Open-source networking software
2154 open-source libraries, tools and applications tagged networking, ranked by how closely networking is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2154 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| pgrok/pgrok pgrok is a self-hosted, multi-tenant HTTP/TCP reverse tunnel solution that exposes local development environments to the public internet us… | 77 | 3650 | active |
| tnodir/fort Fort Firewall is a standalone firewall application for Windows 7+ with its own kernel driver. It provides per-application network rules, ba… | 96 | 3634 | active |
| Openwrt-Passwall/openwrt-passwall2 PassWall2 is a LuCI web interface application for OpenWrt routers that provides advanced proxy functionality and network traffic management… | 96 | 3625 | active |
| RevenantX/LiteNetLib LiteNetLib is a lightweight reliable UDP networking library for .NET, Mono, and Unity. It provides reliable/unordered delivery, packet frag… | 90 | 3625 | active |
| Martichou/rquickshare A Rust implementation of Android's Nearby Share/Quick Share protocol for Linux and macOS, distributed as desktop apps (deb, rpm, AppImage, … | 60 | 3624 | active |
| Urbit Urbit is a personal server stack built from scratch, consisting of an operating system kernel (Arvo), a virtual machine runtime (Vere), and… | 95 | 3620 | active |
| SRT (Secure Reliable Transport) SRT (Secure Reliable Transport) is an open-source transport protocol and C++ library for ultra-low-latency live video and audio streaming o… | 93 | 3613 | stable |
| nmap/npcap Npcap is the Nmap Project's packet capture and injection library for Microsoft Windows, implementing the portable Pcap API via a custom NDI… | 91 | 3604 | active |
| Asterisk Asterisk is an open source PBX and telephony toolkit that acts as middleware between internet/telephony channels and communications applica… | 92 | 3600 | stable |
| rathena/rathena rAthena is an open-source, cross-platform MMORPG server package written in C++, continuing the eAthena project. It provides a complete serv… | 74 | 3580 | active |
| mitchellh/libxev libxev is a cross-platform, high-performance event loop library written in Zig that provides a unified proactor-style API for non-blocking … | 70 | 3580 | stable |
| microsoft/ebpf-for-windows eBPF for Windows is an MIT-licensed implementation of the eBPF runtime that runs on top of the Windows kernel, letting developers reuse fam… | 86 | 3573 | active |
| ddclient/ddclient ddclient is a Perl client that updates dynamic DNS entries for accounts on a wide range of dynamic DNS services such as Cloudflare, DuckDNS… | 59 | 3561 | active |
| martin-olivier/airgorah Airgorah is a WiFi security auditing application built in Rust with a GTK4 graphical interface, wrapping the aircrack-ng tools suite. It ca… | 86 | 3559 | active |
| SpacehuhnTech/esp8266_deauther ESP8266 Deauther is open-source firmware that turns an ESP8266 microcontroller into a WiFi testing tool capable of scanning networks, sendi… | 23 | 14997 | maintenance |
| Meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 51 | 3527 | active |
| Nano The official C++ node implementation of the Nano (XNO) digital currency, a feeless, instant, and eco-friendly payment protocol. It runs a f… | 73 | 3524 | active |
| Wifiphisher Wifiphisher is a rogue Access Point framework for Wi-Fi security testing and red team engagements, enabling man-in-the-middle positioning v… | 57 | 14873 | maintenance |
| mvscode/frps-onekey A one-click shell script that installs, configures, updates, and manages the frps (Fast Reverse Proxy server) on Linux distributions like C… | 83 | 3508 | active |
| karol-broda/snitch snitch is a Go CLI/TUI tool that provides a friendlier alternative to ss and netstat for inspecting network connections. It displays connec… | 61 | 3503 | active |
| matthart1983/netwatch NetWatch is a zero-config terminal TUI for real-time network diagnostics, written in Rust and distributed as a single static binary. It sho… | 79 | 3497 | active |
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| ukanth/afwall AFWall+ is an open-source firewall application for rooted Android devices built on Linux iptables. It provides per-app granular control ove… | 91 | 3487 | active |
