domain: networking
2089 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| tobychui/zoraxy Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool written in Go, managed through a built-in web interface designed for hom… | 99 | 5412 | active |
| drk1wi/Modlishka Modlishka is an open-source penetration testing tool written in Go that acts as a transparent man-in-the-middle reverse proxy. It can proxy… | 66 | 5407 | active |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 73 | 5406 | active |
| hickory-dns/hickory-dns Hickory DNS (formerly Trust-DNS) is a Rust-based DNS client, server, and resolver library suite built for safety and security. It supports … | 93 | 5381 | active |
| teddysun/across A collection of shell scripts for Linux VPS/server administration, including WireGuard VPN setup, TCP BBR kernel installation, KMS server d… | 66 | 5368 | active |
| ineo6/hosts A project that maintains regularly updated hosts file entries mapping GitHub domains to working IPs, fixing broken images and slow access t… | 67 | 5362 | active |
| celzero/rethink-app Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 98 | 5338 | active |
| warmcat/libwebsockets Libwebsockets is a lightweight, pure C networking library providing client and server implementations for HTTP/1, HTTP/2, HTTP/3, WebSocket… | 77 | 5320 | stable |
| Ladon Ladon is a large-scale internal network penetration scanner written in C#, offering port scanning, service identification, network asset di… | 29 | 5320 | active |
| 7Sageer/sublink-worker A lightweight proxy subscription converter and manager that transforms subscription links and full configs into Sing-Box, Clash, Surge, or … | 81 | 5317 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5304 | active |
| Tribler/tribler Tribler is a privacy-enhanced BitTorrent client with built-in decentralized search and content discovery, using a custom Tor-like onion rou… | 89 | 5303 | active |
| martin-ger/esp_wifi_repeater Firmware for the ESP8266/ESP8285 that turns the chip into a full WiFi NAT router and, in a separate edition, a true L2-bridge WiFi repeater… | 71 | 5242 | active |
| quinn-rs/quinn Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol, with a high-level tokio-based API plus a sans-I/… | 99 | 5232 | stable |
| RaspAP/raspap-webgui RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 96 | 5216 | active |
| ddgth/cf2dns A Python tool that selects high-quality Cloudflare IPs and updates DNS records via DNS provider APIs (DNSPod, Aliyun DNS, Huawei Cloud DNS)… | 32 | 5201 | active |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 83 | 5198 | active |
| Ullaakut/cameradar Cameradar is a Go-based command-line tool that scans targets for open RTSP video surveillance endpoints and uses dictionary attacks to disc… | 94 | 5173 | active |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 66 | 5168 | active |
| ngoduykhanh/wireguard-ui A self-hosted web user interface for managing WireGuard VPN setups, written in Go. It provides authentication, client management with extra… | 23 | 5145 | active |
| jinwyp/one_click_script A collection of one-click shell scripts for Linux servers that install latest or LTS Linux kernels and enable BBR or BBR Plus congestion co… | 71 | 5139 | active |
| webrtc-rs/webrtc An async-friendly WebRTC implementation in Rust, inspired by and largely rewriting the Pion stack. It is built on a Sans-I/O core with plug… | 99 | 5130 | active |
| lmc999/RegionRestrictionCheck A pure bash script that checks whether an IP address can access various geo-restricted streaming and media services (e.g., Netflix, Disney+… | 48 | 5122 | active |
| signalwire/freeswitch FreeSWITCH is an open-source software-defined telecom stack that turns commodity servers into a full telephony platform for voice, video, a… | 94 | 5118 | stable |
| SpaceTimee/Sheas-Cealer Sheas Cealer is a WPF (.NET 8) Windows desktop tool that forges the SNI extension field in Chromium's launch parameters, allowing users to … | 68 | 5116 | active |
