Open-source vpn software
253 open-source libraries, tools and applications tagged vpn, ranked by how closely vpn is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
253 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| chen08209/FlClash FlClash is a multi-platform proxy client built on ClashMeta with a Flutter-based Material You interface. It supports subscription links, mu… | 95 | 55006 | active |
| bannedbook/fanqiang Fanqiang is a comprehensive repository of proxy tools, tutorials, and configuration scripts for bypassing internet censorship. It provides … | 65 | 53980 | active |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 100 | 44768 | active |
| MetaCubeX/mihomo MetaCubeX/mihomo (formerly Clash.Meta) is a cross-platform rule-based proxy core written in Go that supports multiple proxy protocols and f… | 96 | 34391 | active |
| XX-net/XX-Net XX-Net is an open-source proxy tool designed to bypass the Great Firewall (GFW) of China by disguising traffic as ordinary web traffic. It … | 86 | 33450 | active |
| Hiddify Hiddify is an open-source, ad-free multi-platform proxy/VPN client built on the Sing-box toolchain, supporting protocols like VLESS, VMess,… | 85 | 33224 | active |
| Algo VPN Algo is a collection of Ansible scripts that automate the deployment of a personal VPN server in the cloud. It supports modern protocols li… | 73 | 30406 | active |
| Algo VPN Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 73 | 30406 | active |
| NetBird NetBird is an open‑source zero‑trust networking platform that creates a WireGuard‑based overlay network for secure private connectivity. It… | 92 | 29443 | active |
| NetBird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 92 | 29443 | active |
| wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad… | 95 | 27046 | active |
| Pangolin Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilit… | 85 | 23082 | active |
| MatsuriDayo/NekoBoxForAndroid NekoBox for Android is a universal proxy toolchain app for Android built on the sing-box core. It supports a wide range of proxy protocols … | 62 | 22802 | active |
| hwanz/SSR-V2ray-Trojan A community‑maintained repository that curates and continuously updates recommendations for VPN/proxy services (often called "airports") su… | 72 | 20788 | active |
| Nyr/openvpn-install A Bash script that automates the installation and configuration of an OpenVPN server on popular Linux distributions. It provides an interac… | 75 | 20642 | active |
| yanue/V2rayU V2rayU is a native macOS client built with Swift that leverages the V2Ray core for proxying network traffic. It supports multiple protocols… | 86 | 20156 | active |
| ginuerzh/gost GOST (GO Simple Tunnel) is a Go-based tunneling and proxy tool supporting HTTP/HTTPS/HTTP2/SOCKS4/SOCKS5/Shadowsocks protocols plus QUIC, K… | 64 | 18244 | active |
| netchx/netch Netch is a Windows GUI proxy client supporting protocols like Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, WireGuard, and SOCKS5. It of… | 65 | 17693 | active |
| ZeroTier ZeroTier is a software-defined networking tool that creates secure virtual Ethernet networks spanning devices, VMs, containers, and clouds … | 78 | 17152 | stable |
| angristan/openvpn-install A Bash script that installs and manages a self-hosted OpenVPN VPN server on many Linux distributions. It handles client certificate generat… | 76 | 16155 | active |
| v2rayA v2rayA is a web GUI client for Project V (V2Ray/Xray) that supports VMess, VLESS, Shadowsocks, ShadowsocksR, Trojan, Tuic, and Juicity prot… | 98 | 15656 | stable |
| passteque/gluetun Gluetun is a lightweight VPN client packaged as a thin Alpine Docker container, written in Go, supporting many VPN providers via OpenVPN or… | 94 | 15598 | active |
| amnezia-vpn/amnezia-client Amnezia VPN is an open-source, cross-platform VPN client (desktop and mobile) that can automatically deploy a self-hosted VPN server on you… | 93 | 15351 | active |
| txthinking/brook Brook is a cross-platform programmable network tool written in Go that provides encrypted proxy/VPN functionality with system-level network… | 85 | 15192 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 97 | 14605 | stable |
| EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 87 | 14099 | active |
| BPB Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 83 | 13647 | active |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 66 | 13597 | active |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 94 | 13595 | stable |
| Netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 93 | 11826 | active |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 65 | 11325 | active |
| Hiddify Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 98 | 9362 | active |
| zizifn/edgetunnel A project that runs V2ray proxy inside edge/serverless runtimes, primarily Cloudflare Workers. It lets users deploy a personal proxy endpoi… | 23 | 9216 | active |
| Firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 96 | 9121 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 92 | 8751 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 96 | 8672 | active |
| yarrick/iodine iodine is a C client/server tool that tunnels IPv4 traffic through DNS queries, letting you get network access on firewalled connections wh… | 76 | 7994 | active |
| mullvad/mullvadvpn-app The official Mullvad VPN client app for desktop and mobile, including a Rust system service/daemon, an Electron-based GUI, a CLI, and dedic… | 99 | 7692 | active |
| GOST GOST (GO Simple Tunnel) is a Go-based multi-protocol tunnel and proxy tool supporting HTTP, HTTPS, SOCKS5, Shadowsocks, WebSocket, QUIC, KC… | 92 | 7640 | active |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 93 | 7521 | active |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 60 | 7215 | active |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 76 | 7150 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 74 | 7038 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 62 | 7017 | active |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32878 | maintenance |
| Mygod/VPNHotspot An Android app that shares your device's VPN connection over a Wi-Fi hotspot, repeater, or USB/Bluetooth tethering. It requires root access… | 89 | 6472 | active |
