Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| lqqyt2423/go-mitmproxy A Golang implementation of mitmproxy that intercepts, parses, monitors, and tampers with HTTP/HTTPS traffic via a man-in-the-middle proxy. … | 95 | 1576 | active |
| hcavarsan/kftray kftray is a cross-platform Kubernetes port-forward manager with a desktop tray GUI (Tauri) and a companion terminal UI (kftui), built in Ru… | 91 | 1571 | active |
| anderspitman/SirTunnel SirTunnel is a minimal, self-hosted, zero-configuration alternative to ngrok built on Caddy, OpenSSH, and a 50-line Python script. It expos… | 32 | 1571 | stable |
| wikiZ/RedGuard RedGuard is a C2 front flow control tool written in Go that acts as a filtering reverse proxy in front of command-and-control servers. It h… | 23 | 1569 | active |
| SagerNet/SagerNet SagerNet is a universal proxy toolchain application for Android, written in Kotlin, supporting multiple proxy protocols for circumventing i… | 10 | 5733 | maintenance |
| sharmajv/vpn A completely free Android VPN client (小三VPN / 3VPN) that requires no registration, has no speed or traffic limits, and shows no ads. It sup… | 32 | 5709 | maintenance |
| kffl/speedbump Speedbump is a TCP proxy written in Go that simulates variable, predictable network latency using configurable sine and sawtooth wave summa… | 23 | 1557 | active |
| creazyboyone/FastGithub FastGithub is a local proxy tool that accelerates access to GitHub by resolving clean IPs, speed-testing them, and proxying HTTPS traffic t… | 29 | 1556 | active |
| google/seesaw Seesaw v2 is a Linux Virtual Server (LVS) based load balancing platform written in Go. It supports advanced features like anycast, Direct S… | 70 | 5675 | maintenance |
| ymyuuu/Cloudflare-Workers-Proxy A Cloudflare Workers script that acts as a simple reverse proxy, forwarding client requests to a target URL and returning the response. It … | 46 | 1551 | active |
| azimjohn/jprq JPRQ is a free, open-source tunneling tool written in Go that exposes local servers to the public internet via HTTP or TCP tunnels, with cu… | 73 | 1549 | active |
| txthinking/zoro zoro is a Go CLI tool that exposes local TCP/UDP servers to the external network through a remote relay server, with zero-configuration set… | 52 | 1547 | active |
| ProxiFyre ProxiFyre is a Windows SOCKS5 proxifier that transparently routes TCP and UDP traffic of selected applications through SOCKS5 proxies using… | 93 | 1544 | active |
| VirgilClyne/GetSomeFries A collection of JavaScript rewrite and script modules for proxy clients (Loon, Surge, Stash, Shadowrocket, Quantumult X) that unlock full A… | 65 | 1526 | active |
| mircokroon/minecraft-world-downloader A Java application that acts as a proxy between a Minecraft client and server to intercept and save chunk data, allowing players to downloa… | 48 | 1522 | active |
| anytls/anytls-go anytls-go is the Go reference implementation of the AnyTLS protocol, a proxy protocol designed to mitigate TLS-in-TLS nested handshake fing… | 73 | 1521 | active |
| SpiderClub/haipproxy A high-availability distributed IP proxy pool built with Scrapy and Redis that scrapes free proxies from the internet, validates them, and … | 23 | 5525 | maintenance |
| snltty/linker Linker is a self-hosted networking tool written in C# that combines P2P hole punching (UDP/TCP, IPv4/IPv6) with server relay to provide vir… | 89 | 1508 | active |
| goproxy/goproxy A minimalist Go library implementing the GOPROXY protocol as an HTTP handler, letting developers build their own Go module proxy servers. I… | 90 | 1507 | active |
| danikula/AndroidVideoCache AndroidVideoCache is a Java library that adds disk caching to any Android video player (VideoView, MediaPlayer, ExoPlayer) via a local HTTP… | 23 | 5481 | maintenance |
| rlidwka/sinopia Sinopia is a zero-configuration private npm registry server that caches packages from npmjs.org and lets you publish private packages local… | 32 | 5472 | maintenance |
| traceless/alist-encrypt A Node.js proxy service for Alist that adds transparent WebDAV encryption and decryption of files. It supports streaming encrypted video pl… | 71 | 1503 | active |
| mariadb-corporation/MaxScale MariaDB MaxScale is an intelligent database proxy that forwards database statements to one or more backend database servers using complex r… | 56 | 1498 | active |
| fawney19/Aether Aether is a self-hosted AI API gateway written in Rust that provides a unified entry point for Claude, OpenAI, Gemini, and their CLI client… | 79 | 1492 | active |
