Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| passteque/gluetun Gluetun is a lightweight VPN client packaged as a thin Alpine Docker container, written in Go, supporting many VPN providers via OpenVPN or… | 94 | 15598 | active |
| Karing Karing is a free, cross-platform proxy utility built with Flutter that serves as a GUI for a modified sing-box core. It supports Clash, V2r… | 93 | 15593 | active |
| Termix Termix is a free, open-source, self-hosted platform for managing servers, combining SSH terminals, remote desktop (RDP, VNC, Telnet), SFTP … | 90 | 15588 | active |
| eCapture eCapture is an eBPF-based CLI tool that captures SSL/TLS plaintext traffic without needing CA certificates, supporting OpenSSL, LibreSSL, B… | 99 | 15501 | active |
| LibreSpeed LibreSpeed is a self-hosted, lightweight HTML5 internet speed test application built with JavaScript, XMLHttpRequest, and Web Workers. It m… | 98 | 15235 | stable |
| txthinking/brook Brook is a cross-platform programmable network tool written in Go that provides encrypted proxy/VPN functionality with system-level network… | 85 | 15192 | active |
| CrowdSec CrowdSec is an open-source, crowdsourced security engine that analyzes logs and HTTP requests to detect malicious behavior and block offend… | 93 | 15138 | stable |
| nelvko/clash-for-linux-install A Shell-based one-click installer and management tool (clashctl) for deploying the mihomo/Clash proxy core on Linux, including web dashboar… | 71 | 14985 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 97 | 14605 | stable |
| shadow1ng/fscan Fscan is a comprehensive intranet scanning tool written in Go that automates host discovery, port scanning, service identification, weak-pa… | 91 | 14590 | active |
| XPipe XPipe is a desktop connection hub for managing entire server infrastructures from a local machine, integrating SSH, Docker, Kubernetes, hyp… | 94 | 14584 | active |
| mobile-shell/mosh Mosh is a remote terminal application that replaces interactive SSH sessions with a UDP-based protocol that survives roaming, IP changes, s… | 52 | 14505 | stable |
| coturn coturn is a free open-source implementation of TURN and STUN servers written in C, serving as a VoIP/WebRTC media traffic NAT traversal ser… | 97 | 14474 | stable |
| CoreDNS CoreDNS is a fast and flexible DNS server and forwarder written in Go that chains plugins, each performing a DNS function. It is a CNCF gra… | 92 | 14365 | stable |
| rathole-org/rathole rathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust, exposing services behind NAT to the internet vi… | 82 | 14260 | stable |
| AUK9527/Are-u-ok A collection of third-party iStore plugin packages (ipk) for iStoreOS/OpenWrt 22.03 and 24.10, distributed for aarch64_cortex-a53, aarch64_… | 66 | 14241 | active |
| evilsocket/opensnitch OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch, intercepting and filtering outbound connections per a… | 73 | 14149 | active |
| EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 87 | 14099 | active |
| wanghongenpin/proxypin ProxyPin is a free, open-source HTTP(S) traffic capture application built with Flutter, supporting Windows, Mac, Linux, Android, and iOS. I… | 91 | 14047 | active |
| OpenNHP/opennhp OpenNHP is a lightweight, cryptography-powered open-source toolkit written in Go that implements the Cloud Security Alliance's Network-infr… | 97 | 13936 | active |
| FreeRDP FreeRDP is a free, open-source implementation of Microsoft's Remote Desktop Protocol (RDP), provided as a C library plus client application… | 99 | 13827 | stable |
| Portmaster Portmaster is a free and open-source application firewall and privacy suite for Windows and Linux desktops. It intercepts all network traff… | 95 | 13824 | active |
| fancyss fancyss is a transparent proxy plugin for ASUS routers running asuswrt/asuswrt-merlin firmware with a software center. It supports multiple… | 67 | 13792 | active |
| nmap/nmap Nmap is the industry-standard open-source network scanner for host discovery, port scanning, service/version detection, and OS fingerprinti… | 77 | 13743 | stable |
| DNSCrypt/dnscrypt-proxy dnscrypt-proxy is a flexible local DNS proxy that encrypts and authenticates DNS traffic using DNSCrypt v2, DNS-over-HTTPS, Anonymized DNS,… | 90 | 13730 | stable |
