Topics / #wireguard

Wireguard projects on GitHub

Modern fast VPN protocol and mesh networking tools built on it.

As of , the most-starred Wireguard projects on GitHub are 3x-ui (48.1K stars), headscale (44.7K stars) and Xray-core (42.2K stars). GitHub.Locker tracks 40 Wireguard repositories with 607.3K stars combined. The fastest-growing on October 16 was 3x-ui, with +65 stars in a day.

40Projects
607.3KStars in total
+558Stars in a day
Browse in the catalog →github.com/topics/wireguard ↗

Hot right now

Most stars gained in a day · Oct 16

+65

3x-ui

MHSanaei/3x-ui · ★ 48.1K

3X-UI is an open-source web control panel for managing Xray-core servers, letting you deploy, configure, and monitor many proxy and VPN protocols from one VPS or across multiple nodes.

+55

CFNext

PAICNI/CFNext · ★ 1.9K

CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.

+45

clash

clashbk/clash · ★ 9.8K

This is a Chinese-language navigation page that aggregates official download links, backup mirrors, and tutorials for various Clash-based proxy clients (FlClash, Clash Verge Rev, ClashMi, ClashX, Shadowrocket, etc.) across Windows, macOS, Linux, Android and iOS.

+36

headscale

juanfont/headscale · ★ 44.7K

Headscale is an open source, self-hosted implementation of the Tailscale control server, letting you run your own private Tailscale-compatible network instead of paying for Tailscale's hosted service.

The all-time top

40 projects · by stars

  1. #1 · MHSanaei/3x-ui

    3x-ui

    3X-UI is an open-source web control panel for managing Xray-core servers, letting you deploy, configure, and monitor many proxy and VPN protocols from one VPS or across multiple nodes.

    48.1K
  2. #2 · juanfont/headscale

    headscale

    Headscale is an open source, self-hosted implementation of the Tailscale control server, letting you run your own private Tailscale-compatible network instead of paying for Tailscale's hosted service.

    44.7K
  3. #3 · XTLS/Xray-core

    Xray-core

    Xray-core is the engine of 'Project X', a networking/proxy platform that implements protocols like VLESS, VMess, Trojan and Shadowsocks, with REALITY and XTLS for traffic obfuscation and censorship circumvention.

    42.2K
  1. 4

    tailscale

    37.7Ktailscale/tailscale · Go

    Tailscale is a mesh VPN built on WireGuard that creates secure private networks between your devices with minimal configuration, adding 2FA/SSO login on top.

  2. 5

    hiddify-app

    33.2Khiddify/hiddify-app · Dart

    Hiddify is a free, open-source proxy client for getting around internet censorship: it connects to your proxy servers over protocols like Vless, Reality, Hysteria and SSH, with no ads.

  3. 6

    algo

    30.4Ktrailofbits/algo · Python

    A set of Ansible scripts that spins up your own personal WireGuard and IPsec VPN server on a cloud provider, using the most secure defaults available.

  4. 7

    netbird

    30Knetbirdio/netbird · Go

    NetBird is an open-source Zero Trust networking platform: it builds a configuration-free peer-to-peer WireGuard overlay network with centralized access control, so you can create secure private networks without open ports, complex firewall rules or VPN gateways.

  5. 8

    wg-easy

    27.2Kwg-easy/wg-easy · TypeScript

    wg-easy is an all-in-one package that bundles WireGuard VPN with a web-based admin UI, letting you install and manage WireGuard on a Linux host without touching config files manually.

  6. 9

    streisand

    23.4KStreisandEffect/streisand · Shell

    Streisand is an automation tool that takes a server on the cloud provider of your choice and nearly automatically turns it into a private, censorship-resistant VPN node.

  7. 10

    NekoBoxForAndroid

    23.1KMatsuriDayo/NekoBoxForAndroid · Kotlin

    NekoBox for Android is a universal proxy toolchain for Android built on the sing-box core. It routes your phone's traffic through proxies like Shadowsocks, VMess, Trojan, VLESS or Hysteria.

  8. 11

    pangolin

    23.1Kfosrl/pangolin · TypeScript

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

  9. 12

    Self-Hosting-Guide

    23.1Kmikeroyal/Self-Hosting-Guide · Dockerfile

    This is a curated guide for self-hosting software on your own servers instead of relying on third-party cloud providers, covering topics like Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.

  10. 13

    awesome-tunneling

    21.9Kanderspitman/awesome-tunneling · Python

    A curated list of tunneling tools and services (alternatives to ngrok, Cloudflare Tunnel, Tailscale, and ZeroTier) that let you expose a local server to the internet, with a focus on self-hosting.

  11. 14

    netch

    17.7Knetchx/netch · C#

    Netch is a simple, free and open-source proxy client for Windows that routes your traffic through proxy servers. It has been on GitHub since 2019 and has about 17.7k stars.

  12. 15

    coder

    17.1Kcoder/coder · Go

    Coder is a self-hosted platform for creating cloud development environments and running AI coding agents on your own infrastructure.

  13. 16

    gluetun

    15.8Kpassteque/gluetun · Go

    Gluetun is a lightweight, swiss-army-knife-like VPN client packaged as a single small Docker container. It tunnels through 20+ commercial VPN providers via OpenVPN or Wireguard and lets other containers or LAN devices share that connection.

  14. 17

    Termix

    15.5KTermix-SSH/Termix · TypeScript

    Termix is a free, self-hosted platform that puts SSH terminals, remote desktop (RDP/VNC/Telnet), file transfers over SFTP, Docker and Podman management, host metrics, and automations for your servers in one web, desktop, and mobile app.

