Open-source vpn software
253 open-source libraries, tools and applications tagged vpn, ranked by how closely vpn is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
253 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| bjdgyc/anylink AnyLink is an enterprise-grade SSL VPN server written in Go that supports many concurrent remote-access users. It implements the OpenConnec… | 90 | 2316 | active |
| kylemanna/docker-openvpn A Docker image and shell tooling that runs an OpenVPN server in a container, bundled with an EasyRSA PKI certificate authority. It automate… | 29 | 9086 | maintenance |
| sglfree/freesky A distribution and documentation hub for free anti-censorship (circumvention) software such as Freegate, Ultrasurf, Psiphon 3, and nthLink,… | 66 | 2307 | active |
| yuezk/GlobalProtect-openconnect A GlobalProtect VPN client for Linux built on OpenConnect, offering both a CLI and a Tauri-based GUI. It supports SSO authentication includ… | 100 | 2295 | active |
| squat/kilo Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across … | 74 | 2294 | active |
| gsliepen/tinc Tinc is a peer-to-peer VPN daemon that creates encrypted private networks over the Internet with automatic full-mesh routing and NAT traver… | 74 | 2256 | stable |
| kaaass/ZerotierFix An unofficial ZeroTier Android client patched from the official app, adding features like self-hosted Moon support, custom planet configura… | 23 | 2214 | active |
| CluvexStudio/Aether Aether is a Rust-based censorship circumvention client for heavily restricted networks that discovers reachable gateways, builds encrypted … | 80 | 2130 | active |
| pojntfx/weron weron is a Go-based tool and library that creates lean, fast, and secure overlay networks using WebRTC. It connects nodes behind NATs and f… | 27 | 2113 | active |
| oxen-io/lokinet Lokinet is the reference implementation of LLARP, a low-latency layer 3 onion routing protocol that forms a decentralized, IP-based overlay… | 63 | 2092 | active |
| Shadowrocket for Android Shadowrocket for Android is a free VPN client that provides built‑in free proxy nodes and premium private servers. It supports multiple pro… | 97 | 2089 | active |
| pivpn/pivpn PiVPN is a set of shell scripts that turn a Raspberry Pi or any Debian/Ubuntu server into a WireGuard or OpenVPN VPN server with a one-comm… | 75 | 8044 | maintenance |
| mudler/edgevpn EdgeVPN is a statically compiled, decentralized p2p VPN built on libp2p that creates private networks joined via shared tokens, with no cen… | 95 | 2078 | active |
| Genymobile/gnirehtet Gnirehtet provides reverse tethering for Android devices over adb, letting a plugged-in phone use the computer's internet connection withou… | 23 | 7989 | maintenance |
| heiher/hev-socks5-tunnel A lightweight, high-performance tun2socks implementation that forwards TCP and UDP traffic from a TUN device through a SOCKS5 proxy. It is … | 100 | 2066 | active |
| fscarmen/ArgoX A one-click Shell script that deploys Xray with multiple proxy protocols (Reality, Hysteria2, VLESS, VMess, Trojan, Shadowsocks, XHTTP) beh… | 75 | 2036 | active |
| StressOzz/Zapret-Manager A universal shell-based manager for bypassing internet censorship and DPI-based blocks on OpenWrt routers. It automates installation and co… | 80 | 1997 | active |
| dswd/vpncloud VpnCloud is a high-performance peer-to-peer mesh VPN written in Rust that runs over UDP with strong end-to-end encryption (Curve25519 and A… | 23 | 1977 | stable |
| baoweise-bot/aimili-vpngate AimiliVPN is a Python tool that manages VPNGate public VPN nodes on Linux VPS, providing node fetching/testing, connection switching, and a… | 76 | 1976 | active |
| GtxFury/FlyClash-Android FlyClash Android is an Android client for the Clash proxy ecosystem, providing VPN-style network proxying on mobile devices. It lets users … | 87 | 1970 | active |
| i2ii/i BHcloud appears to be a commercial VPN/proxy subscription service providing mirror websites for users in mainland China and overseas, with … | 32 | 1962 | active |
| Happ - Proxy Utility Happ is a cross-platform proxy utility client with desktop builds for Windows, macOS, and Linux, alongside iOS and Android apps. It lets us… | 84 | 1955 | active |
