Topics / #vpn-client
VPN client projects on GitHub
Self-hosted VPN clients and setup scripts for private connections.
As of , the most-starred VPN client projects on GitHub are clash-verge-rev (151.9K stars), v2rayNG (64.1K stars) and fanqiang (54.2K stars). GitHub.Locker tracks 27 VPN client repositories with 565K stars combined. The fastest-growing on October 16 was clash-verge-rev, with +241 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
clash-verge-rev
clash-verge-rev/clash-verge-rev · ★ 151.9KClash Verge Rev is a modern desktop GUI client for the Clash Meta (mihomo) proxy core, letting you manage proxy configurations visually on Windows, macOS, and Linux.
+71ClashMetaForAndroid
MetaCubeX/ClashMetaForAndroid · ★ 47.8KClash Meta for Android (CMFA) is the graphical Android app for Clash.Meta, letting you run a rule-based proxy/VPN tunnel on your phone with a UI instead of editing config files by hand.
v2rayNG
2dust/v2rayNG · ★ 64.1Kv2rayNG is an Android client for V2Ray that lets you connect through proxy servers using either the Xray core or the v2fly core, supporting protocols like VMess, VLESS, Trojan, Shadowsocks and SOCKS5.
+60panda-vpn-pro
DiningFactory/panda-vpn-pro · ★ 16.4KA Chinese-language guide recommending cheap 'airports' — subscription proxy services for getting past China's Great Firewall — written by an author burned by PandaVPN Pro, paired with practical advice on choosing and paying for them safely.
The all-time top
27 projects · by stars
- 151.9K
#1 · clash-verge-rev/clash-verge-revclash-verge-rev
Clash Verge Rev is a modern desktop GUI client for the Clash Meta (mihomo) proxy core, letting you manage proxy configurations visually on Windows, macOS, and Linux.
- 64.1K
#2 · 2dust/v2rayNG
v2rayNG
v2rayNG is an Android client for V2Ray that lets you connect through proxy servers using either the Xray core or the v2fly core, supporting protocols like VMess, VLESS, Trojan, Shadowsocks and SOCKS5.
- 54.2K
#3 · bannedbook/fanqiangfanqiang
A collection of tutorials and tools for circumventing China's internet censorship (翻墙/科学上网), covering proxy protocols like V2Ray, Shadowsocks, SSR and Trojan, plus a bundled all-in-one client package for Windows.
- 4

ClashMetaForAndroid
47.8KMetaCubeX/ClashMetaForAndroid · KotlinClash Meta for Android (CMFA) is the graphical Android app for Clash.Meta, letting you run a rule-based proxy/VPN tunnel on your phone with a UI instead of editing config files by hand.
- 5

algo
30.4Ktrailofbits/algo · PythonA set of Ansible scripts that spins up your own personal WireGuard and IPsec VPN server on a cloud provider, using the most secure defaults available.
- 6
setup-ipsec-vpn
28.7Khwdsl2/setup-ipsec-vpn · ShellA set of shell scripts that turns a fresh Linux server into your own IPsec VPN server in minutes, with IPsec/L2TP, Cisco IPsec and IKEv2 modes. Traffic is encrypted so nobody between you and the server can eavesdrop.
- 7

macOS-Security-and-Privacy-Guide
22.6Kdrduh/macOS-Security-and-Privacy-Guide · ShellA community-maintained guide collecting techniques for improving security and privacy on macOS, written for Apple silicon Macs.
- 8

download
17.8Kgetlantern/downloadThis repository is the official download page for Lantern (蓝灯), a censorship-circumvention tool that lets users in restricted regions bypass internet blocking and access the open web.
- 9

panda-vpn-pro
16.4KDiningFactory/panda-vpn-proA Chinese-language guide recommending cheap 'airports' — subscription proxy services for getting past China's Great Firewall — written by an author burned by PandaVPN Pro, paired with practical advice on choosing and paying for them safely.
- 10
lantern
16.3Kgetlantern/lantern · DartLantern is a free, open-source censorship circumvention tool — a VPN focused on speed, privacy, and getting around internet blocks.
- 11
gluetun
15.8Kpassteque/gluetun · GoGluetun is a lightweight, swiss-army-knife-like VPN client packaged as a single small Docker container. It tunnels through 20+ commercial VPN providers via OpenVPN or Wireguard and lets other containers or LAN devices share that connection.
- 12

