Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| cmliu/CF-Workers-docker.io A Docker registry mirror/proxy deployed on Cloudflare Workers or Pages that forwards requests to Docker Hub and other registries. It helps … | 10 | 9208 | active |
| everywall/ladder Ladder is a self-hosted Go web proxy that removes CORS and other headers (like CSP) and modifies HTML/CSS/JS in responses, serving as an al… | 84 | 9173 | active |
| hunshcn/gh-proxy A self-hostable proxy service that accelerates access to GitHub releases, archives, raw files, gists, and git clone operations. It ships as… | 49 | 9045 | active |
| AIClient2API AIClient2API is a self-hosted Node.js proxy that simulates client-only LLM service requests (Antigravity, Codex, Grok, Kiro, Gemini CLI, et… | 82 | 8896 | active |
| vvbbnn00/WARP-Clash-API A self-hosted Python/Flask service that exposes Cloudflare WARP+ as a subscription link for clients like Clash, Surge, and Shadowrocket. It… | 10 | 8822 | active |
| vi/websocat websocat is a command-line tool for WebSockets, acting like netcat, curl, and socat for ws:// and wss:// connections. It supports both conn… | 68 | 8702 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 96 | 8672 | active |
| eooce/nodejs-argo A Node.js tool that deploys proxy nodes behind Cloudflare Argo tunnels on PaaS and free-tier platforms, supporting VLESS, VMess, and Trojan… | 70 | 8404 | active |
| chengaopan/AutoMergePublicNodes An automated aggregator that scrapes and merges publicly available proxy nodes (SS/SSR/V2Ray/Trojan/Clash) from the internet and republishe… | 72 | 8243 | active |
| Lucky Lucky (万吉) is a Go-based all-in-one networking utility for software/hardware routers and embedded Linux devices, bundling IPv6/IPv4 TCP/UDP… | 69 | 8228 | active |
| GUI-for-Cores/GUI.for.SingBox A lightweight, cross-platform desktop GUI application for managing the sing-box proxy core, built with Wails (Go backend) and Vue 3. It off… | 88 | 8203 | active |
| warp-tech/warpgate Warpgate is an open-source, clientless bastion host and privileged access management (PAM) tool written in Rust that transparently proxies … | 98 | 8038 | active |
| yarrick/iodine iodine is a C client/server tool that tunnels IPv4 traffic through DNS queries, letting you get network access on firewalled connections wh… | 76 | 7994 | active |
| UnblockNeteaseMusic A self-hosted proxy server that revives grayed-out (unavailable) songs in Netease Cloud Music by replacing their links with sources from al… | 74 | 7837 | active |
| chenyme/grok2api A self-hosted multi-account API gateway for Grok Build, Grok Web, and Grok Console, written in Go with a React frontend. It exposes Grok ca… | 82 | 7797 | active |
| GOST GOST (GO Simple Tunnel) is a Go-based multi-protocol tunnel and proxy tool supporting HTTP, HTTPS, SOCKS5, Shadowsocks, WebSocket, QUIC, KC… | 92 | 7640 | active |
| teamchong/pxpipe pxpipe is a local TypeScript proxy that reduces Claude Code input token usage by rewriting bulky text context (system prompts, tool docs, h… | 81 | 7525 | active |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 93 | 7521 | active |
| Marzban Marzban is a self-hosted proxy management panel with a web GUI for managing hundreds of Xray-core-based proxy accounts (VLESS, VMess, Troja… | 79 | 7452 | active |
| fabiolb/fabio Fabio is an HTTP, HTTPS, TCP, and gRPC reverse proxy and load balancer that configures itself dynamically from service data stored in Consu… | 93 | 7346 | active |
| telepresenceio/telepresence Telepresence is a CNCF open-source CLI tool that connects a developer's workstation to a remote Kubernetes or OpenShift cluster, creating a… | 97 | 7311 | active |
| Prowlarr Prowlarr is a self-hosted indexer manager and proxy for torrent trackers and Usenet indexers, built on the *arr (.NET/React) stack. It cent… | 96 | 7260 | active |
| tbphp/gpt-load GPT-Load is a high-performance, enterprise-grade AI API transparent proxy service built in Go that aggregates multiple AI providers (OpenAI… | 83 | 7158 | active |
| ehang-io/nps NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server written in Go, supporting TCP, UDP, HTTP(S), SOCK… | 23 | 34243 | maintenance |
