Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| AidLux (AidLearning) AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 63 | 5812 | active |
| pfSense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 62 | 5742 | stable |
| kgateway-dev/kgateway kgateway is a Kubernetes-native API gateway and ingress controller that implements the Kubernetes Gateway API as a control plane for Envoy … | 100 | 5713 | stable |
| next-terminal/next-terminal Next Terminal is an open-source bastion host (jump server) and interactive session auditing system supporting SSH, RDP, VNC, Telnet, HTTP, … | 96 | 5647 | active |
| Rethink DNS + Firewall Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 97 | 5554 | active |
| tobychui/zoraxy Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool written in Go, managed through a built-in web interface designed for hom… | 97 | 5504 | active |
| agentgateway/agentgateway Agentgateway is an open-source, Rust-based proxy and gateway for agentic AI traffic, handling LLM provider routing, MCP tool servers, and A… | 83 | 5420 | active |
| CreditTone/hooker hooker is a Frida-based reverse engineering toolkit for Android that provides a comfortable command-line interface with universal hooking s… | 75 | 5322 | active |
| su-kaka/gcli2api A self-hosted Python service that converts GeminiCLI and Antigravity into OpenAI-, Gemini-, and Claude-compatible API endpoints. It can be … | 63 | 5243 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 75 | 4696 | active |
| autobrr/qui qui is a fast, single-binary web interface for qBittorrent that lets users manage multiple qBittorrent instances from one place. It bundles… | 85 | 4654 | active |
| IBM/mcp-context-forge ContextForge is an open-source AI gateway, registry, and proxy from IBM that federates MCP, A2A, and REST/gRPC APIs behind a unified endpoi… | 86 | 4646 | active |
| MetaCubeX/metacubexd metacubexd is the official web dashboard for the Mihomo (Clash Meta) proxy kernel, built with SolidJS, Tailwind CSS, and DaisyUI. It provid… | 91 | 4551 | active |
| Anakin-Inc/anakin AnakinScraper OSS is a self-hosted web scraping API written in Go that turns any website into LLM-ready markdown or structured JSON via a s… | 67 | 4535 | active |
| ZeroNet ZeroNet is a decentralized web platform that serves websites peer-to-peer using Bitcoin cryptography for site signing and the BitTorrent ne… | 23 | 18776 | maintenance |
| i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 92 | 4241 | active |
| monasticacademy/httptap httptap is a static Go CLI binary that shows the HTTP and HTTPS requests made by any Linux program by running it inside an isolated network… | 60 | 4181 | active |
| donknap/dpanel DPanel is a lightweight web-based management panel for Docker and Podman containers, built in Go with a React frontend. It supports contain… | 94 | 4139 | active |
| octelium/octelium Octelium is a free, open-source, self-hosted unified zero trust secure access platform built on Kubernetes. It can operate as a remote acce… | 87 | 4107 | active |
| Boundary HashiCorp Boundary is an identity-aware proxy that provides secure, least-privilege access to hosts and critical systems across clouds and … | 10 | 4067 | active |
| willnorris/imageproxy A caching image proxy server written in Go that resizes, crops, and rotates remote images on the fly via URL options. It supports request s… | 69 | 3987 | stable |
| yandex/odyssey Odyssey is a production-ready, multi-threaded PostgreSQL connection pooler and request router written in C, built on a custom coroutine eng… | 88 | 3628 | stable |
| dunglas/vulcain Vulcain is a protocol and reference gateway server (a Caddy web server module written in Go) that uses Preload hints, 103 Early Hints, and … | 94 | 3595 | active |
| MadelineProto MadelineProto is an async PHP library implementing the Telegram MTProto protocol, allowing full client functionality (user or bot login) wi… | 100 | 3536 | active |
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| zalando/skipper Skipper is an HTTP router and reverse proxy written in Go, designed for service composition with support for hundreds of thousands of dynam… | 94 | 3332 | stable |
| qaiu/netdisk-fast-download A Java (Vert.x 4, JDK 17+) service that converts cloud drive share links (Lanzou, 123pan, Feijipan, Quark, UC, OneDrive, etc.) into direct … | 95 | 3263 | active |
