function: vpn
255 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| vpnhood/VpnHood VpnHood is an open-source, cross-platform VPN client and server built entirely from scratch in C#/.NET, designed to be undetectable by deep… | 98 | 2327 | active |
| kylemanna/docker-openvpn A Docker image and shell tooling that runs an OpenVPN server in a container, bundled with an EasyRSA PKI certificate authority. It automate… | 33 | 9089 | maintenance |
| bjdgyc/anylink AnyLink is an enterprise-grade SSL VPN server written in Go that supports many concurrent remote-access users. It implements the OpenConnec… | 88 | 2301 | active |
| squat/kilo Kilo is a multi-cloud network overlay for Kubernetes built on WireGuard, providing an encrypted layer 3 network that connects nodes across … | 78 | 2284 | active |
| sglfree/freesky A distribution and documentation hub for free anti-censorship (circumvention) software such as Freegate, Ultrasurf, Psiphon 3, and nthLink,… | 67 | 2270 | active |
| gsliepen/tinc Tinc is a peer-to-peer VPN daemon that creates encrypted private networks over the Internet with automatic full-mesh routing and NAT traver… | 80 | 2239 | stable |
| yuezk/GlobalProtect-openconnect A GlobalProtect VPN client for Linux built on OpenConnect, offering both a CLI and a Tauri-based GUI. It supports SSO authentication includ… | 98 | 2221 | active |
| kaaass/ZerotierFix An unofficial ZeroTier Android client patched from the official app, adding features like self-hosted Moon support, custom planet configura… | 23 | 2212 | active |
| feiniaoyun/feiniaoyun A repository serving as a mirror-link directory for Feiniaoyun, a commercial VPN/proxy subscription service, listing rotating access URLs r… | 68 | 2199 | active |
| pojntfx/weron weron is a Go-based tool and library that creates lean, fast, and secure overlay networks using WebRTC. It connects nodes behind NATs and f… | 30 | 2109 | active |
| pivpn/pivpn PiVPN is a set of shell scripts that turn a Raspberry Pi or any Debian/Ubuntu server into a WireGuard or OpenVPN VPN server with a one-comm… | 81 | 8037 | maintenance |
| oxen-io/lokinet Lokinet is the reference implementation of LLARP, a low-latency layer 3 onion routing protocol that forms a decentralized, IP-based overlay… | 67 | 2085 | active |
| mudler/edgevpn EdgeVPN is a statically compiled, decentralized p2p VPN built on libp2p that creates private networks joined via shared tokens, with no cen… | 99 | 2067 | active |
| Shadowrocket for Android Shadowrocket for Android is an Android VPN and proxy client that supports protocols like Shadowsocks, VMess, VLESS, Trojan, and Hysteria2, … | 78 | 2048 | active |
| Genymobile/gnirehtet Gnirehtet provides reverse tethering for Android devices over adb, letting a plugged-in phone use the computer's internet connection withou… | 23 | 7856 | maintenance |
| heiher/hev-socks5-tunnel A lightweight, high-performance tun2socks implementation that forwards TCP and UDP traffic from a TUN device through a SOCKS5 proxy. It is … | 98 | 1991 | active |
| fscarmen/ArgoX A one-click Shell script that deploys Xray with multiple proxy protocols (Reality, Hysteria2, VLESS, VMess, Trojan, Shadowsocks, XHTTP) beh… | 75 | 1981 | active |
| WireGuard WireGuard is a fast, modern, and secure VPN tunnel that uses state-of-the-art cryptography (Noise framework, Curve25519, ChaCha20) to creat… | 70 | 1978 | stable |
| dswd/vpncloud VpnCloud is a high-performance peer-to-peer mesh VPN written in Rust that runs over UDP with strong end-to-end encryption (Curve25519 and A… | 23 | 1978 | stable |
| i2ii/i BHcloud appears to be a commercial VPN/proxy subscription service providing mirror websites for users in mainland China and overseas, with … | 32 | 1967 | active |
| GtxFury/FlyClash-Android FlyClash Android is an Android client for the Clash proxy ecosystem, providing VPN-style network proxying on mobile devices. It lets users … | 83 | 1913 | active |
| nymtech/nym Nym is a decentralized privacy platform built in Rust, centered on a mixnet that shuffles Sphinx packets to protect network-level metadata,… | 99 | 1912 | active |
| byJoey/ech-wk A cross-platform proxy client that uses TLS 1.3 Encrypted Client Hello (ECH) to encrypt SNI information, exposing both a SOCKS5 and HTTP CO… | 51 | 1905 | active |
