Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| NextTrace NextTrace is an open-source, lightweight visual route tracking CLI tool written in Go. It performs traceroute with enriched output includin… | 95 | 8175 | active |
| iStoreOS iStoreOS is an entry-level router and NAS operating system based on OpenWrt, adapted to multiple hardware platforms. It provides a beginner… | 77 | 8153 | active |
| Zeek Zeek (formerly Bro) is an open-source network security monitor and analysis framework that passively inspects network traffic and produces … | 97 | 8123 | stable |
| v1s1t0r1sh3r3/airgeddon A multi-use bash script for auditing wireless networks on Linux, wrapping tools like aircrack-ng to automate attacks such as evil twin, WPS… | 93 | 8035 | active |
| fujiapple852/trippy Trippy is a network diagnostic tool that combines traceroute and ping functionality to help analyze networking issues. It offers a highly c… | 79 | 8035 | active |
| cilium/ebpf ebpf-go is a pure-Go library for loading, modifying, and attaching eBPF programs to hooks in the Linux kernel, with no dependency on libbpf… | 89 | 7998 | stable |
| yarrick/iodine iodine is a C client/server tool that tunnels IPv4 traffic through DNS queries, letting you get network access on firewalled connections wh… | 76 | 7994 | active |
| aceld/zinx Zinx is a lightweight concurrent server framework written in Go, focused on TCP long-connection servers such as game backends. It emphasize… | 70 | 7759 | active |
| aircrack-ng/aircrack-ng Aircrack-ng is a complete suite of command-line tools for assessing WiFi network security, covering packet capture, injection, monitor mode… | 65 | 7705 | active |
| GOST GOST (GO Simple Tunnel) is a Go-based multi-protocol tunnel and proxy tool supporting HTTP, HTTPS, SOCKS5, Shadowsocks, WebSocket, QUIC, KC… | 92 | 7640 | active |
| rustls/rustls Rustls is a modern TLS library written in Rust implementing TLS 1.2 and TLS 1.3 for both clients and servers. It provides secure defaults w… | 96 | 7638 | stable |
| aceberg/WatchYourLAN WatchYourLAN is a lightweight network IP scanner written in Go with a web GUI, designed to discover and track hosts on a local network via … | 49 | 7629 | active |
| ithewei/libhv libhv is a cross-platform C/C++ network library providing an event loop with non-blocking IO and timers, similar to libevent/libuv but with… | 69 | 7563 | active |
| arkime/arkime Arkime is an open-source, large-scale network analysis, full packet capture, and session indexing system that stores traffic in standard PC… | 99 | 7536 | active |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 93 | 7521 | active |
| Marzban Marzban is a self-hosted proxy management panel with a web GUI for managing hundreds of Xray-core-based proxy accounts (VLESS, VMess, Troja… | 79 | 7452 | active |
| Colyseus Colyseus is an authoritative multiplayer game framework for Node.js that provides room-based matchmaking, automatic state synchronization, … | 96 | 7426 | stable |
| Calico Calico is an open-source cloud-native networking and network security platform for Kubernetes, providing pod networking (CNI), network poli… | 99 | 7398 | stable |
| fabiolb/fabio Fabio is an HTTP, HTTPS, TCP, and gRPC reverse proxy and load balancer that configures itself dynamically from service data stored in Consu… | 93 | 7346 | active |
| python-trio/trio Trio is a Python library for async/await-native concurrency and I/O, built around structured concurrency principles. It aims for production… | 90 | 7338 | stable |
| MeshCentral MeshCentral is a self-hosted, web-based remote monitoring and management (RMM) platform built on Node.js. It lets administrators install ag… | 97 | 7332 | active |
| markqvist/Reticulum Reticulum is a cryptography-based networking stack written in Python that builds encrypted, resilient local and wide-area networks over LoR… | 95 | 7281 | active |
| netalertx/NetAlertX NetAlertX is a self-hosted network visibility and asset intelligence platform that performs continuous device discovery and monitoring acro… | 98 | 7279 | active |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 60 | 7215 | active |