| golang/net golang/net (golang.org/x/net) is the official supplementary networking library for Go, maintained by the Go team. It provides packages beyo… | 77 | 3045 | stable |
| Flow2API Flow2API is a self-hosted Python/FastAPI service that exposes an OpenAI- and Gemini-compatible API on top of Google Flow (VideoFX/ImageFX) … | 60 | 2989 | active |
| kamailio/kamailio Kamailio is an open source SIP signaling server (RFC3261) written in C, designed for large-scale VoIP and real-time communication platforms… | 95 | 2978 | stable |
| wsrv.nl weserv/images is the source code of wsrv.nl, a self-hostable image cache and resize service that manipulates images on-the-fly via URL para… | 76 | 2832 | stable |
| Gedsh/InviZible InviZible Pro is an Android application that combines Tor, DNSCrypt, and Purple I2P modules to provide online privacy, anonymity, and acces… | 99 | 2827 | active |
| I2P I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 91 | 2730 | stable |
| KrakenD KrakenD Community Edition is an open-source, stateless, high-performance API Gateway written in Go that aggregates, transforms, secures, an… | 99 | 2691 | stable |
| aurora-develop/aurora A Go service that exposes ChatGPT Web capabilities as an OpenAI-compatible API, including chat completions, responses, file Q&A, image gene… | 89 | 2558 | active |
| Wire Wire is an open-source, end-to-end encrypted messaging and collaboration platform whose server components are written primarily in Haskell.… | 56 | 2550 | active |
| SpectoLabs/hoverfly Hoverfly is a lightweight open-source API simulation and service virtualization tool written in Go. It captures HTTP/HTTPS traffic and repl… | 97 | 2524 | active |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 100 | 2404 | active |
| fruitbars/simple-one-api A single-binary Go gateway that unifies access to multiple LLM providers (Qianfan, iFlytek Spark, Tencent Hunyuan, MiniMax, DeepSeek, etc.)… | 90 | 2345 | active |
| julian-klode/dns66 DNS66 is an open-source Android app that blocks ads and malicious hosts by intercepting DNS queries through a local VPN service. It uses co… | 10 | 2246 | active |
| zenhosta/9drive 9Drive is a self-hosted storage gateway web app that unifies multiple Google Drive accounts (and S3-compatible providers) into one virtual … | 55 | 2204 | active |
| NatLabRockies/api-umbrella API Umbrella is an open source API management platform that sits as a layer above existing web service APIs. It standardizes access control… | 64 | 2199 | active |
| walkingddd/TgtoDrive TgtoDrive is a self-hosted, Docker-deployed media automation platform that chains resource discovery (Telegram channel monitoring, search s… | 72 | 2138 | active |
| pojntfx/weron weron is a Go-based tool and library that creates lean, fast, and secure overlay networks using WebRTC. It connects nodes behind NATs and f… | 27 | 2113 | active |
| mudler/edgevpn EdgeVPN is a statically compiled, decentralized p2p VPN built on libp2p that creates private networks joined via shared tokens, with no cen… | 95 | 2078 | active |
| nottelabs/notte Notte is a full-stack framework and cloud platform for building, deploying, and scaling AI web agents and browser automations. It combines … | 85 | 2040 | active |
| nymtech/nym Nym is a decentralized privacy platform built in Rust, centered on a mixnet that shuffles Sphinx packets to protect network-level metadata,… | 96 | 1950 | active |
| hackerschoice/gsocket Global Socket (gsocket) is a C-based toolkit that lets two machines behind NAT or firewalls establish secure, end-to-end encrypted TCP conn… | 63 | 1934 | active |
| EverythingSuckz/TG-FileStreamBot A Telegram bot written in Go that generates instant direct HTTP streaming links for Telegram files without waiting for downloads to complet… | 59 | 1930 | active |
| dzikoysk/reposilite Reposilite is a lightweight, self-hosted Maven repository manager for JVM artifacts, written in Kotlin as a simpler alternative to Nexus, A… | 97 | 1889 | active |
| nisshi-io/nisshi Nisshi is a stateless, Kafka API-compatible message broker written in async Rust with pluggable storage engines (PostgreSQL, SQLite/libSQL,… | 90 | 1888 | active |
| Freedium-cfd/web Freedium is a self-hostable web application that renders Medium.com articles behind the paywall for free, serving as the codebase behind fr… | 73 | 1872 | active |
