quick settings tile for switching the active private DNS (DNS-over-TLS) provider with a single tap. It supports … | 69 | 1054 | active |
| k4yt3x/wg-meshconf wg-meshconf is a Python CLI tool that generates peer configuration files for WireGuard full mesh networks. It stores peer information in a … | 32 | 1054 | stable |
| Oxidized Oxidized is a network device configuration backup tool that periodically fetches running configs from network equipment and stores them, wi… | 91 | 3597 | maintenance |
| Ullaakut/nmap An idiomatic Go library that wraps the nmap network scanner by shelling out to the nmap binary and parsing its XML output. It lets Go devel… | 85 | 1053 | active |
| ysrc/xunfeng Xunfeng is a self-hosted web application for rapid vulnerability emergency response and continuous scanning of enterprise internal networks… | 23 | 3594 | maintenance |
| pond3r/ggpo GGPO is a C++ SDK that implements rollback networking, using input prediction and speculative execution to give online multiplayer games th… | 32 | 3592 | maintenance |
| Audio MODEM A Python library and CLI tool that transmits files between computers by modulating data into audio signals (OFDM) played through a speaker … | 52 | 1051 | active |
| chris1111/Wireless-USB-Big-Sur-Adapter A macOS installer package providing drivers for Realtek 802.11n and 802.11ac USB Wi-Fi adapters, distributed as prebuilt binaries with no s… | 65 | 1050 | active |
| yarrick/pingfs pingfs is a FUSE filesystem for Linux that stores file data in ICMP Echo (ping) packets bouncing between the local machine and remote hosts… | 32 | 3583 | maintenance |
| firewalld/firewalld firewalld is a dynamically managed firewall daemon for Linux that provides zone-based trust levels for network connections and interfaces, … | 97 | 1048 | stable |
| apify/proxy-chain A programmable HTTP/HTTPS proxy server library for Node.js, similar to Squid, with support for SSL/TLS, SOCKS4/5, authentication, upstream … | 93 | 1044 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 52 | 1042 | active |
| python-hyper/h2 h2 is a pure-Python implementation of the HTTP/2 protocol stack that performs no I/O, making it embeddable in any program or framework. It … | 72 | 1041 | stable |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 68 | 1041 | active |
| Blockstream/satellite Blockstream Satellite is a Python-based software suite (GUI and CLI) for setting up a receiver node that downloads the Bitcoin blockchain v… | 60 | 1041 | active |
| QNLab-USTC/SimQN SimQN is a discrete-event network-layer simulator for quantum networks, written in Python with optional Cython acceleration. It supports la… | 76 | 1040 | active |
| TheRook/subbrute SubBrute is a Python DNS meta-query spider that enumerates subdomains and arbitrary DNS record types by leveraging open resolvers to bypass… | 23 | 3535 | maintenance |
| vanhoefm/krackattacks-scripts Scripts by Mathy Vanhoef to test whether Wi-Fi clients or access points are vulnerable to the KRACK attack against WPA2. They include a mod… | 23 | 3534 | maintenance |
| UnnoTed/wireguird A GTK-based graphical GUI client for WireGuard on Linux, mimicking the official Windows WireGuard client. It lists tunnels from /etc/wiregu… | 55 | 1036 | active |
| square/certigo Certigo is a Go command-line utility for examining, dumping, and validating TLS/SSL certificates in formats like X.509 (DER/PEM), PKCS7, PK… | 89 | 1035 | stable |
| GNS3 GNS3 is a graphical network simulator that lets users design, build, and emulate complex network topologies using real router, switch, and … | 95 | 1034 | active |
| linux-rdma/perftest A collection of C-based performance micro-benchmark tools for InfiniBand and RoCE networks, built on the ibverbs API. It measures bandwidth… | 90 | 1033 | active |
| UIforFreedom/UIF UIF is an open-source, cross-platform proxy panel UI with proxy management and subscription management features, built in Vue. It serves as… | 76 | 1028 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 71 | 1028 | active |
| maxmind/libmaxminddb A C library for reading MaxMind DB files, the binary format used by MaxMind's GeoIP databases. It provides fast IP address lookups with fle… | 98 | 1027 | stable |
