Open-source networking software
2154 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2154 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| antoniomika/sish sish is an open-source, self-hostable SSH server that provides HTTP(S), WebSocket(S), and TCP tunnels to localhost, serving as an ngrok/ser… | 94 | 4790 | active |
| microsoft/msquic MsQuic is Microsoft's cross-platform C implementation of the IETF QUIC transport protocol (RFC 9000), with API wrappers for C++, C#, and Ru… | 98 | 4781 | stable |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 98 | 4769 | stable |
| openziti/zrok zrok is an open-source tool for securely sharing local web services, files, and TCP/UDP resources over the internet without firewall or NAT… | 98 | 4751 | active |
| acassen/keepalived Keepalived is a routing daemon written in C that provides load balancing and high availability for Linux systems. It implements VRRP v2/v3 … | 75 | 4715 | stable |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 75 | 4696 | active |
| NewFuture/DDNS A cross-platform dynamic DNS (DDNS) client that automatically syncs DNS records to the machine's current IPv4/IPv6 address, supporting 15+ … | 95 | 4694 | active |
| nanomsg/nng NNG (nanomsg-next-generation) is a lightweight, broker-less messaging library in C implementing scalability protocols like pub/sub, request… | 96 | 4691 | stable |
| koolshare/koolshare.github.io Koolshare is a plugin ecosystem and software center for ASUS Merlin (and ASUSGO) custom router firmware, providing a web UI to install and … | 57 | 4668 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 66 | 4645 | active |
| JZ-Darkal/AndroidHttpCapture AndroidHttpCapture is an Android network diagnostic and packet capture app, essentially a mobile version of Fiddler. It captures HTTP/HTTPS… | 56 | 4610 | active |
| smoltcp-rs/smoltcp smoltcp is a standalone, event-driven TCP/IP stack written in Rust, designed for bare-metal and real-time systems without heap allocation. … | 81 | 4607 | active |
| exposedev/expose Expose is an open-source ngrok alternative written in pure PHP that creates secure tunnels to expose local servers to the internet. It can … | 97 | 4573 | active |
| Oros42/IMSI-catcher A Python tool that decodes GSM radio traffic captured via software-defined radio receivers (RTL-SDR, HackRF, BladeRF, OsmocomBB) to display… | 67 | 4571 | active |
| docker-transmission-openvpn A Docker image that bundles the Transmission BitTorrent client with an OpenVPN tunnel, so torrent traffic only runs when the VPN is active.… | 92 | 4568 | active |
| FreeRTOS The classic FreeRTOS distribution, a real-time operating system for microcontrollers and small microprocessors that submodules the FreeRTOS… | 82 | 4559 | stable |
| xtaci/kcp-go kcp-go is a Go library implementing the KCP reliable-UDP protocol, providing smooth, ordered, error-checked, and encrypted stream delivery … | 63 | 4554 | stable |
| cmliu/SubsCheck-Win-GUI A Windows GUI wrapper around the subs-check proxy subscription checker, which tests, filters, and deduplicates proxy nodes from subscriptio… | 27 | 4553 | active |
| Interactsh Interactsh is an open-source tool for detecting out-of-band (OOB) interactions via DNS, HTTP(S), SMTP(S), and LDAP, useful for identifying … | 88 | 4549 | active |
| CrossDesk CrossDesk is a lightweight, open-source, cross-platform remote desktop application built in C++ with SDL3 and ImGui, supporting connections… | 95 | 4532 | active |
| timothymiller/cloudflare-ddns A Rust-based dynamic DNS (DDNS) client that keeps Cloudflare DNS records in sync with a changing home IP address. It ships as a tiny static… | 93 | 4523 | active |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19769 | maintenance |
| PowerDNS/pdns PowerDNS is a suite of open-source DNS software written in C++, comprising the Authoritative Server, the Recursor, and dnsdist. It provides… | 75 | 4473 | stable |
| Archeb/opentrace OpenTrace is an open-source cross-platform GUI application for visualized route tracing, built on the NextTrace engine. It provides native … | 79 | 4463 | active |
| xiaobaigroup/ClashBox ClashBox is a native proxy client for HarmonyOS NEXT built with ArkTS/ArkUI, using a modified Mihomo (ClashMeta) kernel. It features a Surf… | 73 | 4459 | active |
| DPDK/dpdk DPDK is a set of C libraries and NIC drivers for fast userspace packet processing, bypassing the kernel network stack. It supports multiple… | 77 | 4452 | stable |
