Topics / #tunnel

Tunnel projects on GitHub

Network tunneling, reverse proxies and NAT traversal

As of , the most-starred Tunnel projects on GitHub are v2rayN (118.5K stars), frp (110K stars) and 3x-ui (48.2K stars). GitHub.Locker tracks 64 Tunnel repositories with 1M stars combined. The fastest-growing on October 17 was v2rayN, with +98 stars in a day.

64Projects
1MStars in total
+852Stars in a day
Browse in the catalog →github.com/topics/tunnel ↗

Hot right now

Most stars gained in a day · Oct 17

+98

v2rayN

2dust/v2rayN · ★ 118.5K

v2rayN is a free, open-source GUI client for Windows, Linux and macOS that manages proxy connections using protocols like V2Ray, Xray, sing-box, Trojan, Shadowsocks and others.

+97

edgetunnel

cmliu/edgetunnel · ★ 47.7K

edgetunnel is a proxy service that runs on Cloudflare Workers or Pages: it serves VLESS, Trojan and Shadowsocks nodes from the edge, with a built-in admin panel and automatic subscription generation.

+61

ClashMetaForAndroid

MetaCubeX/ClashMetaForAndroid · ★ 47.9K

Clash Meta for Android (CMFA) is the graphical Android app for Clash.Meta, letting you run a rule-based proxy/VPN tunnel on your phone with a UI instead of editing config files by hand.

+56

3x-ui

MHSanaei/3x-ui · ★ 48.2K

3X-UI is an open-source web control panel for managing Xray-core servers, letting you deploy, configure, and monitor many proxy and VPN protocols from one VPS or across multiple nodes.

The all-time top

64 projects · by stars

  1. #1 · 2dust/v2rayN

    v2rayN

    v2rayN is a free, open-source GUI client for Windows, Linux and macOS that manages proxy connections using protocols like V2Ray, Xray, sing-box, Trojan, Shadowsocks and others.

    118.5K
  2. #2 · fatedier/frp

    frp

    frp is a fast reverse proxy that lets you expose a local server sitting behind a NAT or firewall to the internet, forwarding TCP, UDP, HTTP and HTTPS traffic, with an optional P2P mode for direct client-to-client transfers.

    110K
  3. #3 · MHSanaei/3x-ui

    3x-ui

    3X-UI is an open-source web control panel for managing Xray-core servers, letting you deploy, configure, and monitor many proxy and VPN protocols from one VPS or across multiple nodes.

    48.2K
  1. 4

    ClashMetaForAndroid

    47.9KMetaCubeX/ClashMetaForAndroid · Kotlin

    Clash Meta for Android (CMFA) is the graphical Android app for Clash.Meta, letting you run a rule-based proxy/VPN tunnel on your phone with a UI instead of editing config files by hand.

  2. 5

    edgetunnel

    47.7Kcmliu/edgetunnel · JavaScript

    edgetunnel is a proxy service that runs on Cloudflare Workers or Pages: it serves VLESS, Trojan and Shadowsocks nodes from the edge, with a built-in admin panel and automatic subscription generation.

  3. 6

    Xray-core

    42.2KXTLS/Xray-core · Go

    Xray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.

  4. 7

    tailscale

    37.7Ktailscale/tailscale · Go

    Tailscale is a mesh VPN built on WireGuard that creates secure private networks between your devices with minimal configuration, adding 2FA/SSO login on top.

  5. 8

    shadowsocks-android

    36.8Kshadowsocks/shadowsocks-android · Kotlin

    This is the official Shadowsocks client app for Android, Chrome OS, and Android TV, letting you route your device's traffic through a Shadowsocks proxy server.

  6. 9

    v2ray-core

    34.7Kv2fly/v2ray-core · Go

    V2Ray (Project V) is a set of network tools for building your own proxy network, encrypting your connections to protect privacy and bypass network restrictions like censorship.

