domain: networking
2089 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| fabiolb/fabio Fabio is an HTTP, HTTPS, TCP, and gRPC reverse proxy and load balancer that configures itself dynamically from service data stored in Consu… | 94 | 7338 | active |
| projectcalico/calico Calico is an open-source cloud-native networking and network security platform for Kubernetes, providing pod networking (CNI), network poli… | 99 | 7336 | stable |
| python-trio/trio Trio is a Python library for async/await-native concurrency and I/O, built around structured concurrency principles. It aims for production… | 94 | 7307 | stable |
| Gozargah/Marzban Marzban is a self-hosted proxy management panel with a web GUI for managing hundreds of Xray-core-based proxy accounts (VLESS, VMess, Troja… | 72 | 7301 | active |
| colyseus/colyseus Colyseus is an authoritative multiplayer game framework for Node.js that provides room-based matchmaking, automatic state synchronization, … | 95 | 7226 | stable |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 63 | 7185 | active |
| ehang-io/nps NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server written in Go, supporting TCP, UDP, HTTP(S), SOCK… | 23 | 34175 | maintenance |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 77 | 7123 | active |
| Intel Wi-Fi for macOS (itlwm + HeliPort) itlwm is an open-source kernel extension providing Intel Wi-Fi adapter support on macOS, ported largely from OpenBSD's iwm/iwx/net80211 dri… | 23 | 7111 | active |
| Ylianst/MeshCentral MeshCentral is a self-hosted, web-based remote monitoring and management (RMM) platform built on Node.js. It lets administrators install ag… | 98 | 7110 | active |
| tokio-rs/mio Mio is a fast, low-level I/O library for Rust providing non-blocking APIs and OS event notification (epoll, kqueue, IOCP) for building high… | 67 | 7088 | stable |
| guardicore/monkey Infection Monkey is an open-source adversary emulation platform that simulates malware-like self-propagation across a network to test secur… | 31 | 7076 | active |
| markqvist/Reticulum Reticulum is a cryptography-based networking stack written in Python that builds encrypted, resilient local and wide-area networks over LoR… | 99 | 7046 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 66 | 7005 | active |
| erebe/wstunnel wstunnel is a Rust CLI tool that tunnels arbitrary TCP, UDP, Unix socket, or stdio traffic over WebSocket, HTTP2, or WebTransport to bypass… | 97 | 6996 | active |
| netalertx/NetAlertX NetAlertX is a self-hosted network visibility and asset intelligence platform that performs continuous device discovery and monitoring acro… | 98 | 6954 | active |
| tonymillion/Reachability An ARC and GCD compatible Objective-C Reachability class for iOS and macOS, serving as a drop-in replacement for Apple's Reachability. It n… | 56 | 6954 | stable |
| Proxyman Proxyman is a native macOS HTTP(S) debugging proxy application that captures, inspects, and mocks HTTP/HTTPS and WebSocket traffic from bro… | 99 | 6949 | active |
| HMBSbige/ShadowsocksR-Windows A Windows GUI client for the ShadowsocksR proxy protocol, built with WPF on .NET 6. It is a maintained fork of the original ShadowsocksR cl… | 10 | 6943 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 77 | 6928 | active |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32885 | maintenance |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 92 | 6905 | active |
| 0xERR0R/blocky Blocky is a fast, lightweight DNS proxy and ad-blocker for local networks, written in Go. It blocks ads and malware via external allow/deny… | 98 | 6895 | active |
| luckjiawei/frpc-desktop Frpc-Desktop is a free, open-source cross-platform desktop GUI client for FRP (Fast Reverse Proxy) built with Electron, Vue, and TypeScript… | 87 | 6845 | active |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6809 | stable |
| wzdnzd/aggregator A Python-based platform that crawls free proxy nodes from sources like Telegram, GitHub, and search engines, validates their liveness, and … | 76 | 6754 | active |
