domain: networking
2089 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| rathole-org/rathole rathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust, exposing services behind NAT to the internet vi… | 86 | 14067 | stable |
| evilsocket/opensnitch OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch, intercepting and filtering outbound connections per a… | 79 | 14009 | active |
| OpenNHP/opennhp OpenNHP is a lightweight, cryptography-powered open-source toolkit written in Go that implements the Cloud Security Alliance's Network-infr… | 94 | 13918 | active |
| wanghongenpin/proxypin ProxyPin is a free, open-source HTTP(S) traffic capture application built with Flutter, supporting Windows, Mac, Linux, Android, and iOS. I… | 90 | 13825 | active |
| fancyss fancyss is a transparent proxy plugin for ASUS routers running asuswrt/asuswrt-merlin firmware with a software center. It supports multiple… | 70 | 13712 | active |
| safing/portmaster Portmaster is a free and open-source application firewall and privacy suite for Windows and Linux desktops. It intercepts all network traff… | 95 | 13612 | active |
| DNSCrypt/dnscrypt-proxy dnscrypt-proxy is a flexible local DNS proxy that encrypts and authenticates DNS traffic using DNSCrypt v2, DNS-over-HTTPS, Anonymized DNS,… | 93 | 13600 | stable |
| FreeRDP/FreeRDP FreeRDP is a free, open-source implementation of Microsoft's Remote Desktop Protocol (RDP), provided as a C library plus client application… | 99 | 13593 | stable |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 79 | 13530 | stable |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 70 | 13503 | active |
| ddgksf2013/ddgksf2013 A curated collection of ad-blocking rules, rewrite scripts, and ready-made configuration files for proxy tools like QuantumultX, Surge, Sha… | 69 | 13496 | active |
| nmap/nmap Nmap is the industry-standard open-source network scanner for host discovery, port scanning, service/version detection, and OS fingerprinti… | 77 | 13465 | stable |
| PeerJS PeerJS is a JavaScript/TypeScript library that wraps WebRTC into a simple, event-driven peer-to-peer API for data channels and audio/video … | 54 | 13431 | active |
| alibaba/tengine Tengine is a high-performance web server and reverse proxy forked from nginx, developed by Taobao/Alibaba since 2011. It is 100% nginx-comp… | 86 | 13338 | active |
| EasyTier/EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 89 | 13324 | active |
| bia-pain-bache/BPB-Worker-Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 88 | 13240 | active |
| juewuy/ShellCrash ShellCrash is a Shell script tool for deploying and managing mihomo and sing-box proxy client kernels on Linux-based devices. It supports s… | 78 | 13222 | active |
| libnyanpasu/clash-nyanpasu Clash Nyanpasu is a cross-platform desktop GUI for Clash-based proxy cores (Clash Premium, Mihomo, Clash Rust, Meow), built with Tauri, Rus… | 62 | 13149 | active |
| dnshe/DNSHE-FreeDomains DNSHE Free Domains is a free domain registration and DNS resolution service offering subdomains under public suffixes like us.ci, cc.cd, de… | 53 | 13104 | active |
| orf/gping gping is a cross-platform command-line ping utility that visualizes ping latency as a live graph in the terminal. It supports graphing mult… | 88 | 12649 | active |
| secdev/scapy Scapy is a powerful Python-based interactive packet manipulation program and library that can forge, decode, send, capture, and match packe… | 75 | 12501 | stable |
| robbiehanson/CocoaAsyncSocket CocoaAsyncSocket is an asynchronous TCP and UDP socket networking library for macOS, iOS, and tvOS, built on Grand Central Dispatch. It pro… | 63 | 12450 | stable |
| n0-computer/iroh Iroh is a Rust networking library that establishes direct peer-to-peer QUIC connections between endpoints dialed by public key, with NAT ho… | 99 | 12305 | active |
| Shopify/toxiproxy Toxiproxy is a TCP proxy written in Go for simulating network and system conditions such as latency, bandwidth limits, and connection failu… | 74 | 12285 | stable |
| vanhauser-thc/thc-hydra THC-Hydra is a parallelized network login cracker supporting dozens of protocols (SSH, FTP, HTTP forms, SMB, RDP, databases, and more). It … | 80 | 12200 | active |