| ehang-io/nps NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server written in Go, supporting TCP, UDP, HTTP(S), SOCK… | 23 | 34243 | maintenance |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 76 | 7150 | active |
| tokio-rs/mio Mio is a fast, low-level I/O library for Rust providing non-blocking APIs and OS event notification (epoll, kqueue, IOCP) for building high… | 66 | 7109 | stable |
| Intel Wi-Fi for macOS (itlwm + HeliPort) itlwm is an open-source kernel extension providing Intel Wi-Fi adapter support on macOS, ported largely from OpenBSD's iwm/iwx/net80211 dri… | 23 | 7107 | active |
| erebe/wstunnel wstunnel is a Rust CLI tool that tunnels arbitrary TCP, UDP, Unix socket, or stdio traffic over WebSocket, HTTP2, or WebTransport to bypass… | 98 | 7099 | active |
| guardicore/monkey Infection Monkey is an open-source adversary emulation platform that simulates malware-like self-propagation across a network to test secur… | 28 | 7098 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 74 | 7038 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 62 | 7017 | active |
| 0xERR0R/blocky Blocky is a fast, lightweight DNS proxy and ad-blocker for local networks, written in Go. It blocks ads and malware via external allow/deny… | 97 | 7011 | active |
| Proxyman Proxyman is a native macOS HTTP(S) debugging proxy application that captures, inspects, and mocks HTTP/HTTPS and WebSocket traffic from bro… | 97 | 6991 | active |
| tonymillion/Reachability An ARC and GCD compatible Objective-C Reachability class for iOS and macOS, serving as a drop-in replacement for Apple's Reachability. It n… | 52 | 6945 | stable |
| luckjiawei/frpc-desktop Frpc-Desktop is a free, open-source cross-platform desktop GUI client for FRP (Fast Reverse Proxy) built with Electron, Vue, and TypeScript… | 88 | 6937 | active |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6929 | stable |
| HMBSbige/ShadowsocksR-Windows A Windows GUI client for the ShadowsocksR proxy protocol, built with WPF on .NET 6. It is a maintained fork of the original ShadowsocksR cl… | 10 | 6924 | active |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32878 | maintenance |
| chaifeng/ufw-docker A shell-based tool that fixes the well-known security flaw where Docker bypasses UFW firewall rules and exposes published ports to the publ… | 63 | 6821 | active |
| InterceptSuite/ProxyBridge ProxyBridge is a free, open-source universal proxy client (Proxifier alternative) that transparently redirects TCP and UDP traffic from any… | 85 | 6795 | active |
| wzdnzd/aggregator A Python-based platform that crawls free proxy nodes from sources like Telegram, GitHub, and search engines, validates their liveness, and … | 75 | 6774 | active |
| elazarl/goproxy GoProxy is a Go library for building customized HTTP/HTTPS proxy servers as a net/http handler. It supports regular proxying, CONNECT tunne… | 98 | 6764 | stable |
| processone/ejabberd ejabberd is an open-source, massively scalable real-time messaging platform written in Erlang/OTP that combines an XMPP server, MQTT broker… | 90 | 6733 | stable |
| xrdp xrdp is an open-source RDP server that provides graphical login to remote Linux machines using the Microsoft Remote Desktop Protocol. It ac… | 88 | 6733 | stable |
| btcsuite/btcd btcd is an alternative full-node Bitcoin implementation written in Go that downloads, validates, and serves the blockchain using the same c… | 86 | 6712 | stable |
| romanvht/ByeByeDPI An Android application that runs ByeDPI locally and routes all device traffic through it via Android's VPN mode to bypass DPI-based blockin… | 87 | 6710 | active |
| Suricata Suricata is a high-performance network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring… | 93 | 6683 | stable |
| sub-web A Vue 2.7 web frontend for the subconverter backend that generates proxy subscription configuration links. It provides a browser UI for con… | 67 | 6479 | active |
| Mygod/VPNHotspot An Android app that shares your device's VPN connection over a Wi-Fi hotspot, repeater, or USB/Bluetooth tethering. It requires root access… | 89 | 6472 | active |
| ws A tiny, fast WebSocket library for Go implementing RFC 6455 with a zero-copy, low-level API plus higher-level helpers in the wsutil package… | 49 | 6468 | stable |
