Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| 91yun/serverspeeder A one-click shell installer for a cracked version of ServerSpeeder (锐速), a Linux TCP acceleration kernel module, targeting CentOS, Ubuntu, … | 32 | 2866 | abandoned |
| NEKit/libnekit NEKit is a Swift toolkit for building iOS/macOS Network Extension apps (NETunnelProvider) that route traffic through proxies to bypass netw… | 10 | 2814 | abandoned |
| gravitational/teleconsole Teleconsole is a Go-based command line tool for sharing a UNIX terminal session with others and forwarding local TCP ports over SSH, aimed … | 10 | 2762 | abandoned |
| h2non/toxy Toxy is a hackable HTTP proxy for Node.js that simulates server failures and adverse network conditions for resiliency testing. It injects … | 10 | 2714 | abandoned |
| Trojan-Qt5/Trojan-Qt5 Trojan-Qt5 was a cross-platform GUI proxy client implementing the Trojan protocol, built with Qt5 and C++, designed to route traffic throug… | 10 | 2664 | abandoned |
| DanMcInerney/LANs.py A Python-based penetration testing tool that scans WiFi networks for active clients, performs targeted ARP spoofing, and intercepts or inje… | 32 | 2636 | abandoned |
| subspacecloud/subspace Subspace is a self-hosted web GUI for managing a WireGuard VPN server, with SAML single sign-on, device management, and auto-generated clie… | 32 | 2590 | abandoned |
| activecm/rita-legacy RITA (Real Intelligence Threat Analytics) is an open-source framework for detecting command and control communication through network traff… | 53 | 2512 | abandoned |
| robcowart/elastiflow ElastiFlow (legacy) is a network flow analytics solution that collects and visualizes NetFlow v5/v9, IPFIX, and sFlow data using the Elasti… | 10 | 2510 | abandoned |
| WiFi-Pumpkin WiFi-Pumpkin is a Python framework for auditing Wi-Fi security by creating rogue wireless access points and performing man-in-the-middle at… | 23 | 2498 | abandoned |
| MatsuriDayo/Matsuri Matsuri is a universal proxy toolchain app for Android, forked from SagerNet, supporting protocols like Shadowsocks, VMess, Trojan, SOCKS, … | 10 | 2493 | abandoned |
| evilsocket/bettercap bettercap is a network attack and reconnaissance framework, described as a Swiss Army knife for WiFi, BLE, HID hijacking, CAN-bus, and IPv4… | 10 | 2490 | abandoned |
| docker-archive-public/docker.libchan libchan is an ultra-lightweight Go networking library that lets network services communicate like goroutines over channels, supporting mess… | 10 | 2445 | abandoned |
| twitter-archive/CocoaSPDY CocoaSPDY is an Objective-C framework implementing the SPDY/3.1 protocol for iOS and OS X, integrating with the NSURL stack to speed up HTT… | 10 | 2374 | abandoned |
| Shadowsocks A simple obfuscation plugin for Shadowsocks that disguises proxy traffic as ordinary HTTP or TLS traffic. It is deprecated and succeeded by… | 23 | 2372 | abandoned |
| gongjianhui/AppleDNS AppleDNS is a Python script that collects Apple CDN data for Chinese ISPs (China Unicom, ChinaNet, CMCC) and generates DNS/hosts configurat… | 10 | 2342 | abandoned |
| legba XRay is a Go-based CLI tool for network reconnaissance and OSINT that enumerates subdomains via DNS bruteforcing, gathers open-port intelli… | 10 | 2331 | abandoned |
| hijkpw/scripts A collection of one-click shell scripts for installing proxy servers (Shadowsocks, ShadowsocksR, V2Ray, trojan, trojan-go) on VPS instances… | 32 | 2316 | abandoned |
| vmstan/gravity-sync Gravity Sync is a shell script that replicates the DNS blocking configuration (adlists, whitelists, blacklists, groups, local DNS/CNAME rec… | 10 | 2300 | abandoned |
| hipache/hipache Hipache is a distributed HTTP and WebSocket reverse proxy built on Node.js, originally developed at dotCloud to route high volumes of traff… | 32 | 2295 | abandoned |
