function: networking
2132 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| tnodir/fort Fort Firewall is a standalone firewall application for Windows 7+ with its own kernel driver. It provides per-application network rules, ba… | 78 | 3529 | active |
| meshbird/meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 54 | 3526 | active |
| nanocurrency/nano-node The official C++ node implementation of the Nano (XNO) digital currency, a feeless, instant, and eco-friendly payment protocol. It runs a f… | 73 | 3525 | active |
| ddclient/ddclient ddclient is a Perl client that updates dynamic DNS entries for accounts on a wide range of dynamic DNS services such as Cloudflare, DuckDNS… | 62 | 3523 | active |
| Openwrt-Passwall/openwrt-passwall2 PassWall2 is a LuCI web interface application for OpenWrt routers that provides advanced proxy functionality and network traffic management… | 99 | 3504 | active |
| wifiphisher/wifiphisher Wifiphisher is a rogue Access Point framework for Wi-Fi security testing and red team engagements, enabling man-in-the-middle positioning v… | 60 | 14788 | maintenance |
| mvscode/frps-onekey A one-click shell script that installs, configures, updates, and manages the frps (Fast Reverse Proxy server) on Linux distributions like C… | 94 | 3500 | active |
| asterisk/asterisk Asterisk is an open source PBX and telephony toolkit that acts as middleware between internet/telephony channels and communications applica… | 94 | 3488 | stable |
| karol-broda/snitch snitch is a Go CLI/TUI tool that provides a friendlier alternative to ss and netstat for inspecting network connections. It displays connec… | 66 | 3485 | active |
| eldadru/ksniff ksniff is a kubectl plugin that starts remote packet captures on Kubernetes pods by uploading a static tcpdump binary and streaming the out… | 23 | 3473 | active |
| sigp/lighthouse Lighthouse is an open-source Ethereum consensus (beacon chain) client written in Rust, maintained by Sigma Prime. It implements the Ethereu… | 99 | 3466 | stable |
| ukanth/afwall AFWall+ is an open-source firewall application for rooted Android devices built on Linux iptables. It provides per-app granular control ove… | 93 | 3455 | active |
| badafans/better-cloudflare-ip A Go CLI tool that finds the best-performing Cloudflare Anycast IP addresses for a user's specific network environment. It randomly samples… | 76 | 3444 | active |
| oxylabs/free-proxy-list A repository promoting Oxylabs' free tier of US datacenter proxies (HTTP/HTTPS/SOCKS5), offering 5 US IPs, 20 concurrent sessions, and 5GB … | 54 | 3434 | active |
| TrustTunnel/TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 76 | 3431 | active |
| ph4ntonn/Stowaway Stowaway is a multi-hop proxy tool written in Go, designed for penetration testers to route external traffic through chains of nodes into r… | 54 | 3411 | active |
| snort3/snort3 Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet p… | 83 | 3409 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 75 | 3401 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 77 | 3394 | active |
| txthinking/google-hosts A set of shell scripts that find usable Google IP addresses by scanning CIDR ranges, testing SSL/ping, and generating a hosts file mapping … | 72 | 3363 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 67 | 3363 | active |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3343 | active |
| traviscross/mtr mtr is a network diagnostic tool that combines traceroute and ping, probing each hop along the route to a destination and printing live lat… | 71 | 3337 | stable |
| stellar/stellar-core Stellar Core is the reference C++20 implementation of the peer-to-peer agent that runs the Stellar blockchain network. It maintains a repli… | 98 | 3300 | active |
| vishvananda/netlink A Go library providing a simple, high-level API for Linux netlink socket communication, modeled loosely on the iproute2 CLI. It lets user-s… | 66 | 3297 | stable |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 90 | 3287 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 93 | 3274 | active |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3266 | stable |
| tuic-protocol/tuic TUIC is a standardized, implementation-agnostic network proxy protocol specification for relaying TCP and UDP traffic over QUIC with 0-RTT … | 32 | 3263 | active |
| lsalzman/enet ENet is a C library providing reliable UDP networking with features like channels, reliability, and congestion control. It is designed for … | 72 | 3260 | stable |
| Minestom/Minestom Minestom is an open-source, lightweight Minecraft server implementation written from scratch in modern Java, with no legacy NMS code. It pr… | 99 | 3257 | active |
| blokadaorg/blokada Blokada is an open-source suite of mobile privacy apps for Android and iOS, including an ad blocker, VPN, and parental control app. It offe… | 67 | 3249 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3242 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3232 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 99 | 3229 | active |
| open62541/open62541 open62541 is an open-source C99 implementation of the OPC UA (IEC 62541) communication protocol for building OPC UA clients and servers or … | 99 | 3215 | stable |
