Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19769 | maintenance |
| mr-karan/doggo doggo is a modern command-line DNS client for humans, written in Go and inspired by the Rust tool 'dog'. It supports multiple DNS transport… | 94 | 4480 | active |
| OpenVPN/easy-rsa easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs ce… | 88 | 4479 | active |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 75 | 4473 | stable |
| Archeb/opentrace OpenTrace is an open-source cross-platform GUI application for visualized route tracing, built on the NextTrace engine. It provides native … | 79 | 4463 | active |
| xiaobaigroup/ClashBox ClashBox is a native proxy client for HarmonyOS NEXT built with ArkTS/ArkUI, using a modified Mihomo (ClashMeta) kernel. It features a Surf… | 73 | 4459 | active |
| DPDK/dpdk DPDK is a set of C libraries and NIC drivers for fast userspace packet processing, bypassing the kernel network stack. It supports multiple… | 77 | 4452 | stable |
| XTLS/RealiTLScanner A Go-based TLS server scanner built for the XTLS Reality protocol ecosystem. It scans IP ranges, CIDRs, domains, or target lists to find TL… | 80 | 4443 | active |
| lwch/natpass natpass is a self-hosted host management tool written in Go that provides web-based shell access, remote desktop (VNC), and code-server int… | 64 | 4442 | active |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 66 | 4429 | stable |
| MHR-CFW A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters… | 62 | 4424 | active |
| kubernetes/ingress-nginx Ingress NGINX Controller is a Kubernetes ingress controller that uses NGINX as a reverse proxy and load balancer to route external traffic … | 10 | 19446 | maintenance |
| OpenZiti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 97 | 4403 | active |
| sshnet/SSH.NET SSH.NET is a Secure Shell (SSH-2) client library for .NET, optimized for parallelism. It provides SSH command execution, SFTP and SCP file … | 81 | 4382 | stable |
| unifi-utilities/unifi-common A shell-based installer that sets up an on_boot.d mechanism for UniFi OS devices (UDM/UDR/UNVR etc.), running custom scripts at S95 during … | 75 | 4372 | active |
| miguelgrinberg/python-socketio A Python implementation of the Socket.IO realtime client and server, supporting WebSocket and long-polling transports with asyncio, eventle… | 96 | 4370 | stable |
| lazy-luo/smarGate smarGate is a cross-network remote port mapping and NAT traversal tool consisting of an Android client app and lightweight server binaries,… | 73 | 4361 | active |
| Cilium Hubble is a fully distributed network, service, and security observability platform for Kubernetes, built on top of Cilium and eBPF. It pro… | 94 | 4360 | active |
| vaxilu/x-ui x-ui is a web-based control panel for managing Xray proxy servers, supporting multiple protocols (vmess, vless, trojan, shadowsocks, etc.) … | 23 | 19097 | maintenance |
| mpolden/echoip echoip is a lightweight Go service for looking up a client's IP address, with optional country, city, and ASN details via MaxMind GeoIP dat… | 74 | 4351 | active |
| kubernetes-sigs/aws-load-balancer-controller A Kubernetes controller that manages AWS Elastic Load Balancers for a cluster. It provisions Application Load Balancers for Ingress resourc… | 99 | 4343 | stable |
| albfan/miraclecast MiracleCast is a C implementation of the Wi-Fi Display (Miracast) specification for Linux, providing both Display-Sink and (planned) Displa… | 61 | 4343 | active |
| FRRouting/frr FRRouting (FRR) is a free, open-source IP routing protocol suite for Linux and Unix platforms, descended from Quagga. It implements and man… | 97 | 4320 | stable |
| yuaotian/antigravity-proxy A Windows transparent proxy injector for the Antigravity editor that forces its traffic through SOCKS5/HTTP proxies via DLL injection and M… | 78 | 4320 | active |
| tower-rs/tower Tower is a Rust library of modular, reusable components for building robust networking clients and servers around a request/response Servic… | 65 | 4312 | stable |
| ktbyers/netmiko Netmiko is a multi-vendor Python library that simplifies SSH CLI connections to network devices, built on top of Paramiko. It abstracts low… | 87 | 4308 | stable |
| eventmachine/eventmachine EventMachine is an event-driven I/O and lightweight concurrency library for Ruby based on the Reactor pattern. It enables building highly s… | 62 | 4280 | stable |