| yrutschle/sslh sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend service… | 76 | 5109 | stable |
| Ponderfly/GoogleTranslateIpCheck A cross-platform C# command-line tool that scans for Google Translate IP addresses reachable from mainland China and can automatically writ… | 79 | 5098 | active |
| aiortc/aiortc aiortc is a Python library implementing WebRTC and ORTC on top of asyncio, with an API closely mirroring the JavaScript WebRTC API. It supp… | 74 | 5094 | active |
| angryip/ipscan Angry IP Scanner is a fast, open-source IP address and port scanner with a friendly GUI built on Eclipse SWT. It scans networks for hosts, … | 75 | 5091 | active |
| nginx/kubernetes-ingress The official NGINX and NGINX Plus Ingress Controller for Kubernetes, maintained by the NGINX team at F5. It translates Kubernetes Ingress r… | 97 | 5068 | stable |
| hengyoush/kyanos Kyanos is an eBPF-based command-line network analysis tool that captures and visualizes L7 requests/responses (HTTP, Redis, MySQL, Kafka, M… | 87 | 5066 | active |
| v2board/v2board V2Board is a self-hosted web panel for managing multiple proxy protocols such as V2Ray, Shadowsocks, Trojan, VLESS, and Hysteria. It provid… | 23 | 5061 | active |
| smol-rs/smol smol is a small and fast async runtime for Rust that re-exports a set of composable async crates (executor, I/O, networking, locks, channel… | 66 | 5048 | stable |
| nghttp2/nghttp2 nghttp2 is a mature C library implementing the HTTP/2 framing layer and HPACK header compression, plus client, server, proxy, and load-test… | 94 | 5046 | stable |
| eooce/Sing-box A one-click Shell installation script that deploys sing-box with multiple proxy protocols (VLESS-Reality, VMess-ws-tls via Argo tunnel, Hys… | 63 | 5037 | active |
| productdevbook/port-killer PortKiller is a cross-platform desktop application for monitoring and managing listening TCP ports on macOS and Windows. It provides one-cl… | 77 | 5035 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 97 | 5010 | active |
| torproject/tor Tor is the core implementation of the Tor anonymity network, routing internet traffic through onion circuits to hide a user's IP address an… | 32 | 5008 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 90 | 5002 | active |
| pomerium/pomerium Pomerium is an open-source, identity- and context-aware reverse proxy that provides clientless, zero-trust access to internal applications … | 99 | 4978 | active |
| domcyrus/rustnet RustNet is a cross-platform terminal-based network monitoring tool that maps live TCP, UDP, and QUIC connections to their owning processes … | 86 | 4946 | active |
| remnawave/panel Remnawave is a self-hosted proxy management panel built on top of Xray-core, providing a web interface for managing proxy servers and users… | 83 | 4929 | active |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 73 | 4926 | active |
| VREMSoftwareDevelopment/WiFiAnalyzer WiFiAnalyzer is an open-source Android application for analyzing Wi-Fi signals. It identifies nearby access points, graphs signal strength … | 88 | 4923 | active |
| jetkvm/kvm JetKVM is an open-source KVM over IP solution (firmware and web dashboard) for remotely controlling computers via keyboard, video, and mous… | 79 | 4923 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 97 | 4902 | active |
| zzzgydi/clash-verge A cross-platform desktop GUI for the Clash proxy core, built with Tauri and React. It lets users manage Clash proxy profiles, rules, and sy… | 10 | 21942 | maintenance |
| nicocha30/ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 98 | 4893 | active |
| luestr/ProxyResource A curated resource repository for the Loon proxy app, providing configuration templates, plugins, scripts, and rule sets. It serves as an i… | 66 | 4884 | active |
| rakshasa/rtorrent rTorrent is a ncurses-based BitTorrent client written in C++ for high-performance torrent downloading and seeding. It can run interactively… | 99 | 4849 | active |