| lxzan/gws GWS is a high-performance, feature-complete WebSocket server and client library for Go, supporting TCP, KCP, and Unix domain socket transpo… | 91 | 1804 | stable |
| DanielLavrushin/b4 B4 (Bye Bye Big Bro) is a Linux service that bypasses Deep Packet Inspection (DPI) censorship by rewriting network packets via fragmentatio… | 81 | 1787 | active |
| coulsontl/ai-toolbox A cross-platform desktop application (built with Tauri and Rust) for managing configurations of AI coding assistant CLIs such as Claude Cod… | 80 | 1781 | active |
| samyk/poisontap PoisonTap is a USB-based attack tool built on a Raspberry Pi Zero and Node.js that exploits locked, password-protected computers by emulati… | 32 | 6476 | maintenance |
| davrodpin/mole Mole is a Go-based CLI application for creating SSH tunnels with a focus on resiliency and user experience. It supports automatic port sele… | 23 | 1727 | stable |
| fish2018/webhtv WebHomeTV is an Android video streaming app (mobile and TV) forked from the FongMi/CatVod ecosystem, adding a customizable web-based homepa… | 80 | 1712 | active |
| aklivity/zilla Zilla is a stateless, multi-protocol gateway for event-driven applications and AI agents, exposing Kafka and MQTT over HTTP, SSE, gRPC, MQT… | 100 | 1707 | active |
| xeefei/X-Panel X-Panel is a self-hosted web panel built on Xray Core for managing multi-protocol, multi-user proxy servers (VLESS, XTLS, Reality, XHTTP, V… | 88 | 1704 | active |
| Apinto Apinto is a high-performance, cloud-native API gateway written in Go with a modular, pluggable architecture. It handles dynamic routing, lo… | 85 | 1680 | active |
| alibaba/kt-connect KtConnect is a CLI toolkit that helps developers work with Kubernetes dev environments more efficiently. It lets you connect to remote clus… | 23 | 1677 | active |
| rebeyond/Behinder Behinder ('冰蝎') is a cross-platform Java client for managing encrypted webshells on compromised web servers running PHP, Java, or .NET. It … | 23 | 6199 | maintenance |
| xiaoY233/Chat2API Chat2API is an Electron-based desktop application that exposes OpenAI-compatible API endpoints backed by official AI provider web UIs such … | 65 | 1664 | active |
| f/mcptools A Go-based command-line interface for discovering, calling, and managing tools, resources, and prompts exposed by MCP (Model Context Protoc… | 44 | 1629 | active |
| admpub/nging Nging is a Go-based website server management panel for configuring and administering Caddy and Nginx sites through a web UI. It bundles pr… | 80 | 1594 | active |
| rogerfar/rdt-client A self-hosted web interface for managing torrents and usenet downloads on premium debrid services like Real-Debrid, AllDebrid, Premiumize, … | 90 | 1593 | active |
| square/PonyDebugger PonyDebugger is a remote debugging toolset combining an iOS client library with a gateway server (ponyd) that lets developers debug native … | 23 | 5847 | maintenance |
| homeassistant-apps/app-cloudflared A Home Assistant add-on that runs Cloudflared to create a secure Cloudflare Tunnel to your Home Assistant instance. It enables remote acces… | 98 | 1578 | active |
| moom825/xeno-rat Xeno-RAT is an open-source remote access tool (RAT) written in C# for remotely controlling Windows 10/11 machines. It includes features suc… | 18 | 1570 | active |
| v-byte-cpu/sx sx is a fast, UNIX-philosophy command-line network scanner written in Go that supports ARP/NDP host discovery, ICMP, TCP SYN/FIN/NULL/Xmas,… | 77 | 1559 | active |
| sartoopjj/thefeed TheFeed is a DNS-based feed reader and lightweight messenger that works on networks where only DNS queries pass through, letting users read… | 71 | 1542 | active |
| techjarves/OpenClaude-Portable A portable AI coding agent that runs Claude Code-style functionality from a USB drive or any folder with no installation, bundling a self-c… | 57 | 1531 | active |
| borawong/AiMaMi AiMaMi is a native desktop companion app for OpenAI Codex built with Tauri 2, React, and Rust. It consolidates Codex account switching, quo… | 81 | 1529 | active |
| ShilongLee/Crawler A self-hostable crawler API server that exposes HTTP endpoints for scraping public data from Douyin, Kuaishou, Bilibili, Xiaohongshu, Weibo… | 58 | 1446 | active |
| tailcallhq/tailcall Tailcall is a high-performance GraphQL runtime written in Rust that lets you build GraphQL backends declaratively by annotating a GraphQL s… | 77 | 1443 | active |