| Mutagen Mutagen is an open-source remote development tool providing high-performance, real-time bidirectional file synchronization and flexible net… | 57 | 4447 | active |
| XTLS/RealiTLScanner A Go-based TLS server scanner built for the XTLS Reality protocol ecosystem. It scans IP ranges, CIDRs, domains, or target lists to find TL… | 80 | 4443 | active |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 66 | 4429 | stable |
| MHR-CFW A Python-based MITM domain-fronting relay that routes HTTP traffic through Google Apps Script and Cloudflare Workers so network DPI filters… | 62 | 4424 | active |
| OpenZiti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 97 | 4403 | active |
| SelfControlApp/selfcontrol SelfControl is a free, open-source macOS application that blocks your own access to distracting websites, mail servers, or other internet r… | 69 | 4402 | active |
| p2r3/bareiron A minimalist Minecraft server written in C, designed to run on memory-restricted embedded systems like the ESP32. It prioritizes memory usa… | 50 | 4400 | active |
| sshnet/SSH.NET SSH.NET is a Secure Shell (SSH-2) client library for .NET, optimized for parallelism. It provides SSH command execution, SFTP and SCP file … | 81 | 4382 | stable |
| networkupstools/nut Network UPS Tools (NUT) is an open-source toolkit for monitoring and managing power devices such as UPS units, PDUs, ATS switches, PSUs, an… | 79 | 4366 | active |
| lazy-luo/smarGate smarGate is a cross-network remote port mapping and NAT traversal tool consisting of an Android client app and lightweight server binaries,… | 73 | 4361 | active |
| vaxilu/x-ui x-ui is a web-based control panel for managing Xray proxy servers, supporting multiple protocols (vmess, vless, trojan, shadowsocks, etc.) … | 23 | 19097 | maintenance |
| albfan/miraclecast MiracleCast is a C implementation of the Wi-Fi Display (Miracast) specification for Linux, providing both Display-Sink and (planned) Displa… | 61 | 4343 | active |
| FRRouting/frr FRRouting (FRR) is a free, open-source IP routing protocol suite for Linux and Unix platforms, descended from Quagga. It implements and man… | 97 | 4320 | stable |
| yuaotian/antigravity-proxy A Windows transparent proxy injector for the Antigravity editor that forces its traffic through SOCKS5/HTTP proxies via DLL injection and M… | 78 | 4320 | active |
| eventmachine/eventmachine EventMachine is an event-driven I/O and lightweight concurrency library for Ruby based on the Reactor pattern. It enables building highly s… | 62 | 4280 | stable |
| F-Stack/f-stack F-Stack is an open-source high-performance user-space network framework based on DPDK, featuring a ported FreeBSD 11 TCP/IP stack, a Posix-… | 81 | 4267 | stable |
| stephane/libmodbus libmodbus is a free, dependency-free C library for sending and receiving data with devices that speak the Modbus protocol over serial (RTU)… | 75 | 4258 | stable |
| i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 87 | 4236 | active |
| SuperSocket SuperSocket is a high-performance, extensible socket server application framework for .NET. It provides a pipeline-based architecture for b… | 85 | 4236 | active |
| fw876/helloworld A collection of OpenWrt packages (including Xray-core and related proxy tools) distributed as a git repository that can be cloned, added as… | 99 | 4231 | active |
| baidu/braft braft is an industrial-grade C++ implementation of the RAFT consensus algorithm and replicated state machine, built on top of brpc. It is d… | 23 | 4230 | stable |
| mekos2772/ios-location-spoofer A standalone iOS location spoofing solution that intercepts and rewrites Apple's network-based location service (WLOC) responses via proxy … | 56 | 4226 | active |
| philippe44/AirConnect AirConnect is a bridge application that discovers UPnP/Sonos and Chromecast audio players on a local network and exposes them as virtual Ai… | 97 | 4184 | active |
| monasticacademy/httptap httptap is a static Go CLI binary that shows the HTTP and HTTPS requests made by any Linux program by running it inside an isolated network… | 60 | 4181 | active |
| txn2/kubefwd kubefwd is a Go CLI utility that bulk port-forwards Kubernetes services to a local workstation, assigning each service a unique 127.x.x.x l… | 100 | 4178 | active |
