Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| python-websockets/websockets websockets is a Python library for building WebSocket servers and clients, with a focus on correctness, simplicity, robustness, and perform… | 95 | 5720 | stable |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 66 | 5711 | active |
| telemt/telemt Telemt is a high-performance MTProxy server for Telegram written in Rust with Tokio, implementing all official MTProto proxy modes includin… | 78 | 5705 | active |
| baidu/dperf dperf is a high-performance network traffic generator and load testing tool built on DPDK, capable of tens of millions of HTTP connections … | 62 | 5644 | active |
| trojan A multi-user trojan proxy management and deployment tool written in Go, offering both a web panel and a CLI for administering trojan/trojan… | 23 | 5637 | active |
| OWASP/Nettacker OWASP Nettacker is a Python-based automated penetration testing and information-gathering framework for reconnaissance, vulnerability scann… | 84 | 5616 | active |
| Rethink DNS + Firewall Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 97 | 5554 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 80 | 5554 | active |
| charmbracelet/wish Wish is a Go library for building custom SSH applications, built on gliderlabs/ssh with sensible defaults and a middleware system analogous… | 94 | 5552 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 61 | 5546 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 17 | 5539 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 81 | 5513 | active |
| tobychui/zoraxy Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool written in Go, managed through a built-in web interface designed for hom… | 98 | 5504 | active |
| intel/hyperscan Hyperscan is a high-performance C library (written in C++) for simultaneously matching large numbers of regular expressions, using hybrid a… | 67 | 5502 | stable |
| coder/websocket A minimal and idiomatic WebSocket library for Go, originally by nhooyr and now maintained by Coder. It offers zero-dependency, context-firs… | 73 | 5501 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 96 | 5498 | stable |
| USArmyResearchLab/Dshell Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supp… | 23 | 5496 | active |
| 7Sageer/sublink-worker A lightweight proxy subscription converter and manager that transforms subscription links and full configs into Sing-Box, Clash, Surge, or … | 81 | 5455 | active |
| hickory-dns/hickory-dns Hickory DNS (formerly Trust-DNS) is a Rust-based DNS client, server, and resolver library suite built for safety and security. It supports … | 98 | 5445 | active |
| drk1wi/Modlishka Modlishka is an open-source penetration testing tool written in Go that acts as a transparent man-in-the-middle reverse proxy. It can proxy… | 63 | 5427 | active |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 75 | 5416 | active |
| teddysun/across A collection of shell scripts for Linux VPS/server administration, including WireGuard VPN setup, TCP BBR kernel installation, KMS server d… | 62 | 5376 | active |
| ineo6/hosts A project that maintains regularly updated hosts file entries mapping GitHub domains to working IPs, fixing broken images and slow access t… | 68 | 5371 | active |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 92 | 5364 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5362 | active |
| Ladon Ladon is a large-scale internal network penetration scanner written in C#, offering port scanning, service identification, network asset di… | 25 | 5333 | active |
| warmcat/libwebsockets Libwebsockets is a lightweight, pure C networking library providing client and server implementations for HTTP/1, HTTP/2, HTTP/3, WebSocket… | 76 | 5331 | stable |
| Tribler/tribler Tribler is a privacy-enhanced BitTorrent client with built-in decentralized search and content discovery, using a custom Tor-like onion rou… | 88 | 5319 | active |
| quinn-rs/quinn Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol, with a high-level tokio-based API plus a sans-I/… | 99 | 5296 | stable |
| JetKVM JetKVM is an open-source KVM over IP solution (firmware and web dashboard) for remotely controlling computers via keyboard, video, and mous… | 88 | 5267 | active |
| martin-ger/esp_wifi_repeater Firmware for the ESP8266/ESP8285 that turns the chip into a full WiFi NAT router and, in a separate edition, a true L2-bridge WiFi repeater… | 67 | 5257 | active |
| Ullaakut/cameradar Cameradar is a Go-based command-line tool that scans targets for open RTSP video surveillance endpoints and uses dictionary attacks to disc… | 94 | 5234 | active |
| RaspAP RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 99 | 5226 | active |
| ddgth/cf2dns A Python tool that selects high-quality Cloudflare IPs and updates DNS records via DNS provider APIs (DNSPod, Aliyun DNS, Huawei Cloud DNS)… | 32 | 5207 | active |
| signalwire/freeswitch FreeSWITCH is an open-source software-defined telecom stack that turns commodity servers into a full telephony platform for voice, video, a… | 96 | 5191 | stable |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 62 | 5174 | active |