| elazarl/goproxy GoProxy is a Go library for building customized HTTP/HTTPS proxy servers as a net/http handler. It supports regular proxying, CONNECT tunne… | 97 | 6752 | stable |
| chaifeng/ufw-docker A shell-based tool that fixes the well-known security flaw where Docker bypasses UFW firewall rules and exposes published ports to the publ… | 69 | 6749 | active |
| processone/ejabberd ejabberd is an open-source, massively scalable real-time messaging platform written in Erlang/OTP that combines an XMPP server, MQTT broker… | 93 | 6721 | stable |
| neutrinolabs/xrdp xrdp is an open-source RDP server that provides graphical login to remote Linux machines using the Microsoft Remote Desktop Protocol. It ac… | 92 | 6708 | stable |
| btcsuite/btcd btcd is an alternative full-node Bitcoin implementation written in Go that downloads, validates, and serves the blockchain using the same c… | 89 | 6703 | stable |
| OISF/suricata Suricata is a high-performance network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring… | 93 | 6571 | stable |
| romanvht/ByeByeDPI An Android application that runs ByeDPI locally and routes all device traffic through it via Android's VPN mode to bypass DPI-based blockin… | 88 | 6506 | active |
| gobwas/ws A tiny, fast WebSocket library for Go implementing RFC 6455 with a zero-copy, low-level API plus higher-level helpers in the wsutil package… | 53 | 6464 | stable |
| CareyWang/sub-web A Vue 2.7 web frontend for the subconverter backend that generates proxy subscription configuration links. It provides a browser UI for con… | 66 | 6460 | active |
| AsyncHttpClient/async-http-client AsyncHttpClient (AHC) is a high-performance asynchronous, non-blocking HTTP and WebSocket client library for Java built on Netty. It suppor… | 98 | 6393 | active |
| zmap/zmap ZMap is a fast, stateless single-packet network scanner written in C, designed for Internet-wide network surveys such as scanning the entir… | 90 | 6366 | active |
| Mygod/VPNHotspot An Android app that shares your device's VPN connection over a Wi-Fi hotspot, repeater, or USB/Bluetooth tethering. It requires root access… | 94 | 6353 | active |
| bfenetworks/bfe BFE (Beyond Front End) is a modern layer 7 load balancer and reverse proxy written in Go, originally developed at Baidu and now a CNCF sand… | 95 | 6261 | active |
| infinition/Bjorn Bjorn is an autonomous network scanning and offensive security tool that runs on a Raspberry Pi with a 2.13-inch e-Paper HAT. It discovers … | 63 | 6252 | active |
| seriousm4x/UpSnap UpSnap is a self-hosted wake-on-LAN web application built with SvelteKit, Go, and PocketBase. It provides a dashboard for waking devices wi… | 95 | 6225 | active |
| eooce/node-ws A lightweight Node.js serverless proxy application implementing VLESS, Trojan, VMess, and Shadowsocks protocols without a kernel, deployabl… | 81 | 6222 | active |
| reorx/httpstat httpstat is a single-file Python CLI that wraps curl and visualizes HTTP request timing breakdowns (DNS, TCP, TLS, server processing, trans… | 57 | 6217 | active |
| jagt/clumsy clumsy is a Windows utility that degrades network conditions in a controlled, interactive way by capturing live packets with WinDivert and … | 47 | 6211 | active |
| PBH-BTN/PeerBanHelper PeerBanHelper is a self-hosted Java application that automatically bans unwanted, leeching, and abnormal BitTorrent peers by connecting to … | 88 | 6210 | active |
| projectdiscovery/naabu Naabu is a fast, lightweight port scanner written in Go that performs SYN, CONNECT, and UDP scans to enumerate open ports on hosts. It is d… | 89 | 6205 | active |
| chriskohlhoff/asio Asio is a cross-platform C++ library for network and low-level I/O programming that provides a consistent asynchronous model using modern C… | 74 | 6175 | stable |
| 666OS/ClashMac ClashMac is a native macOS proxy client built in SwiftUI, wrapping the Clash/Mihomo engine with system proxy and TUN enhanced modes. It pro… | 79 | 6143 | active |
| ldcsaa/HP-Socket HP-Socket is a high-performance network communication component library for C/C++ providing TCP, UDP, HTTP/HTTPS, and WebSocket server, cli… | 70 | 6140 | active |