| komari-monitor/komari Komari is a lightweight, self-hosted server monitoring application written in Go that tracks server performance via a web dashboard with da… | 83 | 6457 | active |
| AsyncHttpClient/async-http-client AsyncHttpClient (AHC) is a high-performance asynchronous, non-blocking HTTP and WebSocket client library for Java built on Netty. It suppor… | 97 | 6396 | active |
| zmap/zmap ZMap is a fast, stateless single-packet network scanner written in C, designed for Internet-wide network surveys such as scanning the entir… | 84 | 6390 | active |
| Bjorn Bjorn is an autonomous network scanning and offensive security tool that runs on a Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers … | 58 | 6328 | active |
| projectdiscovery/naabu Naabu is a fast, lightweight port scanner written in Go that performs SYN, CONNECT, and UDP scans to enumerate open ports on hosts. It is d… | 87 | 6320 | active |
| seriousm4x/UpSnap UpSnap is a self-hosted wake-on-LAN web application built with SvelteKit, Go, and PocketBase. It provides a dashboard for waking devices wi… | 97 | 6310 | active |
| 666OS/ClashMac ClashMac is a native macOS proxy client built in SwiftUI, wrapping the Clash/Mihomo engine with system proxy and TUN enhanced modes. It pro… | 82 | 6310 | active |
| dae dae is a high-performance transparent proxy solution for Linux built on eBPF, performing traffic splitting directly in the kernel so direct… | 88 | 6308 | active |
| PeerBanHelper PeerBanHelper is a self-hosted Java application that automatically bans unwanted, leeching, and abnormal BitTorrent peers by connecting to … | 85 | 6284 | active |
| jagt/clumsy clumsy is a Windows utility that degrades network conditions in a controlled, interactive way by capturing live packets with WinDivert and … | 43 | 6270 | active |
| BFE BFE (Beyond Front End) is a modern layer 7 load balancer and reverse proxy written in Go, originally developed at Baidu and now a CNCF sand… | 99 | 6264 | active |
| eooce/node-ws A lightweight Node.js serverless proxy application implementing VLESS, Trojan, VMess, and Shadowsocks protocols without a kernel, deployabl… | 81 | 6238 | active |
| reorx/httpstat httpstat is a single-file Python CLI that wraps curl and visualizes HTTP request timing breakdowns (DNS, TCP, TLS, server processing, trans… | 53 | 6222 | active |
| Asio Asio is a cross-platform C++ library for network and low-level I/O programming that provides a consistent asynchronous model using modern C… | 70 | 6216 | stable |
| ldcsaa/HP-Socket HP-Socket is a high-performance network communication component library for C/C++ providing TCP, UDP, HTTP/HTTPS, and WebSocket server, cli… | 86 | 6151 | active |
| Clash for Windows Chinese Clash for Windows Chinese is a modified, Chinese‑localized version of the Clash proxy client with support for the Mihomo core and modern pr… | 86 | 28586 | maintenance |
| Clash for Windows Chinese A Chinese-localized (zh-CN) distribution of Clash for Windows, providing patched app.asar files, a localization patch, and a repackaged ins… | 86 | 28586 | maintenance |
| CNI (Container Network Interface) CNI (Container Network Interface) is a CNF project consisting of a specification and Go libraries for writing plugins that configure networ… | 84 | 6133 | stable |
| anacrolix/torrent A full-featured BitTorrent client library and CLI utilities written in Go, designed to be embedded in other projects. It supports streaming… | 76 | 6122 | stable |
| foxcpp/maddy Maddy is a composable all-in-one mail server written in Go that combines an SMTP MTA/MX, IMAP storage, and email security protocols (DKIM, … | 98 | 6107 | active |
| arvidn/libtorrent libtorrent is a feature-complete, efficient C++ library implementing the BitTorrent protocol with support for popular extensions including … | 94 | 6091 | stable |
| wnlen/clash-for-linux A shell-based management platform for running Clash/Mihomo proxy on Linux, with automatic kernel download, subscription management, node se… | 72 | 6091 | active |
| 1Remote/1Remote 1Remote is a modern personal remote session manager and launcher for Windows that centralizes RDP, SSH, VNC, Telnet, and (S)FTP connections… | 89 | 6089 | active |
