Open-source proxy software
1029 open-source libraries, tools and applications tagged proxy, ranked by how closely proxy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1029 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Shadowsocks-Qt5 Shadowsocks-Qt5 is a native cross-platform GUI client for the Shadowsocks proxy protocol, written in C++ with Qt 5. It supports multiple se… | 10 | 7917 | abandoned |
| cmliu/CF-Workers-SUB A Cloudflare Workers/Pages-based tool that merges multiple proxy nodes and subscription links into a single personalized subscription URL, … | 10 | 7523 | abandoned |
| shadowsocks/shadowsocks-go A Go port of the Shadowsocks lightweight encrypted tunnel proxy, providing local SOCKS5 client and remote server binaries to bypass firewal… | 10 | 6545 | abandoned |
| Dragonfly Dragonfly is a CNCF-graduated P2P-based file and container image distribution system that accelerates large-scale data delivery by leveragi… | 10 | 5925 | abandoned |
| qingshuisiyuan/electron-ssr-backup A backup of the discontinued electron-ssr project, a cross-platform ShadowsocksR proxy client desktop app built with Electron for Windows, … | 10 | 5796 | abandoned |
| nginx/unit NGINX Unit is a lightweight universal web application server, written in C, that serves static assets, handles TLS, routes requests, and na… | 10 | 5543 | abandoned |
| Libreddit Libreddit is a private, lightweight front-end for Reddit written in Rust that proxies all requests (including media) through the server so … | 23 | 5198 | abandoned |
| bitly/oauth2_proxy A Go reverse proxy and static file server that adds OAuth2 authentication (Google, GitHub, Azure, GitLab, and others) in front of web appli… | 10 | 5084 | abandoned |
| yinghuocho/firefly-proxy Firefly is a cross-platform proxy client written in Go designed to circumvent the Great Firewall of China, with builds for Windows, macOS, … | 23 | 4811 | abandoned |
| ToyoDAdoubi/doubi A collection of one-click Bash installation and management scripts for Linux servers, primarily for proxy tools like Shadowsocks/Shadowsock… | 32 | 4685 | abandoned |
| Qihoo360/Atlas Atlas is a high-performance MySQL protocol proxy (database middleware) developed by Qihoo 360's DBA and infrastructure team, based on MySQL… | 23 | 4618 | abandoned |
| shadowsocksr-backup/shadowsocksr-csharp ShadowsocksR is a Windows proxy client written in C# that tunnels traffic through ShadowsocksR servers via a local SOCKS5/HTTP proxy with s… | 23 | 4484 | abandoned |
| shadowsocksr-backup/shadowsocks-rss ShadowsocksR (SSR) is a fork of Shadowsocks providing an encrypted SOCKS/HTTP proxy client and server with additional protocol obfuscation … | 32 | 4434 | abandoned |
| twitter-archive/diffy Diffy is a proxy-based differential testing tool from Twitter that multicasts incoming requests to a candidate service and two known-good s… | 10 | 3811 | abandoned |
| byt3bl33d3r/MITMf MITMf is a Python framework for performing Man-In-The-Middle and network attacks, featuring built-in SMB, HTTP, and DNS servers, an SSLStri… | 10 | 3641 | abandoned |
| Mellow Mellow is a rule-based global transparent proxy client for Windows, macOS and Linux, functioning as a Proxifier alternative that routes all… | 23 | 3536 | abandoned |
| Y1ran/Free-VPN-for-Coursera A free open-source guide/toolkit bundling ShadowsocksR (Shadow-SSR 4.0) and SSTap clients with shared node links, aimed at fixing Coursera … | 32 | 3503 | abandoned |
| dispatch A Node.js command-line utility that runs a SOCKS5 or HTTP proxy balancing traffic across multiple internet connections (Wi-Fi, Ethernet, 3G… | 10 | 3487 | abandoned |
| shadowsocksr-backup/shadowsocksr-android A ShadowsocksR (SSR) proxy client for Android that tunnels traffic through ShadowsocksR servers. It is a community backup of the original s… | 23 | 3430 | abandoned |
