Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Lyrebird Lyrebird is a plugin-based testing workbench for mobile applications that intercepts and mocks HTTP/HTTPS network traffic via a proxy. It p… | 38 | 1225 | active |
| ca110us/epeius Epeius is a Trojan proxy server implemented as a Cloudflare Worker, allowing serverless deployment of the Trojan protocol without owning a … | 25 | 1225 | active |
| hyphanet/fred Fred (Freenet REference Daemon) is the core node software of Hyphanet (formerly Freenet), a peer-to-peer platform for censorship-resistant,… | 95 | 1222 | active |
| manualdousuario/marreta Marreta is a self-hostable PHP/Laravel web application that removes access barriers, paywalls, and visual distractions from web pages. It c… | 78 | 1222 | active |
| coyove/goflyway goflyway is a Go-based encrypted port forwarder that relays TCP connections over plain HTTP POST requests, similar to ssh -L, with optional… | 23 | 4275 | maintenance |
| plabayo/rama Rama is a modular service framework for Rust for building network clients, servers, proxies, and traffic inspection tools from composable s… | 84 | 1218 | active |
| nining377/dolby_beta An Xposed module for Android that replaces audio sources in NetEase Cloud Music, merging the functionality of UnblockMusic Pro. It works vi… | 23 | 4262 | maintenance |
| codegangsta/gin A command-line live reload utility for Go web applications that watches for file changes, recompiles, and restarts the app behind a proxy. … | 32 | 4241 | maintenance |
| HamedAp/ShahanPanel ShahanPanel is a self-hosted web panel for managing SSH and VPN proxy users on a server, supporting protocols like V2Ray, VLESS, VMess, Wir… | 85 | 1204 | active |
| heyhuynhgiabuu/proxypal ProxyPal is a native desktop app (Tauri-based) that wraps CLIProxyAPI to expose AI subscriptions like Claude, ChatGPT, Gemini, and GitHub C… | 76 | 1202 | active |
| lattegou/airtiz AirTiz is a lightweight, native macOS VPN/proxy client built in Swift on top of the open-source mihomo (Clash Meta) kernel. It offers tray-… | 61 | 1201 | active |
| Janusec/janusec Janusec Application Gateway is a Go-based application gateway providing secure access for web applications, including reverse proxy, WAF, C… | 77 | 1200 | active |
| snakem982/Pandora-Box Pandora-Box is a lightweight, cross-platform desktop GUI client for the Mihomo (Clash Meta) proxy core. It supports multiple proxy protocol… | 91 | 1199 | active |
| STRRL/cloudflare-tunnel-ingress-controller A Kubernetes ingress controller that exposes cluster services to the internet via Cloudflare Tunnel. It watches standard Ingress resources … | 89 | 1198 | active |
| constverum/ProxyBroker ProxyBroker is an asynchronous Python tool that finds public HTTP(S) and SOCKS4/5 proxies from ~50 sources and concurrently checks their ty… | 32 | 4169 | maintenance |
| rpardini/docker-registry-proxy An HTTPS caching proxy for Docker registries that provides centralized configuration and caching of image pulls from any registry (DockerHu… | 75 | 1192 | active |
| linux-do/override A Go-based local proxy service that overrides GitHub Copilot's API endpoints in VSCode and JetBrains IDEs, redirecting code completion and … | 15 | 1191 | active |
| PaoPao DNS PaoPaoDNS is a Docker image that deploys a recursive DNS server in one command, using Unbound as the recursive resolver, Redis for caching,… | 31 | 1180 | active |
| Shadowsocks A Node.js-based management tool for Shadowsocks servers that adds multi-user support and traffic control on top of the manager API. It stor… | 32 | 4092 | maintenance |
| jcmoraisjr/haproxy-ingress HAProxy Ingress is a Kubernetes ingress controller that configures an embedded HAProxy load balancer to route external traffic to in-cluste… | 98 | 1172 | active |
| BiFangKNT/mtga MTGA is a local proxy application that lets IDEs with fixed model providers (such as Trae) use arbitrary LLM backends. It exposes an OpenAI… | 70 | 1169 | active |
| R44VC0RP/pgrok pgrok is a self-hosted ngrok alternative that exposes local ports to the internet via SSH reverse tunnels with automatic HTTPS through Cadd… | 42 | 1167 | active |
| proxy-agents A monorepo of Node.js HTTP Agent implementations that route HTTP/HTTPS requests through proxies using various protocols (HTTP, HTTPS, SOCKS… | 90 | 1165 | active |
