Open-source networking software
2108 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2108 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| MatinSenPai/SenPaiScanner SenPai Scanner is a lightweight, cross-platform Cloudflare IP and endpoint scanner written in Go. It probes Cloudflare edge IPs, validates … | 80 | 2484 | active |
| ChrispyBacon-dev/DockFlare DockFlare is a self-hosted Python/Flask application that watches Docker container events and automatically manages Cloudflare Tunnel ingres… | 85 | 2475 | active |
| DNSCrypt/SimpleDnsCrypt Simple DNSCrypt is a Windows GUI management tool for configuring dnscrypt-proxy. It simplifies setting up encrypted DNS on Windows systems. | 52 | 2467 | active |
| jonssonyan/h-ui H UI is a lightweight web panel for managing the Hysteria2 proxy server, written in Go. It provides user management, traffic limits, subscr… | 79 | 2460 | active |
| Amazon VPC CNI The AWS VPC CNI plugin is a Kubernetes networking plugin that assigns VPC IP addresses to pods using Elastic Network Interfaces on AWS. It … | 98 | 2457 | active |
| ZerBea/hcxtools A set of C command-line tools that convert WiFi packet captures (pcap/pcapng) into hash formats compatible with Hashcat and John the Ripper… | 77 | 2454 | active |
| ramonvermeulen/whosthere Whosthere is a Local Area Network discovery tool with an interactive Terminal User Interface, written in Go. It discovers devices via mDNS,… | 80 | 2451 | active |
| vpnhood/VpnHood VpnHood is an open-source, cross-platform VPN client and server built entirely from scratch in C#/.NET, designed to be undetectable by deep… | 96 | 2449 | active |
| mostafa-wahied/portracker A self-hosted, real-time port monitoring and discovery tool that automatically maps running services and their ports across servers, Docker… | 82 | 2444 | active |
| ArgeliusLabs/Chasing-Your-Tail-NG A Python application that monitors Wi-Fi probe requests via Kismet to detect whether a device is being physically followed. It correlates s… | 32 | 2444 | active |
| NodePassProject/Anywhere Anywhere is a native proxy client for iOS, iPadOS, macOS, and tvOS built entirely in Swift with no external proxy-core bridges. It implemen… | 66 | 2441 | active |
| fscarmen/warp-sh A shell script suite for connecting Linux servers to Cloudflare WARP via WGCF, adding IPv4/IPv6 network connectivity through WireGuard. It … | 71 | 2439 | active |
| Xudong-Huang/may May is a high-performance Rust library for stackful coroutines, offering a Goroutine-like programming model for building massively concurre… | 71 | 2438 | active |
| YTwsy/OpenSurge-for-Mac OpenSurge for Mac is an open-source, Surge-style macOS gateway and control plane that turns a Mac into a whole-home transparent proxy gatew… | 80 | 2426 | active |
| drk1wi/Portspoof Portspoof is a lightweight C++ tool that emulates open TCP ports and convincing service signatures across all 65535 ports, making port scan… | 78 | 2425 | active |
| intentfreedomain/FreeDomain Intent FreeDomain is a non-profit service (fiscally sponsored by Hack Club) that provides free subdomains like .int.yt and .nc.to for devel… | 61 | 2417 | active |
| bubenshchykov/ngrok A Node.js wrapper around the ngrok client binary that lets developers programmatically open tunnels exposing localhost servers to the publi… | 41 | 2415 | active |
| feiniaoyun/feiniaoyun A repository serving as a mirror-link directory for Feiniaoyun, a commercial VPN/proxy subscription service, listing rotating access URLs r… | 68 | 2411 | active |
| dndx/phantun Phantun is a lightweight, high-performance UDP-to-TCP obfuscator written in safe Rust that disguises UDP packets as TCP streams to pass thr… | 66 | 2408 | active |
| facil.io facil.io is a high-performance C micro-framework for web applications, providing an evented HTTP/1.1, WebSocket, and SSE server with pub/su… | 54 | 2408 | active |
| mkj/dropbear Dropbear is a small SSH server and client written in C, designed for low memory and disk footprints. It is widely used on embedded Linux sy… | 88 | 2407 | stable |
| kubeovn/kube-ovn Kube-OVN is a CNCF Sandbox CNI plugin that integrates OVN-based network virtualization with Kubernetes, providing an advanced container net… | 95 | 2406 | active |
| smittix/intercept iNTERCEPT is a free, open-source, web-based signal intelligence (SIGINT) platform that unifies dozens of software-defined radio tools into … | 77 | 2403 | active |
| linux-rdma/rdma-core rdma-core provides the userspace libraries and daemons for the Linux kernel's RDMA (drivers/infiniband) subsystem, including libibverbs, li… | 93 | 2399 | stable |
