Ranked by Attention Score: stars gained over the last 90 complete days
1–100 of 201 by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
The easiest, most secure way to use WireGuard and 2FA.
An open source, self-hosted implementation of the Tailscale control server
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
TranslatedDownload common network resources from WeChat Channels (视频号), mini programs, Douyin, Kuaishou, Xiaohongshu, live streams, m3u8, Kugou, QQ Music, and more!
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Easily and securely send things from one computer to another :crocodile: :package:
High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
Cloudflare Tunnel client
The Cloud Native Application Proxy
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
A scalable overlay networking tool with a focus on performance, simplicity and security
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.
A self hosted virtual browser that runs in docker and uses WebRTC.
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
High-performance reverse proxy and container orchestrator for self-hosters
🏔 Love Freedom - ❌ Block Mass Surveillance
In-depth attack surface mapping and asset discovery
一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A platform for building proxies to bypass network restrictions.
A web client for its own Xray-based core with global transparent proxy on Linux, Windows and macOS.
Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
The easiest, and most secure way to access and protect all of your infrastructure.
dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
Fast and lightweight DNS proxy as ad-blocker for local network with many features
TranslatedA lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. It supports forwarding of almost all traffic, including tcp, udp, socks5, and http, and can be used for accessing intranet websites, debugging local payment interfaces, ssh access, remote desktop, intranet dns resolution, intranet socks5 proxy, and more.
CoreDNS is a DNS server that chains plugins
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway
:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
GO Simple Tunnel - a simple tunnel written in golang
Pomerium is an identity and context-aware access proxy.
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
tun2socks - powered by gVisor TCP/IP stack
A platform for building proxies to bypass network restrictions.
Make your infrastructure invisible to attackers. OpenNHP implements the Network-infrastructure Hiding Protocol (NHP): authenticate before connection, cryptographically. IETF draft.
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Backup Docker volumes locally or to any S3, WebDAV, Azure Blob Storage, Dropbox, Google Drive or SSH compatible storage
HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.
A production-ready QUIC implementation in pure Go
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
A cloud native Kubernetes Global Balancer
Fullstack Workspace for Humans & Machines
IPFS implementation in Go: a daemon that stores and serves content-addressed data, with a CLI, HTTP Gateway, and RPC API
Translated🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding. It also supports communication encryption, smart HTTP and SOCKS5 proxies, blacklists and whitelists, speed limiting, traffic limiting, connection count limiting, cross-platform use, KCP, and an authentication API.
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
gRPC to JSON proxy generator following the gRPC HTTP spec
✉️ Composable all-in-one mail server.
A cross-platform programmable network tool
Instant Terminal Sharing
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
flannel is a network fabric for containers, designed for Kubernetes
Full-featured BitTorrent client package and utilities
:white_check_mark: A Go library for email verification without sending any emails.
The missing reverse proxy for ssh scp
Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.
The fully compliant, embeddable high-performance Go MQTT v5 server for IoT, smarthome, and pubsub
Easy and fast file sharing from the command-line.
📧 Easy to use, yet comprehensive library for sending mails with Go
Modern, secure, and elegant server control panel, alternative to OpenResty Edge and Nginx Proxy Manager.
:zap: Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
P2P Docker registry capable of distributing TBs of data in seconds
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
Lightning Network Daemon ⚡️
KrakenD Community Edition: High-performance, stateless, declarative, API Gateway written in Go.
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
Bulk domain availability checking via RDAP, DNS, and WHOIS, with prefix/suffix permutations, regex patterns, MCP, and multiple output formats
An archiving tool with an IM-style interface that prioritizes privacy and accessibility, integrated with various archival services including Internet Archive, archive.today, Ghostarchive, IPFS, Telegraph, and file systems.
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
Fortio load testing library, command line tool, advanced echo server and web UI in go (golang). Allows to specify a set query-per-second load and record latency histograms and other useful stats.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
Golang package that generates clean, responsive HTML e-mails for sending transactional mail
Lightweight service virtualization/ API simulation / API mocking tool for developers and testers
Bulk port forwarding Kubernetes services for local development.
A high-performance non-blocking I/O networking framework focusing on RPC scenarios.
A crypto-secure Reliable-UDP library for Golang with FEC support.
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
A lightweight, high-performance go mqtt server(v3.0|v3.1.1|v5.0) supporting distributed cluster
simple, fast, reliable websocket server & client, supports running over tcp/kcp/unix domain socket. keywords: ws, proxy, chat, go, golang...