| qoomon/docker-host A Docker sidecar container image that forwards TCP and UDP traffic to the Docker host or any other configured destination. It works with Do… | 93 | 1163 | active |
| zu1k/proxypool A Go service that automatically crawls proxy nodes (ss, ssr, vmess, trojan) from Telegram channels, subscription URLs, and the public inter… | 23 | 4034 | maintenance |
| basecamp/thruster Thruster is an HTTP/2 proxy written in Go that wraps the Puma webserver to provide production-ready serving of Rails applications. It offer… | 71 | 1161 | active |
| Psiphon Tunnel Core Psiphon Tunnel Core is the core tunneling client and server implementation of the Psiphon Internet censorship circumvention system, written… | 92 | 1159 | active |
| URenko/Accesser Accesser is a Python-based local HTTP proxy tool that circumvents SNI-based connection resets (SNI RST) used by the Great Firewall, restori… | 55 | 1158 | active |
| Grasscutters/Cultivation Cultivation is a custom desktop game launcher that makes it easy to proxy anime game traffic to private servers such as Grasscutter. It han… | 58 | 1151 | active |
| Kindness-Kismet/stelliberty Stelliberty is a cross-platform desktop proxy client for Windows, Linux, and macOS built with C#/.NET and Avalonia UI with a Rust core. It … | 80 | 1149 | active |
| OpenNJet/OpenNJet OpenNJet is a high-performance, lightweight web application and proxy engine written in C, designed as a cloud-native service mesh data pla… | 57 | 1144 | active |
| outray-tunnel/outray OutRay is an open-source ngrok alternative that exposes local servers to the internet via HTTP, TCP, and UDP tunnels with custom domains an… | 69 | 1143 | active |
| AWS Lambda Runtime Interface A lightweight web-server proxy for AWS Lambda's Runtime and Extensions APIs that lets developers locally test Lambda functions packaged as … | 92 | 1140 | active |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 46 | 3929 | maintenance |
| genotrance/px Px is an HTTP/HTTPS proxy server that automatically handles NTLM and Kerberos proxy authentication, typically in corporate environments, us… | 84 | 1131 | active |
| dperson/openvpn-client A Docker container that runs an OpenVPN client so other containers can route their traffic through a VPN connection. It is configured via e… | 32 | 1130 | active |
| EchoHS/GeekezBrowser GeekEZ Browser is an anti-detect (fingerprint spoofing) browser built on Electron and Puppeteer with integrated Xray-core proxy support. It… | 80 | 1127 | active |
| bolkedebruin/rdpgw An open-source implementation of the Microsoft Remote Desktop Gateway protocol (MS-TSGU) written in Go, allowing official Microsoft RDP cli… | 76 | 1127 | active |
| fiddyschmitt/File-Tunnel File Tunnel is a C# CLI tool that tunnels TCP connections through files on a shared file server, letting two hosts exchange traffic via rea… | 97 | 1123 | active |
| D00Movenok/BounceBack BounceBack is a stealth reverse proxy with WAF-like filtering designed to hide red team C2 and phishing infrastructure from blue teams, san… | 68 | 1117 | active |
| sandialabs/wiretap Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges o… | 75 | 1116 | active |
| juicity/juicity Juicity is a QUIC-based proxy protocol implementation written in Go, inspired by tuic. It ships both a server and a CLI client, with suppor… | 29 | 1109 | active |
| samhocevar/rinetd rinetd is a lightweight C utility that efficiently redirects TCP and UDP connections from one IP address/port combination to another. It is… | 23 | 1108 | stable |
| Yfamily Script Modules Collection A curated collection of configuration files, modules, and scripts for the iOS proxy clients Shadowrocket, QuantumultX, and Surge. It provid… | 77 | 1107 | active |
| outlaws-bai/Galaxy Galaxy is a Burp Suite extension that automatically decrypts and re-encrypts HTTP traffic whose payloads are encrypted, letting testers wor… | 83 | 1104 | active |
| Discord Proxy A Windows tool that adds per-application proxy support to the Discord desktop client via DLL injection (version.dll hijacking), avoiding th… | 48 | 1103 | active |
| serjs/socks5-server A lightweight SOCKS5 proxy server written in Go, packaged as a Docker container, built on go-socks5. It supports username/password authenti… | 48 | 1098 | stable |
| ReturnFI/Blitz Blitz Panel is a self-hosted management panel for the Hysteria2 proxy server, offering user management, traffic monitoring, WARP integratio… | 10 | 1096 | active |