| htrgouvea/nipe Nipe is a Perl-based command-line engine that routes all of a machine's network traffic through the Tor network by manipulating iptables/ip… | 75 | 2398 | active |
| Tungstenite tokio-tungstenite is a Rust library providing asynchronous WebSocket client and server support built on top of the lightweight tungstenite-… | 70 | 2393 | stable |
| zfl9/ss-tproxy A shell script that sets up transparent proxying on Linux using iptables/nftables TPROXY and REDIRECT rules, working with clients like ss-l… | 47 | 2393 | active |
| RSocket RSocket Java is the reference Java implementation of the RSocket application protocol, a binary protocol for Reactive Streams semantics ove… | 23 | 2388 | stable |
| Resinat/Resin Resin is a high-performance proxy pool gateway written in Go that aggregates massive numbers of proxy nodes into a unified, observable prox… | 73 | 2378 | active |
| Impostor/Impostor Impostor is an open-source reimplementation of the Among Us game server, written in C#. It fully replaces the official server, supports plu… | 94 | 2372 | active |
| akvorado/akvorado Akvorado is a self-hosted network flow collector, enricher, and visualizer that ingests NetFlow/IPFIX and sFlow data, enriches it with SNMP… | 98 | 2370 | active |
| WhatsApp/proxy An official WhatsApp proxy implementation that lets users host their own proxy infrastructure to connect to WhatsApp for chat messaging. It… | 92 | 2359 | active |
| free5GC free5GC is an open-source implementation of the 5G mobile core network (5GC) compliant with 3GPP Release 15/17, developed as a Linux Founda… | 93 | 2358 | active |
| gnuton/asuswrt-merlin.ng A fork of the Asuswrt-Merlin third-party firmware that extends support to additional ASUS routers, including DSL and WiFi 6/7 models. It pr… | 87 | 2357 | active |
| oneclickvirt/ecs A comprehensive VPS/server benchmarking tool written in Go that tests system information, network performance, and IP quality with zero env… | 83 | 2351 | active |
| MegaManSec/SSH-Snake SSH-Snake is a self-propagating, file-less bash script that automatically discovers SSH private keys on a system, attempts to connect to re… | 10 | 2345 | active |
| zdz/ServerStatus-Rust A Rust rewrite of the ServerStatus cloud probe with a lightweight single-binary server and client for monitoring multiple hosts' CPU, memor… | 66 | 2336 | active |
| V2Ray for OpenWrt OpenWrt/LEDE package definitions (Makefiles) for building and installing V2Ray core on OpenWrt routers, distributed via opkg feeds or prebu… | 92 | 2319 | active |
| bjdgyc/anylink AnyLink is an enterprise-grade SSL VPN server written in Go that supports many concurrent remote-access users. It implements the OpenConnec… | 90 | 2316 | active |
| kylemanna/docker-openvpn A Docker image and shell tooling that runs an OpenVPN server in a container, bundled with an EasyRSA PKI certificate authority. It automate… | 29 | 9086 | maintenance |
| owerdogan/whoami-project Whoami is a user-friendly privacy and anonymity CLI tool for Debian and Arch-based Linux distributions. It bundles 9+ modules such as IP ch… | 40 | 2313 | active |
| Exa-Networks/exabgp ExaBGP is a Python-based BGP protocol implementation that lets network engineers control and interact with BGP sessions through a JSON API … | 99 | 2311 | active |
| yuezk/GlobalProtect-openconnect A GlobalProtect VPN client for Linux built on OpenConnect, offering both a CLI and a Tauri-based GUI. It supports SSO authentication includ… | 99 | 2295 | active |
| squat/kilo Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across … | 74 | 2294 | active |
| PaperMC/Velocity Velocity is a modern, high-performance Minecraft server proxy written in Java, designed to route players across multiple backend servers wi… | 76 | 2269 | active |
| Runnin4ik/dpi-detector A Python CLI tool that detects and classifies Deep Packet Inspection (DPI) based internet censorship, including TCP 16-20KB connection drop… | 79 | 2262 | active |
| pion/turn Pion TURN is a Go library providing an API for building TURN (Traversal Using Relays around NAT) clients and servers, part of the Pion WebR… | 96 | 2256 | active |
| gsliepen/tinc Tinc is a peer-to-peer VPN daemon that creates encrypted private networks over the Internet with automatic full-mesh routing and NAT traver… | 74 | 2256 | stable |
| miekg/dns A complete DNS library for Go supporting all resource record types including DNSSEC, with both client (resolver) and server (nameserver) si… | 76 | 8786 | maintenance |
| LloydAsp/NodeQuality A shell-based VPS testing tool that runs benchmark scripts (Yabs, IP quality, network quality) inside a temporary chroot sandbox (BenchOS) … | 47 | 2248 | active |