| 墨鱼去广告 (Cuttlefish AdBlock) A curated collection of ad-blocking rules, rewrite scripts, and ready-made configuration files for proxy tools like QuantumultX, Surge, Sha… | 65 | 13709 | active |
| BPB Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 83 | 13647 | active |
| juewuy/ShellCrash ShellCrash is a Shell script tool for deploying and managing mihomo and sing-box proxy client kernels on Linux-based devices. It supports s… | 76 | 13597 | active |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 66 | 13597 | active |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 94 | 13595 | stable |
| PeerJS PeerJS is a JavaScript/TypeScript library that wraps WebRTC into a simple, event-driven peer-to-peer API for data channels and audio/video … | 50 | 13453 | active |
| Tengine Tengine is a high-performance web server and reverse proxy forked from nginx, developed by Taobao/Alibaba since 2011. It is 100% nginx-comp… | 83 | 13385 | active |
| libnyanpasu/clash-nyanpasu Clash Nyanpasu is a cross-platform desktop GUI for Clash-based proxy cores (Clash Premium, Mihomo, Clash Rust, Meow), built with Tauri, Rus… | 95 | 13231 | active |
| cloudflare/quiche quiche is Cloudflare's Rust implementation of the QUIC transport protocol and HTTP/3 as specified by the IETF. It exposes a low-level API f… | 98 | 12758 | stable |
| orf/gping gping is a cross-platform command-line ping utility that visualizes ping latency as a live graph in the terminal. It supports graphing mult… | 92 | 12691 | active |
| secdev/scapy Scapy is a powerful Python-based interactive packet manipulation program and library that can forge, decode, send, capture, and match packe… | 88 | 12599 | stable |
| iroh Iroh is a Rust networking library that establishes direct peer-to-peer QUIC connections between endpoints dialed by public key, with NAT ho… | 96 | 12582 | active |
| robbiehanson/CocoaAsyncSocket CocoaAsyncSocket is an asynchronous TCP and UDP socket networking library for macOS, iOS, and tvOS, built on Grand Central Dispatch. It pro… | 64 | 12440 | stable |
| Shopify/toxiproxy Toxiproxy is a TCP proxy written in Go for simulating network and system conditions such as latency, bandwidth limits, and connection failu… | 66 | 12364 | stable |
| vanhauser-thc/thc-hydra THC-Hydra is a parallelized network login cracker supporting dozens of protocols (SSH, FTP, HTTP forms, SMB, RDP, databases, and more). It … | 74 | 12322 | active |
| stackryze/FreeDomains Stackryze Domains is a free managed subdomain service that lets developers, students, and open-source projects claim subdomains under sever… | 59 | 12173 | active |
| jason5ng32/MyIP MyIP (IPCheck.ing) is an open-source, self-hostable web application that acts as an all-in-one IP toolbox. It shows your IPv4/IPv6 and geol… | 94 | 12156 | active |
| kubeshark/kubeshark Kubeshark is an eBPF-powered network observability tool for Kubernetes that indexes cluster-wide L4/L7 traffic with full Kubernetes context… | 99 | 12101 | active |
| libevent libevent is a C library providing a portable event notification API that executes callbacks on file descriptor events, timeouts, and signal… | 91 | 11972 | stable |
| Netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 93 | 11826 | active |
| quic-go/quic-go quic-go is a production-ready, pure Go implementation of the QUIC transport protocol (RFC 9000/9001/9002) with support for HTTP/3, datagram… | 98 | 11794 | stable |
| ImmortalWrt ImmortalWrt is an open-source fork of OpenWrt, a Linux-based operating system for embedded network devices like WiFi routers. It targets ma… | 77 | 11751 | active |
| ekzhang/bore bore is a simple, fast CLI tool written in Rust that creates TCP tunnels to expose local ports to a remote server, bypassing NAT and firewa… | 51 | 11529 | stable |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 65 | 11325 | active |
| pymumu/smartdns SmartDNS is a local DNS server written in C that queries multiple upstream DNS servers concurrently and returns the fastest-responding IP t… | 93 | 11316 | active |