| complexorganizations/wireguard-manager A shell-based tool that automates the installation, configuration, and management of WireGuard VPN servers. It provides a user-friendly way… | 48 | 1856 | active |
| baoweise-bot/aimili-vpngate AimiliVPN is a Python tool that manages VPNGate public VPN nodes on Linux VPS, providing node fetching/testing, connection switching, and a… | 81 | 1853 | active |
| Place1/wg-access-server wg-access-server is a single-binary WireGuard VPN server with a built-in web UI for managing and registering devices. It supports user auth… | 32 | 1850 | active |
| OpenVPN/openvpn-gui OpenVPN GUI is a graphical frontend for OpenVPN on Windows 10 and 11, providing a notification-area icon to start and stop VPN tunnels, vie… | 77 | 1793 | active |
| xchacha20-poly1305/husi Husi is a multiplatform proxy client built with Kotlin and Compose Multiplatform, using a Go-based libcore (sing-box) backend. It supports … | 89 | 1773 | active |
| StressOzz/Zapret-Manager A universal shell-based manager for bypassing internet censorship and DPI-based blocks on OpenWrt routers. It automates installation and co… | 77 | 1737 | active |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 77 | 1728 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 97 | 1704 | active |
| SierraSoftworks/tailscale-unifi A set of shell scripts that install and run Tailscale as a persistent systemd service on UniFi OS devices such as UniFi Cloud Gateways. It … | 98 | 1691 | active |
| crossxx-labs/free-proxy A repository that publishes free Clash subscription links for SSR, VMess, VLESS, Trojan, and Hysteria2 proxy servers, refreshed every few h… | 72 | 1685 | active |
| alibaba/kt-connect KtConnect is a CLI toolkit that helps developers work with Kubernetes dev environments more efficiently. It lets you connect to remote clus… | 23 | 1677 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6131 | maintenance |
| Happ-proxy/happ-desktop Happ is a cross-platform proxy utility client with desktop builds for Windows, macOS, and Linux, alongside iOS and Android apps. It lets us… | 83 | 1656 | active |
| CluvexStudio/Aether Aether is a Rust-based censorship circumvention client for heavily restricted networks that discovers reachable gateways, builds encrypted … | 79 | 1630 | active |
| kulikov0/whitelist-bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 80 | 1610 | active |
| eooce/Gla-deploy A JavaScript-based tool for deploying proxy server configurations to free cloud/PaaS platforms, enabling personal censorship circumvention.… | 42 | 1608 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 53 | 1595 | active |
| WireGuard/wireguard-android The official Android GUI application for WireGuard, a fast and modern VPN. It opportunistically uses the in-kernel WireGuard implementation… | 73 | 1589 | stable |
| lmc999/auto-add-routes A set of Windows batch scripts and route tables that add China IP/domain split routing to full-tunnel VPN clients like WireGuard and OpenVP… | 75 | 1578 | active |
| aleskxyz/reality-ezpz A single-command bash installer that deploys sing-box or xray proxy servers (vless, TUIC, hysteria2, shadowtls) with reality or TLS encrypt… | 57 | 1570 | active |
| SagerNet/SagerNet SagerNet is a universal proxy toolchain application for Android, written in Kotlin, supporting multiple proxy protocols for circumventing i… | 10 | 5740 | maintenance |
| sharmajv/vpn A completely free Android VPN client (小三VPN / 3VPN) that requires no registration, has no speed or traffic limits, and shows no ads. It sup… | 32 | 5659 | maintenance |
| adyanth/openwrt-tailscale-enabler A shell-based package that installs Tailscale on low-powered OpenWRT routers by downloading static binaries to /tmp and providing an init.d… | 76 | 1536 | active |
| shirokhorshid/shirokhorshid-android Shir o Khorshid is an independently maintained, community fork of the open-source Psiphon Android VPN/circumvention client, adding extra co… | 71 | 1516 | active |
| QuiteAFancyEmerald/InvisiProxy InvisiProxy LTS (formerly Holy Unblocker) is a self-hostable Node.js web proxy service that lets users access blocked websites and Tor/Onio… | 94 | 1509 | active |