| 170-carry/codex-tools A desktop GUI and CLI/TUI tool for managing multiple OpenAI Codex accounts, switching local Codex login state, and viewing usage quotas. It… | 77 | 1094 | active |
| ab77/netflix-proxy A smart DNS proxy deployed via Docker that uses dnsmasq and sniproxy to let users stream Netflix, Hulu, HBO Now and other region-locked ser… | 23 | 3741 | maintenance |
| djylb/nps NPS Enhanced is a lightweight, actively maintained NAT traversal and reverse proxy system with a Web management UI, based on the original e… | 86 | 1088 | active |
| immortalwrt/homeproxy HomeProxy is the modern proxy platform for ImmortalWrt (an OpenWrt fork), built on top of sing-box. It provides a LuCI web interface for ma… | 77 | 1088 | active |
| VoAPI/VoAPI VoAPI is a self-hosted AI large-model API aggregation and distribution gateway written in Go, deployed via Docker. It proxies requests to m… | 57 | 1088 | active |
| muraenateam/muraena Muraena is an almost-transparent reverse proxy written in Go that automates phishing and post-phishing activities by dynamically proxying a… | 62 | 1083 | active |
| Yuheng0101/X A collection of JavaScript scripts for proxy clients such as Quantumult X, Surge, Loon, and Shadowrocket, plus Node.js utilities. The scrip… | 65 | 1082 | active |
| EternalPain/ZJL ZJL is a shell script for Android that integrates the tiny and clnc engines to enable 'mianliu' (carrier free-data traffic) with anti-leak … | 23 | 1082 | active |
| minekube/gate Gate is a high-performance, extensible Minecraft proxy server written in Go that supports Java Edition (1.8 to latest) and Bedrock Edition … | 96 | 1080 | active |
| yize/xswitch XSwitch is a Chrome browser extension for redirecting and forwarding request URLs using browser-native APIs, with rule groups, CORS support… | 77 | 1077 | active |
| emanuele-em/proxelar Proxelar is a scriptable local MITM proxy workbench written in Rust for inspecting, intercepting, replaying, and rewriting HTTP, HTTPS, and… | 97 | 1076 | active |
| DNSCrypt/doh-server A fast, secure DNS-over-HTTPS (DoH) and Oblivious DoH (ODoH) server proxy written in Rust, formerly known as doh-proxy. It does not resolve… | 90 | 1073 | stable |
| facebook/dhcplb dhcplb is Facebook's production DHCP v4/v6 load balancer and relayer, also usable as a multithreaded DHCP server framework. It balances DHC… | 73 | 1063 | active |
| l7mp/stunner STUNner is a Kubernetes media gateway for WebRTC that lets you run WebRTC media servers in the cloud without fighting Kubernetes container … | 82 | 1062 | active |
| darkk/redsocks redsocks is a transparent TCP-to-proxy redirector written in C that uses firewall rules (iptables, pf, ipfw) to redirect any TCP connection… | 32 | 3622 | maintenance |
| shadowsocks/ChinaDNS ChinaDNS is a C-based local DNS server that prevents DNS poisoning by routing Chinese domain queries to local DNS servers and foreign domai… | 23 | 3603 | maintenance |
| fhefh2015/Fast-GitHub A browser extension that accelerates GitHub downloads and access for users in China by routing traffic through faster mirrors/proxies. It w… | 40 | 3589 | maintenance |
| mandatoryprogrammer/thermoptic Thermoptic is a stealth HTTP proxy that routes requests from any HTTP client (like curl) through a containerized Chrome instance so the tra… | 62 | 1051 | active |
| apify/proxy-chain A programmable HTTP/HTTPS proxy server library for Node.js, similar to Squid, with support for SSL/TLS, SOCKS4/5, authentication, upstream … | 93 | 1044 | active |
| Diving-Fish/maimaidx-prober A score tracker (prober) for the arcade rhythm game maimai DX that imports play records via a proxy tool and displays DX Rating and song sc… | 87 | 1042 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 52 | 1042 | active |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 68 | 1041 | active |
| pingooio/pingoo Pingoo is a self-hosted load balancer, API gateway, and reverse proxy written in Rust, positioned as an open-source alternative to Cloudfla… | 55 | 1035 | active |
| UIforFreedom/UIF UIF is an open-source, cross-platform proxy panel UI with proxy management and subscription management features, built in Vue. It serves as… | 76 | 1028 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 71 | 1028 | active |
| mokeyish/smartdns-rs SmartDNS-rs is a cross-platform local DNS server written in Rust, inspired by the C SmartDNS project. It queries multiple upstream DNS serv… | 82 | 1017 | active |