karing
15.6KKaringX/karing · DartKaring is a cross-platform proxy client that works with Clash, Clash.Meta, V2ray/V2fly, Sing-box, and Shadowsocks configs, letting you manage subscriptions and routing rules from one app.
- 13

amnezia-client
15.5Kamnezia-vpn/amnezia-client · C++Amnezia is a free, open-source VPN client for desktop and mobile whose key feature is deploying a VPN server on your own server and then connecting to it.
- 14

brook
15.2Ktxthinking/brook · GoBrook is a cross-platform programmable network tool that works as both a server and a client, giving you SOCKS5 proxying, TLS encryption, traffic decryption/MITM inspection, and packet capture in one toolkit.
- 15

clash-nyanpasu
13.2Klibnyanpasu/clash-nyanpasu · RustClash Nyanpasu is a desktop GUI client for Clash-family proxy kernels (Clash Premium, Mihomo, Clash Rust, and Meow), letting you manage proxy profiles and rules through a visual interface.
- 16

TikTok-Unlock
12.2KSemporia/TikTok-Unlock · JavaScriptA README-based guide and rule-set for unlocking region-locked TikTok content on iPhone/iPad without swapping SIM cards, covering region switching, video posting, live streaming, likes, comments, and DMs.
- 17
sing-box-yg
10.6Kyonggekkk/sing-box-yg · ShellIt is a Shell script toolkit that turns a VPS into an all-in-one proxy node running sing-box, bundling five protocols (VLESS-Reality-Vision, VMess-WS/TLS with Argo, Hysteria-2, TUIC-v5, AnyTLS) with self-signed/ACME certificate switching, Argo tunnels, and a Psiphon VPN relay across 30 countries. It also ships a separate variant for the free Serv00/Hostuno hosting platforms.
- 18

donutbrowser
4.1Kdonutbrowser/donutbrowser · RustDonut Browser is an open-source anti-detect browser built on a privacy-focused Chromium fork. It lets you run unlimited isolated browser profiles, each with its own fingerprint, cookies, extensions, and proxy, to stay hidden from fingerprinting and anti-bot services.
- 19

russia-mobile-internet-whitelist
3.8Khxehex/russia-mobile-internet-whitelistA community-maintained list of domains and IP ranges that stay reachable in Russia even when mobile internet gets throttled or filtered, meant to be fed into VPN or proxy clients so their traffic blends in with what the government allows through.
- 20
wireguard-install
3.1Khwdsl2/wireguard-install · ShellA shell script that automatically installs and configures a WireGuard VPN server on Linux, letting you set up your own VPN in a few minutes without prior WireGuard experience.
- 21

wl
2.9Kzieng2/wlThis is a subscription link bundling v2ray/Xray proxy server configs, specifically meant to bypass mobile carrier 'white list' restrictions where only a limited set of sites and apps are reachable without it.
- 22

warp-masque-actions
1.1KbyJoey/warp-masque-actions · JavaScriptA GitHub Actions pipeline that generates a Cloudflare WARP (MASQUE) proxy config with 57 nodes, packaged as a mihomo config file, with nothing to install and no server needed to produce it.
- 23

gate
505hezhanleiok/gate · PythonIt automates scraping VPN Gate's SSTP home-broadband/datacenter nodes, verifies each one with a checker Worker, groups them by country, and publishes an auto-rotating node list that edgetunnel can pull as chained proxy entries.
- 24

mlmvpn_android
411mlmvpn/mlmvpn_android · KotlinMLM VPN is an Android app that bundles many independent connectivity engines — Xray-core (VLESS/VMess/Trojan), AmneziaWG, WARP, Psiphon, Tor, Geph, OpenVPN and a custom MASQUE-based engine — behind one UI, plus an adaptive per-app router, a Cloudflare Worker control panel, and a game-latency booster, aimed at bypassing network restrictions.
- 25

Arachnidium
392p2r3/Arachnidium · PythonArachnidium is a self-hosted HTTP(S) optimization and compression proxy powered by mitmproxy, meant to run on a spare computer at home and be reached by your devices through a WireGuard VPN tunnel.
- 26

WhiteAestherMobile
262WhiteDNS/WhiteAestherMobile · RustWhiteAestherMobile is the native Android client for the Aether encrypted route engine. It probes for a working path out of restrictive or censored networks and routes your device's traffic through it.
- 27
Tailtab
216Stocist/Tailtab · GoTailtab gives every browser profile its own Tailscale node, so different profiles (or even different Tailscale/Headscale accounts) can sit on completely separate tailnets at the same time, while the rest of the machine is untouched.
Related topics
Often tagged together