| eooce/Sing-box A one-click Shell installation script that deploys sing-box with multiple proxy protocols (VLESS-Reality, VMess-ws-tls via Argo tunnel, Hys… | 62 | 5168 | active |
| WebRTC.rs An async-friendly WebRTC implementation in Rust, inspired by and largely rewriting the Pion stack. It is built on a Sans-I/O core with plug… | 99 | 5160 | active |
| SpaceTimee/Sheas-Cealer Sheas Cealer is a WPF (.NET 8) Windows desktop tool that forges the SNI extension field in Chromium's launch parameters, allowing users to … | 64 | 5159 | active |
| ngoduykhanh/wireguard-ui A self-hosted web user interface for managing WireGuard VPN setups, written in Go. It provides authentication, client management with extra… | 23 | 5151 | active |
| lmc999/RegionRestrictionCheck A pure bash script that checks whether an IP address can access various geo-restricted streaming and media services (e.g., Netflix, Disney+… | 44 | 5147 | active |
| angryip/ipscan Angry IP Scanner is a fast, open-source IP address and port scanner with a friendly GUI built on Eclipse SWT. It scans networks for hosts, … | 83 | 5140 | active |
| jinwyp/one_click_script A collection of one-click shell scripts for Linux servers that install latest or LTS Linux kernels and enable BBR or BBR Plus congestion co… | 67 | 5136 | active |
| domcyrus/rustnet RustNet is a cross-platform terminal-based network monitoring tool that maps live TCP, UDP, and QUIC connections to their owning processes … | 86 | 5131 | active |
| yrutschle/sslh sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend service… | 76 | 5120 | stable |
| Remnawave Remnawave is a self-hosted proxy management panel built on top of Xray-core, providing a web interface for managing proxy servers and users… | 81 | 5118 | active |
| Ponderfly/GoogleTranslateIpCheck A cross-platform C# command-line tool that scans for Google Translate IP addresses reachable from mainland China and can automatically writ… | 76 | 5117 | active |
| aiortc/aiortc aiortc is a Python library implementing WebRTC and ORTC on top of asyncio, with an API closely mirroring the JavaScript WebRTC API. It supp… | 70 | 5108 | active |
| smol-rs/smol smol is a small and fast async runtime for Rust that re-exports a set of composable async crates (executor, I/O, networking, locks, channel… | 62 | 5079 | stable |
| nginx/kubernetes-ingress The official NGINX and NGINX Plus Ingress Controller for Kubernetes, maintained by the NGINX team at F5. It translates Kubernetes Ingress r… | 96 | 5078 | stable |
| hengyoush/kyanos Kyanos is an eBPF-based command-line network analysis tool that captures and visualizes L7 requests/responses (HTTP, Redis, MySQL, Kafka, M… | 85 | 5076 | active |
| productdevbook/port-killer PortKiller is a cross-platform desktop application for monitoring and managing listening TCP ports on macOS and Windows. It provides one-cl… | 76 | 5076 | active |
| v2board/v2board V2Board is a self-hosted web panel for managing multiple proxy protocols such as V2Ray, Shadowsocks, Trojan, VLESS, and Hysteria. It provid… | 23 | 5062 | active |
| Pomerium Pomerium is an open-source, identity- and context-aware reverse proxy that provides clientless, zero-trust access to internal applications … | 99 | 5056 | active |
| nghttp2/nghttp2 nghttp2 is a mature C library implementing the HTTP/2 framing layer and HPACK header compression, plus client, server, proxy, and load-test… | 89 | 5053 | stable |
| torproject/tor Tor is the core implementation of the Tor anonymity network, routing internet traffic through onion circuits to hide a user's IP address an… | 32 | 5052 | active |
| luestr/ProxyResource A curated resource repository for the Loon proxy app, providing configuration templates, plugins, scripts, and rule sets. It serves as an i… | 68 | 5036 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 93 | 5026 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 98 | 5021 | active |
| Ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 92 | 5008 | active |
| VREMSoftwareDevelopment/WiFiAnalyzer WiFiAnalyzer is an open-source Android application for analyzing Wi-Fi signals. It identifies nearby access points, graphs signal strength … | 84 | 4987 | active |
| LibreNMS LibreNMS is a fully featured, community-driven GPL-licensed network monitoring system written in PHP with MySQL and SNMP. It auto-discovers… | 100 | 4966 | active |
| NLnetLabs/unbound Unbound is a validating, recursive, and caching DNS resolver written in C, designed to be fast and lean while implementing modern open stan… | 92 | 4932 | stable |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 75 | 4928 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 93 | 4915 | active |
| Security Onion Security Onion is a free and open Linux distribution and platform for threat hunting, enterprise security monitoring, and log management. I… | 92 | 4906 | stable |
| PCAPdroid PCAPdroid is a privacy-friendly open source Android app that monitors, analyzes, and blocks network connections made by other apps without … | 97 | 4904 | active |
| zzzgydi/clash-verge A cross-platform desktop GUI for the Clash proxy core, built with Tauri and React. It lets users manage Clash proxy profiles, rules, and sy… | 10 | 21906 | maintenance |
