Open-source networking software
2154 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2154 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| romanvht/ByeByeDPI An Android application that runs ByeDPI locally and routes all device traffic through it via Android's VPN mode to bypass DPI-based blockin… | 87 | 6710 | active |
| Suricata Suricata is a high-performance network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring… | 93 | 6683 | stable |
| Mygod/VPNHotspot An Android app that shares your device's VPN connection over a Wi-Fi hotspot, repeater, or USB/Bluetooth tethering. It requires root access… | 89 | 6472 | active |
| winfsp/sshfs-win SSHFS-Win is a minimal port of SSHFS to Windows that lets users mount remote SSH/SFTP directories as local network drives. It uses Cygwin f… | 61 | 6398 | active |
| zmap/zmap ZMap is a fast, stateless single-packet network scanner written in C, designed for Internet-wide network surveys such as scanning the entir… | 84 | 6390 | active |
| Mirror Networking Mirror is the most popular free open-source networking library for Unity, forked from Unity's deprecated UNET HLAPI and battle-tested since… | 92 | 6335 | stable |
| projectdiscovery/naabu Naabu is a fast, lightweight port scanner written in Go that performs SYN, CONNECT, and UDP scans to enumerate open ports on hosts. It is d… | 87 | 6320 | active |
| 666OS/ClashMac ClashMac is a native macOS proxy client built in SwiftUI, wrapping the Clash/Mihomo engine with system proxy and TUN enhanced modes. It pro… | 82 | 6310 | active |
| dae dae is a high-performance transparent proxy solution for Linux built on eBPF, performing traffic splitting directly in the kernel so direct… | 88 | 6308 | active |
| grishka/NearDrop NearDrop is an unofficial macOS implementation of Google's Nearby Share/Quick Share protocol, letting Android devices send files to a Mac o… | 83 | 6296 | active |
| PeerBanHelper PeerBanHelper is a self-hosted Java application that automatically bans unwanted, leeching, and abnormal BitTorrent peers by connecting to … | 85 | 6284 | active |
| jagt/clumsy clumsy is a Windows utility that degrades network conditions in a controlled, interactive way by capturing live packets with WinDivert and … | 43 | 6270 | active |
| eooce/node-ws A lightweight Node.js serverless proxy application implementing VLESS, Trojan, VMess, and Shadowsocks protocols without a kernel, deployabl… | 81 | 6238 | active |
| dorssel/usbipd-win usbipd-win is a Windows service and command-line tool that shares locally connected USB devices over the network using the USB/IP protocol.… | 76 | 6216 | active |
| Asio Asio is a cross-platform C++ library for network and low-level I/O programming that provides a consistent asynchronous model using modern C… | 70 | 6216 | stable |
| ldcsaa/HP-Socket HP-Socket is a high-performance network communication component library for C/C++ providing TCP, UDP, HTTP/HTTPS, and WebSocket server, cli… | 86 | 6151 | active |
| Clash for Windows Chinese Clash for Windows Chinese is a modified, Chinese‑localized version of the Clash proxy client with support for the Mihomo core and modern pr… | 86 | 28586 | maintenance |
| CNI (Container Network Interface) CNI (Container Network Interface) is a CNF project consisting of a specification and Go libraries for writing plugins that configure networ… | 84 | 6133 | stable |
| arvidn/libtorrent libtorrent is a feature-complete, efficient C++ library implementing the BitTorrent protocol with support for popular extensions including … | 94 | 6091 | stable |
| wnlen/clash-for-linux A shell-based management platform for running Clash/Mihomo proxy on Linux, with automatic kernel download, subscription management, node se… | 72 | 6091 | active |
| evio evio is a fast, small event-loop networking framework for Go that makes direct epoll and kqueue syscalls instead of using the standard net … | 66 | 6041 | stable |
| tinyproxy/tinyproxy Tinyproxy is a lightweight HTTP/HTTPS proxy daemon for POSIX operating systems, written in C. It supports connection buffering, domain/URL … | 75 | 6010 | stable |
| FluxionNetwork/fluxion Fluxion is a security auditing and social-engineering research tool that retrieves WPA/WPA2 keys via phishing attacks using rogue access po… | 92 | 5985 | active |
| google/bbr Google's distribution of documentation, scripts, and reference materials for the BBR TCP/QUIC congestion control algorithm, including the L… | 75 | 5952 | active |
| EFForg/rayhunter Rayhunter is an EFF-developed Rust tool that detects IMSI catchers (cell-site simulators, also known as stingrays) used for cellular survei… | 93 | 5945 | active |
| Geyser Geyser is a proxy/bridge that translates packets between Minecraft: Bedrock Edition clients and Minecraft: Java Edition servers, enabling t… | 77 | 5911 | active |
| js-org/js.org A community service that grants free js.org subdomains to JavaScript developers hosting projects on GitHub Pages. Contributors claim a subd… | 77 | 5879 | active |
| microsoft/ethr Ethr is a cross-platform network performance measurement tool written in Go that measures bandwidth, connections/s, packets/s, latency, los… | 60 | 5868 | active |
| sammwyy/MikuMikuBeam MikuMikuBeam is a network stress testing tool written in Go with a Hatsune Miku-themed web UI, supporting HTTP flood, HTTP bypass, Slowlori… | 60 | 5864 | active |