| open-dingtalk/pierced Pierced is DingTalk's official intranet tunneling (reverse proxy) tool that exposes local HTTP services and databases via a public subdomai… | 32 | 2260 | abandoned |
| secgroundzero/warberry WarBerryPi is a tactical exploitation toolkit built to run on a Raspberry Pi, acting as a drop-box/implant for red-team engagements to scan… | 32 | 2221 | abandoned |
| vzex/dog-tunnel Dog Tunnel is a Go-based peer-to-peer tunneling tool that provides port mapping over UDP using the KCP protocol, with NAT hole punching ass… | 10 | 2167 | abandoned |
| plamoni/SiriProxy SiriProxy is a Ruby-based tampering proxy server for Apple's Siri assistant that intercepts Siri traffic and lets developers write custom p… | 10 | 2115 | abandoned |
| TunnlTo/desktop-app TunnlTo was an open-source WireGuard client for Windows featuring advanced split tunneling and a user-friendly interface. The open-source p… | 54 | 1961 | abandoned |
| pkyeck/socket.IO-objc An Objective-C client library for connecting iOS and OS X apps to Socket.IO servers (v0.7.2–0.9.x) over websockets or long-polling, built o… | 10 | 1945 | abandoned |
| fqrouter/fqrouter fqrouter is an Android application designed to bypass the Great Firewall of China (GFW) by routing traffic through anti-censorship proxies.… | 32 | 1944 | abandoned |
| ambrop72/badvpn BadVPN is a collection of C networking tools: the NCD scripting language/daemon for network configuration, a tun2socks network-layer proxif… | 10 | 1932 | abandoned |
| fastos/tcpdive Tcpdive is a TCP performance profiling tool that monitors and analyzes TCP internals from a running Linux kernel using SystemTap, requiring… | 32 | 1844 | abandoned |
| jech/polipo Polipo is a lightweight, single-threaded, non-blocking caching HTTP proxy written in C with very modest resource needs. The project is no l… | 10 | 1818 | abandoned |
| yamada95/kitsunebi-android Kitsunebi is a fully-featured V2Ray client for Android written in Kotlin, supporting proxy configuration, routing rule sets, Fake DNS, late… | 10 | 1805 | abandoned |
| MerlinKodo/clash-rev A continuation of the Clash proxy core, a rule-based tunnel/proxy client supporting multiple protocols. The repository is now archived and … | 10 | 1793 | abandoned |
| 4thline/cling Cling is a Java and Android library implementing the UPnP Device Architecture 1.0 specification, allowing applications to expose UPnP servi… | 23 | 1781 | abandoned |
| okTurtles/dnschain DNSChain is a blockchain-based DNS and HTTPS server that provides a decentralized, MITM-proof alternative to the traditional DNS and X.509 … | 23 | 1731 | abandoned |
| heapwolf/socket A JavaScript socket library by heapwolf, formerly used for real-time networking in Node.js. The project has been officially deprecated and … | 34 | 1713 | abandoned |
| xdavidhu/mitmAP A Python program that creates a fake wireless access point and performs man-in-the-middle data sniffing using tools like SSLstrip2, mitmpro… | 10 | 1692 | abandoned |
| Peer5/ShareFest ShareFest is a web-based peer-to-peer file sharing application built on WebRTC Data Channels, letting users share files instantly via a bro… | 32 | 1687 | abandoned |
| labstack/armor Armor is a modern HTTP server and reverse proxy written in Go, supporting HTTP/2, automatic Let's Encrypt TLS certificates, WebSocket proxy… | 10 | 1659 | abandoned |
| getqujing/qtunnel qTunnel is a lightweight Go-based network tunneling tool that acts as an encryption wrapper between clients and servers, serving as a simpl… | 32 | 1644 | abandoned |