  7. 10

    nps

    34.2Kehang-io/nps · Go

    NPS is a lightweight, high-performance intranet penetration (reverse proxy/tunnel) server that exposes internal network services to the outside world. It forwards tcp, udp, http(s), socks5 and other protocols, and comes with a full-featured web admin panel.

  8. 11

    ngrok

    24.4Kinconshreveable/ngrok · Go

    ngrok is a globally distributed reverse proxy that secures, protects and accelerates applications and network services wherever they run, combining a reverse proxy, firewall, API gateway and global load balancer into one tool.

  9. 12

    streisand

    23.4KStreisandEffect/streisand · Shell

    Streisand is an automation tool that takes a server on the cloud provider of your choice and nearly automatically turns it into a private, censorship-resistant VPN node.

  10. 13

    localtunnel

    22.5Klocaltunnel/localtunnel · JavaScript

    localtunnel exposes a localhost server to the public internet with a temporary public URL, without needing to configure DNS or deploy anywhere.

  11. 14

    awesome-tunneling

    22Kanderspitman/awesome-tunneling · Python

    A curated list of tunneling tools and services (alternatives to ngrok, Cloudflare Tunnel, Tailscale, and ZeroTier) that let you expose a local server to the internet, with a focus on self-hosting.

  12. 15

    gost

    18.2Kginuerzh/gost · Go

    GOST (GO Simple Tunnel) is a secure, multi-protocol proxy and tunnel tool written in Go. It can act as an HTTP/SOCKS5 proxy, chain multiple proxies together, and forward local or remote TCP/UDP ports through encrypted channels.

  13. 16

    Micro8

    18KMicropoor/Micro8

    A free, open-source series of penetration-testing lessons written by veteran Chinese pentester Micropoor and published as a GitBook. It covers code audit, web, intranet and domain penetration, tunneling, and log-based tracing.

  14. 17

    netch

    17.7Knetchx/netch · C#

    Netch is a simple, free and open-source proxy client for Windows that routes your traffic through proxy servers. It has been on GitHub since 2019 and has about 17.7k stars.

  15. 18

    ZeroTierOne

    17.2Kzerotier/ZeroTierOne · C++

    ZeroTier is a smart programmable Ethernet switch: it makes your devices, VMs, containers, and apps talk to each other as if they all lived in the same data center or cloud region, wherever they physically are.

  16. 19

    zphisher

    17Khtr-tech/zphisher · HTML

    Zphisher is an automated phishing tool with 30+ ready-made login-page templates, written as a beginners-friendly shell script and intended purely for education.

  17. 20

    kcp

    16.9Kskywind3000/kcp · C

    KCP is a fast, reliable ARQ protocol for realtime traffic: it trades 10-20% extra bandwidth for 30-40% lower average latency and up to 3x lower maximum latency than TCP.

  18. 21

    chisel

    16.7Kjpillora/chisel · Go

    Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH — a single executable that runs as either client or server, mainly used for passing through firewalls or providing a secure endpoint into your network.

  19. 22

    panda-vpn-pro

    16.4KDiningFactory/panda-vpn-pro

    A Chinese-language guide recommending cheap 'airports' — subscription proxy services for getting past China's Great Firewall — written by an author burned by PandaVPN Pro, paired with practical advice on choosing and paying for them safely.

  20. 23

    cloudflared

    16.2Kcloudflare/cloudflared · Go

    cloudflared is the command-line client for Cloudflare Tunnel — a daemon that proxies traffic from Cloudflare's network to your origin server, so client requests reach you without opening any ports on your firewall.

  21. 24

    Termix

    15.6KTermix-SSH/Termix · TypeScript

    Termix is a free, self-hosted platform that puts SSH terminals, remote desktop (RDP/VNC/Telnet), file transfers over SFTP, Docker and Podman management, host metrics, and automations for your servers in one web, desktop, and mobile app.

  22. 25

    awesome-cloudflare

    15.5Kzhuima/awesome-cloudflare

    A curated, awesome-style list of Cloudflare tools, open-source projects, guides, blogs and other resources — collected so indie developers can find ready-made, low-cost tools without trawling GitHub themselves.

