Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Openwrt-Passwall/openwrt-passwall2 PassWall2 is a LuCI web interface application for OpenWrt routers that provides advanced proxy functionality and network traffic management… | 96 | 3625 | active |
| RevenantX/LiteNetLib LiteNetLib is a lightweight reliable UDP networking library for .NET, Mono, and Unity. It provides reliable/unordered delivery, packet frag… | 90 | 3625 | active |
| Urbit Urbit is a personal server stack built from scratch, consisting of an operating system kernel (Arvo), a virtual machine runtime (Vere), and… | 95 | 3620 | active |
| SRT (Secure Reliable Transport) SRT (Secure Reliable Transport) is an open-source transport protocol and C++ library for ultra-low-latency live video and audio streaming o… | 93 | 3613 | stable |
| nmap/npcap Npcap is the Nmap Project's packet capture and injection library for Microsoft Windows, implementing the portable Pcap API via a custom NDI… | 91 | 3604 | active |
| Asterisk Asterisk is an open source PBX and telephony toolkit that acts as middleware between internet/telephony channels and communications applica… | 92 | 3600 | stable |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 72 | 3592 | active |
| mitchellh/libxev libxev is a cross-platform, high-performance event loop library written in Zig that provides a unified proactor-style API for non-blocking … | 70 | 3580 | stable |
| microsoft/ebpf-for-windows eBPF for Windows is an MIT-licensed implementation of the eBPF runtime that runs on top of the Windows kernel, letting developers reuse fam… | 86 | 3573 | active |
| ddclient/ddclient ddclient is a Perl client that updates dynamic DNS entries for accounts on a wide range of dynamic DNS services such as Cloudflare, DuckDNS… | 59 | 3561 | active |
| martin-olivier/airgorah Airgorah is a WiFi security auditing application built in Rust with a GTK4 graphical interface, wrapping the aircrack-ng tools suite. It ca… | 86 | 3559 | active |
| peasoft/NoMoreWalls A Python project that automatically fetches and merges publicly available proxy nodes from the internet and republishes them as Base64 and … | 77 | 3555 | active |
| abhinavsingh/proxy.py proxy.py is a fast, lightweight, zero-dependency Python library and CLI tool for building HTTP/HTTPS proxy servers and web servers, with pl… | 67 | 3552 | active |
| openwrt-xiaomi/xmir-patcher XMiR-Patcher is a Python-based firmware patcher for Xiaomi routers that exploits vulnerabilities to unlock SSH and install custom firmware … | 75 | 3539 | active |
| Meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 51 | 3527 | active |
| Zephyruso/zashboard Zashboard is a web-based dashboard for managing and monitoring Clash-based proxy clients, offering connection tables, proxy group managemen… | 83 | 3523 | active |
| Wifiphisher Wifiphisher is a rogue Access Point framework for Wi-Fi security testing and red team engagements, enabling man-in-the-middle positioning v… | 57 | 14873 | maintenance |
| mvscode/frps-onekey A one-click shell script that installs, configures, updates, and manages the frps (Fast Reverse Proxy server) on Linux distributions like C… | 83 | 3508 | active |
| karol-broda/snitch snitch is a Go CLI/TUI tool that provides a friendlier alternative to ss and netstat for inspecting network connections. It displays connec… | 61 | 3503 | active |
| matthart1983/netwatch NetWatch is a zero-config terminal TUI for real-time network diagnostics, written in Rust and distributed as a single static binary. It sho… | 79 | 3497 | active |
| vulnersCom/nmap-vulners A collection of Nmap NSE scripts that enrich service scans with CVEs, CVSS scores and known exploits from the Vulners database. It fingerpr… | 96 | 3494 | active |
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| BloodHound Community Edition BloodHound Community Edition is a free, open-source application that uses graph theory to reveal hidden relationships and attack paths in A… | 91 | 3487 | active |
| eldadru/ksniff ksniff is a kubectl plugin that starts remote packet captures on Kubernetes pods by uploading a static tcpdump binary and streaming the out… | 23 | 3477 | active |
| badafans/better-cloudflare-ip A Go CLI tool that finds the best-performing Cloudflare Anycast IP addresses for a user's specific network environment. It randomly samples… | 70 | 3460 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 69 | 3433 | active |
| Snort++ Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet p… | 77 | 3428 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 76 | 3428 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 62 | 3427 | active |
| ph4ntonn/Stowaway Stowaway is a multi-hop proxy tool written in Go, designed for penetration testers to route external traffic through chains of nodes into r… | 51 | 3419 | active |
| Moli-X/Resources A curated collection of rewrite configurations, JavaScript scripts, and plugins for the iOS proxy apps QuantumultX, Loon, and Surge. It agg… | 75 | 3409 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 81 | 3390 | active |
