function: vpn
255 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| chen08209/FlClash FlClash is a multi-platform proxy client built on ClashMeta with a Flutter-based Material You interface. It supports subscription links, mu… | 95 | 50029 | active |
| juanfont/headscale Headscale is an open-source, self-hosted implementation of the Tailscale control server written in Go. It coordinates WireGuard-based mesh … | 98 | 43205 | active |
| Xray-core Xray-core is a network proxy platform written in Go, best known as the successor to v2ray-core and the home of the XTLS/REALITY anti-censor… | 92 | 41230 | active |
| SagerNet/sing-box sing-box is a universal proxy platform written in Go that supports a wide range of proxy protocols (Shadowsocks, VLESS, Hysteria2, WireGuar… | 95 | 37302 | active |
| Tailscale Tailscale is a Zero Trust mesh VPN built on WireGuard that connects devices, teams, and infrastructure with identity-based access control. … | 99 | 35599 | stable |
| MetaCubeX/mihomo MetaCubeX/mihomo (formerly Clash.Meta) is a cross-platform rule-based proxy core written in Go that supports multiple proxy protocols and f… | 99 | 33579 | active |
| XX-net/XX-Net XX-Net is an open-source proxy tool designed to bypass the Great Firewall (GFW) of China by disguising traffic as ordinary web traffic. It … | 75 | 33444 | active |
| hiddify/hiddify-app Hiddify is an open-source, ad-free multi-platform proxy/VPN client built on the Sing-box toolchain, supporting protocols like VLESS, VMess,… | 86 | 32409 | active |
| trailofbits/algo Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 77 | 30365 | active |
| netbirdio/netbird NetBird is an open-source zero-trust networking platform that builds WireGuard-based peer-to-peer overlay networks with centralized access … | 95 | 28676 | active |
| hwdsl2/setup-ipsec-vpn A set of automated shell scripts that install and configure a self-hosted IPsec VPN server (IPsec/L2TP, Cisco IPsec, and IKEv2) on Linux us… | 77 | 28390 | active |
| wg-easy/wg-easy wg-easy is an all-in-one Docker application that runs a WireGuard VPN server together with a web-based admin UI for managing it. It lets ad… | 99 | 26771 | active |
| fosrl/pangolin Pangolin is an open-source, identity-aware remote access platform built on WireGuard that combines VPN and tunneled reverse proxy capabilit… | 84 | 22501 | active |
| MatsuriDayo/NekoBoxForAndroid NekoBox for Android is a universal proxy toolchain app for Android built on the sing-box core. It supports a wide range of proxy protocols … | 68 | 22459 | active |
| HyNetworks/hysteria Hysteria is a fast, censorship-resistant proxy built on a customized QUIC protocol that masquerades as standard HTTP/3 traffic. It supports… | 99 | 22383 | active |
| Nyr/openvpn-install A Bash script that installs and configures an OpenVPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minut… | 73 | 20616 | active |
| yanue/V2rayU V2rayU is a native macOS client built on the v2ray/xray core, written in Swift, for circumventing internet censorship. It supports protocol… | 92 | 20120 | active |
| ginuerzh/gost GOST (GO Simple Tunnel) is a Go-based tunneling and proxy tool supporting HTTP/HTTPS/HTTP2/SOCKS4/SOCKS5/Shadowsocks protocols plus QUIC, K… | 23 | 18190 | active |
| netchx/netch Netch is a Windows GUI proxy client supporting protocols like Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, WireGuard, and SOCKS5. It of… | 67 | 17688 | active |
| zerotier/ZeroTierOne ZeroTier is a software-defined networking tool that creates secure virtual Ethernet networks spanning devices, VMs, containers, and clouds … | 84 | 17047 | stable |
| Shadowsocks Shadowsocks is a family of encrypted SOCKS5 proxy clients and servers for circumventing internet censorship, with implementations in C#, Ru… | 77 | 16180 | active |
| angristan/openvpn-install A Bash script that installs and manages a self-hosted OpenVPN VPN server on many Linux distributions. It handles client certificate generat… | 76 | 16112 | active |
| v2rayA/v2rayA v2rayA is a web GUI client for Project V (V2Ray/Xray) that supports VMess, VLESS, Shadowsocks, ShadowsocksR, Trojan, Tuic, and Juicity prot… | 99 | 15515 | stable |
