Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| github/glb-director GitHub's GLB Director is a set of components implementing a scalable, stateless Layer 4 load balancer for bare metal datacenter environment… | 67 | 2457 | maintenance |
| getmeli/meli Meli is an open-source, self-hosted platform for deploying static sites and frontend applications with automatic SSL, custom domains, and b… | 23 | 2421 | maintenance |
| zmirror zmirror is a Python-based HTTP reverse proxy designed to automatically and completely mirror entire websites, such as Google, Wikipedia, Yo… | 10 | 2396 | maintenance |
| CNSRE/ABTestingGateway ABTestingGateway is a layer-7 gray-release (canary) gateway built on nginx and ngx_lua that dynamically routes requests to different upstre… | 23 | 2347 | maintenance |
| orlabs/orange Orange is an API gateway built on OpenResty (Nginx + Lua) that provides API monitoring, management, and traffic control through a plugin-ba… | 23 | 2306 | maintenance |
| ustayready/fireprox FireProx is a Python CLI tool that uses AWS API Gateway to create on-the-fly HTTP pass-through proxies that rotate the source IP address wi… | 32 | 2285 | maintenance |
| bilibili/overlord Overlord is Bilibili's Go-based proxy and cluster management platform for memcache and Redis/Redis Cluster, providing an automated high-ava… | 23 | 2246 | maintenance |
| wulabing/V2Ray_ws-tls_bash_onekey A one-click bash installation script that deploys a V2Ray proxy server with VMess/VLESS over WebSocket + TLS, fronted by Nginx with automat… | 32 | 2208 | maintenance |
| fossabot/clash Clash is a rule-based network proxy written in Go that supports HTTP/HTTPS and SOCKS proxies with Surge-like configuration and GeoIP rule r… | 32 | 2178 | maintenance |
| Dliv3/Venom Venom is a multi-hop proxy tool written in Go for penetration testers, connecting multiple nodes to build chained proxies through internal … | 23 | 2163 | maintenance |
| snooda/net-speeder net-speeder is a C-based Linux tool that speeds up single-threaded downloads on high-latency, unstable network links by duplicating outgoin… | 32 | 2137 | maintenance |
| armon/go-socks5 A Go library that implements a SOCKS5 proxy server, supporting No-Auth and User/Password authentication and the CONNECT command. It offers … | 32 | 2121 | maintenance |
| moxie0/sslstrip sslstrip is a Python command-line tool that implements Moxie Marlinspike's SSL stripping man-in-the-middle attack, downgrading HTTPS links … | 32 | 2075 | maintenance |
| alibaba/LVS Alibaba's distribution of Linux Virtual Server (LVS) adding advanced features to the kernel IPVS load balancer. It introduces the FULLNAT p… | 32 | 2043 | maintenance |
| jtblin/kube2iam kube2iam is a Kubernetes daemonset that intercepts traffic to the EC2 metadata API and returns per-pod AWS IAM credentials based on pod ann… | 79 | 2042 | maintenance |
| Cenmrev/V2RayW V2RayW is a Windows GUI client for v2ray-core that generates config files and manages proxy servers from the system tray. It also handles W… | 10 | 2024 | maintenance |
| awolfly9/IPProxyTool A Python/Scrapy application that crawls free proxy websites, validates the collected proxy IPs against target sites, and stores usable prox… | 32 | 2004 | maintenance |
| yyyar/gobetween gobetween is a modern, minimalistic L4 load balancer and reverse proxy written in Go, distributed as a single binary. It supports TCP, TLS … | 36 | 1988 | maintenance |
| rendora/rendora Rendora is a dynamic renderer written in Go that acts as a reverse HTTP proxy, serving headless-Chrome-rendered HTML to web crawlers while … | 10 | 1987 | maintenance |
| ciiiii/cloudflare-docker-proxy A Docker registry proxy that runs on Cloudflare Workers, forwarding image pulls to registries like Docker Hub, ghcr.io, and quay.io via con… | 10 | 1966 | maintenance |