| tronprotocol/java-tron java-tron is the official Java implementation of the TRON Protocol, a DPoS blockchain with an EVM-compatible virtual machine (TVM). It runs… | 93 | 4165 | active |
| cifertech/ESP32-DIV ESP32-DIV is open-source firmware (with open schematics and PCB files) for a custom ESP32-S3 handheld device that bundles Wi-Fi, BLE, 2.4GH… | 86 | 4146 | active |
| hashicorp/memberlist A Go library implementing gossip-based cluster membership and node failure detection, based on the SWIM protocol with Lifeguard extensions.… | 89 | 4117 | stable |
| osrg/gobgp GoBGP is an open-source Border Gateway Protocol (BGP) implementation written in Go, usable both as a standalone BGP daemon with a CLI and a… | 95 | 4116 | active |
| xubiaolin/docker-zerotier-planet A Docker-based one-click deployment tool for self-hosting a private ZeroTier Planet (root) server, with an optional web management panel. I… | 63 | 4082 | active |
| miroslavpejic85/p2p A portable peer-to-peer remote desktop application for Windows built in C#, allowing two peers to share screens, control desktops, and chat… | 23 | 4072 | active |
| yonggekkk/x-ui-yg A one-click shell installer script for a streamlined fork of the x-ui proxy panel, deploying Xray-based proxy protocols (Reality, Hysteria2… | 65 | 4071 | active |
| KDE Connect KDE Connect is a multi-platform application that lets your devices (phone and computer) communicate wirelessly over TLS-encrypted connectio… | 77 | 4065 | active |
| davyxu/cellnet cellnet is a high-performance, componentized, extensible open-source network library for Go, supporting TCP, UDP, HTTP, and WebSocket trans… | 73 | 4057 | stable |
| openthread/openthread OpenThread is Google's open-source, Thread Certified implementation of the Thread networking protocol, covering all Thread networking layer… | 99 | 4051 | stable |
| openvswitch/ovs Open vSwitch is a production-quality multilayer software switch designed for virtualized server environments, written primarily in C. It su… | 75 | 4017 | stable |
| cacggghp/vk-turn-proxy A Go tool that tunnels WireGuard (or Hysteria) traffic through TURN servers of VK Calls / Yandex Telemost, encrypting packets with DTLS 1.2… | 61 | 4017 | active |
| Kuma Kuma is a CNCF Sandbox, Envoy-based service mesh that provides L4-L7 connectivity, discovery, security (mTLS), observability, and traffic c… | 95 | 4015 | stable |
| apache/guacamole-server The server-side component of Apache Guacamole, consisting of guacd (a proxy daemon), libguac (a C API), and protocol support libraries for … | 77 | 4011 | stable |
| schwabe/ics-openvpn An open-source OpenVPN client for Android that uses the Android VPNService API to provide VPN connectivity without root access. It is a sta… | 90 | 3999 | active |
| Blynk-Technologies/blynk-library Blynk's official C++ client library that connects over 400 IoT hardware boards (Arduino, ESP32, ESP8266, Raspberry Pi, Particle, etc.) to t… | 90 | 3990 | stable |
| appshubcc/Bettbox Bettbox is a multi-platform Mihomo (Clash Meta) proxy client rebuilt from an early version of FlClash, offering network debugging and rule-… | 83 | 3982 | active |
| M66B/NetGuard NetGuard is a free and open-source no-root firewall application for Android that blocks internet access per app using a local VPN. It allow… | 86 | 3941 | active |
| MisterTea/EternalTerminal Eternal Terminal (ET) is a secure remote shell that automatically reconnects after network outages or IP roaming without interrupting the s… | 86 | 3917 | active |
| MeshCore MeshCore is a lightweight C++ library and firmware implementing a hybrid multi-hop mesh routing protocol for LoRa packet radios, enabling e… | 84 | 3910 | active |
| Grasscutters/Grasscutter Grasscutter is a Java-based server software reimplementation for a certain anime game, allowing users to run their own private game server.… | 51 | 16829 | maintenance |
| openbsd/src A read-only Git mirror of OpenBSD's official CVS source repository containing the complete operating system source tree, including the kern… | 77 | 3902 | active |
| proninyaroslav/libretorrent LibreTorrent is a free, open-source, full-featured BitTorrent client for Android written in Java. It supports magnet links, RSS feeds, torr… | 81 | 3885 | active |
| EvilGenius-dot/RustMinerSystem RustMinerSystem is a self-hosted mining pool proxy and pool-node management system written in Rust for miners, mining farms, and pool opera… | 97 | 3881 | active |