| passteque/gluetun Gluetun is a lightweight VPN client packaged as a thin Alpine Docker container, written in Go, supporting many VPN providers via OpenVPN or… | 94 | 15305 | active |
| txthinking/brook Brook is a cross-platform programmable network tool written in Go that provides encrypted proxy/VPN functionality with system-level network… | 65 | 15162 | active |
| amnezia-vpn/amnezia-client Amnezia VPN is an open-source, cross-platform VPN client (desktop and mobile) that can automatically deploy a self-hosted VPN server on you… | 95 | 14705 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 98 | 14442 | stable |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 79 | 13530 | stable |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 70 | 13503 | active |
| EasyTier/EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 89 | 13324 | active |
| bia-pain-bache/BPB-Worker-Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 88 | 13240 | active |
| gravitl/netmaker Netmaker is an open-source platform that automates the creation and management of WireGuard-based virtual mesh networks, from homelab to en… | 91 | 11763 | active |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 68 | 11247 | active |
| hiddify/Hiddify-Manager Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 94 | 9237 | active |
| zizifn/edgetunnel A project that runs V2ray proxy inside edge/serverless runtimes, primarily Cloudflare Workers. It lets users deploy a personal proxy endpoi… | 23 | 9045 | active |
| firezone/firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 95 | 9042 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 93 | 8641 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 99 | 8598 | active |
| yarrick/iodine iodine is a C client/server tool that tunnels IPv4 traffic through DNS queries, letting you get network access on firewalled connections wh… | 50 | 7956 | active |
| mullvad/mullvadvpn-app The official Mullvad VPN client app for desktop and mobile, including a Rust system service/daemon, an Electron-based GUI, a CLI, and dedic… | 99 | 7507 | active |
| go-gost/gost GOST (GO Simple Tunnel) is a Go-based multi-protocol tunnel and proxy tool supporting HTTP, HTTPS, SOCKS5, Shadowsocks, WebSocket, QUIC, KC… | 84 | 7355 | active |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 63 | 7185 | active |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 77 | 7123 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 66 | 7005 | active |
| masterking32/MasterDnsVPN MasterDnsVPN is a DNS tunneling VPN tool written in Go for bypassing internet censorship, optimized beyond DNSTT and SlipStream. It feature… | 77 | 6928 | active |
| Shadowsocks ShadowsocksX-NG is a macOS GUI client for the Shadowsocks proxy protocol, rewritten in Swift with ss-local running as a background Launch A… | 23 | 32885 | maintenance |
| throneproj/Throne Throne (formerly Nekoray) is a Qt-based cross-platform desktop GUI proxy client powered by the sing-box core, with additional Xray support.… | 92 | 6905 | active |
| Mygod/VPNHotspot An Android app that shares your device's VPN connection over a Wi-Fi hotspot, repeater, or USB/Bluetooth tethering. It requires root access… | 94 | 6353 | active |
| Outline Outline is a pair of open-source applications from Jigsaw (Google) for creating and using your own VPN server: Outline Manager sets up and … | 71 | 6249 | active |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 68 | 5816 | stable |
| windtf/wireproxy wireproxy is a userspace WireGuard client written in Go that exposes a WireGuard connection as a SOCKS5/HTTP proxy or TCP tunnels, without … | 97 | 5771 | active |
| yonggekkk/argosbx ArgoSBX is a one-click, non-interactive shell script ('little cannon') that deploys proxy servers on VPS or Docker by combining Sing-box, X… | 52 | 5722 | active |
| pfsense/pfsense pfSense is a free, open-source network firewall and router distribution based on FreeBSD with a custom kernel, managed entirely through a w… | 66 | 5721 | stable |
| proxysu/ProxySU A Windows WPF desktop application that provides one-click installation of proxy tools (Xray, V2ray, Trojan, Trojan-Go, NaiveProxy, Shadowso… | 72 | 5704 | active |
