Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 182 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
The easiest, most secure way to use WireGuard and 2FA.
An open source, self-hosted implementation of the Tailscale control server
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Easily and securely send things from one computer to another :crocodile: :package:
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
Cloudflare Tunnel client
The Cloud Native Application Proxy
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
A scalable overlay networking tool with a focus on performance, simplicity and security
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
A self hosted virtual browser that runs in docker and uses WebRTC.
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
High-performance reverse proxy and container orchestrator for self-hosters
🏔 Love Freedom - ❌ Block Mass Surveillance
In-depth attack surface mapping and asset discovery
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
A platform for building proxies to bypass network restrictions.
A web client for its own Xray-based core with global transparent proxy on Linux, Windows and macOS.
Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
The easiest, and most secure way to access and protect all of your infrastructure.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Fast and lightweight DNS proxy as ad-blocker for local network with many features
TranslatedA lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. It supports forwarding of almost all traffic, including tcp, udp, socks5, and http, and can be used for accessing intranet websites, debugging local payment interfaces, ssh access, remote desktop, intranet dns resolution, intranet socks5 proxy, and more.
CoreDNS is a DNS server that chains plugins
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
On-prem file sharing made simple, fast and safe.
GO Simple Tunnel - a simple tunnel written in golang
Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.
Cameradar hacks its way into RTSP videosurveillance cameras
Pomerium is an identity and context-aware access proxy.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
tun2socks - powered by gVisor TCP/IP stack
A platform for building proxies to bypass network restrictions.
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
A production-ready QUIC implementation in pure Go
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
A cloud native Kubernetes Global Balancer
A minimalist, easy-to-host service for sharing images and other files
IPFS implementation in Go: a daemon that stores and serves content-addressed data, with a CLI, HTTP Gateway, and RPC API
Translated🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding. It also supports communication encryption, smart HTTP and SOCKS5 proxies, blacklists and whitelists, speed limiting, traffic limiting, connection count limiting, cross-platform use, KCP, and an authentication API.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
gRPC to JSON proxy generator following the gRPC HTTP spec
A cross-platform programmable network tool
Instant Terminal Sharing
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
flannel is a network fabric for containers, designed for Kubernetes
Full-featured BitTorrent client package and utilities
The missing reverse proxy for ssh scp
Easy and fast file sharing from the command-line.
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
P2P Docker registry capable of distributing TBs of data in seconds
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
Plik is a temporary file upload system (Wetransfer like) in Go.
TranslatedBaidu Netdisk (Baidu Pan) client with no speed limit, golang + qt5, cross-platform graphical interface
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
Golang package that generates clean, responsive HTML e-mails for sending transactional mail
A crypto-secure Reliable-UDP library for Golang with FEC support.
Fast, native API client for REST, gRPC, WebSocket and GraphQL. A local-first Postman alternative written in Go: no Electron, no account, no cloud.
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy.
Provides packet processing capabilities for Go
Open-Source ClickHouse http proxy and load balancer
A dynamic DNS client tool that supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS & DreamHost, etc, written in Go.
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
:computer: make your ssh client smarter
Open Source HTTP Reverse Proxy Cache and TSDB Query Accelerator
KubeVPN offers a Cloud Native Dev Environment that connects to kubernetes cluster network.
A Cloud Native traffic orchestration system. (CNCF Project)