| InterceptSuite/ProxyBridge ProxyBridge is a free, open-source universal proxy client (Proxifier alternative) that transparently redirects TCP and UDP traffic from any… | 80 | 6128 | active |
| Z-Siqi/Clash-for-Windows_Chinese A Chinese-localized (zh-CN) distribution of Clash for Windows, providing patched app.asar files, a localization patch, and a repackaged ins… | 74 | 28512 | maintenance |
| daeuniverse/dae dae is a high-performance transparent proxy solution for Linux built on eBPF, performing traffic splitting directly in the kernel so direct… | 91 | 6114 | active |
| CNI (Container Network Interface) CNI (Container Network Interface) is a CNF project consisting of a specification and Go libraries for writing plugins that configure networ… | 66 | 6102 | stable |
| anacrolix/torrent A full-featured BitTorrent client library and CLI utilities written in Go, designed to be embedded in other projects. It supports streaming… | 77 | 6100 | stable |
| foxcpp/maddy Maddy is a composable all-in-one mail server written in Go that combines an SMTP MTA/MX, IMAP storage, and email security protocols (DKIM, … | 92 | 6077 | active |
| 1Remote/1Remote 1Remote is a modern personal remote session manager and launcher for Windows that centralizes RDP, SSH, VNC, Telnet, and (S)FTP connections… | 69 | 6050 | active |
| arvidn/libtorrent libtorrent is a feature-complete, efficient C++ library implementing the BitTorrent protocol with support for popular extensions including … | 94 | 6040 | stable |
| tidwall/evio evio is a fast, small event-loop networking framework for Go that makes direct epoll and kqueue syscalls instead of using the standard net … | 70 | 6040 | stable |
| twisted/twisted Twisted is an event-driven networking engine and framework for Python, providing an asynchronous reactor plus implementations of many inter… | 82 | 5977 | stable |
| tinyproxy/tinyproxy Tinyproxy is a lightweight HTTP/HTTPS proxy daemon for POSIX operating systems, written in C. It supports connection buffering, domain/URL … | 77 | 5976 | stable |
| google/bbr Google's distribution of documentation, scripts, and reference materials for the BBR TCP/QUIC congestion control algorithm, including the L… | 38 | 5942 | active |
| alexjustesen/speedtest-tracker Speedtest Tracker is a self-hosted web application built with Laravel that runs scheduled Ookla speed tests and tracks internet connection … | 95 | 5918 | active |
| w37fhy/QuantumultX A curated collection of ready-made ('lazy') configuration files and synced community scripts for proxy tools like Quantumult X, Surge, Shad… | 64 | 5910 | active |
| FluxionNetwork/fluxion Fluxion is a security auditing and social-engineering research tool that retrieves WPA/WPA2 keys via phishing attacks using rogue access po… | 91 | 5907 | active |
| wnlen/clash-for-linux A shell-based management platform for running Clash/Mihomo proxy on Linux, with automatic kernel download, subscription management, node se… | 75 | 5907 | active |
| komari-monitor/komari Komari is a lightweight, self-hosted server monitoring application written in Go that tracks server performance via a web dashboard with da… | 86 | 5903 | active |
| easegress-io/easegress Easegress is a cloud-native traffic orchestration system that acts as an API gateway, reverse proxy, and traffic manager with built-in Raft… | 84 | 5867 | active |
| microsoft/ethr Ethr is a cross-platform network performance measurement tool written in Go that measures bandwidth, connections/s, packets/s, latency, los… | 63 | 5866 | active |
| ffay/lanproxy lanproxy is a self-hosted NAT traversal / reverse proxy tool that exposes machines behind a firewall to the public internet by forwarding T… | 45 | 5853 | active |
| mininet/mininet Mininet is a network emulator that creates realistic virtual networks of hosts, switches, and links on a single Linux machine using process… | 23 | 5849 | stable |
| prometheus/blackbox_exporter The Blackbox exporter is a Prometheus exporter that probes endpoints over HTTP, HTTPS, DNS, TCP, ICMP, and gRPC and exposes probe success a… | 77 | 5841 | active |