| oxylabs/free-proxy-list A repository promoting Oxylabs' free tier of US datacenter proxies (HTTP/HTTPS/SOCKS5), offering 5 US IPs, 20 concurrent sessions, and 5GB … | 51 | 3487 | active |
| sigp/lighthouse Lighthouse is an open-source Ethereum consensus (beacon chain) client written in Rust, maintained by Sigma Prime. It implements the Ethereu… | 98 | 3477 | stable |
| eldadru/ksniff ksniff is a kubectl plugin that starts remote packet captures on Kubernetes pods by uploading a static tcpdump binary and streaming the out… | 23 | 3477 | active |
| badafans/better-cloudflare-ip A Go CLI tool that finds the best-performing Cloudflare Anycast IP addresses for a user's specific network environment. It randomly samples… | 70 | 3460 | active |
| L-codes/Neo-reGeorg Neo-reGeorg is a Python CLI tool that generates encrypted tunnel server files (aspx/jsp/php/etc.) to be uploaded to a compromised web serve… | 69 | 3433 | active |
| Snort++ Snort 3 (Snort++) is the next-generation open-source intrusion prevention system (IPS) written in C++17, supporting multi-threaded packet p… | 77 | 3428 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 76 | 3428 | active |
| hufrea/byedpi ByeDPI (ciadpi) is a C program implementing various DPI (Deep Packet Inspection) bypass methods, running as a local SOCKS proxy server. It … | 62 | 3427 | active |
| ph4ntonn/Stowaway Stowaway is a multi-hop proxy tool written in Go, designed for penetration testers to route external traffic through chains of nodes into r… | 51 | 3419 | active |
| txthinking/google-hosts A set of shell scripts that find usable Google IP addresses by scanning CIDR ranges, testing SSL/ping, and generating a hosts file mapping … | 68 | 3366 | active |
| AdguardTeam/dnsproxy A DNS proxy server written in Go that supports all modern encrypted DNS protocols including DNS-over-TLS, DNS-over-HTTPS, DNSCrypt, and DNS… | 99 | 3365 | active |
| traviscross/mtr mtr is a network diagnostic tool that combines traceroute and ping, probing each hop along the route to a destination and printing live lat… | 75 | 3358 | stable |
| hanwckf/rt-n56u A custom Padavan-based firmware for the ASUS RT-N56U and other MT7621-based routers, written in C. It gives power users full control over t… | 23 | 3346 | active |
| vishvananda/netlink A Go library providing a simple, high-level API for Linux netlink socket communication, modeled loosely on the iproute2 CLI. It lets user-s… | 64 | 3312 | stable |
| basil00/WinDivert WinDivert is a user-mode packet interception library for Windows that allows applications to capture, modify, drop, and re-inject network p… | 23 | 3305 | stable |
| stellar/stellar-core Stellar Core is the reference C++20 implementation of the peer-to-peer agent that runs the Stellar blockchain network. It maintains a repli… | 96 | 3303 | active |
| s0md3v/Smap Smap is a passive port scanner powered by Shodan.io's free API that serves as a drop-in replacement for Nmap, accepting the same command-li… | 83 | 3299 | active |
| lsalzman/enet ENet is a C library providing reliable UDP networking with features like channels, reliability, and congestion control. It is designed for … | 69 | 3291 | stable |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 95 | 3287 | active |
| tuic-protocol/tuic TUIC is a standardized, implementation-agnostic network proxy protocol specification for relaying TCP and UDP traffic over QUIC with 0-RTT … | 29 | 3282 | active |
| Minestom/Minestom Minestom is an open-source, lightweight Minecraft server implementation written from scratch in modern Java, with no legacy NMS code. It pr… | 96 | 3281 | active |
| Blokada Blokada is an open-source suite of mobile privacy apps for Android and iOS, including an ad blocker, VPN, and parental control app. It offe… | 67 | 3266 | active |
| Eclipse Zenoh Zenoh is a Rust-implemented pub/sub/query protocol and library that unifies data in motion, data at rest, and computations with minimal wir… | 97 | 3259 | active |
| the-tcpdump-group/tcpdump tcpdump is a powerful command-line packet analyzer that captures and dissects network traffic using libpcap, with BPF-based filtering and s… | 77 | 3246 | active |
| iqiyi/dpvs DPVS is a high-performance Layer-4 load balancer built on DPDK, derived from LVS and running entirely in user space with kernel bypass. It … | 53 | 3244 | active |