| faucetsdn/ryu Ryu is a component-based software defined networking (SDN) framework written in Python, providing well-defined APIs for building network ma… | 32 | 1605 | abandoned |
| jkpang/PPNetworkHelper PPNetworkHelper is an Objective-C wrapper around AFNetworking 3.x and YYCache for iOS, providing simple one-line APIs for GET/POST requests… | 10 | 1571 | abandoned |
| fossasia/CommonsNet CommonsNet is a web application for collecting and sharing details about WiFi networks, especially open WiFi sharing terms and legal requir… | 10 | 1532 | abandoned |
| huhamhire/huhamhire-hosts A Python utility for managing the system hosts file to bypass internet censorship and access blocked websites like Google, YouTube, and Fac… | 10 | 1517 | abandoned |
| fossasia/KikiAuth KikiAuth is a LuCI-based OpenWrt application that acts as an alternative auth server for WifiDog, enabling captive-portal authentication vi… | 32 | 1491 | abandoned |
| mesalock-linux/mesalink MesaLink is a memory-safe TLS library written in Rust that provides an OpenSSL-compatible C API, implemented on top of rustls, webpki, and … | 23 | 1482 | abandoned |
| qiwihui/hiwifi-ss A shell-script-based installer that adds Shadowsocks proxy support to HiWiFi (JiSu) routers, including a router admin UI integration, dnsma… | 10 | 1462 | abandoned |
| bumptech/stud Stud is a scalable TLS/SSL termination proxy that unwraps encrypted connections and forwards plaintext traffic to a backend like HAProxy or… | 10 | 1421 | abandoned |
| go-ping/ping go-ping is an ICMP echo (ping) library for Go, allowing programs to send ICMP Echo Requests, receive replies, and collect RTT statistics. I… | 23 | 1418 | abandoned |
| jewel/clearskies ClearSkies is an open-source file synchronization program inspired by BitTorrent Sync, allowing direct peer-to-peer sharing between compute… | 32 | 1407 | abandoned |
| yonggekkk/Doprax-Xray A one-click shell script that deploys an Xray-core proxy server on the Doprax container platform, running five protocols (vless, vmess, tro… | 32 | 1406 | abandoned |
| ValdikSS/blockcheck BlockCheck is a Python utility that detects the type of website blocking used by Russian ISPs, including DNS tampering, DPI filtering, SSL … | 10 | 1391 | abandoned |
| jvns/dnspeep dnspeep is a Rust command-line tool that captures DNS packets on port 53 using libpcap and displays DNS queries and responses together in r… | 23 | 1383 | abandoned |
| fatih/pool A thread-safe connection pool for Go's net.Conn interface that manages and reuses network connections via a channel-based pool. The project… | 10 | 1368 | abandoned |
| bigeagle/gohop GoHop is a VPN implemented in Go with built-in encryption and traffic obfuscation, designed to evade deep packet inspection and censorship … | 23 | 1365 | abandoned |
| paradiseduo/ShadowsocksX-NG-R8 A macOS ShadowsocksR (SSR) proxy client, a fork of ShadowsocksX-NG-R, used to route traffic through ShadowsocksR servers to bypass censorsh… | 10 | 1359 | abandoned |
| rdesktop/rdesktop rdesktop is an open-source UNIX client for the Microsoft Remote Desktop Protocol (RDP), presenting a Windows desktop over the X Window Syst… | 56 | 1354 | abandoned |
| acheong08/ChatGPTProxy A Go-based proxy server that bypasses Cloudflare protection on ChatGPT using TLS spoofing, exposing ChatGPT through an API-like interface. … | 10 | 1329 | abandoned |
| vilyever/AndroidSocketClient A Java library for Android that wraps TCP socket client (and simple server) functionality with helpers for heartbeats, connection timeouts,… | 32 | 1303 | abandoned |
| elvanderb/TCP-32764 A collection of Python proof-of-concept code and research notes documenting a hidden backdoor listening on TCP port 32764 in Linksys, Netge… | 32 | 1292 | abandoned |