| evio evio is a fast, small event-loop networking framework for Go that makes direct epoll and kqueue syscalls instead of using the standard net … | 66 | 6041 | stable |
| tinyproxy/tinyproxy Tinyproxy is a lightweight HTTP/HTTPS proxy daemon for POSIX operating systems, written in C. It supports connection buffering, domain/URL … | 75 | 6010 | stable |
| alexjustesen/speedtest-tracker Speedtest Tracker is a self-hosted web application built with Laravel that runs scheduled Ookla speed tests and tracks internet connection … | 90 | 6006 | active |
| twisted/twisted Twisted is an event-driven networking engine and framework for Python, providing an asynchronous reactor plus implementations of many inter… | 79 | 5992 | stable |
| FluxionNetwork/fluxion Fluxion is a security auditing and social-engineering research tool that retrieves WPA/WPA2 keys via phishing attacks using rogue access po… | 92 | 5985 | active |
| google/bbr Google's distribution of documentation, scripts, and reference materials for the BBR TCP/QUIC congestion control algorithm, including the L… | 75 | 5952 | active |
| EFForg/rayhunter Rayhunter is an EFF-developed Rust tool that detects IMSI catchers (cell-site simulators, also known as stingrays) used for cellular survei… | 93 | 5945 | active |
| w37fhy/QuantumultX A curated collection of ready-made ('lazy') configuration files and synced community scripts for proxy tools like Quantumult X, Surge, Shad… | 60 | 5916 | active |
| Geyser Geyser is a proxy/bridge that translates packets between Minecraft: Bedrock Edition clients and Minecraft: Java Edition servers, enabling t… | 77 | 5911 | active |
| prometheus/blackbox_exporter The Blackbox exporter is a Prometheus exporter that probes endpoints over HTTP, HTTPS, DNS, TCP, ICMP, and gRPC and exposes probe success a… | 73 | 5883 | active |
| NetExec NetExec (nxc) is a community-maintained, open-source network execution tool and successor to CrackMapExec, used for pentesting and red-team… | 74 | 5882 | active |
| microsoft/ethr Ethr is a cross-platform network performance measurement tool written in Go that measures bandwidth, connections/s, packets/s, latency, los… | 60 | 5868 | active |
| easegress-io/easegress Easegress is a cloud-native traffic orchestration system that acts as an API gateway, reverse proxy, and traffic manager with built-in Raft… | 78 | 5867 | active |
| mjl-/mox Mox is an all-in-one, secure, open source mail server written in Go, combining SMTP, IMAP4, webmail, SPF/DKIM/DMARC, DANE/MTA-STS, automati… | 89 | 5864 | active |
| sammwyy/MikuMikuBeam MikuMikuBeam is a network stress testing tool written in Go with a Hatsune Miku-themed web UI, supporting HTTP flood, HTTP bypass, Slowlori… | 60 | 5864 | active |
| mininet/mininet Mininet is a network emulator that creates realistic virtual networks of hosts, switches, and links on a single Linux machine using process… | 23 | 5859 | stable |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 55 | 5849 | active |
| lanproxy lanproxy is a self-hosted NAT traversal / reverse proxy tool that exposes machines behind a firewall to the public internet by forwarding T… | 41 | 5845 | active |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 95 | 5838 | active |
| mscdex/ssh2 SSH2 client and server modules written in pure JavaScript for Node.js. It supports exec, shell, SFTP, port forwarding, and custom HTTP(S) a… | 73 | 5821 | stable |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 71 | 5817 | stable |
| scanopy/scanopy Scanopy is a self-hostable network discovery and documentation tool that scans networks on a schedule and automatically generates live topo… | 78 | 5812 | active |
| fscarmen/sing-box A one-click shell script that deploys and manages a sing-box multi-protocol proxy server on a VPS, supporting protocols like Reality, Hyste… | 73 | 5809 | active |
| xykt/NetQuality A shell-based network quality diagnostic script that checks BGP info, TCP latency, return routes, and speed tests across Chinese and intern… | 62 | 5777 | active |
| elceef/dnstwist dnstwist is a Python command-line tool that generates permutations of a domain name (typos, homoglyphs, IDN tricks) and checks which ones r… | 26 | 5758 | active |
| pfSense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 62 | 5742 | stable |