| erebe/wstunnel wstunnel is a Rust CLI tool that tunnels arbitrary TCP, UDP, Unix socket, or stdio traffic over WebSocket, HTTP2, or WebTransport to bypass… | 98 | 7099 | active |
| goproxy/goproxy.cn Goproxy.cn is a free, non-profit Go module proxy service hosted in China and backed by Qiniu Cloud's global CDN. It fully implements the GO… | 45 | 7081 | stable |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 74 | 7038 | active |
| 0xERR0R/blocky Blocky is a fast, lightweight DNS proxy and ad-blocker for local networks, written in Go. It blocks ads and malware via external allow/deny… | 97 | 7011 | active |
| Proxyman Proxyman is a native macOS HTTP(S) debugging proxy application that captures, inspects, and mocks HTTP/HTTPS and WebSocket traffic from bro… | 97 | 6991 | active |
| sysown/proxysql ProxySQL is a high-performance, protocol-aware SQL proxy for MySQL, MariaDB, Percona Server, and PostgreSQL that sits between applications … | 93 | 6940 | stable |
| haproxy/haproxy HAProxy is a fast, reliable open-source reverse proxy and load balancer for TCP and HTTP-based applications, providing high availability, T… | 77 | 6929 | stable |
| TelegramMessenger/MTProxy MTProxy is the official MT-Proto proxy server for Telegram, written in C. It lets users self-host a proxy so others can access Telegram whe… | 62 | 6927 | active |
| HMBSbige/ShadowsocksR-Windows A Windows GUI client for the ShadowsocksR proxy protocol, built with WPF on .NET 6. It is a maintained fork of the original ShadowsocksR cl… | 10 | 6924 | active |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32878 | maintenance |
| InterceptSuite/ProxyBridge ProxyBridge is a free, open-source universal proxy client (Proxifier alternative) that transparently redirects TCP and UDP traffic from any… | 85 | 6795 | active |
| reqable/reqable-app Reqable is a cross-platform API debugging and testing application combining an MITM proxy for capturing HTTP(S) traffic with a full-feature… | 87 | 6788 | active |
| wzdnzd/aggregator A Python-based platform that crawls free proxy nodes from sources like Telegram, GitHub, and search engines, validates their liveness, and … | 75 | 6774 | active |
| elazarl/goproxy GoProxy is a Go library for building customized HTTP/HTTPS proxy servers as a net/http handler. It supports regular proxying, CONNECT tunne… | 98 | 6764 | stable |
| uber/kraken Kraken is a P2P-powered Docker registry from Uber that distributes container images and large blobs across clusters using BitTorrent-style … | 98 | 6755 | active |
| romanvht/ByeByeDPI An Android application that runs ByeDPI locally and routes all device traffic through it via Android's VPN mode to bypass DPI-based blockin… | 87 | 6710 | active |
| 666OS/ClashMac ClashMac is a native macOS proxy client built in SwiftUI, wrapping the Clash/Mihomo engine with system proxy and TUN enhanced modes. It pro… | 82 | 6310 | active |
| dae dae is a high-performance transparent proxy solution for Linux built on eBPF, performing traffic splitting directly in the kernel so direct… | 88 | 6308 | active |
| cmliu/WorkerVless2sub A Cloudflare Workers/Pages-based subscription generator that automatically batch-replaces and generates optimized-route VMess/VLESS/Trojan … | 69 | 6274 | active |
| BFE BFE (Beyond Front End) is a modern layer 7 load balancer and reverse proxy written in Go, originally developed at Baidu and now a CNCF sand… | 99 | 6264 | active |
| Outline Outline is a pair of open-source applications from Jigsaw (Google) for creating and using your own VPN server: Outline Manager sets up and … | 67 | 6254 | active |
| Python3WebSpider/ProxyPool A self-hosted proxy pool service that periodically scrapes free proxy sites, stores and scores them in Redis, tests their availability, and… | 60 | 6252 | active |
| eooce/node-ws A lightweight Node.js serverless proxy application implementing VLESS, Trojan, VMess, and Shadowsocks protocols without a kernel, deployabl… | 81 | 6238 | active |
| google/ios-webkit-debug-proxy A DevTools proxy that translates Chrome's Remote Debugging Protocol into WebKit's remote inspector protocol, letting developers debug Mobil… | 32 | 6201 | active |
| Cosmos Cosmos-Server is a self-hosted home server platform that acts as a secure gateway and server manager for your applications. It bundles auth… | 92 | 6178 | active |