| tonarino/innernet innernet is a self-hosted private network (overlay VPN) system built on WireGuard, with a coordination server and client CLI written in Rus… | 86 | 5535 | active |
| xjasonlyu/tun2socks A Go-based tool that transparently routes all network traffic from any application through a proxy (SOCKS4/5, HTTP, Shadowsocks, SSH, WireG… | 84 | 5461 | active |
| docker-easyconnect/docker-easyconnect A Docker/Podman image that runs Sangfor's proprietary EasyConnect and aTrust VPN clients inside containers, exposing socks5 and HTTP proxie… | 64 | 5429 | active |
| celzero/rethink-app Rethink DNS + Firewall is an open-source Android app combining an encrypted DNS client (DoH, Oblivious DoH, DoT, DNSCrypt) with blocklists,… | 98 | 5338 | active |
| pritunl/pritunl Pritunl is a distributed enterprise VPN server built on the OpenVPN protocol (with WireGuard support), managed through a web interface and … | 97 | 5010 | active |
| Nyr/wireguard-install A Bash installer script that sets up a WireGuard VPN server on Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, and Fedora in about a minute… | 73 | 4926 | active |
| yiyuanjichang/dizhi A repository serving as the official website/mirror listing for Yiyuan Airport (一元机场), a commercial proxy/VPN subscription service. It prim… | 31 | 4794 | active |
| Oblivion Oblivion Desktop is an unofficial open-source desktop client for Cloudflare WARP that provides censorship-resistant, encrypted internet acc… | 63 | 4707 | active |
| OPNsense OPNsense is an open-source, FreeBSD-based firewall and routing platform with a web GUI, REST API, and extensible plugin system. It provides… | 77 | 4653 | active |
| yonggekkk/warp-yg A one-click shell script for managing Cloudflare WARP on Linux VPSes, supporting switching between warp-go and wgcf, generating unlimited W… | 69 | 4620 | active |
| haugene/docker-transmission-openvpn A Docker image that bundles the Transmission BitTorrent client with an OpenVPN tunnel, so torrent traffic only runs when the VPN is active.… | 98 | 4561 | active |
| trojan-gfw/trojan Trojan is a C++ proxy server/client that disguises traffic as ordinary HTTPS over TLS to bypass the Great Firewall of China. It implements … | 23 | 19748 | maintenance |
| openziti/ziti OpenZiti is an open-source zero-trust networking platform that provides programmable mesh overlay networks with cryptographic identity, pol… | 98 | 4359 | active |
| xiaobaigroup/ClashBox ClashBox is a native proxy client for HarmonyOS NEXT built with ArkTS/ArkUI, using a modified Mihomo (ClashMeta) kernel. It features a Surf… | 78 | 4227 | active |
| xubiaolin/docker-zerotier-planet A Docker-based one-click deployment tool for self-hosting a private ZeroTier Planet (root) server, with an optional web management panel. I… | 66 | 4073 | active |
| cbeuw/Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 63 | 4068 | active |
| schwabe/ics-openvpn An open-source OpenVPN client for Android that uses the Android VPNService API to provide VPN connectivity without root access. It is a sta… | 85 | 3967 | active |
| cacggghp/vk-turn-proxy A Go tool that tunnels WireGuard (or Hysteria) traffic through TURN servers of VK Calls / Yandex Telemost, encrypting packets with DTLS 1.2… | 66 | 3967 | active |
| masterking32/MasterHttpRelayVPN A local HTTP/SOCKS5 proxy that tunnels browser traffic through a Google Apps Script relay using domain fronting, making the connection appe… | 53 | 3906 | active |
| getaurora/download Aurora (极光) is a commercial VPN/circumvention client for Android, Windows, and macOS, and this repository serves as its official anti-block… | 32 | 3775 | active |
| Lantern Lantern is a cross-platform internet censorship circumvention tool (proxy/VPN client) that helps users bypass firewalls such as the Great F… | 89 | 15910 | maintenance |
| yeahwu/v2ray-wss A shell script that installs and configures multiple proxy protocols on Linux VPS servers, including Shadowsocks-rust, V2Ray+Nginx+WebSocke… | 66 | 3726 | active |
| esrrhs/pingtunnel Pingtunnel is a Go-based tool that tunnels TCP and UDP traffic over ICMP echo packets, with a client-server architecture and SOCKS5 forward… | 94 | 3712 | active |