| Outline Outline is a pair of open-source applications from Jigsaw (Google) for creating and using your own VPN server: Outline Manager sets up and … | 67 | 6254 | active |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 55 | 5849 | active |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 95 | 5838 | active |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 71 | 5817 | stable |
| pfSense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 62 | 5742 | stable |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 66 | 5711 | active |
| Rethink DNS + Firewall Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 97 | 5554 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 80 | 5554 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 61 | 5546 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 81 | 5513 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 93 | 5026 | active |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 75 | 4928 | active |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 79 | 4875 | active |
| yiyuanjichang/dizhi A repository serving as the official website/mirror listing for Yiyuan Airport (一元机场), a commercial proxy/VPN subscription service. It prim… | 31 | 4829 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 75 | 4696 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 66 | 4645 | active |
| docker-transmission-openvpn A Docker image that bundles the Transmission BitTorrent client with an OpenVPN tunnel, so torrent traffic only runs when the VPN is active.… | 92 | 4568 | active |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19769 | maintenance |
| xiaobaigroup/ClashBox ClashBox is a native proxy client for HarmonyOS NEXT built with ArkTS/ArkUI, using a modified Mihomo (ClashMeta) kernel. It features a Surf… | 73 | 4459 | active |
| OpenZiti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 97 | 4403 | active |
| Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 68 | 4101 | active |
| xubiaolin/docker-zerotier-planet A Docker-based one-click deployment tool for self-hosting a private ZeroTier Planet (root) server, with an optional web management panel. I… | 63 | 4082 | active |
| cacggghp/vk-turn-proxy A Go tool that tunnels WireGuard (or Hysteria) traffic through TURN servers of VK Calls / Yandex Telemost, encrypting packets with DTLS 1.2… | 61 | 4017 | active |
| schwabe/ics-openvpn An open-source OpenVPN client for Android that uses the Android VPNService API to provide VPN connectivity without root access. It is a sta… | 90 | 3999 | active |
| masterking32/MasterHttpRelayVPN A local HTTP/SOCKS5 proxy that tunnels browser traffic through a Google Apps Script relay using domain fronting, making the connection appe… | 50 | 3930 | active |
| Lantern Lantern is a cross-platform internet censorship circumvention tool (proxy/VPN client) that helps users bypass firewalls such as the Great F… | 100 | 16409 | maintenance |
| getaurora/download Aurora (极光) is a commercial VPN/circumvention client for Android, Windows, and macOS, and this repository serves as its official anti-block… | 32 | 3785 | active |
| yeahwu/v2ray-wss A shell script that installs and configures multiple proxy protocols on Linux VPS servers, including Shadowsocks-rust, V2Ray+Nginx+WebSocke… | 62 | 3741 | active |
| pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 98 | 3734 | active |
| guardianproject/orbot-android Orbot is a free Android app that routes device internet traffic through the Tor network, acting as a VPN and proxy to encrypt and anonymize… | 100 | 3623 | active |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 72 | 3592 | active |
| Meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 51 | 3527 | active |
| TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 81 | 3489 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 76 | 3428 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 81 | 3390 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 95 | 3287 | active |
| VNT VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 96 | 3228 | active |
| WG Tunnel WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 95 | 3227 | active |
| ShadowsocksR V2Ray Trojan Android Client A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3159 | active |
| fanqiang A curated collection of free censorship-circumvention tools, pre-configured one-click proxy browsers, and free proxy accounts/nodes (shadow… | 61 | 3080 | active |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 32 | 3044 | active |
| strongSwan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 88 | 2994 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 85 | 2969 | active |
| defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 99 | 2866 | active |
| Gedsh/InviZible InviZible Pro is an Android application that combines Tor, DNSCrypt, and Purple I2P modules to provide online privacy, anonymity, and acces… | 99 | 2827 | active |
| yiyuan-jichang/dizhi A repository serving as the official website mirror for Yiyuan Airport (一元机场), a commercial VPN/proxy subscription service. It primarily ex… | 37 | 2788 | active |
| glados-network/GLaDOS GLaDOS is a commercial networking/VPN service (Generic Local and Destination Operating System) that helps users manage and secure their net… | 56 | 2758 | active |
| OnionBrowser/OnionBrowser Onion Browser is a free, open-source privacy-focused web browser for iPhone and iPad that tunnels web traffic through the Tor anonymity net… | 95 | 2681 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2587 | active |
| Proton VPN client Official open-source Proton VPN client apps for Android and Windows, built by Proton AG to route traffic through Proton's VPN servers. The … | 93 | 2532 | active |
| OpenMPTCProuter OpenMPTCProuter is an OpenWrt-based router distribution that aggregates multiple internet connections (fiber, ADSL, 4G/5G, etc.) using Mult… | 75 | 2513 | active |
| vpnhood/VpnHood VpnHood is an open-source, cross-platform VPN client and server built entirely from scratch in C#/.NET, designed to be undetectable by deep… | 96 | 2448 | active |
| fscarmen/warp-sh A shell script suite for connecting Linux servers to Cloudflare WARP via WGCF, adding IPv4/IPv6 network connectivity through WireGuard. It … | 71 | 2439 | active |
| feiniaoyun/feiniaoyun A repository serving as a mirror-link directory for Feiniaoyun, a commercial VPN/proxy subscription service, listing rotating access URLs r… | 68 | 2411 | active |
page 1 / 3 next →