| flipt-io/reverst Reverst is a load-balanced reverse-tunnel server and Go client library built on QUIC and HTTP/3. It lets services behind restrictive networ… | 47 | 1005 | active |
| tty-share tty-share is a simple Go-based CLI tool that shares a Linux or macOS terminal session over the Internet or local network. Viewers can join … | 37 | 1003 | active |
| mgeeky/RedWarden RedWarden is a Python HTTP/HTTPS reverse proxy designed as a Cobalt Strike C2 redirector that filters inbound traffic. It inspects requests… | 10 | 994 | active |
| cuber/ngx_http_google_filter_module A native Nginx filter module written in C that simplifies deploying a Google search mirror server. It handles cookies, gstatic resources, a… | 32 | 3351 | maintenance |
| aleixrodriala/wa-tunnel A Node.js CLI tool that tunnels TCP internet traffic through WhatsApp messages using the Baileys library, sending packets as text or compre… | 32 | 3347 | maintenance |
| mmatczuk/go-http-tunnel A reverse tunnel tool based on HTTP/2 that exposes localhost services to the public internet via a server (tunneld) and client (tunnel) pai… | 60 | 3332 | maintenance |
| Manba Manba is a RESTful HTTP API gateway written in Go that serves as a unified API access layer for microservices. It provides traffic control,… | 23 | 3306 | maintenance |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3280 | maintenance |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3251 | maintenance |
| progrium/localtunnel Localtunnel is a tool that exposes localhost servers to the public Internet via tunnels. The current v3 is a minimal Go implementation buil… | 32 | 3227 | maintenance |
| alibaba/lightproxy LightProxy is a cross-platform desktop web debugging proxy built on Electron and whistle, offering out-of-the-box certificate installation … | 23 | 3216 | maintenance |
| alibaba/cobar Cobar is a database proxy from Alibaba that shards MySQL databases and tables, speaking the MySQL protocol so applications can use it as a … | 23 | 3188 | maintenance |
| sensepost/reGeorg reGeorg is a Python tool that creates a SOCKS proxy through a compromised bastion webserver by tunneling traffic over HTTP(S) via uploaded … | 33 | 3180 | maintenance |
| vulcand/vulcand Vulcand is a programmatic, extensible HTTP reverse proxy and load balancer for microservices and API management, backed by etcd for dynamic… | 23 | 3093 | maintenance |
| KOP-XIAO/QuantumultX A JavaScript resource parser script for the Quantumult X iOS proxy client that converts proxy node subscriptions and configs from formats l… | 77 | 2999 | maintenance |
| V2Ray An official Bash installer script (plus community config examples) that installs and manages V2Ray, a network proxy platform, on systemd-ba… | 10 | 875 | active |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2852 | maintenance |
| motiv-labs/janus Janus is a lightweight, open-source API Gateway and management platform written in Go, distributed as a single binary. It handles authoriza… | 23 | 2841 | maintenance |
| seclab-ucr/INTANG INTANG is a Linux daemon that evades the Great Firewall of China's TCP reset attacks by desynchronizing the TCP Control Block on censorship… | 40 | 2833 | maintenance |
| xuhaoyang/ClashForAndroid A GUI application for Android that wraps the Clash rule-based tunnel proxy core. It lets users route device traffic through configurable pr… | 32 | 2820 | maintenance |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2795 | maintenance |
| ShadowsocksR-Live/shadowsocksr-native A lightweight ShadowsocksR (SSRoT) proxy client and server written in pure C, adding TLS-based obfuscation to evade deep packet inspection … | 49 | 2769 | maintenance |
| dlundquist/sniproxy A C-based TCP proxy that routes incoming HTTP and TLS connections to backend servers based on the hostname in the initial request (SNI or H… | 47 | 2719 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2587 | maintenance |
| Ice-Hazymoon/openai-scf-proxy A small Node.js proxy service that forwards OpenAI API requests, deployable to Tencent Cloud Functions (or Aliyun) in minutes without writi… | 22 | 2543 | maintenance |
| ndroi/easy163 An Android app that runs a local VPN service to intercept and redirect NetEase Cloud Music HTTP requests, sourcing VIP and delisted songs f… | 23 | 2495 | maintenance |