| KANIKIG/Multi-EasyGost A beginner-friendly interactive shell script that wraps the gost tunnel program to manage encrypted port forwarding and relay tunnels on Li… | 32 | 1948 | maintenance |
| jiangwenyuan/nuster Nuster is a high-performance HTTP proxy cache server and RESTful NoSQL key-value cache server built on top of HAProxy, written in C. It is … | 23 | 1902 | maintenance |
| atmos/camo Camo is an HTTP image proxy that routes insecure HTTP images through SSL to prevent mixed-content warnings on HTTPS pages. It authenticates… | 10 | 1883 | maintenance |
| droe/sslsplit SSLsplit is a transparent SSL/TLS interception proxy for man-in-the-middle attacks against encrypted network connections. It terminates TLS… | 51 | 1877 | maintenance |
| youzan/zan-proxy Zan Proxy is an extensible HTTP/HTTPS/WebSocket proxy server written in Node.js for developers to debug local code against live pages. It s… | 23 | 1826 | maintenance |
| sysdream/ligolo Ligolo is a lightweight Go tool for establishing SOCKS5 or TCP tunnels over reverse TLS connections, aimed at penetration testers pivoting … | 32 | 1786 | maintenance |
| louislivi/SMProxy SMProxy is a lightweight MySQL database connection pool and proxy middleware built on the MySQL protocol and the Swoole coroutine engine. I… | 23 | 1760 | maintenance |
| stripe/veneur Veneur is a distributed, fault-tolerant metrics pipeline written in Go that implements the DogStatsD and SSF protocols. It aggregates metri… | 10 | 1743 | maintenance |
| MyCATApache/Mycat2 Mycat2 is a distributed database middleware written in Java that acts as a MySQL-protocol-compatible proxy, providing transparent data shar… | 23 | 1735 | maintenance |
| securesocketfunneling/ssf Secure Socket Funneling (SSF) is a cross-platform network tool and toolkit that multiplexes TCP and UDP traffic through a single TLS-encryp… | 23 | 1669 | maintenance |
| aivarsk/scrapy-proxies A Scrapy downloader middleware that routes requests through random proxies from a configurable list to avoid IP bans. It supports multiple … | 32 | 1666 | maintenance |
| yaoweibin/nginx_tcp_proxy_module A third-party Nginx module written in C that adds TCP proxying capabilities to Nginx, including upstream load balancing with ip_hash, activ… | 32 | 1646 | maintenance |
| malfunkt/hyperfox Hyperfox is a Go-based security auditing tool that acts as a man-in-the-middle proxy for HTTP and HTTPS traffic, recording all intercepted … | 23 | 1629 | maintenance |
| frainzy1477/luci-app-clash A LuCI web interface plugin for OpenWrt routers that manages the Clash rule-based proxy client. It provides subscription handling, config e… | 23 | 1623 | maintenance |
| easychen/openai-api-proxy A lightweight OpenAI/GPT API reverse proxy deployable with a single Docker command or to Tencent Cloud serverless functions. It supports SS… | 31 | 1611 | maintenance |
| Cloudflare Email Sending A Cloudflare Workers-based proxy server for sending free transactional emails via the MailChannels API. It exposes an authenticated HTTP en… | 50 | 1600 | maintenance |
| lqqyt2423/wechat_spider A Node.js WeChat crawler that uses a man-in-the-middle proxy (AnyProxy) to batch-collect WeChat official account article data, including co… | 72 | 1591 | maintenance |
| Dr-Incognito/V2Ray-Desktop V2Ray Desktop is a cross-platform GUI proxy client built with Qt5 and QML2 that supports Shadowsocks(R), V2Ray, and Trojan protocols, using… | 23 | 1563 | maintenance |
| csujedihy/proximac Proximac is an open-source command-line alternative to Proxifier that forces any application's traffic through a SOCKS5 proxy on macOS. It … | 23 | 1553 | maintenance |