| matiasinsaurralde/facebook-tunnel A Linux tool that tunnels Internet traffic through Facebook chat by sending packets as base64-encoded messages, using a tuntap interface an… | 32 | 1290 | abandoned |
| rs-ipfs/rust-ipfs An implementation of the InterPlanetary File System (IPFS) in Rust, providing a blockstore, libp2p integration with DHT content discovery a… | 10 | 1279 | abandoned |
| lanx-x/VRouter VRouter is a desktop application that runs a lightweight OpenWRT virtual machine via VirtualBox to provide transparent TCP/UDP proxying on … | 10 | 1277 | abandoned |
| user1121114685/koolproxyR KoolProxyR is a Shell-based ad-blocking plugin for KoolShare LEDE router firmware, bundling filter rules like EasyList China, Fanboy, and y… | 32 | 1233 | abandoned |
| akshaykmr/hogwatch Hogwatch is a bandwidth monitor that shows per-process network transfer using nethogs data plotted in a web-based GUI. It is a Python 2.7 a… | 32 | 1218 | abandoned |
| CNSRE/HTTPDNSLib An Android HTTPDNS library developed by the mobile Weibo team that resolves domain names to IP addresses over HTTP instead of traditional U… | 32 | 1198 | abandoned |
| tomchop/malcom Malcom is a Python web application that analyzes network traffic (including pcaps) and visualizes malware communications as graphs, cross-r… | 23 | 1173 | abandoned |
| gaboolic/vercel-reverse-fast A Vercel-deployable reverse proxy configuration that accelerates access to OpenAI/ChatGPT and other blocked services like GitHub and Google… | 10 | 1173 | abandoned |
| PharosVip/Pharos-Android-Test Pharos Pro is an Android proxy client supporting Trojan, Trojan-Go, V2Ray, Shadowsocks, and SSR protocols. It is the test build channel of … | 23 | 1172 | abandoned |
| google/proto-quic proto-quic was a standalone checkout and build wrapper for Google's QUIC protocol implementation extracted from Chromium. It is now depreca… | 10 | 1169 | abandoned |
| amurcanov/proxy-turn-vk-android WDTT is an Android application that establishes a WireGuard tunnel over TURN/DTLS, routing traffic through VK's TURN media-relay servers to… | 10 | 1158 | abandoned |
| apache/trafficcontrol Apache Traffic Control is an open-source implementation of a full Content Delivery Network, built around Apache Traffic Server as the cachi… | 10 | 1155 | abandoned |
| troglobit/inadyn In-a-Dyn is a small Dynamic DNS (DDNS) client written in C that keeps DNS hostnames in sync with a changing public IP address, with HTTPS s… | 10 | 1152 | abandoned |
| Lede-Inc/LDNetDiagnoService_IOS An Objective-C iOS library that performs network diagnostics on a specified domain (typically a backend API host) using ping and traceroute… | 32 | 1149 | abandoned |
| TChannel TChannel is a network multiplexing and framing protocol for general-purpose RPC, with peer libraries in Node.js, Python, Go, and Java. It s… | 10 | 1149 | abandoned |
| dowsnature/dowsDNS A small Python DNS server that resolves domains via custom hosts files and wildcard records to bypass DNS poisoning by the Great Firewall o… | 23 | 1148 | abandoned |
| cfwtf/clash_for_windows A backup mirror of the final release files of Clash for Windows (Fndroid/clash_for_windows_pkg), a popular GUI proxy client based on Clash.… | 18 | 1146 | abandoned |
| out0fmemory/GoAgent-Always-Available A maintained fork of the classic GoAgent proxy that periodically scans for usable Google GAE/GWS IP addresses and ships an automated IP-fet… | 10 | 1125 | abandoned |
| Mana MANA is a toolkit for rogue access point (evilAP) attacks, implementing improved KARMA attacks via a modified hostapd plus MitM configurati… | 23 | 1119 | abandoned |
| vesche/scanless A Python CLI utility and library that scrapes online port scanning websites to perform port scans on a target IP or domain on your behalf. … | 10 | 1119 | abandoned |