| HMBSbige/NatTypeTester A cross-platform tool for testing the NAT type of the current network using STUN protocols (RFC 3489, 5389, 5780, 8489). It ships as a desk… | 99 | 4886 | active |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 79 | 4875 | active |
| rtorrent rTorrent is a ncurses-based BitTorrent client written in C++ for high-performance torrent downloading and seeding. It can run interactively… | 97 | 4868 | active |
| yiyuanjichang/dizhi A repository serving as the official website/mirror listing for Yiyuan Airport (一元机场), a commercial proxy/VPN subscription service. It prim… | 31 | 4829 | active |
| OpenWiFi Open-source full-stack IEEE 802.11/Wi-Fi design based on Software Defined Radio, including a Linux mac80211-compatible driver and software,… | 66 | 4809 | active |
| antoniomika/sish sish is an open-source, self-hostable SSH server that provides HTTP(S), WebSocket(S), and TCP tunnels to localhost, serving as an ngrok/ser… | 94 | 4790 | active |
| microsoft/msquic MsQuic is Microsoft's cross-platform C implementation of the IETF QUIC transport protocol (RFC 9000), with API wrappers for C++, C#, and Ru… | 98 | 4781 | stable |
| 233boy/sing-box A one-click install and management shell script for the sing-box proxy server on Linux. It automates setup of protocols like VLESS-REALITY,… | 71 | 4780 | active |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 98 | 4769 | stable |
| openziti/zrok zrok is an open-source tool for securely sharing local web services, files, and TCP/UDP resources over the internet without firewall or NAT… | 98 | 4751 | active |
| acassen/keepalived Keepalived is a routing daemon written in C that provides load balancing and high availability for Linux systems. It implements VRRP v2/v3 … | 75 | 4715 | stable |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 75 | 4696 | active |
| NewFuture/DDNS A cross-platform dynamic DNS (DDNS) client that automatically syncs DNS records to the machine's current IPv4/IPv6 address, supporting 15+ … | 95 | 4694 | active |
| nanomsg/nng NNG (nanomsg-next-generation) is a lightweight, broker-less messaging library in C implementing scalability protocols like pub/sub, request… | 96 | 4691 | stable |
| cppla/ServerStatus ServerStatus is a lightweight self-hosted server monitoring probe and status dashboard written in Go, with a Python agent for clients. It t… | 92 | 4687 | active |
| TCPCopy TCPCopy is a TCP stream replay tool that captures live production traffic and replicates it against a test server. It enables realistic str… | 31 | 4686 | stable |
| koolshare/koolshare.github.io Koolshare is a plugin ecosystem and software center for ASUS Merlin (and ASUSGO) custom router firmware, providing a web UI to install and … | 57 | 4668 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 66 | 4645 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 57 | 4637 | active |
| ntop/nDPI nDPI is an open source LGPLv3 C library for deep packet inspection that detects 450+ layer-7 application protocols from network traffic. It… | 84 | 4613 | stable |
| JZ-Darkal/AndroidHttpCapture AndroidHttpCapture is an Android network diagnostic and packet capture app, essentially a mobile version of Fiddler. It captures HTTP/HTTPS… | 56 | 4610 | active |
| smoltcp-rs/smoltcp smoltcp is a standalone, event-driven TCP/IP stack written in Rust, designed for bare-metal and real-time systems without heap allocation. … | 81 | 4607 | active |
| cloudwego/netpoll Netpoll is a high-performance non-blocking I/O networking library for Go, developed by ByteDance and focused on RPC scenarios. It provides … | 87 | 4605 | active |
| exposedev/expose Expose is an open-source ngrok alternative written in pure PHP that creates secure tunnels to expose local servers to the internet. It can … | 97 | 4573 | active |
| Oros42/IMSI-catcher A Python tool that decodes GSM radio traffic captured via software-defined radio receivers (RTL-SDR, HackRF, BladeRF, OsmocomBB) to display… | 67 | 4571 | active |
| docker-transmission-openvpn A Docker image that bundles the Transmission BitTorrent client with an OpenVPN tunnel, so torrent traffic only runs when the VPN is active.… | 92 | 4568 | active |
| xtaci/kcp-go kcp-go is a Go library implementing the KCP reliable-UDP protocol, providing smooth, ordered, error-checked, and encrypted stream delivery … | 63 | 4554 | stable |
| cmliu/SubsCheck-Win-GUI A Windows GUI wrapper around the subs-check proxy subscription checker, which tests, filters, and deduplicates proxy nodes from subscriptio… | 27 | 4553 | active |
| hacklcx/HFish HFish is a free, enterprise-grade honeypot platform for deception-based defense, threat detection, and attacker tracing. It deploys decoy s… | 61 | 4552 | active |
| MetaCubeX/metacubexd metacubexd is the official web dashboard for the Mihomo (Clash Meta) proxy kernel, built with SolidJS, Tailwind CSS, and DaisyUI. It provid… | 91 | 4544 | active |
| timothymiller/cloudflare-ddns A Rust-based dynamic DNS (DDNS) client that keeps Cloudflare DNS records in sync with a changing home IP address. It ships as a tiny static… | 93 | 4523 | active |
| mosn/mosn MOSN (Modular Open Smart Network) is a cloud-native network proxy platform written in Go, open-sourced by Ant Group and battle-tested on hu… | 61 | 4508 | stable |