| mitre/HTTP-Proxy-Servlet A single-file Java servlet that acts as an HTTP reverse proxy, built on Apache HttpClient. It lets Java web applications forward requests t… | 65 | 1488 | stable |
| ContentSquare/chproxy Chproxy is an open-source HTTP proxy and load balancer for ClickHouse databases, written in Go. It routes requests across multiple ClickHou… | 65 | 1486 | active |
| litespeedtech/openlitespeed OpenLiteSpeed is a high-performance, lightweight, open source HTTP web server developed by LiteSpeed Technologies under GPLv3. It uses an e… | 90 | 1483 | active |
| pg-sharding/spqr SPQR (Stateless Postgres Query Router) is a production-ready proxy that horizontally scales PostgreSQL via sharding by routing queries to t… | 91 | 1477 | active |
| simonrob/email-oauth2-proxy A local IMAP/POP/SMTP proxy written in Python that transparently adds OAuth 2.0 authentication for email clients that don't support it. It … | 78 | 1473 | active |
| Tencent/nohost Nohost is a multi-user, multi-environment remote configuration and HTTP packet-capture debugging platform built on top of Whistle. It is de… | 32 | 1473 | active |
| NHAS/reverse_ssh A Go-based SSH server and client that enables SSH-based reverse shells, letting operators manage and connect to remote targets with native … | 93 | 1470 | active |
| ssh-mitm/ssh-mitm SSH-MITM is an open-source man-in-the-middle SSH server for authorized security audits and malware analysis. It proxies SSH client-server c… | 84 | 1470 | active |
| small (OpenWrt proxy plugin feed) A collection of commonly used OpenWrt package feeds (luci apps, themes, and proxy/DNS plugins) maintained for easy inclusion when compiling… | 94 | 1468 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 77 | 1468 | active |
| linkerd/linkerd Linkerd 1.x is a transparent service mesh proxy for HTTP, gRPC, and Thrift traffic, built on Netty and Finagle, that provides load balancin… | 23 | 5307 | maintenance |
| Safe3/openresty-manager OpenResty Manager is a modern, web-based server control panel for managing OpenResty/Nginx reverse proxies, free SSL certificates, security… | 80 | 1463 | active |
| c0ny1/passive-scan-client A Burp Suite extension written in Java that forwards passive scanning traffic to external passive vulnerability scanners (like xray, w13sca… | 23 | 1458 | stable |
| LorenEteval/Furious Furious is a cross-platform GUI proxy client built with PySide6 that wraps Xray-core and Hysteria as Python bindings. It supports protocols… | 95 | 1457 | active |
| chaogei/Kiro-account-manager A desktop application for managing multiple Kiro IDE accounts with one-click switching, automatic token refresh, and group/tag organization… | 68 | 1455 | active |
| Paritok-official/paritok-4b-v1 Paritok is a non-destructive compression gateway that sits as a drop-in proxy between AI coding agents (Claude Code, Cursor, Codex, OpenHan… | 56 | 1454 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 77 | 1448 | active |
| myxuchangbin/dnsmasq_sniproxy_install A one-click shell script that installs and configures Dnsmasq and SNIproxy on CentOS, Debian, or Ubuntu servers. It redirects DNS resolutio… | 60 | 1442 | active |
| Sitoi/ClashBar ClashBar is a native macOS menu bar proxy client built with SwiftUI and AppKit, powered by the mihomo (Clash Meta) core. It provides a ligh… | 80 | 1432 | active |
| CFnat A Windows GUI wrapper (written in C#) around the CFnat tool, which automatically finds and tests Cloudflare datacenter IPs and sets up loca… | 24 | 1430 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 64 | 1429 | active |
| tun2proxy/tun2proxy tun2proxy is a Rust tool that creates a TUN network interface and routes traffic through SOCKS4/5 or HTTP proxies, effectively turning a pr… | 98 | 1423 | active |
| v2ray-worker A TypeScript solution for deploying V2Ray proxy configurations (VLESS and Trojan) on Cloudflare Workers. It generates proxy configs and man… | 19 | 1423 | active |
| itsreyi/BlockSuite Block-Suite is a modular JavaFX desktop application for authorized Minecraft server security assessments. It deploys a transparent MITM pro… | 80 | 1402 | active |
| Mekotofeuka/MTPROTO_FIX_By_MEKO A shell-based one-click installer and manager for MTProto proxies and VPN tools such as Telemt, MTG, MTProtoZig, and MTProxyL. It fixes com… | 76 | 1400 | active |
| GtxFury/FlyClash FlyClash is a modern, visually polished proxy client built on the Clash (mihomo) kernel, developed with Tauri, Next.js, and Tailwind CSS. I… | 88 | 1392 | active |
