Ranked by Attention Score: stars gained over the last 180 complete days
1–100 of 200 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
The easiest, most secure way to use WireGuard and 2FA.
An open source, self-hosted implementation of the Tailscale control server
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Easily and securely send things from one computer to another :crocodile: :package:
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
视频号、小程序、抖音、快手、小红书、直播流、m3u8、酷狗、QQ音乐等常见网络资源下载!
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
The Cloud Native Application Proxy
Cloudflare Tunnel client
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
A self hosted virtual browser that runs in docker and uses WebRTC.
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
🏔 Love Freedom - ❌ Block Mass Surveillance
An email and SMTP testing tool with API for developers
A scalable overlay networking tool with a focus on performance, simplicity and security
High-performance reverse proxy and container orchestrator for self-hosters
A platform for building proxies to bypass network restrictions.
Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Adversary Emulation Framework
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
In-depth attack surface mapping and asset discovery
A web client for its own Xray-based core with global transparent proxy on Linux, Windows and macOS.
Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...
The easiest, and most secure way to access and protect all of your infrastructure.
The modern API client that lives in your terminal.
Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
Fast and lightweight DNS proxy as ad-blocker for local network with many features
Backup Docker volumes locally or to any S3, WebDAV, Azure Blob Storage, Dropbox, Google Drive or SSH compatible storage
Let's Encrypt/ACME client and library written in Go
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
GO Simple Tunnel - a simple tunnel written in golang
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal.
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway
CoreDNS is a DNS server that chains plugins
tun2socks - powered by gVisor TCP/IP stack
A platform for building proxies to bypass network restrictions.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Pomerium is an identity and context-aware access proxy.
A production-ready QUIC implementation in pure Go
🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
IPFS implementation in Go: a daemon that stores and serves content-addressed data, with a CLI, HTTP Gateway, and RPC API
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
gRPC to JSON proxy generator following the gRPC HTTP spec
HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol)
✉️ Composable all-in-one mail server.
Fullstack Workspace for Humans & Machines
🚀 gnet is a high-performance, lightweight, non-blocking, event-driven networking framework written in pure Go.
A cloud native Kubernetes Global Balancer
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
fq - jq for binary formats. Tool, language and decoders for working with binary formats.
📧 Easy to use, yet comprehensive library for sending mails with Go
A cross-platform programmable network tool
flannel is a network fabric for containers, designed for Kubernetes
Full-featured BitTorrent client package and utilities
Bulk domain availability checking via RDAP, DNS, and WHOIS, with prefix/suffix permutations, regex patterns, MCP, and multiple output formats
Modern, secure, and elegant server control panel, alternative to OpenResty Edge and Nginx Proxy Manager.
Easy and fast file sharing from the command-line.
Instant Terminal Sharing
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
P2P Docker registry capable of distributing TBs of data in seconds
The fully compliant, embeddable high-performance Go MQTT v5 server for IoT, smarthome, and pubsub
Lightning Network Daemon ⚡️
The missing reverse proxy for ssh scp
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
A crypto-secure Reliable-UDP library for Golang with FEC support.
KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.
Bulk port forwarding Kubernetes services for local development.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
:white_check_mark: A Go library for email verification without sending any emails.
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
An archiving tool with an IM-style interface that prioritizes privacy and accessibility, integrated with various archival services including Internet Archive, archive.today, Ghostarchive, IPFS, Telegraph, and file systems.
A high-performance non-blocking I/O networking framework focusing on RPC scenarios.
Ingress NGINX Controller for Kubernetes
Golang package that generates clean, responsive HTML e-mails for sending transactional mail