| jclehner/nmrpflash A cross-platform command-line utility that uses Netgear's NMRP protocol to flash firmware images to Netgear routers and other compatible de… | 76 | 1027 | active |
| net-ssh/net-ssh Net::SSH is a pure-Ruby implementation of the SSH2 client protocol, packaged as a Ruby gem. It lets Ruby programs open SSH connections to r… | 77 | 1024 | active |
| jpr5/ngrep ngrep is a PCAP-based command-line tool that applies GNU grep-style regular or hexadecimal expression matching to network packet payloads. … | 68 | 1024 | active |
| mokeyish/smartdns-rs SmartDNS-rs is a cross-platform local DNS server written in Rust, inspired by the C SmartDNS project. It queries multiple upstream DNS serv… | 82 | 1017 | active |
| nttgin/BGPalerter BGPalerter is a self-configuring, real-time BGP and RPKI monitoring tool that detects prefix visibility loss, hijacks, RPKI invalid announc… | 77 | 1016 | active |
| redcode-labs/neurax Neurax is a Go framework for constructing self-spreading binaries (worms) that propagate across LAN/WAN networks without external servers. … | 32 | 1016 | active |
| aflnet/aflnet AFLNet is a greybox fuzzer for network protocol server implementations, extending American Fuzzy Lop with state-feedback derived from serve… | 39 | 1014 | active |
| libreswan/libreswan Libreswan is a free software implementation of the IPsec VPN protocol and its Internet Key Exchange (IKEv1/IKEv2) keying protocol, forked f… | 99 | 1009 | stable |
| stilleshan/frpc A set of one-click install/uninstall shell scripts and a Docker image wrapping the official frp client (frpc) for NAT traversal / internal … | 70 | 1008 | active |
| flipt-io/reverst Reverst is a load-balanced reverse-tunnel server and Go client library built on QUIC and HTTP/3. It lets services behind restrictive networ… | 47 | 1005 | active |
| KumoKyaku/kcp A C# port of the KCP reliable UDP protocol, offering a thread-safe, allocation-free implementation suitable for game networking. It support… | 32 | 1005 | active |
| odedshimon/BruteShark BruteShark is an open-source Network Forensic Analysis Tool (NFAT) that deeply inspects network traffic from PCAP/PCAPng files or live capt… | 23 | 3397 | maintenance |
| rtorrent libTorrent is a high-performance BitTorrent library written in C++ for Unix-like systems, designed to power multiple torrent clients. It di… | 77 | 1003 | active |
| tty-share tty-share is a simple Go-based CLI tool that shares a Linux or macOS terminal session over the Internet or local network. Viewers can join … | 37 | 1003 | active |
| mgeeky/RedWarden RedWarden is a Python HTTP/HTTPS reverse proxy designed as a Cobalt Strike C2 redirector that filters inbound traffic. It inspects requests… | 10 | 994 | active |
| aleixrodriala/wa-tunnel A Node.js CLI tool that tunnels TCP internet traffic through WhatsApp messages using the Baileys library, sending packets as text or compre… | 32 | 3347 | maintenance |
| mmatczuk/go-http-tunnel A reverse tunnel tool based on HTTP/2 that exposes localhost services to the public internet via a server (tunneld) and client (tunnel) pai… | 60 | 3332 | maintenance |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3280 | maintenance |
| jwise/HoRNDIS HoRNDIS is a macOS kernel extension (kext) driver that enables Android USB tethering, letting a Mac use an Android phone's native tethering… | 23 | 3261 | maintenance |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3251 | maintenance |
| progrium/localtunnel Localtunnel is a tool that exposes localhost servers to the public Internet via tunnels. The current v3 is a minimal Go implementation buil… | 32 | 3227 | maintenance |
| alibaba/lightproxy LightProxy is a cross-platform desktop web debugging proxy built on Electron and whistle, offering out-of-the-box certificate installation … | 23 | 3216 | maintenance |
| sensepost/reGeorg reGeorg is a Python tool that creates a SOCKS proxy through a compromised bastion webserver by tunneling traffic over HTTP(S) via uploaded … | 33 | 3180 | maintenance |
| sustrik/libmill Libmill is a C library that brings Go-style concurrency to C, providing goroutine-like coroutines and channels. It lets C developers write … | 32 | 3176 | maintenance |