| RockxyApp/Rockxy Rockxy is an open-source (AGPL-3.0) native macOS HTTP debugging proxy built in Swift/SwiftNIO that intercepts, inspects, and modifies HTTP,… | 80 | 1387 | active |
| tmoonlight/NSmartProxy NSmartProxy is an open-source NAT traversal / reverse proxy tool that creates secure tunnels from a public endpoint to services running beh… | 63 | 1387 | active |
| boringproxy/boringproxy boringproxy is a tunneling reverse proxy written in Go that exposes local web servers securely via public HTTPS URLs. It includes a web UI,… | 23 | 1386 | active |
| zfl9/chinadns-ng ChinaDNS-NG is a rewritten and enhanced version of ChinaDNS that splits DNS queries between domestic (China) and trusted upstream DNS serve… | 42 | 1383 | active |
| remittor/zapret-openwrt OpenWrt packages (ipk/apk) of Zapret, an anti-DPI utility that bypasses deep packet inspection on routers, with a LuCI web interface. It is… | 73 | 1382 | active |
| Psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1382 | active |
| YukiCoco/ToMoon ToMoon is a Decky Loader plugin for SteamOS that provides an out-of-the-box Clash proxy client written in Rust. It automatically configures… | 35 | 1381 | active |
| unjs/untun untun is a Node.js CLI and library that exposes a local HTTP(s) server to the internet via Cloudflare Quick Tunnels (cloudflared). It provi… | 79 | 1378 | active |
| qr243vbi/nekobox NyameBox (a rebrand of NekoBox) is a cross-platform Qt-based desktop GUI proxy utility powered by the sing-box core. It supports a wide ran… | 76 | 1374 | active |
| kubenetworks/kubevpn KubeVPN is a Go-based CLI tool that creates a network tunnel between your local machine and a Kubernetes cluster, letting you access cluste… | 95 | 1371 | active |
| elecV2/elecV2P elecV2P is a self-hosted NodeJS network tool that lets users intercept and modify HTTP requests via JavaScript (MITM proxy) and run schedul… | 75 | 1362 | active |
| zxcvos/Xray-script A pure Shell management script for installing and configuring Xray proxy servers with protocols like VLESS-Vision-REALITY, VLESS-XHTTP-REAL… | 60 | 1359 | active |
| voyagermesh/voyager Voyager is a secure L7 and L4 ingress controller for Kubernetes built on top of HAProxy, developed by AppsCode. It provides load balancing,… | 56 | 1353 | active |
| stripe/smokescreen Smokescreen is an HTTP CONNECT egress proxy written in Go, developed by Stripe to proxy outbound traffic such as webhooks. It enforces host… | 86 | 1349 | active |
| oxylabs/paid-proxy-servers A promotional GitHub repository for Oxylabs' commercial paid proxy services, covering residential, mobile, datacenter, ISP, and SOCKS5 prox… | 56 | 1348 | active |
| develop202/migu_video A self-hosted Node.js service that proxies and exposes China Mobile Migu Video live TV streams as playlist interfaces (e.g., interface.txt)… | 59 | 1340 | active |
| Corvus-Malus/XKeen XKeen is a community-maintained CLI installer and management tool for setting up Xray and Mihomo proxy cores on Keenetic routers running En… | 49 | 1340 | active |
| WhiteDNS WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 80 | 1337 | active |
| stulzq/azure-openai-proxy A Go-based proxy service that converts OpenAI official API requests into Azure OpenAI API requests, letting OpenAI-ecosystem tools use Azur… | 21 | 1335 | stable |
| SagerNet/sing-box-for-android SFA is the official Android client for sing-box, a universal proxy platform. It provides a graphical interface for managing and running sin… | 75 | 1333 | active |
| GFW4Fun/x-ui-pro XUI-PRO is a shell-based auto-installer that sets up a censorship-resistant web proxy server combining the x-ui panel (Xray/V2ray), v2rayA,… | 72 | 1330 | active |
| bpking1/embyExternalUrl A collection of nginx njs scripts and userscripts that add external player links to Emby, Jellyfin, and Plex media servers, and redirect pl… | 47 | 1330 | active |
| tg123/sshpiper sshpiper is a reverse proxy for SSH that routes incoming SSH/SCP connections to upstream servers, with pluggable authentication mapping and… | 91 | 1329 | active |
| DNSveil DNSveil is a Windows-only secure DNS client supporting DNSCrypt, Anonymized DNSCrypt, DoH, DoT, and plain DNS over UDP/TCP, with built-in D… | 54 | 1328 | active |
| jacksontj/promxy Promxy is an aggregating proxy written in Go that makes multiple Prometheus shards appear as a single API endpoint. It merges duplicate tim… | 93 | 1327 | active |
