Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 169 by Attention Score · Aug 8, 2026 – Nov 5, 2026 (UTC)
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
The easiest, most secure way to use WireGuard and 2FA.
An open source, self-hosted implementation of the Tailscale control server
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
Easily and securely send things from one computer to another :crocodile: :package:
Cloudflare Tunnel client
The Cloud Native Application Proxy
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
A scalable overlay networking tool with a focus on performance, simplicity and security
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
An open-source, AI-integrated, cross-platform terminal for seamless workflows
A self hosted virtual browser that runs in docker and uses WebRTC.
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
🏔 Love Freedom - ❌ Block Mass Surveillance
In-depth attack surface mapping and asset discovery
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A web client for its own Xray-based core with global transparent proxy on Linux, Windows and macOS.
A platform for building proxies to bypass network restrictions.
Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
High-performance reverse proxy and container orchestrator for self-hosters
The easiest, and most secure way to access and protect all of your infrastructure.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Fast and lightweight DNS proxy as ad-blocker for local network with many features
TranslatedA lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. It supports forwarding of almost all traffic, including tcp, udp, socks5, and http, and can be used for accessing intranet websites, debugging local payment interfaces, ssh access, remote desktop, intranet dns resolution, intranet socks5 proxy, and more.
CoreDNS is a DNS server that chains plugins
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
On-prem file sharing made simple, fast and safe.
Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.
GO Simple Tunnel - a simple tunnel written in golang
Cameradar hacks its way into RTSP videosurveillance cameras
Pomerium is an identity and context-aware access proxy.
tun2socks - powered by gVisor TCP/IP stack
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
A platform for building proxies to bypass network restrictions.
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
A production-ready QUIC implementation in pure Go
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
IPFS implementation in Go: a daemon that stores and serves content-addressed data, with a CLI, HTTP Gateway, and RPC API
A minimalist, easy-to-host service for sharing images and other files
Translated🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding. It also supports communication encryption, smart HTTP and SOCKS5 proxies, blacklists and whitelists, speed limiting, traffic limiting, connection count limiting, cross-platform use, KCP, and an authentication API.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
gRPC to JSON proxy generator following the gRPC HTTP spec
A cross-platform programmable network tool
A cloud native Kubernetes Global Balancer
Instant Terminal Sharing
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
flannel is a network fabric for containers, designed for Kubernetes
Full-featured BitTorrent client package and utilities
The missing reverse proxy for ssh scp
Easy and fast file sharing from the command-line.
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
P2P Docker registry capable of distributing TBs of data in seconds
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
TranslatedBaidu Netdisk (Baidu Pan) client with no speed limit, golang + qt5, cross-platform graphical interface
Plik is a temporary file upload system (Wetransfer like) in Go.
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
Golang package that generates clean, responsive HTML e-mails for sending transactional mail
A crypto-secure Reliable-UDP library for Golang with FEC support.
Fast, native API client for REST, gRPC, WebSocket and GraphQL. A local-first Postman alternative written in Go: no Electron, no account, no cloud.
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
Provides packet processing capabilities for Go
A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy.
Open-Source ClickHouse http proxy and load balancer
A dynamic DNS client tool that supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS & DreamHost, etc, written in Go.
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
Open Source HTTP Reverse Proxy Cache and TSDB Query Accelerator
A Cloud Native traffic orchestration system. (CNCF Project)
:computer: make your ssh client smarter