| Clash for Windows Chinese A Chinese-localized (zh-CN) distribution of Clash for Windows, providing patched app.asar files, a localization patch, and a repackaged ins… | 86 | 28586 | maintenance |
| wnlen/clash-for-linux A shell-based management platform for running Clash/Mihomo proxy on Linux, with automatic kernel download, subscription management, node se… | 72 | 6091 | active |
| tinyproxy/tinyproxy Tinyproxy is a lightweight HTTP/HTTPS proxy daemon for POSIX operating systems, written in C. It supports connection buffering, domain/URL … | 75 | 6010 | stable |
| mostlygeek/llama-swap A Go-based proxy service that lets you run multiple local AI inference servers (llama.cpp, vllm, ComfyUI, etc.) and hot-swap between models… | 86 | 5922 | active |
| w37fhy/QuantumultX A curated collection of ready-made ('lazy') configuration files and synced community scripts for proxy tools like Quantumult X, Surge, Shad… | 60 | 5916 | active |
| Geyser Geyser is a proxy/bridge that translates packets between Minecraft: Bedrock Edition clients and Minecraft: Java Edition servers, enabling t… | 77 | 5911 | active |
| goproxyio/goproxy A Go module proxy server that caches and serves Go modules, available both as a hosted global service (goproxy.io) and as a self-hostable b… | 23 | 5868 | active |
| easegress-io/easegress Easegress is a cloud-native traffic orchestration system that acts as an API gateway, reverse proxy, and traffic manager with built-in Raft… | 78 | 5867 | active |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 55 | 5849 | active |
| lanproxy lanproxy is a self-hosted NAT traversal / reverse proxy tool that exposes machines behind a firewall to the public internet by forwarding T… | 41 | 5845 | active |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 95 | 5838 | active |
| snailyp/gemini-balance A Python FastAPI proxy and load-balancing service for the Google Gemini API that rotates multiple API keys and exposes both Gemini and Open… | 36 | 5813 | active |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 66 | 5711 | active |
| telemt/telemt Telemt is a high-performance MTProxy server for Telegram written in Rust with Tokio, implementing all official MTProto proxy modes includin… | 78 | 5705 | active |
| trojan A multi-user trojan proxy management and deployment tool written in Go, offering both a web panel and a CLI for administering trojan/trojan… | 23 | 5637 | active |
| workweave/router Workweave Router is a model router for agentic AI systems that routes each prompt to the most cost-effective model capable of handling it, … | 66 | 5596 | active |
| pgdogdev/pgdog PgDog is a PostgreSQL proxy written in Rust that combines connection pooling, query load balancing, and database sharding in a single binar… | 85 | 5584 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 61 | 5546 | active |
| dovecoteescapee/ByeDPIAndroid An Android application that runs a local VPN service wrapping the ByeDPI SOCKS5 proxy to bypass Deep Packet Inspection (DPI) and censorship… | 17 | 5539 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 81 | 5513 | active |
| 3proxy/3proxy 3proxy is a tiny, free proxy server written in C supporting SOCKS, HTTP, HTTPS, FTP, and TLS proxying with traffic shaping, port mapping, a… | 96 | 5498 | stable |
| drk1wi/Modlishka Modlishka is an open-source penetration testing tool written in Go that acts as a transparent man-in-the-middle reverse proxy. It can proxy… | 63 | 5427 | active |
| nikkinikki-org/OpenWrt-nikki Nikki is an OpenWrt package (with a LuCI web interface) that runs Mihomo (Clash Meta) as a transparent proxy on OpenWrt routers. It manages… | 92 | 5364 | active |
| facebookincubator/katran Katran is a C++ library and BPF program for building a high-performance layer 4 load balancing forwarding plane. It leverages the Linux ker… | 77 | 5362 | active |
| readysettech/readyset Readyset is a transparent, wire-compatible SQL caching proxy for Postgres and MySQL that sits between your application and database. It cac… | 98 | 5287 | active |
| linuxhsj/openclaw-zero-token OpenClaw Zero Token is a fork of OpenClaw that provides a unified gateway to major LLM providers (ChatGPT, Claude, Gemini, DeepSeek, Qwen, … | 71 | 5206 | active |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 62 | 5174 | active |