| kubeshark/kubeshark Kubeshark is an eBPF-powered network observability tool for Kubernetes that indexes cluster-wide L4/L7 traffic with full Kubernetes context… | 98 | 12059 | active |
| libevent/libevent libevent is a C library providing a portable event notification API that executes callbacks on file descriptor events, timeouts, and signal… | 96 | 11942 | stable |
| cloudflare/quiche quiche is Cloudflare's Rust implementation of the QUIC transport protocol and HTTP/3 as specified by the IETF. It exposes a low-level API f… | 96 | 11793 | stable |
| gravitl/netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 91 | 11763 | active |
| jason5ng32/MyIP MyIP (IPCheck.ing) is an open-source, self-hostable web application that acts as an all-in-one IP toolbox. It shows your IPv4/IPv6 and geol… | 94 | 11756 | active |
| quic-go/quic-go quic-go is a production-ready, pure Go implementation of the QUIC transport protocol (RFC 9000/9001/9002) with support for HTTP/3, datagram… | 97 | 11750 | stable |
| immortalwrt/immortalwrt ImmortalWrt is an open-source fork of OpenWrt, a Linux-based operating system for embedded network devices like WiFi routers. It targets ma… | 77 | 11498 | active |
| ekzhang/bore bore is a simple, fast CLI tool written in Rust that creates TCP tunnels to expose local ports to a remote server, bypassing NAT and firewa… | 55 | 11437 | stable |
| pymumu/smartdns SmartDNS is a local DNS server written in C that queries multiple upstream DNS servers concurrently and returns the fastest-responding IP t… | 97 | 11273 | active |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 68 | 11247 | active |
| panjf2000/gnet gnet is a high-performance, lightweight, event-driven networking framework written in pure Go, built on epoll and kqueue with a reactor pat… | 84 | 11235 | stable |
| eclipse-mosquitto/mosquitto Eclipse Mosquitto is an open source MQTT message broker implementing MQTT versions 5.0, 3.1.1, and 3.1, written in C and suitable for devic… | 77 | 11158 | stable |
| mRemoteNG/mRemoteNG mRemoteNG is an open-source, tabbed, multi-protocol remote connections manager for Windows, supporting RDP, VNC, SSH, HTTP/S and more. It l… | 81 | 11070 | active |
| ZeroMQ ZeroMQ (libzmq) is a high-performance, brokerless asynchronous messaging library implementing the ZMTP protocol, providing socket-like abst… | 65 | 10972 | stable |
| nicolaka/netshoot A Docker image packed with network troubleshooting tools (tcpdump, nsenter, dig, curl, and more) designed to be attached to any container, … | 73 | 10959 | active |
| rofl0r/proxychains-ng ProxyChains-NG is a UNIX CLI tool that uses LD_PRELOAD to hook socket-related libc functions in dynamically linked programs and redirect th… | 58 | 10672 | active |
| stackryze/FreeDomains Stackryze Domains is a free managed subdomain service that lets developers, students, and open-source projects claim subdomains under sever… | 60 | 10631 | active |
| tylertreat/comcast Comcast is a Go CLI tool that simulates poor network conditions such as latency, bandwidth limits, and packet loss by wrapping system tools… | 28 | 10512 | stable |
| sub-store-org/Sub-Store Sub-Store is an advanced proxy subscription manager that parses, transforms, and manages proxy subscription links for clients like Quantumu… | 95 | 10347 | active |
| nezhahq/nezha Nezha Monitoring is a self-hosted, lightweight server and website monitoring and O&M platform consisting of a central dashboard and lightwe… | 94 | 10278 | active |
| xykt/IPQuality A shell-based IP quality check script that reports IP type, risk scores from multiple databases, streaming/AI service unlock status, email … | 68 | 10139 | active |
| yonggekkk/sing-box-yg A one-click Shell script for VPS servers that installs and configures five coexisting proxy protocols (Vless-Reality, Vmess-WS/Argo, Hyster… | 62 | 9977 | active |
| Openwrt-Passwall/openwrt-passwall Passwall is a LuCI application for OpenWrt routers that manages multiple proxy clients (Xray, Sing-box, Shadowsocks, Hysteria, etc.) to rou… | 99 | 9879 | active |
| ValveSoftware/GameNetworkingSockets GameNetworkingSockets is a C++ transport layer library for games providing connection-oriented, message-oriented communication over UDP wit… | 95 | 9865 | stable |