| http-party/node-http-proxy node-http-proxy is a programmable HTTP proxying library for Node.js that supports websockets, HTTPS, and request/response modification. It … | 67 | 14121 | maintenance |
| txthinking/google-hosts A set of shell scripts that find usable Google IP addresses by scanning CIDR ranges, testing SSL/ping, and generating a hosts file mapping … | 68 | 3366 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 99 | 3365 | active |
| traviscross/mtr mtr is a network diagnostic tool that combines traceroute and ping, probing each hop along the route to a destination and printing live lat… | 75 | 3358 | stable |
| sivel/speedtest-cli A Python-based command line interface for testing internet bandwidth using speedtest.net servers. It measures download and upload speeds an… | 10 | 14059 | maintenance |
| ergochat/ergo Ergo is a modern IRC server (ircd) written in Go that integrates services (NickServ, ChanServ, HostServ) and bouncer functionality such as … | 87 | 3350 | active |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3346 | active |
| zalando/skipper Skipper is an HTTP router and reverse proxy written in Go, designed for service composition with support for hundreds of thousands of dynam… | 94 | 3332 | stable |
| localtunnel localtunnel is a Node.js tool that exposes a locally running web server to the internet via a public URL that proxies requests to your loca… | 32 | 3324 | active |
| vishvananda/netlink A Go library providing a simple, high-level API for Linux netlink socket communication, modeled loosely on the iproute2 CLI. It lets user-s… | 64 | 3312 | stable |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3305 | stable |
| achillean/shodan-python The official Python library and command-line interface for the Shodan search engine, which indexes Internet-connected devices and services.… | 23 | 3301 | stable |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 83 | 3299 | active |
| lsalzman/enet ENet is a C library providing reliable UDP networking with features like channels, reliability, and congestion control. It is designed for … | 69 | 3291 | stable |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 95 | 3287 | active |
| tuic-protocol/tuic TUIC is a standardized, implementation-agnostic network proxy protocol specification for relaying TCP and UDP traffic over QUIC with 0-RTT … | 29 | 3282 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3246 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3244 | active |
| Barabama/FreeNodes A Python crawler that aggregates free proxy nodes (v2ray, Clash, vmess, vless, trojan, ss) from public websites and publishes them as auto-… | 73 | 3238 | active |
| VNT VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 96 | 3228 | active |
| gozfree/gear-lib Gear-Lib is a collection of POSIX C libraries for IoT, embedded, and network service development, covering data structures, networking prot… | 23 | 3228 | active |
| WG Tunnel WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 95 | 3227 | active |
| D3Ext/WEF WEF is a Wi-Fi Exploitation Framework written in Bash that automates a wide range of wireless attacks against WPA/WPA2/WPA3, WPS, and WEP n… | 48 | 3225 | active |
| moul/assh assh is a transparent wrapper around the SSH client written in Go that enhances SSH configuration with regex host matching, aliases, gatewa… | 89 | 3221 | active |
| qdm12/ddns-updater A lightweight universal dynamic DNS (DDNS) updater that periodically keeps DNS A/AAAA records updated across many DNS providers, with a bui… | 84 | 3221 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 94 | 3219 | active |
| amalshaji/portr Portr is a self-hosted open-source tunnel solution that exposes local HTTP, TCP, and WebSocket connections to the public internet using SSH… | 93 | 3193 | active |
| tale/headplane Headplane is a feature-complete web UI for Headscale, the self-hosted alternative to Tailscale's WireGuard-based VPN coordination server. I… | 89 | 3181 | active |
| microsoft/retina Retina is an open-source, eBPF-based Kubernetes network observability platform that collects customizable telemetry, Prometheus metrics, an… | 94 | 3180 | active |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 69 | 3178 | active |
| IntersectMBO/cardano-node The core Cardano full-node executable that integrates the ledger, consensus (Ouroboros), and networking layers to participate in the Cardan… | 99 | 3174 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3174 | stable |
| Piping Server Piping Server is a streaming data transfer server over pure HTTP/HTTPS that relays data between devices using the same path, without storin… | 48 | 3164 | active |
| am-cf-tunnel A JavaScript script deployed on Cloudflare Workers and Pages that generates free VLESS and Trojan proxy nodes and converts their configurat… | 88 | 3159 | active |
| ShadowsocksR V2Ray Trojan Android Client A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3159 | active |
| seladb/PcapPlusPlus PcapPlusPlus is a multiplatform C++ library for capturing, parsing, and crafting network packets. It wraps popular packet processing engine… | 83 | 3144 | stable |