| sammwyy/MikuMikuBeam MikuMikuBeam is a network stress testing tool written in Go with a Hatsune Miku-themed web UI, supporting HTTP flood, HTTP bypass, Slowlori… | 63 | 5835 | active |
| mjl-/mox Mox is an all-in-one, secure, open source mail server written in Go, combining SMTP, IMAP4, webmail, SPF/DKIM/DMARC, DANE/MTA-STS, automati… | 93 | 5826 | active |
| mscdex/ssh2 SSH2 client and server modules written in pure JavaScript for Node.js. It supports exec, shell, SFTP, port forwarding, and custom HTTP(S) a… | 76 | 5816 | stable |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 68 | 5816 | stable |
| Pennyw0rth/NetExec NetExec (nxc) is a community-maintained, open-source network execution tool and successor to CrackMapExec, used for pentesting and red-team… | 74 | 5815 | active |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 97 | 5771 | active |
| GeyserMC/Geyser Geyser is a proxy/bridge that translates packets between Minecraft: Bedrock Edition clients and Minecraft: Java Edition servers, enabling t… | 77 | 5760 | active |
| elceef/dnstwist dnstwist is a Python command-line tool that generates permutations of a domain name (typos, homoglyphs, IDN tricks) and checks which ones r… | 30 | 5730 | active |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 52 | 5722 | active |
| pfsense/pfsense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 66 | 5721 | stable |
| python-websockets/websockets websockets is a Python library for building WebSocket servers and clients, with a focus on correctness, simplicity, robustness, and perform… | 99 | 5714 | stable |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 72 | 5704 | active |
| EFForg/rayhunter Rayhunter is an EFF-developed Rust tool that detects IMSI catchers (cell-site simulators, also known as stingrays) used for cellular survei… | 93 | 5688 | active |
| Jrohy/trojan A multi-user trojan proxy management and deployment tool written in Go, offering both a web panel and a CLI for administering trojan/trojan… | 23 | 5644 | active |
| telemt/telemt Telemt is a high-performance MTProxy server for Telegram written in Rust with Tokio, implementing all official MTProto proxy modes includin… | 78 | 5627 | active |
| baidu/dperf dperf is a high-performance network traffic generator and load testing tool built on DPDK, capable of tens of millions of HTTP connections … | 66 | 5601 | active |
| xykt/NetQuality A shell-based network quality diagnostic script that checks BGP info, TCP latency, return routes, and speed tests across Chinese and intern… | 61 | 5551 | active |
| scanopy/scanopy Scanopy is a self-hostable network discovery and documentation tool that scans networks on a schedule and automatically generates live topo… | 80 | 5545 | active |
| fscarmen/sing-box A one-click shell script that deploys and manages a sing-box multi-protocol proxy server on a VPS, supporting protocols like Reality, Hyste… | 72 | 5537 | active |
| OWASP/Nettacker OWASP Nettacker is a Python-based automated penetration testing and information-gathering framework for reconnaissance, vulnerability scann… | 88 | 5535 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 86 | 5535 | active |
| USArmyResearchLab/Dshell Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supp… | 23 | 5492 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 16 | 5480 | active |
| intel/hyperscan Hyperscan is a high-performance C library (written in C++) for simultaneously matching large numbers of regular expressions, using hybrid a… | 67 | 5475 | stable |
| charmbracelet/wish Wish is a Go library for building custom SSH applications, built on gliderlabs/ssh with sensible defaults and a middleware system analogous… | 93 | 5470 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 84 | 5461 | active |
| coder/websocket A minimal and idiomatic WebSocket library for Go, originally by nhooyr and now maintained by Coder. It offers zero-dependency, context-firs… | 79 | 5432 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 64 | 5429 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 99 | 5421 | stable |