| ayaka14732/ChatGPTAPIFree An open-source proxy API that lets users access OpenAI's ChatGPT API for free, with rate limiting and self-hosting support. The repository … | 10 | 3322 | abandoned |
| Apinto Goku API Gateway (goku_lite) is a high-performance HTTP API gateway written in pure Go, offering dynamic routing, service orchestration, mu… | 23 | 3126 | abandoned |
| buzzfeed/sso sso (S.S. Octopus) is a single sign-on solution built at BuzzFeed for securing internal services behind OAuth-based authentication. It acts… | 10 | 3122 | abandoned |
| jiangxufeng/v2rayL v2rayL is a Linux GUI client for V2Ray built with PyQt5, supporting vmess and shadowsocks protocols with subscription management, QR code c… | 10 | 3113 | abandoned |
| ExpressGateway/express-gateway Express Gateway is a microservices API gateway built on Node.js and Express.js that secures, proxies, and manages APIs using Express middle… | 23 | 3030 | abandoned |
| zhuhaow/SpechtLite SpechtLite is a rule-based proxy application for macOS written in Swift. It has been archived because its underlying library, NEKit, is dep… | 10 | 2906 | abandoned |
| NEKit/libnekit NEKit is a Swift toolkit for building iOS/macOS Network Extension apps (NETunnelProvider) that route traffic through proxies to bypass netw… | 10 | 2814 | abandoned |
| h2non/toxy Toxy is a hackable HTTP proxy for Node.js that simulates server failures and adverse network conditions for resiliency testing. It injects … | 10 | 2714 | abandoned |
| Trojan-Qt5/Trojan-Qt5 Trojan-Qt5 was a cross-platform GUI proxy client implementing the Trojan protocol, built with Qt5 and C++, designed to route traffic throug… | 10 | 2664 | abandoned |
| WiFi-Pumpkin WiFi-Pumpkin is a Python framework for auditing Wi-Fi security by creating rogue wireless access points and performing man-in-the-middle at… | 23 | 2498 | abandoned |
| bin456789/Unblock163MusicClient-Xposed An Xposed module for rooted Android devices that unblocks grayed-out or region-restricted songs in the NetEase Cloud Music (163 Music) Andr… | 10 | 2495 | abandoned |
| MatsuriDayo/Matsuri Matsuri is a universal proxy toolchain app for Android, forked from SagerNet, supporting protocols like Shadowsocks, VMess, Trojan, SOCKS, … | 10 | 2493 | abandoned |
| evilsocket/bettercap bettercap is a network attack and reconnaissance framework, described as a Swiss Army knife for WiFi, BLE, HID hijacking, CAN-bus, and IPv4… | 10 | 2490 | abandoned |
| scrapoxy/scrapoxy Scrapoxy was an open-source proxy manager for web scraping that aggregated proxies from cloud providers and other sources behind a single A… | 58 | 2410 | abandoned |
| rgrove/rawgit RawGit was a web service that served files from raw.githubusercontent.com with correct content-type headers so they could be linked directl… | 10 | 2409 | abandoned |
| Shadowsocks A simple obfuscation plugin for Shadowsocks that disguises proxy traffic as ordinary HTTP or TLS traffic. It is deprecated and succeeded by… | 23 | 2372 | abandoned |
| hipache/hipache Hipache is a distributed HTTP and WebSocket reverse proxy built on Node.js, originally developed at dotCloud to route high volumes of traff… | 32 | 2295 | abandoned |
| open-dingtalk/pierced Pierced is DingTalk's official intranet tunneling (reverse proxy) tool that exposes local HTTP services and databases via a public subdomai… | 32 | 2260 | abandoned |
| vzex/dog-tunnel Dog Tunnel is a Go-based peer-to-peer tunneling tool that provides port mapping over UDP using the KCP protocol, with NAT hole punching ass… | 10 | 2167 | abandoned |
| killgcd/chromego ChromeGo is a bundled censorship-circumvention toolkit providing one-click proxy/VPN packages for Chrome, Firefox, and Android to bypass th… | 32 | 2162 | abandoned |