| F-Stack/f-stack F-Stack is an open-source high-performance user-space network framework based on DPDK, featuring a ported FreeBSD 11 TCP/IP stack, a Posix-… | 81 | 4267 | stable |
| baihengaead/wlan-sec-test-tool A Python-based GUI tool for wireless network security testing that checks WiFi networks for weak passwords by attempting connections with a… | 67 | 4243 | active |
| i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 87 | 4236 | active |
| SuperSocket SuperSocket is a high-performance, extensible socket server application framework for .NET. It provides a pipeline-based architecture for b… | 85 | 4236 | active |
| fw876/helloworld A collection of OpenWrt packages (including Xray-core and related proxy tools) distributed as a git repository that can be cloned, added as… | 99 | 4231 | active |
| mekos2772/ios-location-spoofer A standalone iOS location spoofing solution that intercepts and rewrites Apple's network-based location service (WLOC) responses via proxy … | 56 | 4226 | active |
| arvin341az-glitch/RVG RVG Gateway is a self-hosted multi-protocol proxy management panel built with Python and FastAPI. It provides an admin dashboard for creati… | 56 | 4196 | active |
| philippe44/AirConnect AirConnect is a bridge application that discovers UPnP/Sonos and Chromecast audio players on a local network and exposes them as virtual Ai… | 97 | 4184 | active |
| nextdns/nextdns NextDNS CLI is an open-source command-line client (written in Go) that connects to NextDNS's DNS-over-HTTPS service, acting as a local DoH … | 90 | 4184 | active |
| monasticacademy/httptap httptap is a static Go CLI binary that shows the HTTP and HTTPS requests made by any Linux program by running it inside an isolated network… | 60 | 4181 | active |
| gliderlabs/ssh A Go library that wraps golang.org/x/crypto/ssh with a high-level, net/http-like API for building custom SSH servers. It lets developers ha… | 23 | 4181 | stable |
| txn2/kubefwd kubefwd is a Go CLI utility that bulk port-forwards Kubernetes services to a local workstation, assigning each service a unique 127.x.x.x l… | 100 | 4178 | active |
| ivre/ivre IVRE is an open-source network recon framework written in Python that collects, stores, and analyzes network intelligence from active scann… | 66 | 4177 | active |
| yusing/godoxy GoDoxy is a lightweight, high-performance reverse proxy with a built-in WebUI, designed for self-hosters running Docker or Podman. It autom… | 87 | 4161 | active |
| cifertech/ESP32-DIV ESP32-DIV is open-source firmware (with open schematics and PCB files) for a custom ESP32-S3 handheld device that bundles Wi-Fi, BLE, 2.4GH… | 86 | 4146 | active |
| foru17/neko-master Neko Master is a modern, elegant web dashboard for visualizing and analyzing network traffic from local gateway environments such as Clash … | 82 | 4146 | active |
| app2smile/rules A collection of ad-blocking rule modules and rewrite scripts for iOS proxy tools like Surge, Loon, and Quantumult X. It removes in-app adve… | 60 | 4138 | active |
| hashicorp/memberlist A Go library implementing gossip-based cluster membership and node failure detection, based on the SWIM protocol with Lifeguard extensions.… | 89 | 4117 | stable |
| osrg/gobgp GoBGP is an open-source Border Gateway Protocol (BGP) implementation written in Go, usable both as a standalone BGP daemon with a CLI and a… | 95 | 4116 | active |
| zu1k/nali Nali is an offline command-line tool written in Go for querying IP geolocation and CDN provider information using multiple local databases … | 66 | 4106 | active |
| Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 68 | 4101 | active |
| cenkalti/backoff A Go library implementing the exponential backoff algorithm with a Retry helper for retrying operations. It supports configurable retry lim… | 76 | 4085 | stable |
| xubiaolin/docker-zerotier-planet A Docker-based one-click deployment tool for self-hosting a private ZeroTier Planet (root) server, with an optional web management panel. I… | 63 | 4082 | active |
| miroslavpejic85/p2p A portable peer-to-peer remote desktop application for Windows built in C#, allowing two peers to share screens, control desktops, and chat… | 23 | 4072 | active |
| yonggekkk/x-ui-yg A one-click shell installer script for a streamlined fork of the x-ui proxy panel, deploying Xray-based proxy protocols (Reality, Hysteria2… | 65 | 4071 | active |