| nymtech/nym Nym is a decentralized privacy platform built in Rust, centered on a mixnet that shuffles Sphinx packets to protect network-level metadata,… | 96 | 1950 | active |
| byJoey/ech-wk A cross-platform proxy client that uses TLS 1.3 Encrypted Client Hello (ECH) to encrypt SNI information, exposing both a SOCKS5 and HTTP CO… | 45 | 1905 | active |
| xchacha20-poly1305/husi Husi is a multiplatform proxy client built with Kotlin and Compose Multiplatform, using a Go-based libcore (sing-box) backend. It supports … | 90 | 1873 | active |
| complexorganizations/wireguard-manager A shell-based tool that automates the installation, configuration, and management of WireGuard VPN servers. It provides a user-friendly way… | 45 | 1860 | active |
| Place1/wg-access-server wg-access-server is a single-binary WireGuard VPN server with a built-in web UI for managing and registering devices. It supports user auth… | 32 | 1850 | active |
| crossxx-labs/free-proxy A repository that publishes free Clash subscription links for SSR, VMess, VLESS, Trojan, and Hysteria2 proxy servers, refreshed every few h… | 73 | 1831 | active |
| OpenVPN/openvpn-gui OpenVPN GUI is a graphical frontend for OpenVPN on Windows 10 and 11, providing a notification-area icon to start and stop VPN tunnels, vie… | 75 | 1806 | active |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 76 | 1745 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 99 | 1738 | active |
| SierraSoftworks/tailscale-unifi A set of shell scripts that install and run Tailscale as a persistent systemd service on UniFi OS devices such as UniFi Cloud Gateways. It … | 96 | 1734 | active |
| Whitelist Bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 81 | 1731 | active |
| alibaba/kt-connect KtConnect is a CLI toolkit that helps developers work with Kubernetes dev environments more efficiently. It lets you connect to remote clus… | 23 | 1677 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6122 | maintenance |
| WireGuard/wireguard-android The official Android GUI application for WireGuard, a fast and modern VPN. It opportunistically uses the in-kernel WireGuard implementation… | 69 | 1628 | stable |
| eooce/Gla-deploy A JavaScript-based tool for deploying proxy server configurations to free cloud/PaaS platforms, enabling personal censorship circumvention.… | 39 | 1625 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 50 | 1599 | active |
| QuiteAFancyEmerald/InvisiProxy InvisiProxy LTS (formerly Holy Unblocker) is a self-hostable Node.js web proxy service that lets users access blocked websites and Tor/Onio… | 97 | 1584 | active |
| lmc999/auto-add-routes A set of Windows batch scripts and route tables that add China IP/domain split routing to full-tunnel VPN clients like WireGuard and OpenVP… | 76 | 1583 | active |
| aleskxyz/reality-ezpz A single-command bash installer that deploys sing-box or xray proxy servers (vless, TUIC, hysteria2, shadowtls) with reality or TLS encrypt… | 54 | 1573 | active |
| SagerNet/SagerNet SagerNet is a universal proxy toolchain application for Android, written in Kotlin, supporting multiple proxy protocols for circumventing i… | 10 | 5733 | maintenance |
| sharmajv/vpn A completely free Android VPN client (小三VPN / 3VPN) that requires no registration, has no speed or traffic limits, and shows no ads. It sup… | 32 | 5709 | maintenance |
| adyanth/openwrt-tailscale-enabler A shell-based package that installs Tailscale on low-powered OpenWRT routers by downloading static binaries to /tmp and providing an init.d… | 71 | 1544 | active |
| shirokhorshid/shirokhorshid-android Shir o Khorshid is an independently maintained, community fork of the open-source Psiphon Android VPN/circumvention client, adding extra co… | 66 | 1540 | active |
| snltty/linker Linker is a self-hosted networking tool written in C# that combines P2P hole punching (UDP/TCP, IPv4/IPv6) with server relay to provide vir… | 89 | 1508 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 77 | 1468 | active |