| eooce/Sing-box A one-click Shell installation script that deploys sing-box with multiple proxy protocols (VLESS-Reality, VMess-ws-tls via Argo tunnel, Hys… | 62 | 5168 | active |
| yrutschle/sslh sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend service… | 76 | 5120 | stable |
| Remnawave Remnawave is a self-hosted proxy management panel built on top of Xray-core, providing a web interface for managing proxy servers and users… | 81 | 5118 | active |
| nginx/kubernetes-ingress The official NGINX and NGINX Plus Ingress Controller for Kubernetes, maintained by the NGINX team at F5. It translates Kubernetes Ingress r… | 96 | 5078 | stable |
| Pomerium Pomerium is an open-source, identity- and context-aware reverse proxy that provides clientless, zero-trust access to internal applications … | 99 | 5056 | active |
| nghttp2/nghttp2 nghttp2 is a mature C library implementing the HTTP/2 framing layer and HPACK header compression, plus client, server, proxy, and load-test… | 89 | 5053 | stable |
| torproject/tor Tor is the core implementation of the Tor anonymity network, routing internet traffic through onion circuits to hide a user's IP address an… | 32 | 5052 | active |
| luestr/ProxyResource A curated resource repository for the Loon proxy app, providing configuration templates, plugins, scripts, and rule sets. It serves as an i… | 68 | 5036 | active |
| xvzc/spoofdpi SpoofDPI is a lightweight, cross-platform proxy tool written in Go that circumvents Deep Packet Inspection (DPI) based internet censorship … | 98 | 5021 | active |
| Ligolo-ng Ligolo-ng is a tunneling and pivoting tool written in Go that establishes tunnels over reverse TCP/TLS connections using a TUN interface in… | 92 | 5008 | active |
| MockServer MockServer is an open-source HTTP(S) mock server and proxy for testing that can mock APIs, record and inspect live traffic, and inject fail… | 100 | 4994 | active |
| SadeghHayeri/GreenTunnel GreenTunnel is an anti-censorship tool that bypasses ISP Deep Packet Inspection (DPI) systems by splitting TLS ClientHello packets and usin… | 93 | 4915 | active |
| spring-cloud/spring-cloud-gateway Spring Cloud Gateway is an API gateway built on Spring Framework, Spring Boot, and Project Reactor. It provides routing, filtering, and tra… | 95 | 4907 | stable |
| zzzgydi/clash-verge A cross-platform desktop GUI for the Clash proxy core, built with Tauri and React. It lets users manage Clash proxy profiles, rules, and sy… | 10 | 21906 | maintenance |
| nguyenphutrong/quotio Quotio is a native macOS menu bar app (SwiftUI) that unifies multiple AI provider accounts (Claude, Gemini, OpenAI, Qwen, Antigravity, and … | 79 | 4882 | active |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 79 | 4875 | active |
| yiyuanjichang/dizhi A repository serving as the official website/mirror listing for Yiyuan Airport (一元机场), a commercial proxy/VPN subscription service. It prim… | 31 | 4829 | active |
| gomods/athens Athens is an open-source, enterprise-ready implementation of the Go Module proxy server that caches and serves Go modules via the Go Module… | 94 | 4806 | active |
| antoniomika/sish sish is an open-source, self-hostable SSH server that provides HTTP(S), WebSocket(S), and TCP tunnels to localhost, serving as an ngrok/ser… | 94 | 4790 | active |
| 233boy/sing-box A one-click install and management shell script for the sing-box proxy server on Linux. It automates setup of protocols like VLESS-REALITY,… | 71 | 4780 | active |
| openziti/zrok zrok is an open-source tool for securely sharing local web services, files, and TCP/UDP resources over the internet without firewall or NAT… | 98 | 4751 | active |
| lucaslorentz/caddy-docker-proxy A Caddy plugin that turns Caddy into a Docker-aware reverse proxy by scanning container labels and generating an in-memory Caddyfile. It au… | 90 | 4737 | active |
| SteveLTN/https-portal HTTPS-PORTAL is a Dockerized reverse proxy that automatically obtains and renews Let's Encrypt TLS certificates and serves any web applicat… | 82 | 4694 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 66 | 4645 | active |