| lukeaschenbrenner/TxtNet-Browser TxtNet Browser is an Android app that lets users browse the web over SMS without any WiFi or mobile data connection. It sends HTTP GET requ… | 75 | 1541 | maintenance |
| xiecat/goblin Goblin is a phishing simulation system for red team/blue team security exercises, built in Go. It works as a reverse proxy that transparent… | 23 | 1540 | maintenance |
| veo/wsMemShell A Java-based WebSocket memory webshell (memshell) tool that injects WebSocket endpoints into running application servers like Tomcat, Sprin… | 32 | 1485 | maintenance |
| FlashDetector Daedalus is an Android app that modifies DNS resolution without root access by creating a local VPN tunnel to intercept DNS requests. It su… | 66 | 1467 | maintenance |
| ttalvitie/browservice Browservice is a proxy server that renders modern web pages using an embedded Chromium (CEF) browser and streams the viewport as images to … | 76 | 1454 | maintenance |
| PowerTunnel PowerTunnel is an extensible local proxy server built on LittleProxy that bypasses government censorship by evading Deep Packet Inspection,… | 23 | 1442 | maintenance |
| james-proxy/james James is an open-source HTTP proxy and monitor desktop app built with Electron, React, and hoxy that lets developers view and intercept bro… | 23 | 1439 | maintenance |
| v2ray-web-manager v2ray-web-manager is a self-hosted web panel and cluster solution for managing v2ray proxy services. It works as a transport-layer middlewa… | 10 | 1430 | maintenance |
| FunnyWolf/pystinger Pystinger is a Python tool that establishes a SOCKS4a proxy and port mapping through a webshell (PHP, JSP, or ASPX) on a compromised server… | 23 | 1425 | maintenance |
| grimd Grimd is a fast DNS proxy server written in Go that blackholes advertisement and malware domains using configurable blocklists. It runs any… | 23 | 1415 | maintenance |
| xiongwilee/Gracejs Gracejs (formerly koa-grace v2) is a Node.js BFF framework built on Koa 2 that implements an MVC + RESTful architecture for front-end/back-… | 34 | 1388 | maintenance |
| eycorsican/go-tun2socks A tun2socks implementation written in Go that routes traffic from a TUN network interface through a SOCKS proxy. It can be used as a comman… | 10 | 1366 | maintenance |
| v2net/ios A distribution site and repository for Shadowrocket, an iOS proxy client supporting SS/SSR/V2Ray protocols, including online installation, … | 23 | 1332 | maintenance |
| SukkaW/Koolshare-Clash KoolClash is a Koolshare OpenWrt/LEDE x64 plugin that packages the Clash rule-based proxy tunnel for installation via Koolshare Soft Center… | 10 | 1330 | maintenance |
| nccgroup/SocksOverRDP A SOCKS4/4a/5 proxy implementation that tunnels traffic over RDP or Citrix (XenApp/XenDesktop) connections using Dynamic Virtual Channels. … | 23 | 1315 | maintenance |
| starjun/openstar OpenStar (WAF+) is a Web Application Firewall written in Lua that runs on nginx/OpenResty (LuaJIT), filtering HTTP traffic through JSON-con… | 32 | 1282 | maintenance |
| Anorov/PySocks PySocks is a Python library that lets you route TCP (and mostly UDP) traffic through SOCKS4, SOCKS5, and HTTP CONNECT proxy servers. It act… | 23 | 1279 | maintenance |
| SECFORCE/Tunna Tunna is a Python toolset that tunnels arbitrary TCP connections over HTTP using a remote webshell and a local SOCKS-capable proxy. It is d… | 32 | 1275 | maintenance |
| Yawning/obfs4 obfs4 is a look-like-nothing traffic obfuscation protocol (the obfourscator) implemented in Go, based on ScrambleSuit with ntor handshakes … | 32 | 1248 | maintenance |
| bradleyjkemp/grpc-tools A suite of Go-based gRPC debugging tools, including grpc-dump (a transparent proxy that logs gRPC/gRPC-Web traffic as JSON), grpc-replay, g… | 23 | 1241 | maintenance |