| xtclovver/RKNHardering An Android application that detects VPN and proxy configurations on a device, implementing the methodology used by Roskomnadzor (RKN) to id… | 72 | 1466 | active |
| pritunl/pritunl-client Pritunl Client is a free, open-source cross-platform OpenVPN and WireGuard client with both graphical and command-line interfaces. It suppo… | 96 | 1457 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 77 | 1448 | active |
| SlipNet SlipNet is an open-source anti-censorship VPN client for Android (Kotlin/Jetpack Compose) with a cross-platform Go CLI companion, supportin… | 71 | 1443 | active |
| jawj/IKEv2-setup A Bash script that configures a fresh Ubuntu Server LTS install as an IKEv2 VPN server using strongSwan, with Let's Encrypt certificates an… | 53 | 1435 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 64 | 1429 | active |
| dockovpn/dockovpn DockOvpn is a stateless, out-of-the-box OpenVPN server packaged as a Docker image that starts in under two seconds and requires no persiste… | 23 | 1429 | active |
| tun2proxy/tun2proxy tun2proxy is a Rust tool that creates a TUN network interface and routes traffic through SOCKS4/5 or HTTP proxies, effectively turning a pr… | 98 | 1423 | active |
| v2ray-worker A TypeScript solution for deploying V2Ray proxy configurations (VLESS and Trojan) on Cloudflare Workers. It generates proxy configs and man… | 19 | 1423 | active |
| WireGuard/wireguard-apple The official WireGuard VPN client application for iOS and macOS, written in Swift, including the WireGuardKit Swift package for integrating… | 32 | 1411 | active |
| Mekotofeuka/MTPROTO_FIX_By_MEKO A shell-based one-click installer and manager for MTProto proxies and VPN tools such as Telemt, MTG, MTProtoZig, and MTProxyL. It fixes com… | 76 | 1400 | active |
| micahmo/WgServerforWindows Wg Server for Windows (WS4W) is a desktop application that automates setting up and managing a WireGuard VPN server endpoint on Windows. It… | 71 | 1390 | active |
| jamesmcm/vopono Vopono is a Rust CLI tool that runs individual applications through VPN tunnels using temporary network namespaces on Linux. It supports mu… | 97 | 1388 | active |
| Psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1382 | active |
| mullvad/gotatun GotaTun is a userspace WireGuard implementation in Rust, forked from Cloudflare's BoringTun, providing both a library and a standalone tunn… | 90 | 1371 | active |
| Passepartout Passepartout is an OpenVPN and WireGuard VPN client app for iPhone, iPad, Mac, and Apple TV, built on the Partout tunnel framework. It offe… | 93 | 1368 | active |
| chili-chips-ba/wireguard-fpga An open-source, wire-speed hardware implementation of the WireGuard VPN protocol on a low-cost Artix-7 FPGA, written in Verilog with an ope… | 66 | 1366 | active |
| bivlked/amneziawg-installer A one-command Bash installer that turns a fresh Ubuntu or Debian VPS (x86_64, ARM64, Raspberry Pi) into a self-hosted AmneziaWG 2.0/3.x VPN… | 82 | 1356 | active |
| mysteriumnetwork/node Mysterium Node is the official Go implementation of the Mysterium decentralized VPN (dVPN) network protocol, letting users run nodes that p… | 96 | 1354 | active |
| openconnect/openconnect-gui A graphical VPN client built on the OpenConnect library, supporting Cisco AnyConnect-compatible VPNs. It is a Qt5-based desktop application… | 10 | 1353 | active |
| WhiteDNS WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 80 | 1337 | active |
| SagerNet/sing-box-for-android SFA is the official Android client for sing-box, a universal proxy platform. It provides a graphical interface for managing and running sin… | 75 | 1333 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 23 | 1319 | active |
| lexrus/VPNOn VPNOn is an open-source iOS app that adds a Today Widget to Notification Center, letting users toggle IPSec IKEv1/IKEv2 VPN connections in … | 10 | 4507 | maintenance |
| tzmax/V2RayXS V2RayXS is a native macOS GUI client for Xray-core, a maintained fork of the archived V2RayX project. It supports VLESS and XTLS protocols,… | 82 | 1258 | active |
| sogonov/anubis An Android app manager that freezes and unfreezes groups of apps based on VPN connection state using system-level `pm disable-user` via Shi… | 62 | 1224 | active |
