1.caddyserver / caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
- go
- web-server
- caddyfile
- http
- http-server
- reverse-proxy
- +9 more
Ranked by Attention Score: stars gained over the last 30 complete days
1–100 of 157 by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
The easiest, most secure way to use WireGuard and 2FA.
An open source, self-hosted implementation of the Tailscale control server
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
The Cloud Native Application Proxy
Cloudflare Tunnel client
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Easily and securely send things from one computer to another :crocodile: :package:
Caddy Reverse Proxy Balancer and WAF WebUI
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
Beta. Self-hosted panel for running a VPN for others: family, friends, a community or a small team. Hysteria2, VLESS REALITY and AmneziaWG, one link per person. Add servers from the browser over SSH; client-eye health checks and Telegram alerts; MCP for AI agents. Two static Go binaries, SQLite, no Docker.
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
In-depth attack surface mapping and asset discovery
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
A self hosted virtual browser that runs in docker and uses WebRTC.
🏔 Love Freedom - ❌ Block Mass Surveillance
Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
A web client for its own Xray-based core with global transparent proxy on Linux, Windows and macOS.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
A platform for building proxies to bypass network restrictions.
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
The easiest, and most secure way to access and protect all of your infrastructure.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
A scalable overlay networking tool with a focus on performance, simplicity and security
Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.
Fast and lightweight DNS proxy as ad-blocker for local network with many features
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
Pomerium is an identity and context-aware access proxy.
TranslatedA lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. It supports forwarding of almost all traffic, including tcp, udp, socks5, and http, and can be used for accessing intranet websites, debugging local payment interfaces, ssh access, remote desktop, intranet dns resolution, intranet socks5 proxy, and more.
HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
CoreDNS is a DNS server that chains plugins
tun2socks - powered by gVisor TCP/IP stack
GO Simple Tunnel - a simple tunnel written in golang
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Cameradar hacks its way into RTSP videosurveillance cameras
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
A production-ready QUIC implementation in pure Go
A platform for building proxies to bypass network restrictions.
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Lightweight network IP scanner written in Go. With notifications, history, export to Grafana
IPFS implementation in Go: a daemon that stores and serves content-addressed data, with a CLI, HTTP Gateway, and RPC API
High-performance reverse proxy and container orchestrator for self-hosters
A minimalist, easy-to-host service for sharing images and other files
Translated🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding. It also supports communication encryption, smart HTTP and SOCKS5 proxies, blacklists and whitelists, speed limiting, traffic limiting, connection count limiting, cross-platform use, KCP, and an authentication API.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
Instant Terminal Sharing
P2P Docker registry capable of distributing TBs of data in seconds
Plik is a temporary file upload system (Wetransfer like) in Go.
flannel is a network fabric for containers, designed for Kubernetes
gRPC to JSON proxy generator following the gRPC HTTP spec
Easy and fast file sharing from the command-line.
A cloud native Kubernetes Global Balancer
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
The missing reverse proxy for ssh scp
TranslatedBaidu Netdisk (Baidu Pan) client with no speed limit, golang + qt5, cross-platform graphical interface
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
Full-featured BitTorrent client package and utilities
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
A cross-platform programmable network tool
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
Golang package that generates clean, responsive HTML e-mails for sending transactional mail
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
A Cloud Native traffic orchestration system. (CNCF Project)
Provides packet processing capabilities for Go
A dynamic DNS client tool that supports AliDNS, Cloudflare, Google Domains, DNSPod, HE.net & DuckDNS & DreamHost, etc, written in Go.
An aggregating proxy to enable HA prometheus
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
CLI application to create ssh tunnels focused on resiliency and user experience.
A crypto-secure Reliable-UDP library for Golang with FEC support.
Open Source HTTP Reverse Proxy Cache and TSDB Query Accelerator