| facebookarchive/network-connection-class An Android library by Facebook that listens to the app's existing network traffic and classifies the user's connection quality into discret… | 10 | 3170 | maintenance |
| sdushantha/wifi-password A Python command-line tool that quickly retrieves the password of the WiFi network you are connected to (or a previously connected SSID). I… | 23 | 3153 | maintenance |
| saminiir/level-ip A userspace TCP/IP stack for Linux implemented in C using TUN/TAP devices, with an accompanying blog series explaining Ethernet, ARP, IPv4,… | 32 | 3135 | maintenance |
| tomnomnom/httprobe httprobe is a Go command-line tool that takes a list of domains on stdin and probes for working HTTP and HTTPS servers, reporting which res… | 23 | 3126 | maintenance |
| alexforencich/verilog-ethernet A collection of Verilog Ethernet components for FPGA implementation, covering gigabit, 10G, and 25G packet processing with MAC, PCS/PMA PHY… | 32 | 3115 | maintenance |
| salesforce/ja3 JA3 is a standard and set of scripts (Python and Zeek) for generating SSL/TLS client fingerprints that are easy to produce and share for th… | 10 | 3099 | maintenance |
| dustturtle/RealReachability An iOS library that determines real internet reachability rather than just local network connection status, by combining SCNetworkReachabil… | 55 | 3097 | maintenance |
| risinek/esp32-wifi-penetration-tool An extensible Wi-Fi penetration testing framework for the ESP32 microcontroller, implementing attacks such as PMKID capture, WPA/WPA2 hands… | 23 | 3077 | maintenance |
| snabbco/snabb Snabb is a simple and fast packet networking toolkit written in Lua on LuaJIT, using kernel-bypass Ethernet I/O. It compiles to a single bu… | 62 | 3033 | maintenance |
| rajkumardusad/IP-Tracer IP-Tracer is a command-line tool for Linux and Termux that retrieves geolocation and information about any IP address using the ip-api serv… | 23 | 3019 | maintenance |
| arthepsy/ssh-audit ssh-audit is a dependency-free Python CLI tool that audits SSH servers by grabbing banners and enumerating key exchange, host key, encrypti… | 32 | 3002 | maintenance |
| KOP-XIAO/QuantumultX A JavaScript resource parser script for the Quantumult X iOS proxy client that converts proxy node subscriptions and configs from formats l… | 77 | 2999 | maintenance |
| facebook/wdt Warp speed Data Transfer (WDT) is an embeddable C++ library and command line tool for transferring files between two systems as fast as pos… | 67 | 2961 | maintenance |
| google/nogotofail Nogotofail is an on-path (man-in-the-middle) blackbox network traffic security testing tool built in Python. It detects weak TLS/SSL connec… | 10 | 2952 | maintenance |
| seemoo-lab/nexmon Nexmon is a C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables custom firmware modifications such as monitor … | 66 | 2886 | maintenance |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2852 | maintenance |
| seclab-ucr/INTANG INTANG is a Linux daemon that evades the Great Firewall of China's TCP reset attacks by desynchronizing the TCP Control Block on censorship… | 40 | 2833 | maintenance |
| esc0rtd3w/wifi-hacker A shell script that automates attacking wireless connections using the built-in tools of Kali Linux. It supports WEP, WPS, WPA, and WPA2 se… | 23 | 2825 | maintenance |
| xuhaoyang/ClashForAndroid A GUI application for Android that wraps the Clash rule-based tunnel proxy core. It lets users route device traffic through configurable pr… | 32 | 2820 | maintenance |
| Ettercap/ettercap Ettercap is a comprehensive open-source suite for man-in-the-middle attacks on local networks. It supports live connection sniffing, on-the… | 83 | 2798 | maintenance |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2795 | maintenance |
| spdy-http2/node-spdy A Node.js module for creating SPDY and HTTP/2 servers with a natural http-module-like interface, falling back to regular HTTPS for unsuppor… | 32 | 2789 | maintenance |
| rtr7/router7 router7 is a small home internet router implemented entirely in Go, running as a gokrazy appliance on PC Engines apu2c4 hardware. It bundle… | 70 | 2771 | maintenance |
| yann-shi/dht A Go library implementing the BitTorrent DHT protocol (BEP-3, 5, 9, 10) with two modes: a standard DHT server and a crawling mode for harve… | 23 | 2771 | maintenance |