  23. 26

    clashctl

    15Knelvko/clashctl · Shell

    A Shell toolkit that one-click deploys and manages mihomo/clash proxy environments on Linux, handling the core, Web dashboard, and all runtime dependencies.

  24. 27

    openvpn

    14.7KOpenVPN/openvpn · C

    OpenVPN is an open-source VPN daemon — a background service that creates a secure, encrypted tunnel over the public internet, so your device can reach a private network as if it were directly connected.

  25. 28

    rathole

    14.3Krathole-org/rathole · Rust

    Rathole is a secure, stable, high-performance reverse proxy written in Rust that exposes a service running on a device behind NAT to the Internet through a server with a public IP, similar to frp and ngrok.

  26. 29

    bore

    11.5Kekzhang/bore · Rust

    bore is a simple CLI tool written in Rust that creates TCP tunnels to expose a local port to a remote server, bypassing NAT and firewalls, similar to ngrok or localtunnel.

  27. 30

    shadowsocks-rust

    10.9Kshadowsocks/shadowsocks-rust · Rust

    A Rust port of shadowsocks — a fast tunnel proxy that helps you bypass firewalls. It ships both ends of the tunnel: sslocal as your local client and ssserver as the remote relay.

  28. 31

    mcp-use

    10.8Kmcp-use/mcp-use · TypeScript

    mcp-use is a fullstack TypeScript framework for MCP (Model Context Protocol): it lets you build, test, and ship MCP servers, interactive MCP Apps for ChatGPT and Claude, and headless servers for AI agents.

  29. 32

    sing-box-yg

    10.6Kyonggekkk/sing-box-yg · Shell

    It is a Shell script toolkit that turns a VPS into an all-in-one proxy node running sing-box, bundling five protocols (VLESS-Reality-Vision, VMess-WS/TLS with Argo, Hysteria-2, TUIC-v5, AnyTLS) with self-signed/ACME certificate switching, Argo tunnels, and a Psiphon VPN relay across 30 countries. It also ships a separate variant for the free Serv00/Hostuno hosting platforms.

  30. 33

    tailcat

    8.4Ktailscale/tailcat · Go

    Tailcat is like netcat but running over Tailscale's encrypted data plane (WireGuard + magicsock + DERP) without needing Tailscale's control plane or a Tailscale account. One side runs a tailcat server and gets a short address; the other side connects to it, and traffic is end-to-end encrypted and NAT-traversed automatically.

  31. 34

    MasterDnsVPN

    7.1Kmasterking32/MasterDnsVPN · Go

    MasterDnsVPN is a DNS tunneling VPN that smuggles TCP traffic inside DNS queries and responses to get online when regular connections are blocked, aiming for the same goal as DNSTT or SlipStream but using its own lower-overhead protocol.

  32. 35

    fq-book

    7Khoochanlon/fq-book · Shell

    A free open-source Chinese-language book, 《这本书能让你连接互联网》 (This Book Can Get You Online), about getting online under censorship: hands-on setup for popular circumvention tools plus the principles behind proxies, tunnels, VPNs and GFW blocking.

  33. 36

    ProxyBridge

    6.8KInterceptSuite/ProxyBridge · C

    ProxyBridge is a cross-platform proxy client that transparently redirects TCP and UDP traffic from specific Windows/macOS/Linux applications through SOCKS5 or HTTP proxies, acting as an open-source alternative to Proxifier.

  34. 37

    port-killer

    5.1Kproductdevbook/port-killer · Swift

    PortKiller is a cross-platform desktop app for developers that monitors open TCP ports, manages Kubernetes port-forward sessions, integrates Cloudflare Tunnels, and lets you kill processes with one click.

  35. 38

    testsprite-cli

    4.7KTestSprite/testsprite-cli · TypeScript

    The official CLI of TestSprite, an AI testing platform 100,000+ teams use to test frontend and backend in the cloud against the live product, not mocks — and feed what broke back to your coding agent so it fixes its own work.