| likuai2010/ClashMeta A Clash Meta (Mihomo) proxy client ported to HarmonyOS Next using Go, one of the first open-source Go application ports for that platform. … | 31 | 1118 | abandoned |
| ezaquarii/vpn-at-home A self-hosted web application (Django + Vue.js) that provides 1-click deployment of an OpenVPN server to a VPS, with a management console f… | 10 | 1105 | abandoned |
| srsran/srsRAN_Project srsRAN Project is an open-source O-RAN 5G CU/DU software suite from Software Radio Systems, implementing a full-stack 5G radio access netwo… | 10 | 1099 | abandoned |
| adamdunkels/uip uIP is a very small TCP/IP stack implementation written in C by Adam Dunkels, designed for resource-constrained embedded systems. This repo… | 32 | 1088 | abandoned |
| python/asyncio The historical development repository for asyncio, Python's standard library for writing concurrent code with async/await syntax. Developme… | 10 | 1081 | abandoned |
| arnaucube/coffeeMiner CoffeeMiner is a Python tool that performs a man-in-the-middle attack on a WiFi/LAN network, injecting a JavaScript cryptocurrency miner in… | 32 | 1075 | abandoned |
| Service Mesh Interface Service Mesh Interface (SMI) is a CNCF specification defining a standard, provider-agnostic set of Kubernetes CRD-based APIs for service me… | 10 | 1059 | abandoned |
| EFForg/crocodilehunter Crocodile Hunter is an EFF tool that detects fake 4G/LTE cell towers (IMSI catchers/stingrays) using software-defined radios like LimeSDR, … | 10 | 1059 | abandoned |
| crosbymichael/skydock Skydock is a Go service that monitors Docker container lifecycle events and automatically registers container services as DNS records in Sk… | 32 | 1051 | abandoned |
| runfalk/synology-wireguard A set of build scripts that packages the WireGuard kernel module and wg/wg-quick command-line tools for Synology DSM NAS devices. It ships … | 10 | 1043 | abandoned |
| LetsGo666/LetsGo_1 A repository that claims to be GitHub profile config files but actually serves as an advertisement for 'LetsGo' (快连), a commercial VPN/circ… | 32 | 993 | abandoned |
| torvalds/linux The official source tree of the Linux kernel, the core of Linux operating systems that manages hardware, system resources, and fundamental … | 77 | 251470 | stable |
| Kubernetes Kubernetes (K8s) is an open-source container orchestration system for automating the deployment, scaling, and management of containerized a… | 94 | 128491 | stable |
| LocalSend LocalSend is a free, open-source, cross-platform app for securely sharing files and messages with nearby devices over the local network, ac… | 97 | 95060 | stable |
| Caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default… | 94 | 77555 | stable |
| lysine-dev/okhttp OkHttp is a meticulous HTTP client library for the JVM, Android, and GraalVM, written in Kotlin. It provides efficient HTTP/2 and HTTP/1.1 … | 77 | 47090 | stable |
| Algo VPN Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 73 | 30406 | active |
| valyala/fasthttp A high-performance HTTP server and client library for Go, optimized for zero memory allocations in hot paths and up to 10x faster than the … | 99 | 23482 | stable |
| BCC BPF Compiler Collection (BCC) is a toolkit for writing efficient eBPF-based kernel tracing and manipulation programs, with instrumentation … | 89 | 22707 | active |
| Teleport Teleport is an identity-aware access proxy and certificate authority that provides unified, credential-free access to SSH servers, Kubernet… | 88 | 20995 | stable |
| Tencent/mars Mars is a cross-platform network and infrastructure component library developed by Tencent's WeChat team, comprising STN (signaling/network… | 38 | 17659 | stable |