| snltty/linker Linker is a self-hosted networking tool written in C# that combines P2P hole punching (UDP/TCP, IPv4/IPv6) with server relay to provide vir… | 94 | 1489 | active |
| pritunl/pritunl-client Pritunl Client is a free, open-source cross-platform OpenVPN and WireGuard client with both graphical and command-line interfaces. It suppo… | 99 | 1445 | active |
| jawj/IKEv2-setup A Bash script that configures a fresh Ubuntu Server LTS install as an IKEv2 VPN server using strongSwan, with Let's Encrypt certificates an… | 57 | 1433 | active |
| xtclovver/RKNHardering An Android application that detects VPN and proxy configurations on a device, implementing the methodology used by Roskomnadzor (RKN) to id… | 78 | 1431 | active |
| dockovpn/dockovpn DockOvpn is a stateless, out-of-the-box OpenVPN server packaged as a Docker image that starts in under two seconds and requires no persiste… | 23 | 1428 | active |
| vfarid/v2ray-worker A TypeScript solution for deploying V2Ray proxy configurations (VLESS and Trojan) on Cloudflare Workers. It generates proxy configs and man… | 18 | 1415 | active |
| anonvector/SlipNet SlipNet is an open-source anti-censorship VPN client for Android (Kotlin/Jetpack Compose) with a cross-platform Go CLI companion, supportin… | 77 | 1414 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 80 | 1406 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 69 | 1406 | active |
| tun2proxy/tun2proxy tun2proxy is a Rust tool that creates a TUN network interface and routes traffic through SOCKS4/5 or HTTP proxies, effectively turning a pr… | 97 | 1396 | active |
| WireGuard/wireguard-apple The official WireGuard VPN client application for iOS and macOS, written in Swift, including the WireGuardKit Swift package for integrating… | 32 | 1390 | active |
| micahmo/WgServerforWindows Wg Server for Windows (WS4W) is a desktop application that automates setting up and managing a WireGuard VPN server endpoint on Windows. It… | 77 | 1372 | active |
| Psiphon-Inc/psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1366 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 82 | 1361 | active |
| mullvad/gotatun GotaTun is a userspace WireGuard implementation in Rust, forked from Cloudflare's BoringTun, providing both a library and a standalone tunn… | 93 | 1360 | active |
| chili-chips-ba/wireguard-fpga An open-source, wire-speed hardware implementation of the WireGuard VPN protocol on a low-cost Artix-7 FPGA, written in Verilog with an ope… | 68 | 1355 | active |
| partout-io/passepartout Passepartout is an OpenVPN and WireGuard VPN client app for iPhone, iPad, Mac, and Apple TV, built on the Partout tunnel framework. It offe… | 95 | 1354 | active |
| openconnect/openconnect-gui A graphical VPN client built on the OpenConnect library, supporting Cisco AnyConnect-compatible VPNs. It is a Qt5-based desktop application… | 10 | 1354 | active |
| mysteriumnetwork/node Mysterium Node is the official Go implementation of the Mysterium decentralized VPN (dVPN) network protocol, letting users run nodes that p… | 98 | 1348 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 27 | 1322 | active |
| jamesmcm/vopono Vopono is a Rust CLI tool that runs individual applications through VPN tunnels using temporary network namespaces on Linux. It supports mu… | 95 | 1303 | active |
| SagerNet/sing-box-for-android SFA is the official Android client for sing-box, a universal proxy platform. It provides a graphical interface for managing and running sin… | 77 | 1298 | active |
| WhiteDNS/WhiteDNS-Android WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 73 | 1280 | active |
| lexrus/VPNOn VPNOn is an open-source iOS app that adds a Today Widget to Notification Center, letting users toggle IPSec IKEv1/IKEv2 VPN connections in … | 10 | 4510 | maintenance |
| tzmax/V2RayXS V2RayXS is a native macOS GUI client for Xray-core, a maintained fork of the archived V2RayX project. It supports VLESS and XTLS protocols,… | 65 | 1255 | active |
| sogonov/anubis An Android app manager that freezes and unfreezes groups of apps based on VPN connection state using system-level `pm disable-user` via Shi… | 67 | 1214 | active |