| eclipse-mosquitto/mosquitto Eclipse Mosquitto is an open source MQTT message broker implementing MQTT versions 5.0, 3.1.1, and 3.1, written in C and suitable for devic… | 76 | 11261 | stable |
| panjf2000/gnet gnet is a high-performance, lightweight, event-driven networking framework written in pure Go, built on epoll and kqueue with a reactor pat… | 78 | 11248 | stable |
| mRemoteNG/mRemoteNG mRemoteNG is an open-source, tabbed, multi-protocol remote connections manager for Windows, supporting RDP, VNC, SSH, HTTP/S and more. It l… | 84 | 11119 | active |
| ZeroMQ ZeroMQ (libzmq) is a high-performance, brokerless asynchronous messaging library implementing the ZMTP protocol, providing socket-like abst… | 62 | 11010 | stable |
| nicolaka/netshoot A Docker image packed with network troubleshooting tools (tcpdump, nsenter, dig, curl, and more) designed to be attached to any container, … | 75 | 11008 | active |
| Sub-Store Sub-Store is an advanced proxy subscription manager that parses, transforms, and manages proxy subscription links for clients like Quantumu… | 96 | 10717 | active |
| rofl0r/proxychains-ng ProxyChains-NG is a UNIX CLI tool that uses LD_PRELOAD to hook socket-related libc functions in dynamically linked programs and redirect th… | 64 | 10683 | active |
| xykt/IPQuality A shell-based IP quality check script that reports IP type, risk scores from multiple databases, streaming/AI service unlock status, email … | 69 | 10586 | active |
| tylertreat/comcast Comcast is a Go CLI tool that simulates poor network conditions such as latency, bandwidth limits, and packet loss by wrapping system tools… | 25 | 10516 | stable |
| yonggekkk/sing-box-yg A one-click Shell script for VPS servers that installs and configures five coexisting proxy protocols (Vless-Reality, Vmess-WS/Argo, Hyster… | 62 | 10374 | active |
| Nezha Monitoring Nezha Monitoring is a self-hosted, lightweight server and website monitoring and O&M platform consisting of a central dashboard and lightwe… | 92 | 10329 | active |
| wireshark/wireshark Wireshark is the world's leading open-source network protocol analyzer (packet sniffer) with a Qt GUI, deep inspection of hundreds of proto… | 77 | 10046 | stable |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 97 | 10032 | stable |
| S-UI S-UI is an advanced web panel for managing SagerNet/Sing-Box proxy servers, supporting multiple protocols like VLESS, VMess, Trojan, Hyster… | 91 | 10010 | active |
| Passwall Passwall is a LuCI application for OpenWrt routers that manages multiple proxy clients (Xray, Sing-box, Shadowsocks, Hysteria, etc.) to rou… | 98 | 9948 | active |
| ValveSoftware/GameNetworkingSockets GameNetworkingSockets is a C++ transport layer library for games providing connection-oriented, message-oriented communication over UDP wit… | 92 | 9946 | stable |
| KaringX/clashmi Clash Mi is a cross-platform graphical proxy client built with Flutter that embeds the Mihomo (Clash.Meta) core. It supports subscription-b… | 87 | 9919 | active |
| paramiko/paramiko Paramiko is a pure-Python implementation of the SSHv2 protocol providing both client and server functionality, built on the cryptography li… | 74 | 9861 | stable |
| dotnet/yarp YARP (Yet Another Reverse Proxy) is a .NET library and toolkit for building high-performance, customizable HTTP reverse proxy servers on AS… | 67 | 9627 | stable |
| telekom-security/tpotce T-Pot is an all-in-one, optionally distributed honeypot platform that bundles 20+ honeypots with the Elastic Stack for visualization, live … | 66 | 9547 | active |
| klzgrad/naiveproxy NaïveProxy is a censorship-resistant proxy that uses Chromium's network stack to make proxy traffic indistinguishable from regular Chrome b… | 98 | 9530 | active |
| CFSSL CFSSL is Cloudflare's PKI/TLS toolkit for signing, verifying, and bundling TLS certificates, available as both a command line tool and an H… | 98 | 9483 | stable |
| FreeBSD The official publish-only Git mirror of the FreeBSD source tree, containing the complete kernel, userland, libraries, boot loader, and buil… | 77 | 9398 | stable |
| ermaozi/get_subscribe A Python project that automatically aggregates and republishes free proxy subscription links (Clash, V2Ray, Trojan, SSR/SR formats) that re… | 77 | 9370 | active |