| lattegou/airtiz AirTiz is a lightweight, native macOS VPN/proxy client built in Swift on top of the open-source mihomo (Clash Meta) kernel. It offers tray-… | 61 | 1201 | active |
| ldoubil/astral Astral is a cross-platform GUI application built with Flutter on top of the EasyTier Rust backend, providing decentralized P2P virtual netw… | 83 | 1197 | active |
| Psiphon Tunnel Core Psiphon Tunnel Core is the core tunneling client and server implementation of the Psiphon Internet censorship circumvention system, written… | 92 | 1159 | active |
| mmalmi/nostr-vpn nostr-vpn is a Tailscale-style private mesh VPN written in Rust, built around a FIPS-backed data plane with a `nvpn` CLI/daemon, a shared n… | 76 | 1158 | active |
| P3TERX/warp.sh A Bash script that automates installation and configuration of Cloudflare WARP on Linux servers, supporting both the official WARP client (… | 10 | 3935 | maintenance |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 46 | 3929 | maintenance |
| dperson/openvpn-client A Docker container that runs an OpenVPN client so other containers can route their traffic through a VPN connection. It is configured via e… | 32 | 1130 | active |
| burghardt/easy-wg-quick A shell script that generates WireGuard VPN configurations for a hub (VPN concentrator) and its peers, including QR codes for mobile client… | 87 | 1118 | active |
| sandialabs/wiretap Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges o… | 75 | 1116 | active |
| Windscribe VPN The open-source (GPL-2.0) desktop VPN client for the Windscribe service, built in C++ for Windows, macOS, and Linux. It supports multiple V… | 92 | 1108 | active |
| DeedleFake/trayscale Trayscale is an unofficial GTK4/libadwaita GUI for the Tailscale daemon, built primarily for Linux desktops where no official graphical cli… | 99 | 1059 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 52 | 1042 | active |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 68 | 1041 | active |
| UnnoTed/wireguird A GTK-based graphical GUI client for WireGuard on Linux, mimicking the official Windows WireGuard client. It lists tunnels from /etc/wiregu… | 55 | 1036 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 69 | 1013 | active |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3280 | maintenance |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2852 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2587 | maintenance |
| ndroi/easy163 An Android app that runs a local VPN service to intercept and redirect NetEase Cloud Music HTTP requests, sourcing VIP and delisted songs f… | 23 | 2495 | maintenance |
| flyzy2005/ss-fly A set of one-click shell scripts to install and configure Shadowsocks (SS/SSR) proxy servers on Ubuntu, CentOS, and Debian, with optional B… | 32 | 2341 | maintenance |
| WireGuard WireGuard is a fast, modern, and secure VPN tunnel that uses state-of-the-art cryptography (Noise framework, Curve25519, ChaCha20) to creat… | 65 | 722 | stable |
| quericy/one-key-ikev2-vpn A one-click bash script that installs and configures an IKEv2/L2TP VPN server using strongSwan on Ubuntu, CentOS, or Debian. It handles cer… | 32 | 2104 | maintenance |
| freelan-developers/freelan FreeLAN is an open-source, peer-to-peer VPN application written in C++ that creates secure virtual networks over the internet. It supports … | 23 | 1378 | maintenance |
| Rafficer/linux-cli-community A community-maintained Linux command-line client for ProtonVPN, rewritten in Python from the original bash version. It manages OpenVPN-base… | 10 | 1362 | maintenance |
| v2net/ios A distribution site and repository for Shadowrocket, an iOS proxy client supporting SS/SSR/V2Ray protocols, including online installation, … | 23 | 1332 | maintenance |
| mehrdadrad/radvpn RadVPN is a decentralized, full-mesh VPN written in Go that connects nodes directly without a central server, with a built-in router for pa… | 32 | 1250 | maintenance |
| cloudwu/mptun A small C-based peer-to-peer VPN tunnel over UDP that can aggregate multiple network paths between a client and server. It lets users combi… | 32 | 1242 | maintenance |