| plamoni/SiriProxy SiriProxy is a Ruby-based tampering proxy server for Apple's Siri assistant that intercepts Siri traffic and lets developers write custom p… | 10 | 2115 | abandoned |
| FunctionClub/V2ray.Fun V2ray.Fun is a web-based control panel for managing V2ray proxy servers on Linux VPS instances. It ships with a one-click shell installer t… | 10 | 1953 | abandoned |
| fqrouter/fqrouter fqrouter is an Android application designed to bypass the Great Firewall of China (GFW) by routing traffic through anti-censorship proxies.… | 32 | 1944 | abandoned |
| ambrop72/badvpn BadVPN is a collection of C networking tools: the NCD scripting language/daemon for network configuration, a tun2socks network-layer proxif… | 10 | 1932 | abandoned |
| iBaa/PlexConnect PlexConnect turns Apple TV 2 and 3 devices into Plex clients by hijacking the built-in Trailer app via a small DNS server and a web server … | 58 | 1908 | abandoned |
| jech/polipo Polipo is a lightweight, single-threaded, non-blocking caching HTTP proxy written in C with very modest resource needs. The project is no l… | 10 | 1818 | abandoned |
| yamada95/kitsunebi-android Kitsunebi is a fully-featured V2Ray client for Android written in Kotlin, supporting proxy configuration, routing rule sets, Fake DNS, late… | 10 | 1805 | abandoned |
| MerlinKodo/clash-rev A continuation of the Clash proxy core, a rule-based tunnel/proxy client supporting multiple protocols. The repository is now archived and … | 10 | 1793 | abandoned |
| xdavidhu/mitmAP A Python program that creates a fake wireless access point and performs man-in-the-middle data sniffing using tools like SSLstrip2, mitmpro… | 10 | 1692 | abandoned |
| 0x676e67/ninja Ninja is a reverse-engineered ChatGPT proxy server written in Rust that proxies ChatGPT-API/OpenAI-API requests, handles account authentica… | 10 | 1677 | abandoned |
| MShawon/YouTube-Viewer A Python-based multithreaded YouTube view bot that uses Selenium-driven browser sessions with free, premium, and rotating proxies to inflat… | 23 | 1666 | abandoned |
| labstack/armor Armor is a modern HTTP server and reverse proxy written in Go, supporting HTTP/2, automatic Let's Encrypt TLS certificates, WebSocket proxy… | 10 | 1659 | abandoned |
| Veloera/Veloera Veloera is a self-hosted AI API gateway written in Go, forked from New API, that proxies and manages access to multiple LLM providers with … | 49 | 1634 | abandoned |
| maxlicheng/luci-app-unblockmusic A LuCI plugin for OpenWrt/LEDE routers that runs UnblockNeteaseMusic (Node.js or Go versions) to unlock greyed-out and paid songs on NetEas… | 23 | 1494 | abandoned |
| qiwihui/hiwifi-ss A shell-script-based installer that adds Shadowsocks proxy support to HiWiFi (JiSu) routers, including a router admin UI integration, dnsma… | 10 | 1462 | abandoned |
| bumptech/stud Stud is a scalable TLS/SSL termination proxy that unwraps encrypted connections and forwards plaintext traffic to a backend like HAProxy or… | 10 | 1421 | abandoned |
| yonggekkk/Doprax-Xray A one-click shell script that deploys an Xray-core proxy server on the Doprax container platform, running five protocols (vless, vmess, tro… | 32 | 1406 | abandoned |
| nining377/UnblockMusicPro_Xposed An Xposed module for Android that unlocks greyed-out (region- or license-restricted) songs in the Netease Cloud Music client by hooking the… | 23 | 1387 | abandoned |
| ChatGPT API Bypass A Go service that bypasses Cloudflare protection to access ChatGPT's unofficial web endpoints, exposing them as an HTTP API. It also offers… | 10 | 1380 | abandoned |