| therealaleph/MasterHttpRelayVPN-RUST A Rust port of MasterHttpRelayVPN that bypasses censorship and DPI/SNI blocking by tunneling traffic through a free Google Apps Script rela… | 66 | 3566 | active |
| meshbird/meshbird Meshbird is an open-source cloud-native distributed private networking tool that creates encrypted peer-to-peer overlay networks across mul… | 54 | 3526 | active |
| guardianproject/orbot-android Orbot is a free Android app that routes device internet traffic through the Tor network, acting as a VPN and proxy to encrypt and anonymize… | 97 | 3497 | active |
| TrustTunnel/TrustTunnel TrustTunnel is a modern open-source VPN protocol originally developed by AdGuard VPN, with this repository containing the VPN endpoint (ser… | 76 | 3431 | active |
| adrienverge/openfortivpn openfortivpn is a command-line client for PPP+TLS VPN tunnel services, compatible with Fortinet VPN gateways. It spawns a pppd process and … | 77 | 3394 | active |
| Tunnelblick/Tunnelblick Tunnelblick is a free, open-source graphical user interface for OpenVPN on macOS, managing both client and server connections. It is a nati… | 93 | 3274 | active |
| vnt-dev/vnt VNT is a Rust-based VPN tool for quickly building virtual LANs across the internet, with NAT traversal, P2P tunnels, and point-to-network /… | 94 | 3180 | active |
| xxf098/shadowsocksr-v2ray-trojan-android A fully featured Android client for the ShadowsocksR, V2Ray, and Trojan proxy protocols, written in Scala. It lets users route their device… | 23 | 3161 | active |
| IRNova/Nova-Proxy Nova Proxy is a censorship-resistant proxy panel deployed as a single Cloudflare Worker, providing VLESS, Trojan, Shadowsocks, and WARP sub… | 82 | 3146 | active |
| wgtunnel/android WG Tunnel is a free and open-source Android client for WireGuard and AmneziaWG VPN tunnels, built in Kotlin with Jetpack Compose. It adds a… | 96 | 3085 | active |
| Geph Geph (迷霧通) is a modular Internet censorship circumvention system designed to defeat national-level filtering such as China's Great Firewall… | 35 | 3033 | active |
| strongswan/strongswan strongSwan is an open-source, modular IPsec-based VPN solution implementing the IKEv2 (and IKEv1) key exchange protocols for securing IP tr… | 87 | 2954 | stable |
| sakai135/wsl-vpnkit wsl-vpnkit is a tool that restores network connectivity to WSL 2 when a Windows VPN blocks it, using vpnkit/gvproxy to route traffic withou… | 86 | 2951 | active |
| DefGuard/defguard Defguard is a self-hosted zero-trust access management platform combining WireGuard VPN with built-in MFA/2FA, identity and access manageme… | 98 | 2809 | active |
| Gedsh/InviZible InviZible Pro is an Android application that combines Tor, DNSCrypt, and Purple I2P modules to provide online privacy, anonymity, and acces… | 98 | 2756 | active |
| glados-network/GLaDOS GLaDOS is a commercial networking/VPN service (Generic Local and Destination Operating System) that helps users manage and secure their net… | 59 | 2746 | active |
| Alvin9999-newpac/fanqiang A curated collection of free censorship-circumvention tools, pre-configured one-click proxy browsers, and free proxy accounts/nodes (shadow… | 60 | 2676 | active |
| OnionBrowser/OnionBrowser Onion Browser is a free, open-source privacy-focused web browser for iPhone and iPad that tunnels web traffic through the Tor anonymity net… | 98 | 2663 | active |
| yiyuan-jichang/dizhi A repository serving as the official website mirror for Yiyuan Airport (一元机场), a commercial VPN/proxy subscription service. It primarily ex… | 40 | 2512 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 98 | 2502 | active |
| Proton VPN Official open-source Proton VPN client apps for Android and Windows, built by Proton AG to route traffic through Proton's VPN servers. The … | 91 | 2476 | active |
| Ysurac/openmptcprouter OpenMPTCProuter is an OpenWrt-based router distribution that aggregates multiple internet connections (fiber, ADSL, 4G/5G, etc.) using Mult… | 77 | 2473 | active |
| fscarmen/warp-sh A shell script suite for connecting Linux servers to Cloudflare WARP via WGCF, adding IPv4/IPv6 network connectivity through WireGuard. It … | 72 | 2376 | active |
page 1 / 3 next →