| SlipNet SlipNet is an open-source anti-censorship VPN client for Android (Kotlin/Jetpack Compose) with a cross-platform Go CLI companion, supportin… | 71 | 1443 | active |
| inlets A Kubernetes operator that gives local clusters (kind, k3d, minikube) real public TCP LoadBalancer IPs by provisioning cloud VMs running in… | 88 | 1439 | active |
| PrismarineJS/node-minecraft-protocol A Node.js library that parses and serializes Minecraft protocol packets, with support for authentication and encryption. It enables buildin… | 95 | 1416 | active |
| DualSubs/Universal DualSubs: Universal is a proxy-script-based solution that adds bilingual and translated subtitle options to HLS streaming platforms (e.g., … | 99 | 1397 | active |
| vicanso/pingap Pingap is a high-performance reverse proxy and application gateway built in Rust on Cloudflare's Pingora library, offering nginx-like funct… | 92 | 1390 | active |
| foxhui/WebAI2API WebAI2API is a self-hosted Node.js service that exposes web-based AI services (LMArena, Gemini, ChatGPT, DeepSeek, etc.) as OpenAI-compatib… | 54 | 1388 | active |
| yeswehack/PwnFox PwnFox is a Firefox extension paired with a Burp Suite extension that provides tools for web security audits, such as one-click Burp proxy … | 23 | 1350 | active |
| monosans/proxy-scraper-checker A fast async Rust CLI tool that scrapes HTTP, SOCKS4, and SOCKS5 proxies from arbitrary text, HTML, or JSON sources, verifies each proxy by… | 100 | 1344 | active |
| Xboard Xboard is a high-performance self-hosted proxy/VPN panel forked from V2board, built on Laravel with Octane, a React admin panel, and a Vue3… | 69 | 4772 | maintenance |
| yukkcat/gemini-business2api A self-hosted gateway service that exposes Gemini Business through an OpenAI-compatible API, with multi-account load balancing and an admin… | 52 | 1328 | active |
| sardanioss/httpcloak httpcloak is a Go HTTP client library that reproduces browser-identical TLS, HTTP/2, and HTTP/3 fingerprints (JA3/JA4, Akamai, header order… | 58 | 1319 | active |
| getdns Stubby is a local DNS Privacy stub resolver daemon that encrypts DNS queries using DNS-over-TLS (RFC 7858), built on the getdns library. It… | 33 | 1319 | active |
| Kspider Kspider is a self-hosted visual web scraping platform written in Java where users define crawler workflows as flowcharts without writing ba… | 15 | 1265 | active |
| ENTERPILOT/GoModel GoModel is an open-source AI gateway and control plane written in Go that exposes a unified OpenAI-compatible and Anthropic-compatible API … | 80 | 1255 | active |
| bricks-cloud/BricksLLM BricksLLM is a cloud-native AI gateway written in Go that sits between applications and LLM providers like OpenAI, Anthropic, Azure OpenAI,… | 31 | 1230 | active |
| Netflix/dynomite Dynomite is a thin distributed Dynamo layer that adds sharding, multi-datacenter replication, and high availability to storage engines like… | 23 | 4215 | maintenance |
| ldqk/Masuit.MyBlogs Masuit.MyBlogs is the source code of a high-performance personal blog/CMS system built with ASP.NET Core (.NET 9) MVC, Vue 3, Blazor Server… | 91 | 1189 | active |
| cubezhao/ai-tools-mng AI Tools Manager is a Tauri-based cross-platform desktop application for managing AI service accounts and tokens (Augment, Antigravity, Win… | 82 | 1179 | active |
| Quorinex/Kiro-Go A Go service that converts Kiro accounts into OpenAI- and Anthropic-compatible API endpoints, with multi-account pooling, round-robin load … | 55 | 1157 | active |
| tholian-network/stealth Stealth is a secure, privacy-focused web browser, scraper, and proxy built in JavaScript that emphasizes automation, bandwidth efficiency, … | 32 | 1149 | active |
| taksssss/iptv-tool A self-hosted IPTV toolbox deployed via Docker that manages EPG (electronic program guide) data, live source playlists (TXT/M3U), and chann… | 65 | 1129 | active |
| Windscribe VPN The open-source (GPL-2.0) desktop VPN client for the Windscribe service, built in C++ for Windows, macOS, and Linux. It supports multiple V… | 92 | 1108 | active |
| kernel/kernel-images Kernel is an open-source browser infrastructure platform that provides sandboxed, ready-to-use Chromium browsers as a service for browser a… | 66 | 1103 | active |
| kort0881/telegram-proxy-collector A Python CLI tool that automatically collects, analyzes, and filters MTProto and SOCKS5 proxies for Telegram. It decodes proxy secrets to d… | 79 | 1099 | active |