| bryanpkc/corkscrew Corkscrew is a small C command-line tool that tunnels SSH connections through HTTP proxies by acting as an SSH ProxyCommand helper. It supp… | 32 | 1230 | maintenance |
| tcurdt/iProxy An iOS application that runs an HTTP and SOCKS proxy on a jailbreak-free iPhone, letting a laptop share the phone's internet connection wit… | 32 | 1223 | maintenance |
| eastmaple/easytrojan A one-line shell script that deploys a Trojan proxy server on Linux, automatically provisioning a free nip.io domain and Let's Encrypt/Zero… | 32 | 1221 | maintenance |
| HirbodBehnam/MTProtoProxyInstaller A one-click bash installer script that sets up an MTProto proxy server for Telegram on CentOS, Ubuntu, and Debian. It generates secrets, co… | 32 | 1218 | maintenance |
| EddieIvan01/iox iox is a Go-based command-line tool for TCP/UDP port forwarding and intranet SOCKS5 proxying, serving as a modern replacement for lcx/ew. I… | 23 | 1208 | maintenance |
| moby/vpnkit VPNKit is a set of OCaml tools and services that provide VPN-friendly networking for HyperKit virtual machines. It translates VM ethernet t… | 58 | 1207 | maintenance |
| Netflix/rend Rend is a memcached-compatible proxy server written in Go that manages data chunking and coordinates L1 (RAM) and L2 (SSD-backed) cache tie… | 32 | 1192 | maintenance |
| trimstray/multitor A shell-based CLI tool that spins up multiple TOR instances and load-balances traffic across them through a single endpoint using HAProxy, … | 32 | 1190 | maintenance |
| FDX100/Auto_Tor_IP_changer A Python CLI tool that automatically rotates your IP address at configurable intervals by leveraging the Tor network's SOCKS proxy (127.0.0… | 32 | 1180 | maintenance |
| local-npm local-npm is a Node.js server that acts as a local npm registry mirror, caching modules and their dependencies as they are installed. It pr… | 23 | 1173 | maintenance |
| nfqws nfqws-keenetic provides packages and installation scripts for deploying the nfqws DPI-bypass tool on Keenetic/Netcraze routers with Entware… | 80 | 1142 | maintenance |
| shunf4/proxychains-windows A Windows and Cygwin port of proxychains that forces dynamically linked Win32 or Cygwin programs' TCP connections through one or more SOCKS… | 23 | 1142 | maintenance |
| cw1997/NATBypass NATBypass is a Go implementation of the lcx/htran port-forwarding tool that establishes TCP reverse tunnels for NAT traversal. It supports … | 60 | 1140 | maintenance |
| Kuingsmile/clash-core A backup fork of Clash, a rule-based network tunnel written in Go that proxies traffic through protocols like Shadowsocks, VMess, Trojan, a… | 18 | 1132 | maintenance |
| ProxyKit/ProxyKit ProxyKit is a .NET library for building code-first HTTP reverse proxies as ASP.NET Core middleware, supporting request/response interceptio… | 10 | 1113 | maintenance |
| ToyoDAdoubiBackup/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 1076 | maintenance |
| iphelix/dnschef DNSChef is a highly configurable DNS proxy (fake DNS) tool written in Python for penetration testers and malware analysts. It can forge DNS… | 32 | 1075 | maintenance |
| RedisLabs/redis-cluster-proxy A multithreaded proxy for Redis Cluster that abstracts the cluster away so clients can talk to it as if it were a single Redis instance. It… | 32 | 1056 | maintenance |
| Mob2003/rakshasa Rakshasa is a cross-platform multi-level proxy and intranet tunneling tool written in Go. It forms a network of nodes that forward TCP traf… | 21 | 1056 | maintenance |
| atrandys/trojan A one-click shell script for deploying the Trojan proxy protocol on Linux VPS servers, wrapping trojan-gfw with TLS certificate setup and c… | 23 | 1053 | maintenance |
| mwitkow/grpc-proxy A Go library providing a transparent gRPC reverse proxy handler that routes gRPC calls to backends without knowledge of their service seman… | 61 | 1048 | maintenance |
