An open source, self-hosted implementation of the Tailscale control server
Repository Index
58,632 visible repositories in the index
1–23 of 23 · Most stars
The easiest, most secure way to use WireGuard and 2FA.
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
- openvpn
- dns-over-tls
- mullvad
- windscribe
flannel is a network fabric for containers, designed for Kubernetes
- kubernetes
- network
- overlay-network
- docker
like netcat, but over Tailscale's data plane, without Tailscale's control plane
P2P Docker registry capable of distributing TBs of data in seconds
- docker
- docker-registry
- container
- docker-image
Container Network Interface - networking for Linux containers
Push docker images directly to remote servers without an external registry
- containerd
- docker
- golang
- kubernetes
High-performance reverse proxy and container orchestrator for self-hosters
- docker
- go
- golang
- letsencrypt
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
NFF-Go -Network Function Framework for GO (former YANFF)
- dpdk
- golang
- networking
- vnf
Vocat is an open-source web control panel and engineering toolkit for Quectel EC20/EC25-class cellular modems. It combines modem discovery, live radio status, AT and USSD terminals, SMS, WiFi Calling, eSIM management, network selection, proxy routing, notifications, audit logs, and release automation in one self-contained service.
All-in-one terminal covering 30+ protocols — SSH, RDP, SFTP, databases, Kubernetes and more. With a built-in AI Agent that runs multi-turn shell commands autonomously.
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.
- acme
- ddns
- frp
- golang
:whale: standalone SSH server that connects you to your Docker containers
Copy files and artifacts via SSH using a binary, docker or Drone CI.
A routing client based on sing-box rule lists. Switch between multiple Tailscale networks and access the internet through your chosen Tailscale exit node.
Reverse proxy with automatically obtains TLS certificates from Let's Encrypt
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
SSH server and gateway for standard SSH clients: OIDC Device Authorization, Docker/Kubernetes sessions, verifiable audit and recording.
- bastion
- oidc
- openid-connect
- ssh
CLI client for Portainer
ECS Task Kite - A simple ambassador container for inter-task communication on ECS - http://aws.amazon.com/ecs/
Go package for IP2Location.io. Fetch geolocation and proxy data for an IP address, or query WHOIS details for a domain. Integrate an IP geolocation API into Golang backends, microservices and command-line tools. Enrich IPv4 and IPv6 traffic with location intelligence and network details for analytics and security use cases.
- domain-lookup
- golang
- ip-geolocation
- ip2location