| open62541/open62541 open62541 is an open-source C99 implementation of the OPC UA (IEC 62541) communication protocol for building OPC UA clients and servers or … | 96 | 3233 | stable |
| VNT VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 96 | 3228 | active |
| WG Tunnel WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 95 | 3227 | active |
| qdm12/ddns-updater A lightweight universal dynamic DNS (DDNS) updater that periodically keeps DNS A/AAAA records updated across many DNS providers, with a bui… | 84 | 3221 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 94 | 3219 | active |
| SteamRE/SteamKit SteamKit2 is a .NET library for interoperating with Valve's Steam network protocol. It provides a simple, extensible interface for performi… | 96 | 3213 | active |
| cloudflare/tableflip A Go library for gracefully restarting network services without dropping existing connections, by spawning a new process and transferring l… | 54 | 3213 | stable |
| microsoft/retina Retina is an open-source, eBPF-based Kubernetes network observability platform that collects customizable telemetry, Prometheus metrics, an… | 94 | 3180 | active |
| zeromq/netmq NetMQ is a 100% native C# port of the ZeroMQ lightweight messaging library for .NET. It provides asynchronous message-queue sockets support… | 90 | 3180 | active |
| crossutility/Quantumult-X Quantumult X is a network proxy and traffic manipulation tool for iOS, rebuilt from scratch with support for TUN-based traffic, HTTPS MitM … | 69 | 3178 | active |
| alexei-led/pumba Pumba is a chaos testing and network emulation CLI tool for Docker, containerd, and Podman containers. It can kill, stop, pause, or remove … | 95 | 3177 | active |
| IntersectMBO/cardano-node The core Cardano full-node executable that integrates the ledger, consensus (Ouroboros), and networking layers to participate in the Cardan… | 99 | 3174 | active |
| the-tcpdump-group/libpcap libpcap is a system-independent C/C++ library providing a portable API for user-level network packet capture, with BPF-based filtering and … | 76 | 3174 | stable |
| am-cf-tunnel A JavaScript script deployed on Cloudflare Workers and Pages that generates free VLESS and Trojan proxy nodes and converts their configurat… | 88 | 3159 | active |
| ShadowsocksR V2Ray Trojan Android Client A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3159 | active |
| uku/Unblock-Youku Unblock Youku is an open-source Chrome extension that lets users outside mainland China access Chinese web services such as video and music… | 32 | 3153 | active |
| seladb/PcapPlusPlus PcapPlusPlus is a multiplatform C++ library for capturing, parsing, and crafting network packets. It wraps popular packet processing engine… | 83 | 3144 | stable |
| libp2p libp2p is a modular peer-to-peer networking stack and protocol suite, originally extracted from IPFS, with implementations in Go, Rust, Jav… | 66 | 3144 | stable |
| xingpingcn/enhanced-FaaS-in-China A service providing optimized CNAME records (e.g., vercel-cname.xingpingcn.top) that improve access speed and stability of sites hosted on … | 71 | 3105 | active |
| Core Lightning Core Lightning (CLN) is a specification-compliant Lightning Network node implementation written in C, maintained by Blockstream and in prod… | 99 | 3103 | stable |
| mangos/MaNGOS MaNGOS is an open-source MMORPG server emulation project, originally announced in 2005, that implements game server software for older vers… | 60 | 3103 | active |
| bb-qq/r8152 A Synology DSM driver package (kernel module) for Realtek RTL8152/8153/8156/8157/8159 based USB Ethernet adapters, enabling 1G to 10G USB n… | 83 | 3099 | active |
| darkoperator/dnsrecon DNSRecon is a Python-based DNS enumeration tool for security assessments and network troubleshooting. It supports zone transfer checks, gen… | 89 | 3080 | active |
| hwdsl2/wireguard-install A Bash script that automates setting up a WireGuard VPN server on various Linux distributions, with interactive and fully automatic install… | 75 | 3076 | active |
| projectdiscovery/proxify Proxify is a portable MITM proxy written in Go for capturing, filtering, manipulating, and replaying HTTP/HTTPS and non-HTTP traffic. It su… | 65 | 3070 | active |
| 6Kmfi6HP/EDtunnel EDtunnel is a proxy tool deployed on Cloudflare Workers and Pages that supports VLESS and Trojan protocols with configurable proxy IPs, SOC… | 55 | 3059 | active |