| mininet/mininet Mininet is a network emulator that creates realistic virtual networks of hosts, switches, and links on a single Linux machine using process… | 23 | 5859 | stable |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 55 | 5849 | active |
| lanproxy lanproxy is a self-hosted NAT traversal / reverse proxy tool that exposes machines behind a firewall to the public internet by forwarding T… | 41 | 5845 | active |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 95 | 5838 | active |
| mscdex/ssh2 SSH2 client and server modules written in pure JavaScript for Node.js. It supports exec, shell, SFTP, port forwarding, and custom HTTP(S) a… | 73 | 5821 | stable |
| RIOT OS RIOT is an open-source, vendor-independent operating system for Internet of Things and embedded devices, supporting 8/16/32-bit microcontro… | 93 | 5820 | active |
| scanopy/scanopy Scanopy is a self-hostable network discovery and documentation tool that scans networks on a schedule and automatically generates live topo… | 78 | 5812 | active |
| fscarmen/sing-box A one-click shell script that deploys and manages a sing-box multi-protocol proxy server on a VPS, supporting protocols like Reality, Hyste… | 73 | 5809 | active |
| xykt/NetQuality A shell-based network quality diagnostic script that checks BGP info, TCP latency, return routes, and speed tests across Chinese and intern… | 62 | 5777 | active |
| pfSense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 62 | 5742 | stable |
| telemt/telemt Telemt is a high-performance MTProxy server for Telegram written in Rust with Tokio, implementing all official MTProto proxy modes includin… | 78 | 5705 | active |
| baidu/dperf dperf is a high-performance network traffic generator and load testing tool built on DPDK, capable of tens of millions of HTTP connections … | 62 | 5644 | active |
| QuipNetwork/quip-validator A Rust implementation of the Quip Protocol validator node, forked from Substrate's solochain template. It runs a blockchain node that can j… | 58 | 5636 | active |
| amadeusprotocol/node AmadeusD is a blockchain node daemon for the Amadeus protocol, supporting local testnets, an RPC API, and WebAssembly smart contract deploy… | 87 | 5576 | active |
| Rethink DNS + Firewall Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 97 | 5554 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 80 | 5554 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 61 | 5546 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 17 | 5539 | active |
| psviderski/uncloud Uncloud is a lightweight, decentralised container orchestration tool that deploys and manages containerised applications across a network o… | 90 | 5528 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 81 | 5513 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 96 | 5498 | stable |
| USArmyResearchLab/Dshell Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supp… | 23 | 5496 | active |
| Cuberite Cuberite is a lightweight, fast, and extensible Minecraft-compatible multiplayer game server written in C++ with a flexible Lua plugin API.… | 55 | 5453 | active |
| hickory-dns/hickory-dns Hickory DNS (formerly Trust-DNS) is a Rust-based DNS client, server, and resolver library suite built for safety and security. It supports … | 98 | 5445 | active |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 75 | 5416 | active |
| ExpressLRS ExpressLRS is an open source radio control link firmware for RC applications, built on Semtech SX127x/SX1280 LoRa hardware with Espressif o… | 90 | 5399 | active |
| metalbear-co/mirrord mirrord is an open-source tool that lets developers and AI coding agents run local processes as if they were pods in a live Kubernetes clus… | 96 | 5375 | active |
| feschber/lan-mouse Lan Mouse is a cross-platform software KVM switch that lets you share a single mouse and keyboard across multiple PCs over a local network.… | 80 | 5374 | active |
| ineo6/hosts A project that maintains regularly updated hosts file entries mapping GitHub domains to working IPs, fixing broken images and slow access t… | 68 | 5371 | active |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 92 | 5364 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5362 | active |
| Ladon Ladon is a large-scale internal network penetration scanner written in C#, offering port scanning, service identification, network asset di… | 25 | 5333 | active |
| spieglt/FlyingCarpet Flying Carpet is a cross-platform file transfer application that works like AirDrop between Android, iOS, Linux, macOS, and Windows devices… | 96 | 5331 | active |
| quinn-rs/quinn Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol, with a high-level tokio-based API plus a sans-I/… | 99 | 5296 | stable |
| socketio/socket.io-client-swift A Swift client library for connecting iOS, macOS, and other Apple-platform apps to Socket.IO servers. It supports Socket.IO server 2.x thro… | 23 | 5289 | stable |
| JetKVM JetKVM is an open-source KVM over IP solution (firmware and web dashboard) for remotely controlling computers via keyboard, video, and mous… | 88 | 5267 | active |
| martin-ger/esp_wifi_repeater Firmware for the ESP8266/ESP8285 that turns the chip into a full WiFi NAT router and, in a separate edition, a true L2-bridge WiFi repeater… | 67 | 5257 | active |