| paramiko/paramiko Paramiko is a pure-Python implementation of the SSHv2 protocol providing both client and server functionality, built on the cryptography li… | 69 | 9837 | stable |
| alireza0/s-ui S-UI is an advanced web panel for managing SagerNet/Sing-Box proxy servers, supporting multiple protocols like VLESS, VMess, Trojan, Hyster… | 91 | 9787 | active |
| wireshark/wireshark Wireshark is the world's leading open-source network protocol analyzer (packet sniffer) with a Qt GUI, deep inspection of hundreds of proto… | 77 | 9782 | stable |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 94 | 9655 | stable |
| dotnet/yarp YARP (Yet Another Reverse Proxy) is a .NET library and toolkit for building high-performance, customizable HTTP reverse proxy servers on AS… | 70 | 9603 | stable |
| cloudflare/cfssl CFSSL is Cloudflare's PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as both a command line tool and an H… | 58 | 9462 | stable |
| telekom-security/tpotce T-Pot is an all-in-one, optionally distributed honeypot platform that bundles 20+ honeypots with the Elastic Stack for visualization, live … | 67 | 9443 | active |
| klzgrad/naiveproxy NaïveProxy is a censorship-resistant proxy that uses Chromium's network stack to make proxy traffic indistinguishable from regular Chrome b… | 92 | 9407 | active |
| freebsd/freebsd-src The official publish-only Git mirror of the FreeBSD source tree, containing the complete kernel, userland, libraries, boot loader, and buil… | 77 | 9294 | stable |
| hiddify/Hiddify-Manager Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 94 | 9237 | active |
| ermaozi/get_subscribe A Python project that automatically aggregates and republishes free proxy subscription links (Clash, V2Ray, Trojan, SSR/SR formats) that re… | 77 | 9235 | active |
| testssl/testssl.sh testssl.sh is a free, bash-based command line tool that checks any server's service on any port for TLS/SSL cipher, protocol, and cryptogra… | 88 | 9181 | active |
| meetecho/janus-gateway Janus is an open-source, general-purpose WebRTC server written in C that sets up media communication with browsers and relays RTP/RTCP and … | 75 | 9156 | stable |
| kubernetes-sigs/external-dns ExternalDNS is a Kubernetes controller that synchronizes exposed Kubernetes Services and Ingresses with external DNS providers such as AWS … | 99 | 9071 | stable |
| zizifn/edgetunnel A project that runs V2ray proxy inside edge/serverless runtimes, primarily Cloudflare Workers. It lets users deploy a personal proxy endpoi… | 23 | 9045 | active |
| firezone/firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 95 | 9042 | active |
| KaringX/clashmi Clash Mi is a cross-platform graphical proxy client built with Flutter that embeds the Mihomo (Clash.Meta) core. It supports subscription-b… | 85 | 9007 | active |
| twitter/finagle Finagle is an extensible, fault-tolerant, protocol-agnostic RPC system for the JVM, written in Scala with idiomatic APIs for both Scala and… | 66 | 8864 | stable |
| vvbbnn00/WARP-Clash-API A self-hosted Python/Flask service that exposes Cloudflare WARP+ as a subscription link for clients like Clash, Surge, and Shadowrocket. It… | 10 | 8829 | active |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 91 | 8779 | active |
| Ackites/Nrfr Nrfr is a root-free Android tool that changes the SIM card country code by calling native system APIs (CarrierConfigLoader) with Shizuku pe… | 37 | 8733 | active |
| esnet/iperf iperf3 is a command-line tool for actively measuring the maximum achievable bandwidth on IP networks over TCP, UDP, and SCTP. It reports th… | 80 | 8718 | active |
| BornToBeRoot/NETworkManager NETworkManager is a free, open-source Windows application that bundles 27 network management and troubleshooting tools into a unified GUI, … | 88 | 8709 | active |
| vi/websocat websocat is a command-line tool for WebSockets, acting like netcat, curl, and socat for ws:// and wss:// connections. It supports both conn… | 74 | 8673 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 93 | 8641 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 99 | 8598 | active |
| stamparm/maltrail Maltrail is a malicious network traffic detection system that matches observed domains, URLs, IP addresses, and User-Agent values against o… | 98 | 8587 | active |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 44 | 8550 | active |