| Hiddify Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 98 | 9362 | active |
| testssl/testssl.sh testssl.sh is a free, bash-based command line tool that checks any server's service on any port for TLS/SSL cipher, protocol, and cryptogra… | 85 | 9218 | active |
| zizifn/edgetunnel A project that runs V2ray proxy inside edge/serverless runtimes, primarily Cloudflare Workers. It lets users deploy a personal proxy endpoi… | 23 | 9216 | active |
| meetecho/janus-gateway Janus is an open-source, general-purpose WebRTC server written in C that sets up media communication with browsers and relays RTP/RTCP and … | 75 | 9168 | stable |
| kubernetes-sigs/external-dns ExternalDNS is a Kubernetes controller that synchronizes exposed Kubernetes Services and Ingresses with external DNS providers such as AWS … | 99 | 9125 | stable |
| Firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 96 | 9121 | active |
| Ackites/Nrfr Nrfr is a root-free Android tool that changes the SIM card country code by calling native system APIs (CarrierConfigLoader) with Shizuku pe… | 34 | 9088 | active |
| smallstep/certificates step-ca is an online private certificate authority (X.509 and SSH) and ACME server for secure, automated certificate management in DevOps e… | 84 | 8939 | active |
| twitter/finagle Finagle is an extensible, fault-tolerant, protocol-agnostic RPC system for the JVM, written in Scala with idiomatic APIs for both Scala and… | 63 | 8867 | stable |
| BornToBeRoot/NETworkManager NETworkManager is a free, open-source Windows application that bundles 27 network management and troubleshooting tools into a unified GUI, … | 86 | 8832 | active |
| vvbbnn00/WARP-Clash-API A self-hosted Python/Flask service that exposes Cloudflare WARP+ as a subscription link for clients like Clash, Surge, and Shadowrocket. It… | 10 | 8822 | active |
| esnet/iperf iperf3 is a command-line tool for actively measuring the maximum achievable bandwidth on IP networks over TCP, UDP, and SCTP. It reports th… | 90 | 8816 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 92 | 8751 | active |
| vi/websocat websocat is a command-line tool for WebSockets, acting like netcat, curl, and socat for ws:// and wss:// connections. It supports both conn… | 68 | 8702 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 96 | 8672 | active |
| stamparm/maltrail Maltrail is a malicious network traffic detection system that matches observed domains, URLs, IP addresses, and User-Agent values against o… | 97 | 8620 | active |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 40 | 8571 | active |
| apple/swift-nio SwiftNIO is a cross-platform, event-driven, non-blocking network application framework for Swift, similar to Netty, for building high-perfo… | 98 | 8533 | stable |
| Meshtastic Meshtastic is an open-source, off-grid mesh communication system that runs on inexpensive LoRa radios, enabling long-range encrypted text m… | 94 | 8446 | active |
| eooce/nodejs-argo A Node.js tool that deploys proxy nodes behind Cloudflare Argo tunnels on PaaS and free-tier platforms, supporting VLESS, VMess, and Trojan… | 70 | 8404 | active |
| facebook/proxygen Proxygen is Facebook's collection of C++ HTTP libraries, providing core HTTP abstractions and an easy-to-use HTTPServer framework. It suppo… | 95 | 8375 | active |
| MetalLB MetalLB is a network load-balancer implementation for bare-metal Kubernetes clusters that provides Services of type LoadBalancer using stan… | 90 | 8355 | active |
| chengaopan/AutoMergePublicNodes An automated aggregator that scrapes and merges publicly available proxy nodes (SS/SSR/V2Ray/Trojan/Clash) from the internet and republishe… | 72 | 8243 | active |
| Lucky Lucky (万吉) is a Go-based all-in-one networking utility for software/hardware routers and embedded Linux devices, bundling IPv6/IPv4 TCP/UDP… | 69 | 8228 | active |
| GUI-for-Cores/GUI.for.SingBox A lightweight, cross-platform desktop GUI application for managing the sing-box proxy core, built with Wails (Go backend) and Vue 3. It off… | 88 | 8203 | active |
| ntop/ntopng ntopng is a web-based network traffic monitoring and cybersecurity application that provides real-time visibility into hosts, applications,… | 86 | 8202 | stable |