| paradiseduo/ShadowsocksX-NG-R8 A macOS ShadowsocksR (SSR) proxy client, a fork of ShadowsocksX-NG-R, used to route traffic through ShadowsocksR servers to bypass censorsh… | 10 | 1359 | abandoned |
| acheong08/ChatGPTProxy A Go-based proxy server that bypasses Cloudflare protection on ChatGPT using TLS spoofing, exposing ChatGPT through an API-like interface. … | 10 | 1329 | abandoned |
| matiasinsaurralde/facebook-tunnel A Linux tool that tunnels Internet traffic through Facebook chat by sending packets as base64-encoded messages, using a tuntap interface an… | 32 | 1290 | abandoned |
| lanx-x/VRouter VRouter is a desktop application that runs a lightweight OpenWRT virtual machine via VirtualBox to provide transparent TCP/UDP proxying on … | 10 | 1277 | abandoned |
| user1121114685/koolproxyR KoolProxyR is a Shell-based ad-blocking plugin for KoolShare LEDE router firmware, bundling filter rules like EasyList China, Fanboy, and y… | 32 | 1233 | abandoned |
| benbjohnson/postlite Postlite is a Go network proxy that exposes remote SQLite databases over the Postgres wire protocol, translating Postgres frontend messages… | 10 | 1226 | abandoned |
| gaboolic/vercel-reverse-fast A Vercel-deployable reverse proxy configuration that accelerates access to OpenAI/ChatGPT and other blocked services like GitHub and Google… | 10 | 1173 | abandoned |
| PharosVip/Pharos-Android-Test Pharos Pro is an Android proxy client supporting Trojan, Trojan-Go, V2Ray, Shadowsocks, and SSR protocols. It is the test build channel of … | 23 | 1172 | abandoned |
| amurcanov/proxy-turn-vk-android WDTT is an Android application that establishes a WireGuard tunnel over TURN/DTLS, routing traffic through VK's TURN media-relay servers to… | 10 | 1158 | abandoned |
| dowsnature/dowsDNS A small Python DNS server that resolves domains via custom hosts files and wildcard records to bypass DNS poisoning by the Great Firewall o… | 23 | 1148 | abandoned |
| cfwtf/clash_for_windows A backup mirror of the final release files of Clash for Windows (Fndroid/clash_for_windows_pkg), a popular GUI proxy client based on Clash.… | 18 | 1146 | abandoned |
| fengjueming/unblock-NetEaseMusic A proxy service that lets users outside mainland China access NetEase Cloud Music (and related Tencent music services) by spoofing a Chines… | 10 | 1142 | abandoned |
| out0fmemory/GoAgent-Always-Available A maintained fork of the classic GoAgent proxy that periodically scans for usable Google GAE/GWS IP addresses and ships an automated IP-fet… | 10 | 1125 | abandoned |
| likuai2010/ClashMeta A Clash Meta (Mihomo) proxy client ported to HarmonyOS Next using Go, one of the first open-source Go application ports for that platform. … | 31 | 1118 | abandoned |
| Kenguba/google-access-helper A cracked (modified) version of the 'Google Access Helper' Chrome extension that bypasses the Great Firewall to access Google services and … | 67 | 1093 | abandoned |
| rhaidiz/broxy Broxy is an open-source HTTP/HTTPS intercepting proxy written in Go, built on goproxy with a Qt5-based GUI. It offers an interceptor, filte… | 23 | 1008 | abandoned |
| Caddy Caddy is a fast, extensible, multi-platform web server written in Go that serves HTTP/1, HTTP/2, and HTTP/3 with automatic HTTPS by default… | 94 | 77555 | stable |
| LiteLLM LiteLLM is an open-source AI gateway and Python SDK that provides a unified OpenAI-format interface to 100+ LLM providers (OpenAI, Anthropi… | 92 | 61456 | active |
| Antigravity Tools Antigravity Tools is a desktop application built with Tauri v2, React, and Rust that manages multiple AI service accounts and provides one-… | 80 | 32370 | active |
| Envoy Envoy is a CNCF-hosted, high-performance C++ edge, middle, and service proxy designed for cloud-native and AI-native applications. It provi… | 95 | 29082 | stable |