| shimmeris/SCFProxy SCFProxy is a CLI tool that deploys HTTP, SOCKS, and reverse proxies on cloud functions and API gateways across Alibaba Cloud, Tencent Clou… | 23 | 1047 | maintenance |
| secretsquirrel/BDFProxy BDFProxy is a man-in-the-middle proxy that patches downloaded binaries on the fly by embedding payloads, combining the Backdoor Factory wit… | 32 | 1016 | maintenance |
| thirtythreeforty/neolink Neolink is a Rust application that acts as an RTSP bridge for Reolink IP cameras that only speak the proprietary Baichuan protocol on port … | 23 | 1016 | maintenance |
| aws-samples/bedrock-access-gateway A proxy service that exposes Amazon Bedrock foundation models through OpenAI-compatible RESTful APIs, letting existing OpenAI SDK-based app… | 10 | 1004 | maintenance |
| megai2/d912pxy A DirectX 9 to DirectX 12 API translation proxy library designed specifically for Guild Wars 2, allowing the game to use DX12 without code … | 10 | 997 | maintenance |
| NVIDIA-NeMo/Switchyard Switchyard is a Rust proxy and library that routes LLM traffic across models and providers while translating between OpenAI Chat, Anthropic… | 77 | 3421 | experimental |
| motiful/cc-gateway CC Gateway is a self-hosted reverse proxy that sits between Claude Code clients and the Anthropic API, normalizing device fingerprints, tel… | 45 | 3044 | experimental |
| memorysafety/river River is a reverse proxy application written in Rust, built on Cloudflare's Pingora library and developed under ISRG's Prossimo initiative … | 17 | 2353 | experimental |
| OpenWrt Domain Routing Suite Podkop is an open-source traffic routing tool for OpenWrt routers, built on sing-box, that lets users send selected resources through a tun… | 85 | 2189 | experimental |
| GFW-knocker/gfw_resist_tls_proxy A set of Python proof-of-concept scripts (notably pyprox and randchunk) that fragment TLS Client Hello packets to evade SNI-based deep pack… | 30 | 1710 | experimental |
| punkpeye/mcp-remote A Node.js CLI proxy that lets MCP clients which only support local stdio servers connect to remote MCP servers over HTTP/SSE, including OAu… | 85 | 1603 | experimental |
| hanselime/paqet paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pca… | 80 | 1191 | experimental |
| robert/PySkyWiFi PySkyWiFi is a humorous Python proof-of-concept that tunnels internet requests through the free-to-edit 'name' field of an airline airmiles… | 25 | 1185 | experimental |
| zknill/sqledge SQLedge replicates a Postgres database to a local SQLite file using Postgres logical replication, serving reads from SQLite while forwardin… | 29 | 1043 | experimental |
| proxyee-down-org/proxyee-down Proxyee Down is a free open-source HTTP download manager built on Netty that accelerates downloads via multi-connection chunked downloading… | 10 | 24651 | abandoned |
| SwitchyOmega SwitchyOmega is a browser extension for Chromium and Firefox that lets users manage and quickly switch between multiple proxy profiles, inc… | 23 | 22603 | abandoned |
| Qv2ray Qv2ray is a cross-platform V2Ray GUI client built with C++ and Qt, supporting VMess, VLESS, SSR, Trojan, NaiveProxy, HTTP/SOCKS5 via an ext… | 41 | 16900 | abandoned |
| MatsuriDayo/nekoray NekoBox for PC (nekoray) is a Qt-based cross-platform GUI proxy configuration manager backed by sing-box, supporting protocols like SOCKS, … | 10 | 15290 | abandoned |
| zedeus/nitter Nitter is a free and open-source alternative Twitter/X front-end focused on privacy and performance, written in Nim. It proxies all request… | 10 | 14486 | abandoned |
| apenwarr/sshuttle sshuttle is a Python command-line tool that creates a transparent proxy over SSH, acting like a lightweight VPN without admin rights on the… | 32 | 8853 | abandoned |