| bivlked/amneziawg-installer A one-command Bash installer that turns a fresh Ubuntu or Debian VPS (x86_64, ARM64, Raspberry Pi) into a self-hosted AmneziaWG 2.0/3.x VPN… | 83 | 1207 | active |
| lattegou/airtiz AirTiz is a lightweight, native macOS VPN/proxy client built in Swift on top of the open-source mihomo (Clash Meta) kernel. It offers tray-… | 66 | 1203 | active |
| mmalmi/nostr-vpn nostr-vpn is a Tailscale-style private mesh VPN written in Rust, built around a FIPS-backed data plane with a `nvpn` CLI/daemon, a shared n… | 77 | 1149 | active |
| ldoubil/astral Astral is a cross-platform GUI application built with Flutter on top of the EasyTier Rust backend, providing decentralized P2P virtual netw… | 86 | 1147 | active |
| Psiphon-Labs/psiphon-tunnel-core Psiphon Tunnel Core is the core tunneling client and server implementation of the Psiphon Internet censorship circumvention system, written… | 96 | 1145 | active |
| P3TERX/warp.sh A Bash script that automates installation and configuration of Cloudflare WARP on Linux servers, supporting both the official WARP client (… | 10 | 3940 | maintenance |
| samyk/pwnat pwnat is a C-based command-line tool that enables clients and servers behind separate NATs to communicate directly without port forwarding,… | 49 | 3918 | maintenance |
| dperson/openvpn-client A Docker container that runs an OpenVPN client so other containers can route their traffic through a VPN connection. It is configured via e… | 32 | 1127 | active |
| burghardt/easy-wg-quick A shell script that generates WireGuard VPN configurations for a hub (VPN concentrator) and its peers, including QR codes for mobile client… | 91 | 1119 | active |
| sandialabs/wiretap Wiretap is a transparent, VPN-like proxy server written in Go that tunnels traffic through WireGuard without requiring special privileges o… | 78 | 1107 | active |
| Mekotofeuka/MTPROTO_FIX_By_MEKO A shell-based one-click installer and manager for MTProto proxies and VPN tools such as Telemt, MTG, MTProtoZig, and MTProxyL. It fixes com… | 80 | 1080 | active |
| Windscribe/Desktop-App The open-source (GPL-2.0) desktop VPN client for the Windscribe service, built in C++ for Windows, macOS, and Linux. It supports multiple V… | 96 | 1077 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 56 | 1042 | active |
| UnnoTed/wireguird A GTK-based graphical GUI client for WireGuard on Linux, mimicking the official Windows WireGuard client. It lists tunnels from /etc/wiregu… | 59 | 1031 | active |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 71 | 1019 | active |
| DeedleFake/trayscale Trayscale is an unofficial GTK4/libadwaita GUI for the Tailscale daemon, built primarily for Linux desktops where no official graphical cli… | 100 | 1016 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 70 | 1006 | active |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3284 | maintenance |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2856 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2584 | maintenance |
| ndroi/easy163 An Android app that runs a local VPN service to intercept and redirect NetEase Cloud Music HTTP requests, sourcing VIP and delisted songs f… | 23 | 2492 | maintenance |
| flyzy2005/ss-fly A set of one-click shell scripts to install and configure Shadowsocks (SS/SSR) proxy servers on Ubuntu, CentOS, and Debian, with optional B… | 32 | 2341 | maintenance |
| quericy/one-key-ikev2-vpn A one-click bash script that installs and configures an IKEv2/L2TP VPN server using strongSwan on Ubuntu, CentOS, or Debian. It handles cer… | 32 | 2108 | maintenance |
| freelan-developers/freelan FreeLAN is an open-source, peer-to-peer VPN application written in C++ that creates secure virtual networks over the internet. It supports … | 23 | 1376 | maintenance |
| Rafficer/linux-cli-community A community-maintained Linux command-line client for ProtonVPN, rewritten in Python from the original bash version. It manages OpenVPN-base… | 10 | 1361 | maintenance |
| v2net/ios A distribution site and repository for Shadowrocket, an iOS proxy client supporting SS/SSR/V2Ray protocols, including online installation, … | 23 | 1330 | maintenance |