| libp2p libp2p is a modular peer-to-peer networking stack and protocol suite, originally extracted from IPFS, with implementations in Go, Rust, Jav… | 66 | 3144 | stable |
| chronoxor/NetCoreServer NetCoreServer is an ultra fast, low latency asynchronous socket server and client library for C# .NET Core. It supports TCP, SSL, UDP, Unix… | 68 | 3128 | stable |
| nirui/sshwifty Sshwifty is a self-hosted web application that provides SSH and Telnet client access directly from a browser. It ships as prebuilt executab… | 94 | 3127 | active |
| squid-cache/squid Squid is a mature, full-featured caching web proxy supporting HTTP, HTTPS, and FTP, with extensive access controls, content adaptation via … | 93 | 3121 | stable |
| sub-web An enhanced frontend for the Subconverter subscription conversion tool, built with Vue, adding nearly a hundred remote configs, dark mode, … | 76 | 3111 | active |
| xingpingcn/enhanced-FaaS-in-China A service providing optimized CNAME records (e.g., vercel-cname.xingpingcn.top) that improve access speed and stability of sites hosted on … | 71 | 3105 | active |
| acl-dev/acl Acl is a cross-platform C/C++ network communication library and server programming framework supporting Linux, Windows, macOS, FreeBSD, And… | 86 | 3103 | stable |
| bb-qq/r8152 A Synology DSM driver package (kernel module) for Realtek RTL8152/8153/8156/8157/8159 based USB Ethernet adapters, enabling 1G to 10G USB n… | 83 | 3099 | active |
| facebook/wangle Wangle is a C++ networking library providing composable client/server abstractions for building protocols, application clients, and servers… | 95 | 3093 | active |
| envoyproxy/gateway Envoy Gateway is an open-source control plane that manages Envoy Proxy as a standalone or Kubernetes-based application gateway, using Kuber… | 99 | 3091 | stable |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 89 | 3080 | active |
| fanqiang A curated collection of free censorship-circumvention tools, pre-configured one-click proxy browsers, and free proxy accounts/nodes (shadow… | 61 | 3080 | active |
| hwdsl2/wireguard-install A Bash script that automates setting up a WireGuard VPN server on various Linux distributions, with interactive and fully automatic install… | 75 | 3076 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 65 | 3070 | active |
| 6Kmfi6HP/EDtunnel EDtunnel is a proxy tool deployed on Cloudflare Workers and Pages that supports VLESS and Trojan protocols with configurable proxy IPs, SOC… | 55 | 3059 | active |
| thinkst/opencanary OpenCanary is a modular, multi-protocol network honeypot daemon written in Python, designed to detect attackers after they breach internal … | 88 | 3050 | active |
| ophub/amlogic-s9xxx-openwrt A build and firmware distribution project that runs OpenWrt on Amlogic, Rockchip, and Allwinner TV boxes and single-board computers. It pro… | 99 | 3049 | active |
| golang/net golang/net (golang.org/x/net) is the official supplementary networking library for Go, maintained by the Go team. It provides packages beyo… | 77 | 3045 | stable |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 32 | 3044 | active |
| Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 46 | 3043 | active |
| gnmyt/MySpeed MySpeed is a self-hosted speed test analysis application that automatically runs internet speed tests and records results over a configurab… | 67 | 3032 | active |
| kubernetes-sigs/gateway-api Kubernetes Gateway API is the official successor to Ingress, providing a role-oriented, expressive specification and CRDs for L4/L7 routing… | 95 | 3026 | stable |
| strongSwan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 88 | 2994 | stable |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 100 | 2982 | active |
| kamailio/kamailio Kamailio is an open source SIP signaling server (RFC3261) written in C, designed for large-scale VoIP and real-time communication platforms… | 95 | 2978 | stable |
| ntop/PF_RING PF_RING is a Linux kernel module and user-space framework for high-speed packet capture and processing, offering a consistent API for netwo… | 84 | 2970 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 85 | 2969 | active |
| palahsu/DDoS-Ripper DDoS-Ripper (DRipper) is a Python command-line tool that floods a target IP with traffic to simulate a distributed denial-of-service attack… | 68 | 2966 | active |
| k8snetworkplumbingwg/multus-cni Multus CNI is a CNI meta-plugin for Kubernetes that enables attaching multiple network interfaces to pods, creating multi-homed pods. It wo… | 89 | 2964 | active |
| elseif/MikroTikPatch A Python-based tool that patches MikroTik RouterOS public keys and generates licenses, enabling shell access, container mode, and highest-l… | 87 | 2955 | active |
| matrix-org/synapse Synapse is the reference Matrix homeserver, an open-source server implementing the Matrix protocol for federated, end-to-end-encrypted comm… | 10 | 12099 | maintenance |
| SONiC SONiC (Software for Open Networking in the Cloud) is a free, open-source network operating system based on Linux that runs on switches from… | 77 | 2942 | active |