| Space Station 14 Space Station 14 is an open-source, round-based multiplayer roleplaying game about paranoia and chaos aboard a space station, remaking the … | 84 | 3875 | active |
| 2ndalpha/gasmask Gas Mask is a macOS application for managing and switching between multiple hosts files. It runs in the menu bar, supports local, remote, a… | 51 | 3859 | active |
| Xbox Download Assistant A Windows desktop application (C#/Avalonia) that accelerates game downloads for Xbox, PlayStation, Switch, and various PC game launchers by… | 96 | 3844 | active |
| cilium/pwru pwru is an eBPF-based CLI tool for tracing network packets through the Linux kernel with fine-grained filtering. It helps debug connectivit… | 86 | 3841 | active |
| Hypostasis-Cat/HypoMux HypoMux is a Windows desktop application that aggregates multiple network adapters (Ethernet, Wi-Fi, mobile hotspots) to combine their band… | 81 | 3829 | active |
| Serverless DNS Resolver A serverless, Pi-hole-style DNS-over-HTTPS and DNS-over-TLS resolver with configurable blocklists. It deploys to Cloudflare Workers, Deno D… | 58 | 3815 | active |
| Findomain/Findomain Findomain is a fast subdomain enumeration tool written in Rust that discovers subdomains via Certificate Transparency logs and APIs without… | 78 | 3793 | active |
| OffchainLabs/prysm Prysm is a Go implementation of the Ethereum Consensus (proof of stake) specification, developed by Offchain Labs. It runs beacon chain nod… | 99 | 3789 | active |
| axboe/liburing A C library providing helpers to set up and tear down Linux io_uring instances, plus a simplified convenience API for applications that don… | 83 | 3787 | active |
| Facepunch/Facepunch.Steamworks A C# wrapper library for the Steamworks SDK, providing idiomatic .NET access to Steam features like friends, achievements, auth, avatars, a… | 86 | 3775 | active |
| mosdns mosdns is a programmable DNS forwarder and resolver written in Go that supports DNS-over-HTTPS, DNS-over-TLS, DNS-over-QUIC, and custom rou… | 57 | 3760 | active |
| GodotSteam GodotSteam is an ecosystem of tools integrating Valve's Steamworks SDK into the Godot game engine, available as pre-compiled engine modules… | 10 | 3760 | active |
| yeahwu/v2ray-wss A shell script that installs and configures multiple proxy protocols on Linux VPS servers, including Shadowsocks-rust, V2Ray+Nginx+WebSocke… | 62 | 3741 | active |
| pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 98 | 3734 | active |
| ip-scanner/cloudflare A tool for scanning and discovering Cloudflare IP ranges and hosts, distributed via the ip-scanner organization with an associated Telegram… | 40 | 3732 | active |
| Rabbit-Spec/Surge A personal collection of Surge proxy client configurations, modules, and JavaScript scripts maintained as a self-use backup. It aggregates … | 77 | 3729 | active |
| kevwan/tproxy tproxy is a Go CLI tool that proxies TCP connections while displaying and analyzing the traffic passing through them. It supports protocol-… | 69 | 3712 | active |
| pavel-odintsov/fastnetmon FastNetMon Community Edition is a high-performance DDoS detection sensor that analyzes traffic from NetFlow, IPFIX, sFlow, AF_PACKET, and o… | 78 | 3706 | active |
| nadoo/glider glider is a Go-based forward proxy supporting many protocols (SOCKS5, HTTP, Shadowsocks, Trojan, VLESS, VMess, SSH, etc.) that can act as b… | 61 | 3698 | active |
| Brave Browser Brave is a free, open-source web browser focused on privacy, security, and performance. It blocks ads and trackers by default and includes … | 77 | 3697 | active |
| raboof/nethogs NetHogs is a small terminal-based 'net top' tool for Linux that groups network bandwidth usage by process rather than by protocol or subnet… | 77 | 3697 | stable |
| justjavac/ReplaceGoogleCDN A Chrome browser extension that redirects requests to Google CDNs (fonts, libraries, reCAPTCHA, Gravatar) to China-accessible mirror domain… | 60 | 3697 | active |
| spdk/spdk SPDK is a set of C libraries, drivers, and tools for building high-performance, scalable user-mode storage applications. It moves storage d… | 89 | 3683 | stable |
| 9seconds/mtg mtg is a highly opinionated MTPROTO proxy server for Telegram written in Go, designed to let users access Telegram from censored or restric… | 89 | 3680 | active |
| blechschmidt/massdns MassDNS is a high-performance DNS stub resolver written in C, capable of resolving millions to billions of domain names at over 350,000 loo… | 66 | 3652 | stable |