| davyxu/cellnet cellnet is a high-performance, componentized, extensible open-source network library for Go, supporting TCP, UDP, HTTP, and WebSocket trans… | 73 | 4057 | stable |
| openthread/openthread OpenThread is Google's open-source, Thread Certified implementation of the Thread networking protocol, covering all Thread networking layer… | 99 | 4051 | stable |
| rtty Remote Terminal System rtty is a remote terminal solution consisting of a lightweight C client for embedded Linux devices and a Go server with a Vue web frontend.… | 95 | 4044 | active |
| openssh/openssh-portable Portable OpenSSH is a complete implementation of the SSH protocol version 2 for secure remote login, command execution, and file transfer. … | 77 | 4043 | stable |
| mahdibland/V2RayAggregator A Python-based automation that aggregates free proxy nodes (Shadowsocks, SSR, Trojan, Vmess) from public sources, deduplicates them, and sp… | 68 | 4024 | active |
| openvswitch/ovs Open vSwitch is a production-quality multilayer software switch designed for virtualized server environments, written primarily in C. It su… | 75 | 4017 | stable |
| cacggghp/vk-turn-proxy A Go tool that tunnels WireGuard (or Hysteria) traffic through TURN servers of VK Calls / Yandex Telemost, encrypting packets with DTLS 1.2… | 61 | 4017 | active |
| Kuma Kuma is a CNCF Sandbox, Envoy-based service mesh that provides L4-L7 connectivity, discovery, security (mTLS), observability, and traffic c… | 95 | 4015 | stable |
| apache/guacamole-server The server-side component of Apache Guacamole, consisting of guacd (a proxy daemon), libguac (a C API), and protocol support libraries for … | 77 | 4011 | stable |
| Emitter Emitter is a distributed, high-performance publish-subscribe messaging platform built on the MQTT protocol, written in Go. It supports mess… | 55 | 4008 | active |
| appshubcc/Bettbox Bettbox is a multi-platform Mihomo (Clash Meta) proxy client rebuilt from an early version of FlClash, offering network debugging and rule-… | 83 | 3982 | active |
| DNSControl/dnscontrol DNSControl is an infrastructure-as-code tool for managing DNS zones and registrars via a JavaScript-compatible DSL. It pushes DNS records t… | 99 | 3969 | active |
| Adembc/lazyssh Lazyssh is a terminal-based interactive SSH manager written in Go, inspired by lazydocker and k9s. It provides a keyboard-driven TUI for br… | 38 | 3967 | active |
| projectcontour/contour Contour is a Kubernetes ingress controller that acts as the control plane for the Envoy proxy, deploying Envoy as a reverse proxy and load … | 96 | 3953 | active |
| masterking32/MasterHttpRelayVPN A local HTTP/SOCKS5 proxy that tunnels browser traffic through a Google Apps Script relay using domain fronting, making the connection appe… | 50 | 3930 | active |
| MisterTea/EternalTerminal Eternal Terminal (ET) is a secure remote shell that automatically reconnects after network outages or IP roaming without interrupting the s… | 86 | 3917 | active |
| MeshCore MeshCore is a lightweight C++ library and firmware implementing a hybrid multi-hop mesh routing protocol for LoRa packet radios, enabling e… | 84 | 3910 | active |
| 2ndalpha/gasmask Gas Mask is a macOS application for managing and switching between multiple hosts files. It runs in the menu bar, supports local, remote, a… | 51 | 3859 | active |
| Xbox Download Assistant A Windows desktop application (C#/Avalonia) that accelerates game downloads for Xbox, PlayStation, Switch, and various PC game launchers by… | 96 | 3844 | active |
| cilium/pwru pwru is an eBPF-based CLI tool for tracing network packets through the Linux kernel with fine-grained filtering. It helps debug connectivit… | 86 | 3841 | active |
| Hypostasis-Cat/HypoMux HypoMux is a Windows desktop application that aggregates multiple network adapters (Ethernet, Wi-Fi, mobile hotspots) to combine their band… | 81 | 3829 | active |
| Lantern Lantern is a cross-platform internet censorship circumvention tool (proxy/VPN client) that helps users bypass firewalls such as the Great F… | 100 | 16409 | maintenance |
| Serverless DNS Resolver A serverless, Pi-hole-style DNS-over-HTTPS and DNS-over-TLS resolver with configurable blocklists. It deploys to Cloudflare Workers, Deno D… | 58 | 3815 | active |
| Muduo Muduo is a multithreaded C++11 network library based on the reactor pattern, providing event-driven TCP networking for Linux servers. It us… | 45 | 16258 | maintenance |