| d3mondev/puredns Puredns is a fast command-line domain resolver and subdomain bruteforcing tool written in Go. It uses massdns for bulk DNS lookups and appl… | 50 | 2246 | active |
| mozilla/neqo Neqo is Mozilla's Rust implementation of the QUIC transport protocol, HTTP/3, and QPACK, used in production by Firefox and usable standalon… | 100 | 2245 | active |
| kismetwireless/kismet Kismet is a wireless network detector, sniffer, and intrusion detection system for Wi-Fi, Bluetooth, SDR, and other wireless protocols. It … | 77 | 2244 | active |
| hanshuaikang/NBping NBping is a Rust-based ping tool that supports concurrent pinging of multiple addresses with real-time data updates and visual chart displa… | 80 | 2243 | active |
| baresip Baresip is a portable and modular SIP User-Agent written in C with audio and video call support. It provides a rich feature set including m… | 94 | 2240 | active |
| SysSec-KAIST/LTESniffer LTESniffer is an open-source LTE downlink/uplink eavesdropper built on FALCON and srsRAN that decodes PDCCH, PDSCH, and PUSCH channels to c… | 21 | 2234 | active |
| martin-ger/esp32_nat_router Open-source firmware that turns an ESP32 into a WiFi NAT router and firewall, routing between an AP interface and a STA or Ethernet uplink.… | 77 | 2228 | active |
| lefayjey/linWinPwn linWinPwn is a bash script that wraps and streamlines a large set of Active Directory penetration testing tools such as impacket, bloodhoun… | 76 | 2228 | active |
| koolshare/rogsoft rogsoft is the second-generation software center for koolshare's modified ASUS (Merlin-based/official-mod) router firmware on hnd/axhnd/axh… | 75 | 2228 | active |
| berthubert/googerteller A C++ command-line tool that plays audible beeps whenever your computer sends packets to Google services or known trackers, using tcpdump o… | 32 | 2225 | active |
| punk-security/dnsReaper DNS Reaper is a Python CLI tool that scans DNS records for subdomain takeover vulnerabilities using over 50 signatures, at roughly 50 subdo… | 40 | 2221 | active |
| lkarlslund/Adalanche Adalanche is an open-source Active Directory attack graph visualizer and explorer written in Go. It collects data via LDAP and SYSVOL, anal… | 100 | 2217 | active |
| mandiant/flare-fakenet-ng FakeNet-NG is a dynamic network analysis tool that intercepts and redirects network traffic while simulating legitimate network services. I… | 60 | 2215 | active |
| MikeWang000000/Natter Natter is a Python CLI tool that exposes local TCP/UDP ports behind a full-cone NAT to the public Internet by discovering the external mapp… | 53 | 2214 | active |
| kaaass/ZerotierFix An unofficial ZeroTier Android client patched from the official app, adding features like self-hosted Moon support, custom planet configura… | 23 | 2214 | active |
| DigitalRuby/IPBan IPBan is a free, open-source security service that monitors failed login attempts from event logs and log files on Windows and Linux server… | 81 | 2212 | active |
| ZerBea/hcxdumptool hcxdumptool is a C-based command-line tool that captures packets from WLAN devices and runs layer 2 attacks against the WPA protocol to fin… | 76 | 2209 | active |
| ghostunnel/ghostunnel Ghostunnel is a simple TLS proxy written in Go that adds mutual TLS authentication in front of (or behind) non-TLS backend services, in cli… | 99 | 2208 | active |
| rofl0r/microsocks MicroSocks is a tiny, multithreaded SOCKS5 proxy server written in C with minimal resource usage and no config file required. It supports I… | 66 | 2206 | active |
| qwj/python-proxy pproxy is a lightweight asynchronous tunnel proxy implemented in pure Python 3 asyncio, supporting HTTP, HTTP2, HTTP3/QUIC, SOCKS4/5, Shado… | 32 | 2203 | active |
| HubSpot/offline Offline.js is a small browser JavaScript library that automatically detects when users lose internet connectivity and shows a themed online… | 10 | 8565 | maintenance |
| ZLMediaKit/ZLToolKit ZLToolKit is a lightweight C++11 network programming framework built on epoll/kqueue/wepoll with thread pools and asynchronous IO for high-… | 75 | 2202 | stable |
| m13253/dns-over-https A high-performance DNS-over-HTTPS (DoH) client and server written in Go, supporting both the Google DoH JSON API and IETF RFC 8484 wire for… | 74 | 2201 | active |
| c-ares/c-ares c-ares is a modern asynchronous DNS (stub) resolver library written in C. It provides non-blocking DNS query interfaces that abstract the i… | 92 | 2196 | stable |
| andydunstall/piko Piko is an open-source reverse proxy for tunneling traffic to services that are not publicly routable, serving as a self-hosted alternative… | 92 | 2195 | active |