| DNSCrypt/encrypted-dns-server A high-performance Rust proxy that lets anyone run their own encrypted DNS server supporting DNSCrypt v2 (including post-quantum), Anonymiz… | 93 | 1325 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 23 | 1319 | active |
| hemaju/Wireboy.Socket.P2PSocket A P2P NAT traversal tool written in C#/.NET that punches holes through firewalls to enable remote access between networks, e.g. controlling… | 49 | 1312 | active |
| umputun/reproxy Reproxy is a simple edge HTTP(s) server and reverse proxy written in Go, distributed as a single binary or Docker container. It supports mu… | 90 | 1308 | active |
| inetaf/tcpproxy A Go library and CLI (tlsrouter) for building TCP proxies that route connections based on static rules, HTTP/1 Host headers, and TLS SNI se… | 66 | 1301 | stable |
| pahaz/sshtunnel A pure Python library for creating SSH tunnels and TCP port forwarding through remote servers, built on paramiko. It lets applications prog… | 37 | 1298 | stable |
| tenox7/wrp WRP (Web Rendering Proxy) is a Go-based proxy server that lets vintage and legacy web browsers access the modern web. It renders pages usin… | 85 | 1294 | active |
| ilanyu/ReverseProxy A minimal reverse proxy tool written in Go that forwards HTTP traffic from a listen address to a target address. It ships as a single cross… | 23 | 4567 | maintenance |
| kdzwinel/betwixt Betwixt is a web debugging proxy desktop app built on Electron that captures and analyzes HTTP/HTTPS traffic using the familiar Chrome DevT… | 23 | 4557 | maintenance |
| nginxinc/NGINX-Demos A collection of demo configurations and scripts from NGINX showing load balancing, service discovery, autoscaling, and deployment patterns … | 75 | 1286 | active |
| smocker-dev/smocker Smocker is a simple and efficient HTTP mock server and proxy designed to help mock the HTTP dependencies of an application, especially for … | 66 | 1285 | active |
| Xerxes-2/clewdr ClewdR is a high-performance Rust proxy for Claude.ai and Claude Code that exposes native Claude and OpenAI-compatible API endpoints from a… | 78 | 1270 | active |
| yym68686/uni-api uni-api is a self-hosted Python service that unifies management of multiple LLM provider APIs behind a single OpenAI-compatible endpoint. I… | 85 | 1266 | active |
| zhiyi7/gfw-pac A PAC (Proxy Auto-Config) file generator and ready-made gfw.pac file for routing traffic around the GFW. It matches domains first, then fal… | 94 | 1262 | active |
| tzmax/V2RayXS V2RayXS is a native macOS GUI client for Xray-core, a maintained fork of the archived V2RayX project. It supports VLESS and XTLS protocols,… | 82 | 1258 | active |
| OptimalBits/redbird Redbird is a TypeScript library for building dynamic reverse proxies on Node.js, built on top of http-proxy. It supports programmatic route… | 23 | 4411 | maintenance |
| Fanju6/NetProxy-Magisk NetProxy is a system-level transparent proxy module for rooted Android devices built on the sing-box core, distributed as a Magisk/KernelSU… | 87 | 1252 | active |
| villadora/express-http-proxy Express/Connect middleware that proxies HTTP requests to another host and passes the response back to the original caller. It provides hook… | 49 | 1250 | stable |
| Decodo Decodo (formerly Smartproxy) is a commercial rotating proxy network and web scraping platform offering 125M+ residential, mobile, ISP, and … | 65 | 1246 | active |
| cfal/shoes A high-performance multi-protocol proxy server written in Rust supporting HTTP, SOCKS5, VMess, VLESS, Shadowsocks, Trojan, Snell, Hysteria2… | 100 | 1245 | active |
| brainfucksec/kalitorify kalitorify is a shell script for Kali Linux that uses iptables rules to create a transparent proxy through the Tor network, redirecting all… | 32 | 1244 | active |
| marvinvr/docktail DockTail is a Go-based Docker sidecar that watches container events, reads docktail.* labels, and exposes matching containers as native Tai… | 81 | 1242 | active |
| zywe03/realm-xwPF A shell-based one-click management script for Realm, a network relay/port-forwarding tool, with an interactive terminal UI for configuring … | 61 | 1237 | active |
| TheSmallHanCat/sora2api A self-hosted OpenAI-compatible API gateway that wraps Sora's text-to-video and image generation capabilities behind standard /v1/chat/comp… | 10 | 1235 | active |
| Lyrebird Lyrebird is a plugin-based testing workbench for mobile applications that intercepts and mocks HTTP/HTTPS network traffic via a proxy. It p… | 38 | 1225 | active |