| ophub/amlogic-s9xxx-openwrt A build and firmware distribution project that runs OpenWrt on Amlogic, Rockchip, and Allwinner TV boxes and single-board computers. It pro… | 99 | 3049 | active |
| golang/net golang/net (golang.org/x/net) is the official supplementary networking library for Go, maintained by the Go team. It provides packages beyo… | 77 | 3045 | stable |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 32 | 3044 | active |
| Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 46 | 3043 | active |
| Xpra Xpra is a multi-platform screen and application forwarding tool, known as 'screen for X', that lets you run graphical applications on a rem… | 98 | 3011 | stable |
| Manisso/fsociety Fsociety is a Python-based penetration testing framework that bundles a menu of hacking tools covering information gathering, password atta… | 70 | 12354 | maintenance |
| strongSwan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 88 | 2994 | stable |
| filecoin-project/lotus Lotus is the reference implementation of the Filecoin decentralized storage network, written in Go. It ships as a suite of command-line app… | 99 | 2991 | active |
| kube-vip/kube-vip kube-vip is a self-contained Go-based virtual IP and load-balancer for Kubernetes, providing high availability for the control plane and Lo… | 100 | 2982 | active |
| ntop/PF_RING PF_RING is a Linux kernel module and user-space framework for high-speed packet capture and processing, offering a consistent API for netwo… | 84 | 2970 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 85 | 2969 | active |
| k8snetworkplumbingwg/multus-cni Multus CNI is a CNI meta-plugin for Kubernetes that enables attaching multiple network interfaces to pods, creating multi-homed pods. It wo… | 89 | 2964 | active |
| wolfSSL/wolfssl wolfSSL is a lightweight, portable SSL/TLS library written in ANSI C, supporting TLS 1.3 and DTLS 1.3, powered by the wolfCrypt cryptograph… | 94 | 2961 | stable |
| SONiC SONiC (Software for Open Networking in the Cloud) is a free, open-source network operating system based on Linux that runs on switches from… | 77 | 2942 | active |
| linux-can/can-utils A collection of Linux user-space utilities for the SocketCAN subsystem, written in C. It includes tools to display, send, generate, record,… | 67 | 2939 | active |
| imsnif/bandwhich bandwhich is a Rust CLI utility that sniffs a network interface and displays current bandwidth utilization by process, connection, and remo… | 62 | 12007 | maintenance |
| favonia/cloudflare-ddns A small, feature-rich, and robust Cloudflare DDNS updater written in Go, distributed as a lightweight Docker image. It detects the machine'… | 93 | 2933 | active |
| eProsima Fast DDS eProsima Fast DDS is a C++ implementation of the OMG Data Distribution Service (DDS) standard with its RTPS wire protocol, serving as the d… | 97 | 2924 | stable |
| destan19/OpenAppFilter OpenAppFilter (OAF) is a parental control and application filtering plugin for OpenWrt routers, built as a kernel module, service daemon, a… | 91 | 2904 | active |
| Patterniha Internet Freedom Suite A method and configuration toolkit that intercepts unencrypted browser traffic via a man-in-the-middle local proxy and forwards it to block… | 69 | 2890 | active |
| projectdiscovery/dnsx dnsx is a fast, multi-purpose DNS toolkit from ProjectDiscovery for running DNS queries (A, AAAA, CNAME, PTR, NS, MX, TXT, SRV, SOA) with u… | 84 | 2880 | active |
| awalol/DS5Dongle Firmware that turns a Raspberry Pi Pico 2 W into a wireless Bluetooth dongle for the DualSense (PS5) controller, making it appear as a wire… | 75 | 2875 | active |
| pythops/impala Impala is a terminal user interface (TUI) application written in Rust for managing Wi-Fi connections on Linux via the iwd daemon. It suppor… | 87 | 2867 | active |
| srl-labs/containerlab Containerlab is a CLI tool for orchestrating container-based networking labs. It deploys containerized Network Operating Systems, wires the… | 96 | 2857 | active |
| Xash3D FWGS Xash3D FWGS is a cross-platform game engine forked from Xash3D, aimed at compatibility with the Half-Life (GoldSrc) engine while extending … | 86 | 2847 | active |
| Shadowsocks A SIP003 plugin for Shadowsocks built on v2ray, tunneling traffic over WebSocket (HTTP/HTTPS) or QUIC to obfuscate proxy traffic. Written i… | 60 | 2847 | active |