| librenms/librenms LibreNMS is a fully featured, community-driven GPL-licensed network monitoring system written in PHP with MySQL and SNMP. It auto-discovers… | 99 | 4848 | active |
| Security Onion Security Onion is a free and open Linux distribution and platform for threat hunting, enterprise security monitoring, and log management. I… | 94 | 4846 | stable |
| NLnetLabs/unbound Unbound is a validating, recursive, and caching DNS resolver written in C, designed to be fast and lean while implementing modern open stan… | 94 | 4818 | stable |
| HMBSbige/NatTypeTester A cross-platform tool for testing the NAT type of the current network using STUN protocols (RFC 3489, 5389, 5780, 8489). It ships as a desk… | 97 | 4812 | active |
| yiyuanjichang/dizhi A repository serving as the official website/mirror listing for Yiyuan Airport (一元机场), a commercial proxy/VPN subscription service. It prim… | 31 | 4794 | active |
| open-sdr/openwifi Open-source full-stack IEEE 802.11/Wi-Fi design based on Software Defined Radio, including a Linux mac80211-compatible driver and software,… | 68 | 4772 | active |
| microsoft/msquic MsQuic is Microsoft's cross-platform C implementation of the IETF QUIC transport protocol (RFC 9000), with API wrappers for C++, C#, and Ru… | 98 | 4771 | stable |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 99 | 4755 | stable |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 63 | 4707 | active |
| antoniomika/sish sish is an open-source, self-hostable SSH server that provides HTTP(S), WebSocket(S), and TCP tunnels to localhost, serving as an ngrok/ser… | 86 | 4703 | active |
| NewFuture/DDNS A cross-platform dynamic DNS (DDNS) client that automatically syncs DNS records to the machine's current IPv4/IPv6 address, supporting 15+ … | 98 | 4682 | active |
| cppla/ServerStatus ServerStatus is a lightweight self-hosted server monitoring probe and status dashboard written in Go, with a Python agent for clients. It t… | 98 | 4682 | active |
| session-replay-tools/tcpcopy TCPCopy is a TCP stream replay tool that captures live production traffic and replicates it against a test server. It enables realistic str… | 35 | 4675 | stable |
| acassen/keepalived Keepalived is a routing daemon written in C that provides load balancing and high availability for Linux systems. It implements VRRP v2/v3 … | 76 | 4664 | stable |
| koolshare/koolshare.github.io Koolshare is a plugin ecosystem and software center for ASUS Merlin (and ASUSGO) custom router firmware, providing a web UI to install and … | 61 | 4663 | active |
| nanomsg/nng NNG (nanomsg-next-generation) is a lightweight, broker-less messaging library in C implementing scalability protocols like pub/sub, request… | 95 | 4660 | stable |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 77 | 4653 | active |
| openziti/zrok zrok is an open-source tool for securely sharing local web services, files, and TCP/UDP resources over the internet without firewall or NAT… | 89 | 4645 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 61 | 4633 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 69 | 4620 | active |
| JZ-Darkal/AndroidHttpCapture AndroidHttpCapture is an Android network diagnostic and packet capture app, essentially a mobile version of Fiddler. It captures HTTP/HTTPS… | 59 | 4603 | active |
| emanuele-f/PCAPdroid PCAPdroid is a privacy-friendly open source Android app that monitors, analyzes, and blocks network connections made by other apps without … | 99 | 4602 | active |
| cloudwego/netpoll Netpoll is a high-performance non-blocking I/O networking library for Go, developed by ByteDance and focused on RPC scenarios. It provides … | 93 | 4601 | active |
| smoltcp-rs/smoltcp smoltcp is a standalone, event-driven TCP/IP stack written in Rust, designed for bare-metal and real-time systems without heap allocation. … | 87 | 4579 | active |
| exposedev/expose Expose is an open-source ngrok alternative written in pure PHP that creates secure tunnels to expose local servers to the internet. It can … | 88 | 4568 | active |