| includeos/IncludeOS IncludeOS is a minimal, resource-efficient unikernel operating system for C++ services, linked directly into your application via `#include… | 56 | 5253 | active |
| Ullaakut/cameradar Cameradar is a Go-based command-line tool that scans targets for open RTSP video surveillance endpoints and uses dictionary attacks to disc… | 94 | 5234 | active |
| XRPLF/rippled rippled (xrpld) is the core C++ server daemon implementing the XRP Ledger protocol, a decentralized cryptographic ledger secured by a Byzan… | 95 | 5230 | stable |
| bitcoinj/bitcoinj bitcoinj is a Java library for working with the Bitcoin protocol, supporting wallet management, sending and receiving transactions via SPV … | 86 | 5229 | active |
| RaspAP RaspAP is a full-featured wireless router and access point management application for Debian-based devices such as the Raspberry Pi, provid… | 99 | 5226 | active |
| ddgth/cf2dns A Python tool that selects high-quality Cloudflare IPs and updates DNS records via DNS provider APIs (DNSPod, Aliyun DNS, Huawei Cloud DNS)… | 32 | 5207 | active |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 62 | 5174 | active |
| eooce/Sing-box A one-click Shell installation script that deploys sing-box with multiple proxy protocols (VLESS-Reality, VMess-ws-tls via Argo tunnel, Hys… | 62 | 5168 | active |
| NCCL NVIDIA's Collective Communication Library (NCCL) is a C++ library providing topology-aware, high-bandwidth inter-GPU communication primitiv… | 99 | 5165 | stable |
| WebRTC.rs An async-friendly WebRTC implementation in Rust, inspired by and largely rewriting the Pion stack. It is built on a Sans-I/O core with plug… | 99 | 5160 | active |
| SpaceTimee/Sheas-Cealer Sheas Cealer is a WPF (.NET 8) Windows desktop tool that forges the SNI extension field in Chromium's launch parameters, allowing users to … | 64 | 5159 | active |
| lmc999/RegionRestrictionCheck A pure bash script that checks whether an IP address can access various geo-restricted streaming and media services (e.g., Netflix, Disney+… | 44 | 5147 | active |
| angryip/ipscan Angry IP Scanner is a fast, open-source IP address and port scanner with a friendly GUI built on Eclipse SWT. It scans networks for hosts, … | 83 | 5140 | active |
| jinwyp/one_click_script A collection of one-click shell scripts for Linux servers that install latest or LTS Linux kernels and enable BBR or BBR Plus congestion co… | 67 | 5136 | active |
| domcyrus/rustnet RustNet is a cross-platform terminal-based network monitoring tool that maps live TCP, UDP, and QUIC connections to their owning processes … | 86 | 5131 | active |
| yrutschle/sslh sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend service… | 76 | 5120 | stable |
| Remnawave Remnawave is a self-hosted proxy management panel built on top of Xray-core, providing a web interface for managing proxy servers and users… | 81 | 5118 | active |
| Ponderfly/GoogleTranslateIpCheck A cross-platform C# command-line tool that scans for Google Translate IP addresses reachable from mainland China and can automatically writ… | 76 | 5117 | active |
| monoio-rs/monoio Monoio is a thread-per-core asynchronous Rust runtime built on io_uring (with epoll/kqueue fallbacks), originally developed at ByteDance. U… | 61 | 5113 | active |
| Grin Grin is a minimal, open-source implementation of the Mimblewimble blockchain protocol, providing a privacy-preserving digital currency with… | 90 | 5098 | active |
| smol-rs/smol smol is a small and fast async runtime for Rust that re-exports a set of composable async crates (executor, I/O, networking, locks, channel… | 62 | 5079 | stable |
| dotnet/MQTTnet MQTTnet is a high-performance .NET library implementing the MQTT protocol (up to version 5), providing both an MQTT client and an embedded … | 85 | 5071 | active |
| torproject/tor Tor is the core implementation of the Tor anonymity network, routing internet traffic through onion circuits to hide a user's IP address an… | 32 | 5052 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 93 | 5026 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 98 | 5021 | active |
| Ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 92 | 5008 | active |
| NLnetLabs/unbound Unbound is a validating, recursive, and caching DNS resolver written in C, designed to be fast and lean while implementing modern open stan… | 92 | 4932 | stable |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 75 | 4928 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 93 | 4915 | active |
| PCAPdroid PCAPdroid is a privacy-friendly open source Android app that monitors, analyzes, and blocks network connections made by other apps without … | 97 | 4904 | active |
| zzzgydi/clash-verge A cross-platform desktop GUI for the Clash proxy core, built with Tauri and React. It lets users manage Clash proxy profiles, rules, and sy… | 10 | 21906 | maintenance |
| HMBSbige/NatTypeTester A cross-platform tool for testing the NAT type of the current network using STUN protocols (RFC 3489, 5389, 5780, 8489). It ships as a desk… | 99 | 4886 | active |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 79 | 4875 | active |
| OpenWiFi Open-source full-stack IEEE 802.11/Wi-Fi design based on Software Defined Radio, including a Linux mac80211-compatible driver and software,… | 66 | 4809 | active |