| apple/swift-nio SwiftNIO is a cross-platform, event-driven, non-blocking network application framework for Swift, similar to Netty, for building high-perfo… | 97 | 8510 | stable |
| facebook/proxygen Proxygen is Facebook's collection of C++ HTTP libraries, providing core HTTP abstractions and an easy-to-use HTTPServer framework. It suppo… | 95 | 8375 | active |
| metallb/metallb MetalLB is a network load-balancer implementation for bare-metal Kubernetes clusters that provides Services of type LoadBalancer using stan… | 94 | 8333 | active |
| eooce/nodejs-argo A Node.js tool that deploys proxy nodes behind Cloudflare Argo tunnels on PaaS and free-tier platforms, supporting VLESS, VMess, and Trojan… | 71 | 8300 | active |
| Meshtastic Meshtastic is an open-source, off-grid mesh communication system that runs on inexpensive LoRa radios, enabling long-range encrypted text m… | 96 | 8212 | active |
| nxtrace/NTrace-core NextTrace is an open-source, lightweight visual route tracking CLI tool written in Go. It performs traceroute with enriched output includin… | 99 | 8123 | active |
| ntop/ntopng ntopng is a web-based network traffic monitoring and cybersecurity application that provides real-time visibility into hosts, applications,… | 73 | 8114 | stable |
| GUI-for-Cores/GUI.for.SingBox A lightweight, cross-platform desktop GUI application for managing the sing-box proxy core, built with Wails (Go backend) and Vue 3. It off… | 91 | 8107 | active |
| gdy666/lucky Lucky (万吉) is a Go-based all-in-one networking utility for software/hardware routers and embedded Linux devices, bundling IPv6/IPv4 TCP/UDP… | 75 | 8084 | active |
| istoreos/istoreos iStoreOS is an entry-level router and NAS operating system based on OpenWrt, adapted to multiple hardware platforms. It provides a beginner… | 77 | 8013 | active |
| chengaopan/AutoMergePublicNodes An automated aggregator that scrapes and merges publicly available proxy nodes (SS/SSR/V2Ray/Trojan/Clash) from the internet and republishe… | 70 | 7989 | active |
| yarrick/iodine iodine is a C client/server tool that tunnels IPv4 traffic through DNS queries, letting you get network access on firewalled connections wh… | 50 | 7956 | active |
| v1s1t0r1sh3r3/airgeddon A multi-use bash script for auditing wireless networks on Linux, wrapping tools like aircrack-ng to automate attacks such as evil twin, WPS… | 93 | 7952 | active |
| cilium/ebpf ebpf-go is a pure-Go library for loading, modifying, and attaching eBPF programs to hooks in the Linux kernel, with no dependency on libbpf… | 92 | 7933 | stable |
| zeek/zeek Zeek (formerly Bro) is an open-source network security monitor and analysis framework that passively inspects network traffic and produces … | 99 | 7908 | stable |
| aceld/zinx Zinx is a lightweight concurrent server framework written in Go, focused on TCP long-connection servers such as game backends. It emphasize… | 76 | 7756 | active |
| rustls/rustls Rustls is a modern TLS library written in Rust implementing TLS 1.2 and TLS 1.3 for both clients and servers. It provides secure defaults w… | 98 | 7585 | stable |
| aceberg/WatchYourLAN WatchYourLAN is a lightweight network IP scanner written in Go with a web GUI, designed to discover and track hosts on a local network via … | 51 | 7549 | active |
| aircrack-ng/aircrack-ng Aircrack-ng is a complete suite of command-line tools for assessing WiFi network security, covering packet capture, injection, monitor mode… | 62 | 7541 | active |
| ithewei/libhv libhv is a cross-platform C/C++ network library providing an event loop with non-blocking IO and timers, similar to libevent/libuv but with… | 72 | 7539 | active |
| fujiapple852/trippy Trippy is a network diagnostic tool that combines traceroute and ping functionality to help analyze networking issues. It offers a highly c… | 79 | 7534 | active |
| arkime/arkime Arkime is an open-source, large-scale network analysis, full packet capture, and session indexing system that stores traffic in standard PC… | 99 | 7459 | active |
| go-gost/gost GOST (GO Simple Tunnel) is a Go-based multi-protocol tunnel and proxy tool supporting HTTP, HTTPS, SOCKS5, Shadowsocks, WebSocket, QUIC, KC… | 84 | 7355 | active |