| ntop/nDPI nDPI is an open source LGPLv3 C library for deep packet inspection that detects 450+ layer-7 application protocols from network traffic. It… | 76 | 4566 | stable |
| haugene/docker-transmission-openvpn A Docker image that bundles the Transmission BitTorrent client with an OpenVPN tunnel, so torrent traffic only runs when the VPN is active.… | 98 | 4561 | active |
| xtaci/kcp-go kcp-go is a Go library implementing the KCP reliable-UDP protocol, providing smooth, ordered, error-checked, and encrypted stream delivery … | 70 | 4550 | stable |
| 233boy/sing-box A one-click install and management shell script for the sing-box proxy server on Linux. It automates setup of protocols like VLESS-REALITY,… | 76 | 4544 | active |
| cmliu/SubsCheck-Win-GUI A Windows GUI wrapper around the subs-check proxy subscription checker, which tests, filters, and deduplicates proxy nodes from subscriptio… | 30 | 4537 | active |
| hacklcx/HFish HFish is a free, enterprise-grade honeypot platform for deception-based defense, threat detection, and attacker tracing. It deploys decoy s… | 65 | 4532 | active |
| Oros42/IMSI-catcher A Python tool that decodes GSM radio traffic captured via software-defined radio receivers (RTL-SDR, HackRF, BladeRF, OsmocomBB) to display… | 71 | 4515 | active |
| mosn/mosn MOSN (Modular Open Smart Network) is a cloud-native network proxy platform written in Go, open-sourced by Ant Group and battle-tested on hu… | 64 | 4508 | stable |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19748 | maintenance |
| OpenVPN/easy-rsa easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs ce… | 80 | 4475 | active |
| timothymiller/cloudflare-ddns A Rust-based dynamic DNS (DDNS) client that keeps Cloudflare DNS records in sync with a changing home IP address. It ships as a tiny static… | 96 | 4474 | active |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 77 | 4456 | stable |
| lwch/natpass natpass is a self-hosted host management tool written in Go that provides web-based shell access, remote desktop (VNC), and code-server int… | 67 | 4446 | active |
| mr-karan/doggo doggo is a modern command-line DNS client for humans, written in Go and inspired by the Rust tool 'dog'. It supports multiple DNS transport… | 98 | 4444 | active |
| kubernetes/ingress-nginx Ingress NGINX Controller is a Kubernetes ingress controller that uses NGINX as a reverse proxy and load balancer to route external traffic … | 10 | 19476 | maintenance |
| Archeb/opentrace OpenTrace is an open-source cross-platform GUI application for visualized route tracing, built on the NextTrace engine. It provides native … | 85 | 4409 | active |
| denuitt1/mhr-cfw A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters… | 67 | 4403 | active |
| DPDK/dpdk DPDK is a set of C libraries and NIC drivers for fast userspace packet processing, bypassing the kernel network stack. It supports multiple… | 77 | 4394 | stable |
| sshnet/SSH.NET SSH.NET is a Secure Shell (SSH-2) client library for .NET, optimized for parallelism. It provides SSH command execution, SFTP and SCP file … | 87 | 4370 | stable |
| miguelgrinberg/python-socketio A Python implementation of the Socket.IO realtime client and server, supporting WebSocket and long-polling transports with asyncio, eventle… | 97 | 4368 | stable |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 70 | 4366 | stable |
| unifi-utilities/unifi-common A shell-based installer that sets up an on_boot.d mechanism for UniFi OS devices (UDM/UDR/UNVR etc.), running custom scripts at S95 during … | 75 | 4365 | active |
| openziti/ziti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 98 | 4359 | active |
| lazy-luo/smarGate smarGate is a cross-network remote port mapping and NAT traversal tool consisting of an Android client app and lightweight server binaries,… | 79 | 4358 | active |
| vaxilu/x-ui x-ui is a web-based control panel for managing Xray proxy servers, supporting multiple protocols (vmess, vless, trojan, shadowsocks, etc.) … | 23 | 19076 | maintenance |