| Homelable Homelable is a self-hosted web application for visualizing homelab infrastructure on interactive network, electrical, and 19-inch rack canv… | 80 | 3796 | active |
| Script-Hub-Org/Script-Hub Script Hub is a web-based converter that translates proxy app scripts, rewrites, modules, plugins, and rule sets between formats used by Qu… | 73 | 3796 | active |
| Findomain/Findomain Findomain is a fast subdomain enumeration tool written in Rust that discovers subdomains via Certificate Transparency logs and APIs without… | 78 | 3793 | active |
| OpenSpeedTest OpenSpeedTest is a free, open-source HTML5 network speed test tool written in vanilla JavaScript using only built-in Web APIs like XMLHttpR… | 64 | 3788 | active |
| getaurora/download Aurora (极光) is a commercial VPN/circumvention client for Android, Windows, and macOS, and this repository serves as its official anti-block… | 32 | 3785 | active |
| nabla-c0d3/sslyze SSLyze is a fast SSL/TLS scanning tool and Python library that analyzes a server's TLS configuration, including certificates, cipher suites… | 77 | 3780 | stable |
| octodns/octodns octoDNS is a Python tool for managing DNS records as code across multiple DNS providers. It uses a pluggable architecture so DNS zone confi… | 77 | 3773 | stable |
| mosdns mosdns is a programmable DNS forwarder and resolver written in Go that supports DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and custom rou… | 57 | 3760 | active |
| sozu-proxy/sozu Sōzu is a fast, always-up HTTP and TCP reverse proxy written in Rust that can be reconfigured at runtime without reloads and upgrades itsel… | 100 | 3742 | active |
| yeahwu/v2ray-wss A shell script that installs and configures multiple proxy protocols on Linux VPS servers, including Shadowsocks-rust, V2Ray+Nginx+WebSocke… | 62 | 3741 | active |
| WGDashboard/WGDashboard WGDashboard is a self-hosted web dashboard for managing WireGuard and AmneziaWG VPN servers, built with Python (Flask) and Vue.js. It auto-… | 87 | 3737 | active |
| pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 98 | 3734 | active |
| ip-scanner/cloudflare A tool for scanning and discovering Cloudflare IP ranges and hosts, distributed via the ip-scanner organization with an associated Telegram… | 40 | 3732 | active |
| Rabbit-Spec/Surge A personal collection of Surge proxy client configurations, modules, and JavaScript scripts maintained as a self-use backup. It aggregates … | 77 | 3729 | active |
| kevwan/tproxy tproxy is a Go CLI tool that proxies TCP connections while displaying and analyzing the traffic passing through them. It supports protocol-… | 69 | 3712 | active |
| websocket-client/websocket-client websocket-client is a Python library implementing the WebSocket protocol (hybi-13 / RFC 6455) with both low-level and higher-level APIs. It… | 87 | 3709 | stable |
| pavel-odintsov/fastnetmon FastNetMon Community Edition is a high-performance DDoS detection sensor that analyzes traffic from NetFlow, IPFIX, sFlow, AF_PACKET, and o… | 78 | 3706 | active |
| FxPool/FXMinerProxy FXMinerProxy is a Go-based cryptocurrency mining pool proxy that forwards miner traffic to pools, supports fee-based skimming (抽水), and pro… | 88 | 3703 | active |
| nadoo/glider glider is a Go-based forward proxy supporting many protocols (SOCKS5, HTTP, Shadowsocks, Trojan, VLESS, VMess, SSH, etc.) that can act as b… | 61 | 3698 | active |
| raboof/nethogs NetHogs is a small terminal-based 'net top' tool for Linux that groups network bandwidth usage by process rather than by protocol or subnet… | 77 | 3697 | stable |
| 9seconds/mtg mtg is a highly opinionated MTPROTO proxy server for Telegram written in Go, designed to let users access Telegram from censored or restric… | 89 | 3680 | active |
| blechschmidt/massdns MassDNS is a high-performance DNS stub resolver written in C, capable of resolving millions to billions of domain names at over 350,000 loo… | 66 | 3652 | stable |
| pgrok/pgrok pgrok is a self-hosted, multi-tenant HTTP/TCP reverse tunnel solution that exposes local development environments to the public internet us… | 77 | 3650 | active |
| tnodir/fort Fort Firewall is a standalone firewall application for Windows 7+ with its own kernel driver. It provides per-application network rules, ba… | 96 | 3634 | active |