  36. 39

    wireguard-go

    4.5KWireGuard/wireguard-go · Go

    wireguard-go is a userspace implementation of the WireGuard VPN written in Go: it runs as a normal program that creates a WireGuard network interface, instead of living inside the OS kernel.

  37. 40

    neko-master

    4.2Kforu17/neko-master · TypeScript

    Neko Master is a self-hosted dashboard that visualizes and analyzes network traffic collected from gateways like Clash, Mihomo, OpenClash and Surge, showing real-time stats, domains, IPs and proxy-node usage.

  38. 41

    MasterHttpRelayVPN

    3.9Kmasterking32/MasterHttpRelayVPN · Python

    MasterHttpRelayVPN is a local proxy that routes your browser traffic through a Google Apps Script relay using domain fronting and MITM TLS interception, designed to evade DPI and censorship.

  39. 42

    russia-mobile-internet-whitelist

    3.8Khxehex/russia-mobile-internet-whitelist

    A community-maintained list of domains and IP ranges that stay reachable in Russia even when mobile internet gets throttled or filtered, meant to be fed into VPN or proxy clients so their traffic blends in with what the government allows through.

  40. 43

    MasterHttpRelayVPN-RUST

    3.6Ktherealaleph/MasterHttpRelayVPN-RUST · Rust

    It is a Rust port of MasterHttpRelayVPN, a free DPI/censorship-bypass tool that routes your traffic through a Google Apps Script you deploy in your own Google account, using TLS SNI concealment so your ISP only sees a connection to www.google.com.

  41. 44

    p2wlan

    2.6Kyhan-sun/p2wlan · Rust

    P2WLAN is an open-source, P2P-first, self-hostable virtual LAN tool that gives devices private virtual IPs so machines on different networks (home broadband, mobile, campus, cloud) can talk to each other as if they were on the same LAN.

  42. 45

    Open-Box

    2.2Kliandu2024/Open-Box · Shell

    Open-Box is an all-in-one transparent proxy solution for OpenWrt routers: it installs the sing-box core plus a web management panel with a single command, so you can set up proxy routing from a browser without hand-editing any config files.

  43. 46

    mtproto.zig

    2.1Ksleep3r/mtproto.zig · Zig

    mtproto.zig is a tiny self-hosted MTProto proxy for Telegram that disguises your traffic as ordinary TLS 1.3 HTTPS, so censors and DPI filters can't tell it's Telegram. You run it on your own cheap VPS and share a single tg:// link with people who want their Telegram unblocked.

  44. 47

    CFNext

    1.9KPAICNI/CFNext · JavaScript

    CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.

  45. 48

    dsh-pocket

    1.9Kshaobeichen/dsh-pocket · JavaScript

    DSH Pocket is a plugin that lets you access your computer's DeepSeek Harness (dsh web) interface from your phone by scanning a QR code, with real-time screen mirroring over LAN or the public internet.

  46. 49

    vodiwalker_panel

    1.3KVodiwalker/vodiwalker_panel · Python

    Vodiwalker Panel is a free, self-hosted web panel for managing proxy/tunnel services and their configs, with a modern dashboard interface.

  47. 50

    NewYork

    1.2Kx4gpanell/NewYork · Python

    X4G is a fast, modern gateway for tunneling VLESS over WebSocket and XHTTP, with a built-in HTTP proxy, a management dashboard, a Telegram admin bot, and shareable subscription pages for grouped configs.

  48. 51

    personal-edge-proxy

    1.1Kyding-git/personal-edge-proxy

    A self-hosted personal proxy architecture combining Hysteria2 as the main daily entry, Xray with VLESS+REALITY+Vision as a backup inbound, and Cloudflare WARP (plus an optional fixed SOCKS5) as outbound routing, tuned specifically for more reliable access to AI services like ChatGPT, Claude, Codex and Gemini.