| Ice Ice (Internet Communications Engine) is a complete RPC framework for building networked applications, using the Slice IDL to generate clien… | 92 | 2193 | stable |
| zmap/zgrab2 ZGrab2 is a fast, modular application-layer network scanner written in Go, designed for large Internet-wide surveys in tandem with ZMap. It… | 73 | 2190 | active |
| JinnLynn/genpac A Python CLI tool that converts the gfwlist blocked-domains list into configuration files for various proxy tools, including PAC, Dnsmasq, … | 77 | 2181 | active |
| prometheus/snmp_exporter A Prometheus exporter that queries network devices via SNMP and exposes the metrics in Prometheus format. It maps hierarchical SNMP OID dat… | 78 | 2177 | active |
| alexbers/mtprotoproxy A fast, async MTProto proxy server for Telegram written in Python, deployable via Docker or directly. It supports channel advertising via M… | 67 | 2174 | stable |
| bytebeamio/rumqtt rumqtt is a Rust ecosystem implementing the MQTT standard, consisting of rumqttc (a high-level async MQTT client) and rumqttd (a high-perfo… | 66 | 2174 | active |
| Canarytokens Canarytokens is a self-hostable service by Thinkst that generates tripwire tokens (URLs, DNS names, AWS keys, files, etc.) which alert you … | 76 | 2171 | active |
| cyfdecyf/cow COW is an HTTP proxy server written in Go that automatically detects blocked websites and routes only those through parent (secondary) prox… | 23 | 8407 | maintenance |
| Pugmatt/BedrockConnect BedrockConnect is a lightweight Minecraft Bedrock Edition server-list service that lets console players (Xbox, Switch, PlayStation) join ar… | 96 | 2167 | active |
| songgao/water water is a native Go library for creating and reading/writing to TUN/TAP virtual network interfaces using only syscalls and standard Go typ… | 32 | 2166 | stable |
| zhzyker/dismap Dismap is a Go-based asset discovery and identification tool that fingerprints web, TCP, UDP, and TLS services using a rule base of 4500+ w… | 23 | 2165 | active |
| p4gefau1t/trojan-go Trojan-Go is a full-featured Trojan proxy written in Go that disguises proxy traffic as normal TLS traffic to bypass censorship systems lik… | 23 | 8387 | maintenance |
| stackia/rtp2httpd A lightweight IPTV streaming relay server written in C that converts multicast RTP/UDP, RTSP, and HLS sources into unicast HTTP streams. It… | 88 | 2152 | active |
| lucasdillmann/nginx-ignition nginx ignition is a self-hosted web UI for managing the nginx web server, letting users configure virtual hosts, streams, SSL certificates,… | 85 | 2141 | active |
| chainreactors/gogo gogo is a high-performance, highly configurable automated scanning engine written in pure Go for red team operations. It combines port scan… | 85 | 2141 | active |
| bestruirui/BestSub BESTSUB is a self-hosted web application for managing proxy subscriptions for Clash, Mihomo, and sing-box, with a dashboard for subscriptio… | 83 | 2139 | active |
| barnybug/cli53 cli53 is a command line tool for managing Amazon Route 53 DNS. It supports importing and exporting zone files in BIND format and CRUD opera… | 69 | 2138 | active |
| Munin Munin is a networked resource monitoring tool that surveys servers and nodes, stores metrics in RRD files, and presents them as graphs thro… | 66 | 2138 | stable |
| PoshC2 PoshC2 is a proxy-aware Command and Control (C2) framework written in Python3 that aids penetration testers with red teaming, post-exploita… | 43 | 2135 | active |
| CluvexStudio/Aether Aether is a Rust-based censorship circumvention client for heavily restricted networks that discovers reachable gateways, builds encrypted … | 80 | 2130 | active |
| adamfisk/LittleProxy LittleProxy is a high-performance HTTP(S) proxy written in Java on top of the Netty networking library. It can be run standalone from the c… | 23 | 2130 | active |
| znc/znc ZNC is an advanced IRC bouncer (BNC) that stays connected to IRC networks so clients can disconnect and reconnect without losing chat histo… | 76 | 2126 | stable |
| haccer/subjack Subjack is a DNS takeover scanner written in Go that concurrently scans lists of subdomains to identify ones vulnerable to hijacking. It de… | 91 | 2123 | active |
| WXPush A shell-based automation toolkit for deploying proxy and panel applications (Argo+VMess, Hysteria2, SOCKS5, MTProto, alist, Nezha monitorin… | 68 | 2123 | active |
| nilbuild/slim Slim is a Go CLI tool that maps localhost ports to clean HTTPS domains like myapp.test with trusted certificates, and can expose local serv… | 75 | 2115 | active |