| authentik authentik is an open-source Identity Provider (IdP) and Single Sign-On (SSO) platform supporting SAML, OAuth2/OIDC, LDAP, SCIM, RADIUS, and… | 95 | 25962 | active |
| res-downloader A cross-platform desktop resource downloader built with Go and Wails that sniffs network traffic through a local proxy to capture videos, a… | 80 | 20510 | active |
| MediaMTX MediaMTX is a zero-dependency live media server and proxy written in Go that routes real-time video and audio streams across protocols incl… | 98 | 20364 | stable |
| bettercap bettercap is a Go-based, all-in-one framework for network reconnaissance and man-in-the-middle attacks across WiFi, Bluetooth Low Energy, w… | 82 | 20111 | active |
| IPFS Core Kubo is the reference Go implementation of IPFS, running a daemon that stores and serves content-addressed data. It ships a CLI, HTTP Gatew… | 93 | 17150 | active |
| Zed Attack Proxy (ZAP) Zed Attack Proxy (ZAP) by Checkmarx is a free, open-source web application security scanner used for finding vulnerabilities in web apps du… | 74 | 15865 | stable |
| oblien/openship Openship is an open-source, self-hostable deployment platform with built-in CI/CD that builds, ships, routes, and TLS-terminates apps from … | 83 | 14813 | active |
| EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 87 | 14099 | active |
| OpenResty OpenResty is a full-fledged web platform that bundles an enhanced Nginx core, LuaJIT, and many Nginx modules and Lua libraries into a singl… | 78 | 14044 | stable |
| Portkey AI Gateway Portkey AI Gateway is an open-source, TypeScript-based AI gateway that routes requests to 1,600+ LLMs across many providers through a singl… | 71 | 13079 | active |
| Tyk API Gateway Tyk Gateway is a cloud-native, open-source API Gateway written in Go that supports REST, GraphQL, TCP, and gRPC protocols. It provides rate… | 93 | 10840 | stable |
| FongMi/TV An open-source Android video streaming app built on CatVod that supports both Android TV (leanback) and mobile UIs, with VOD browsing, live… | 77 | 9844 | active |
| Runtipi Runtipi is an open-source personal homeserver orchestrator built on Docker that lets users install and manage nearly 300 self-hosted apps w… | 91 | 9678 | active |
| Higress Higress is a CNCF Sandbox, cloud-native AI-native API gateway built on Istio and Envoy, extensible with Wasm plugins written in Go, Rust, o… | 99 | 9568 | active |
| Apache ShenYu Apache ShenYu is a Java-native, asynchronous, high-performance API gateway for service proxying, protocol conversion, and API governance ac… | 86 | 8901 | stable |
| getmoto/moto Moto is a Python library that mocks AWS services so tests can run against simulated AWS infrastructure without real credentials or network … | 100 | 8717 | active |
| ThreeMammals/Ocelot Ocelot is a .NET API gateway built as a series of ASP.NET Core middlewares, providing a unified entry point for microservices architectures… | 97 | 8716 | active |
| firerpa/lamda FIRERPA (lamda) is an all-in-one Android device control platform whose server runs directly on the device (root or non-root) and exposes 16… | 97 | 8593 | active |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 40 | 8571 | active |
| yaklang/yakit Yakit is an all-in-one interactive application security testing platform built as a GUI client for the Yaklang security DSL engine over gRP… | 93 | 7786 | active |
| katanemo/plano Plano is an AI-native proxy server and data plane for agentic applications, built on Envoy by its core contributors. It centralizes agent r… | 86 | 7092 | active |
| basketikun/chatgpt2api A self-hosted reverse-engineered implementation of ChatGPT's official web interfaces, exposing OpenAI-compatible API endpoints for text gen… | 71 | 6544 | active |