Topics / #nat-traversal
Nat-traversal projects on GitHub
Establishing peer-to-peer connections through firewalls and NATs.
As of , the most-starred Nat-traversal projects on GitHub are headscale (44.7K stars), netbird (30K stars) and pangolin (23.1K stars). GitHub.Locker tracks 10 Nat-traversal repositories with 160.2K stars combined. The fastest-growing on October 16 was headscale, with +36 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+36headscale
juanfont/headscale · ★ 44.7KHeadscale is an open source, self-hosted implementation of the Tailscale control server, letting you run your own private Tailscale-compatible network instead of paying for Tailscale's hosted service.
+28netbird
netbirdio/netbird · ★ 30KNetBird is an open-source Zero Trust networking platform: it builds a configuration-free peer-to-peer WireGuard overlay network with centralized access control, so you can create secure private networks without open ports, complex firewall rules or VPN gateways.
+26bbhost
droogie/bbhost · ★ 611bbhost is a translation layer that runs Bloodborne's own unmodified 1.09 PS4 executable on Windows and Linux, reimplementing the PS4's system libraries and translating its GPU work (GCN shaders and draw calls) to Vulkan, aiming for a definitive PC version with any resolution, 60 fps, keyboard/mouse, mods and online play.
+20EasyTier
EasyTier/EasyTier · ★ 14.1KEasyTier is a decentralized mesh VPN built with Rust and Tokio. It connects your devices into one secure virtual network over the internet without requiring any central server.
The all-time top
10 projects · by stars
- 44.7K
#1 · juanfont/headscaleheadscale
Headscale is an open source, self-hosted implementation of the Tailscale control server, letting you run your own private Tailscale-compatible network instead of paying for Tailscale's hosted service.
- 30K
#2 · netbirdio/netbirdnetbird
NetBird is an open-source Zero Trust networking platform: it builds a configuration-free peer-to-peer WireGuard overlay network with centralized access control, so you can create secure private networks without open ports, complex firewall rules or VPN gateways.
- 23.1K
#3 · fosrl/pangolinpangolin
Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.
- 4

nebula
18.4Kslackhq/nebula · GoNebula is an overlay networking tool that lets you connect computers anywhere in the world into a secure mesh network, scaling from a handful of machines to tens of thousands.
- 5

coturn
14.5Kcoturn/coturn · Ccoturn is a free, open-source implementation of a TURN and STUN server, used as a VoIP media relay and NAT traversal gateway, commonly deployed alongside WebRTC applications.
- 6

rathole
14.3Krathole-org/rathole · RustRathole is a secure, stable, high-performance reverse proxy written in Rust that exposes a service running on a device behind NAT to the Internet through a server with a public IP, similar to frp and ngrok.
- 7

EasyTier
14.1KEasyTier/EasyTier · RustEasyTier is a decentralized mesh VPN built with Rust and Tokio. It connects your devices into one secure virtual network over the internet without requiring any central server.
- 8

bbhost
611droogie/bbhost · C++bbhost is a translation layer that runs Bloodborne's own unmodified 1.09 PS4 executable on Windows and Linux, reimplementing the PS4's system libraries and translating its GPU work (GCN shaders and draw calls) to Vulkan, aiming for a definitive PC version with any resolution, 60 fps, keyboard/mouse, mods and online play.
- 9

MeshLAN
230zhaoxuya520/MeshLAN · GoMeshLAN is a self-hosted virtual LAN built on SlackHQ Nebula that connects Windows devices across different networks and NATs, preferring direct P2P links and falling back to relays, with service sharing, name-based access via MeshDNS, and optional AI automation.
- 10

bitbang
184richlegrand/bitbangBitBang turns any machine into a URL: run it on the device, open the URL in any browser, and you are connected to that machine peer-to-peer with end-to-end encryption — no account, no port forwarding, nothing to install on the connecting side.
Related topics
Often tagged together