  49. 52

    CF-Workers-TGProxy

    907ToiCF/CF-Workers-TGProxy

    A single-file Cloudflare Workers script that acts as Telegram's own Web Proxy (td web-proxy) backend, relaying the WebSocket lanes opened by Telegram Desktop/Android's embedded webview straight into Telegram's own Web K (KWS) channel.

  50. 53

    antigravity_phone_chat

    810krishnakanthb13/antigravity_phone_chat · JavaScript

    It is a real-time mobile monitor and remote control for your Antigravity AI desktop sessions, mirroring the chat to your phone and letting you send messages, stop generations, or approve actions remotely.

  51. 54

    dsh-mobile

    502saya-ch/dsh-mobile · TypeScript

    DSH Mobile is an Android app and companion plugin for DeepSeek Harness (DSH) that lets you access your desktop DSH session from your phone over LAN or an optional remote tunnel, keeping the same workspace, messages and tools in sync in real time.

  52. 55

    bot-hosting-vless

    451KJGX66F/bot-hosting-vless · JavaScript

    A deployment kit for running a VLESS+WebSocket proxy node on the Bot-Hosting platform (a Pterodactyl panel), paired with a Cloudflare Worker script that reverse-proxies the connection through Cloudflare's CDN for better speed and stability.

  53. 56

    mlmvpn_android

    416mlmvpn/mlmvpn_android · Kotlin

    MLM VPN is an Android app that bundles many independent connectivity engines — Xray-core (VLESS/VMess/Trojan), AmneziaWG, WARP, Psiphon, Tor, Geph, OpenVPN and a custom MASQUE-based engine — behind one UI, plus an adaptive per-app router, a Cloudflare Worker control panel, and a game-latency booster, aimed at bypassing network restrictions.

  54. 57

    3x-ui

    400x4gpanell/3x-ui · Dockerfile

    This is a Railway deployment setup for the 3x-ui panel that adds an nginx reverse proxy so both the web panel and a VLESS/WebSocket inbound are reachable through the single port Railway assigns to your deployment.

  55. 58

    Arachnidium

    397p2r3/Arachnidium · Python

    Arachnidium is a self-hosted HTTP(S) optimization and compression proxy powered by mitmproxy, meant to run on a spare computer at home and be reached by your devices through a WireGuard VPN tunnel.

  56. 59

    DoulorCloud

    238Doulor/DoulorCloud · TypeScript

    Doulor Cloud is a self-hosted, all-in-one cloud resource distribution platform: each user gets a subdomain, a domain email address, R2-backed direct-link file storage, a personal Bento-style profile page, and access to a shared AI API relay, all running on a static frontend plus Cloudflare Workers with no persistent server.

  57. 60

    back4app-vless

    210KJGX66F/back4app-vless · Shell

    This project is a one-click deployment setup that runs a VLESS-over-WebSocket proxy through a Cloudflare Tunnel, hosted for free on Back4app's cloud platform, with no VPS or server management required.

  58. 61

    dsh-bridge

    204wenbin-wb/dsh-bridge · JavaScript

    dsh-bridge lets you keep using DeepSeek Harness (DSH) from your phone or any device by scanning a QR code, even when you are away from the computer running it. It adds LAN access, public tunnels, and IM bot control on top of your local DSH instance.

  59. 62

    bitbang

    184richlegrand/bitbang

    BitBang turns any machine into a URL: run it on the device, open the URL in any browser, and you are connected to that machine peer-to-peer with end-to-end encryption — no account, no port forwarding, nothing to install on the connecting side.

  60. 63

    marzban-node

    171x4gpanell/marzban-node · Dockerfile

    A Dockerfile that builds and deploys the 'Marzban-node' VPN node service on Railway, patching it at build time so it fits Railway's networking model instead of shipping a copied fork of the source.

  61. 64

    dsh-remote-web-gateway

    159summer1238/dsh-remote-web-gateway · TypeScript

    DSH Remote Web Gateway lets you keep using DeepSeek Harness (DSH), a coding-agent tool running on your computer, from your phone or tablet by just scanning a QR code — no remote desktop, SSH, or public IP needed.

Often tagged together