| appshubcc/Bettbox Bettbox is a multi-platform Mihomo (Clash Meta) proxy client rebuilt from an early version of FlClash, offering network debugging and rule-… | 83 | 3215 | active |
| cloudflare/tableflip A Go library for gracefully restarting network services without dropping existing connections, by spawning a new process and transferring l… | 58 | 3210 | stable |
| Hypostasis-Cat/HypoMux HypoMux is a Windows desktop application that aggregates multiple network adapters (Ethernet, Wi-Fi, mobile hotspots) to combine their band… | 80 | 3199 | active |
| qdm12/ddns-updater A lightweight universal dynamic DNS (DDNS) updater that periodically keeps DNS A/AAAA records updated across many DNS providers, with a bui… | 93 | 3192 | active |
| zeromq/netmq NetMQ is a 100% native C# port of the ZeroMQ lightweight messaging library for .NET. It provides asynchronous message-queue sockets support… | 96 | 3180 | active |
| vnt-dev/vnt VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 94 | 3180 | active |
| IntersectMBO/cardano-node The core Cardano full-node executable that integrates the ledger, consensus (Ouroboros), and networking layers to participate in the Cardan… | 93 | 3176 | active |
| SteamRE/SteamKit SteamKit2 is a .NET library for interoperating with Valve's Steam network protocol. It provides a simple, extensible interface for performi… | 82 | 3169 | active |
| microsoft/retina Retina is an open-source, eBPF-based Kubernetes network observability platform that collects customizable telemetry, Prometheus metrics, an… | 92 | 3166 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3163 | stable |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 72 | 3163 | active |
| xxf098/shadowsocksr-v2ray-trojan-android A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3161 | active |
| uku/Unblock-Youku Unblock Youku is an open-source Chrome extension that lets users outside mainland China access Chinese web services such as video and music… | 32 | 3154 | active |
| alexei-led/pumba Pumba is a chaos testing and network emulation CLI tool for Docker, containerd, and Podman containers. It can kill, stop, pause, or remove … | 99 | 3137 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 97 | 3137 | active |
| am-cf-tunnel A JavaScript script deployed on Cloudflare Workers and Pages that generates free VLESS and Trojan proxy nodes and converts their configurat… | 73 | 3135 | active |
| seladb/PcapPlusPlus PcapPlusPlus is a multiplatform C++ library for capturing, parsing, and crafting network packets. It wraps popular packet processing engine… | 86 | 3131 | stable |
| eclipse-zenoh/zenoh Zenoh is a Rust-implemented pub/sub/query protocol and library that unifies data in motion, data at rest, and computations with minimal wir… | 99 | 3126 | active |
| libp2p libp2p is a modular peer-to-peer networking stack and protocol suite, originally extracted from IPFS, with implementations in Go, Rust, Jav… | 69 | 3116 | stable |
| mangos/MaNGOS MaNGOS is an open-source MMORPG server emulation project, originally announced in 2005, that implements game server software for older vers… | 64 | 3106 | active |
| ElementsProject/lightning Core Lightning (CLN) is a specification-compliant Lightning Network node implementation written in C, maintained by Blockstream and in prod… | 97 | 3088 | stable |
| wgtunnel/android WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 96 | 3085 | active |
| xingpingcn/enhanced-FaaS-in-China A service providing optimized CNAME records (e.g., vercel-cname.xingpingcn.top) that improve access speed and stability of sites hosted on … | 70 | 3072 | active |
| bb-qq/r8152 A Synology DSM driver package (kernel module) for Realtek RTL8152/8153/8156/8157/8159 based USB Ethernet adapters, enabling 1G to 10G USB n… | 89 | 3065 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 68 | 3064 | active |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 91 | 3061 | active |
| golang/net golang/net (golang.org/x/net) is the official supplementary networking library for Go, maintained by the Go team. It provides packages beyo… | 77 | 3037 | stable |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 35 | 3033 | active |
| 6Kmfi6HP/EDtunnel EDtunnel is a proxy tool deployed on Cloudflare Workers and Pages that supports VLESS and Trojan protocols with configurable proxy IPs, SOC… | 58 | 3029 | active |
| Kevin-Robertson/Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 53 | 3014 | active |
| ophub/amlogic-s9xxx-openwrt A build and firmware distribution project that runs OpenWrt on Amlogic, Rockchip, and Allwinner TV boxes and single-board computers. It pro… | 98 | 2995 | active |
| Manisso/fsociety Fsociety is a Python-based penetration testing framework that bundles a menu of hacking tools covering information gathering, password atta… | 74 | 12275 | maintenance |
| filecoin-project/lotus Lotus is the reference implementation of the Filecoin decentralized storage network, written in Go. It ships as a suite of command-line app… | 98 | 2987 | active |
| ntop/PF_RING PF_RING is a Linux kernel module and user-space framework for high-speed packet capture and processing, offering a consistent API for netwo… | 73 | 2965 | stable |
| strongswan/strongswan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 87 | 2954 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 86 | 2951 | active |
| Xpra-org/xpra Xpra is a multi-platform screen and application forwarding tool, known as 'screen for X', that lets you run graphical applications on a rem… | 99 | 2949 | stable |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 98 | 2941 | active |
| k8snetworkplumbingwg/multus-cni Multus CNI is a CNI meta-plugin for Kubernetes that enables attaching multiple network interfaces to pods, creating multi-homed pods. It wo… | 91 | 2938 | active |
| wolfSSL/wolfssl wolfSSL is a lightweight, portable SSL/TLS library written in ANSI C, supporting TLS 1.3 and DTLS 1.3, powered by the wolfCrypt cryptograph… | 92 | 2919 | stable |
| imsnif/bandwhich bandwhich is a Rust CLI utility that sniffs a network interface and displays current bandwidth utilization by process, connection, and remo… | 66 | 11924 | maintenance |
| linux-can/can-utils A collection of Linux user-space utilities for the SocketCAN subsystem, written in C. It includes tools to display, send, generate, record,… | 60 | 2908 | active |
| eProsima/Fast-DDS eProsima Fast DDS is a C++ implementation of the OMG Data Distribution Service (DDS) standard with its RTPS wire protocol, serving as the d… | 97 | 2884 | stable |
| favonia/cloudflare-ddns A small, feature-rich, and robust Cloudflare DDNS updater written in Go, distributed as a lightweight Docker image. It detects the machine'… | 97 | 2870 | active |
| patterniha/MITM-DomainFronting A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 74 | 2848 | active |
| projectdiscovery/dnsx dnsx is a fast, multi-purpose DNS toolkit from ProjectDiscovery for running DNS queries (A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA) with u… | 86 | 2846 | active |
| shadowsocks/v2ray-plugin A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 64 | 2846 | active |
| yujincheng08/BiliRoaming BiliRoaming is an Xposed module for rooted Android devices that removes regional restrictions on anime (bangumi) content in the Bilibili ap… | 10 | 11559 | maintenance |
| knadh/dns.toys dns.toys is a DNS server written in Go that repurposes the DNS protocol to serve handy utilities like weather, world time, unit and currenc… | 65 | 2821 | active |
| eycorsican/leaf Leaf is a versatile and efficient proxy framework written in Rust, supporting multiple proxy protocols such as Shadowsocks, Trojan, VMess, … | 85 | 2820 | active |
| GUI-for-Cores/GUI.for.Clash A modern, lightweight cross-platform desktop GUI for managing Clash/mihomo (and sing-box) proxy cores, built with Wails (Go) and Vue 3. It … | 91 | 2819 | active |
| gioblu/PJON PJON is an experimental, multi-master, software-defined network protocol stack for microcontrollers and general-purpose systems, supporting… | 47 | 2816 | active |
| acme-dns/acme-dns acme-dns is a simplified DNS server with a RESTful HTTP API designed to automate ACME DNS challenges for Let's Encrypt and other ACME certi… | 83 | 2814 | active |
| maxmcd/webtty A Go CLI tool that shares a terminal session over WebRTC, letting a remote peer connect via a pasted SDP exchange or a static browser page … | 23 | 2813 | active |
| node-webrtc/node-webrtc node-webrtc is a Node.js native addon (N-API) providing bindings to Google's WebRTC M106 stack. It aims for spec compliance with the WebRTC… | 56 | 2805 | active |
| Polkadot SDK Polkadot SDK is the consolidated Rust monorepo merging Substrate, Polkadot, and Cumulus, providing a framework for building blockchains and… | 91 | 2800 | active |
| pythops/impala Impala is a terminal user interface (TUI) application written in Rust for managing Wi-Fi connections on Linux via the iwd daemon. It suppor… | 91 | 2798 | active |
| zema1/suo5 Suo5 is a high-performance HTTP tunneling tool that creates a local SOCKS5 forward proxy by tunneling traffic through a compromised web ser… | 85 | 2796 | active |
| skydive-project/skydive Skydive is an open source real-time network topology and protocols analyzer that captures network topology and traffic flows across hosts, … | 42 | 2796 | active |
| eooce/python-ws A lightweight Python implementation of VLESS, Trojan, and Shadowsocks proxy protocols designed to run on serverless/PaaS platforms without … | 58 | 2788 | active |
| destan19/OpenAppFilter OpenAppFilter (OAF) is a parental control and application filtering plugin for OpenWrt routers, built as a kernel module, service daemon, a… | 88 | 2786 | active |
| BitMaker-hub/NerdMiner_v2 NerdSoloMiner v2 is open-source firmware that turns ESP32-based boards (like the LILYGO T-Display S3) into a small Bitcoin solo CPU miner i… | 74 | 2780 | active |
| AlexxIT/XiaomiGateway3 A Home Assistant custom component (HACS integration) for controlling Xiaomi Multimode Gateway 3, Gateway 2, and Aqara Hub E1 over LAN on de… | 95 | 2779 | active |
| srl-labs/containerlab Containerlab is a CLI tool for orchestrating container-based networking labs. It deploys containerized Network Operating Systems, wires the… | 99 | 2778 | active |