  15. 18

    amnezia-client

    15.5Kamnezia-vpn/amnezia-client · C++

    Amnezia is a free, open-source VPN client for desktop and mobile whose key feature is deploying a VPN server on your own server and then connecting to it.

  16. 19

    EasyTier

    14.1KEasyTier/EasyTier · Rust

    EasyTier is a decentralized mesh VPN built with Rust and Tokio. It connects your devices into one secure virtual network over the internet without requiring any central server.

  17. 20

    BPB-Worker-Panel

    13.7Kbia-pain-bache/BPB-Worker-Panel · TypeScript

    BPB Panel is a self-hosted GUI you deploy on your own Cloudflare Workers or Pages account to generate VLESS, Trojan and Warp proxy configs, plus a private DoH server, so you can bypass ISP blocking.

  18. 21

    SoftEtherVPN

    13.7KSoftEtherVPN/SoftEtherVPN · C

    SoftEther VPN is a free, open-source, cross-platform VPN program where a single server can speak SSL-VPN, WireGuard, OpenVPN, IPsec, L2TP, MS-SSTP, L2TPv3 and EtherIP.

  19. 22

    sliver

    12.1KBishopFox/sliver · Go

    Sliver is an open source cross-platform adversary emulation and red team framework that organizations of any size can use to perform security testing.

  20. 23

    netmaker

    11.8Kgravitl/netmaker · Go

    Netmaker is a tool that automates creating and managing virtual networks (mesh VPNs, remote access gateways, site-to-site links) using WireGuard.

  21. 24

    wireguard-install

    11.4Kangristan/wireguard-install · Shell

    A bash script that sets up a WireGuard VPN on a Linux server, forwarding all your traffic through an encrypted tunnel and NATing it so you appear to browse with the server's IP.

  22. 25

    sing-box-yg

    10.6Kyonggekkk/sing-box-yg · Shell

    It is a Shell script toolkit that turns a VPS into an all-in-one proxy node running sing-box, bundling five protocols (VLESS-Reality-Vision, VMess-WS/TLS with Argo, Hysteria-2, TUIC-v5, AnyTLS) with self-signed/ACME certificate switching, Argo tunnels, and a Psiphon VPN relay across 30 countries. It also ships a separate variant for the free Serv00/Hostuno hosting platforms.

  23. 26

    clash

    9.8Kclashbk/clash

    This is a Chinese-language navigation page that aggregates official download links, backup mirrors, and tutorials for various Clash-based proxy clients (FlClash, Clash Verge Rev, ClashMi, ClashX, Shadowrocket, etc.) across Windows, macOS, Linux, Android and iOS.

  24. 27

    wireguard-go

    4.5KWireGuard/wireguard-go · Go

    wireguard-go is a userspace implementation of the WireGuard VPN written in Go: it runs as a normal program that creates a WireGuard network interface, instead of living inside the OS kernel.

  25. 28

    vk-turn-proxy

    4Kcacggghp/vk-turn-proxy · Go

    vk-turn-proxy tunnels WireGuard or Hysteria VPN traffic through the TURN relay servers of VK calls or Yandex Telemost, so it travels disguised as ordinary video-call traffic.

  26. 29

    wireguard-install

    3.1Khwdsl2/wireguard-install · Shell

    A shell script that automatically installs and configures a WireGuard VPN server on Linux, letting you set up your own VPN in a few minutes without prior WireGuard experience.

  27. 30

    Open-Box

    2.2Kliandu2024/Open-Box · Shell

    Open-Box is an all-in-one transparent proxy solution for OpenWrt routers: it installs the sing-box core plus a web management panel with a single command, so you can set up proxy routing from a browser without hand-editing any config files.

  28. 31

    mtproto.zig

    2.1Ksleep3r/mtproto.zig · Zig

    mtproto.zig is a tiny self-hosted MTProto proxy for Telegram that disguises your traffic as ordinary TLS 1.3 HTTPS, so censors and DPI filters can't tell it's Telegram. You run it on your own cheap VPS and share a single tg:// link with people who want their Telegram unblocked.

  29. 32

    CFNext

    1.9KPAICNI/CFNext · JavaScript

    CFNext is a proxy subscription management panel you deploy on Cloudflare Workers or Pages; a single script both runs the actual VLESS/Trojan/XHTTP proxy and serves a /sub subscription link plus a graphical config panel.

  30. 33

    emufii

    687jojodogm-ctrl/emufii · Kotlin

    Emufii is an Android app that connects your emulators to your friends' emulators over the internet, letting you play local multiplayer games online using a six-character code instead of sharing IPs or opening ports.

  31. 34

    3X-UI_KIT

    450itsnotkubrick/3X-UI_KIT · Shell

    A script that turns a clean VPS into a ready VPN server in minutes: it installs the official 3X-UI panel, sets up 11 popular protocols, a certificate and a firewall, and gives you one subscription link. No domain needed.

  32. 35

    mlmvpn_android

    411mlmvpn/mlmvpn_android · Kotlin

    MLM VPN is an Android app that bundles many independent connectivity engines — Xray-core (VLESS/VMess/Trojan), AmneziaWG, WARP, Psiphon, Tor, Geph, OpenVPN and a custom MASQUE-based engine — behind one UI, plus an adaptive per-app router, a Cloudflare Worker control panel, and a game-latency booster, aimed at bypassing network restrictions.

  33. 36

    GoLiveBypass

    271bezumiya/GoLiveBypass · TypeScript

    GoLiveBypass is a tool that restores Discord's Go Live screen share and camera for users connecting from Brazil, by routing the Discord process through a non-Brazilian exit (Tor, a tested free proxy, or a private WireGuard/ProtonVPN tunnel) so Discord's servers no longer see a Brazilian IP.

  34. 37

    wificalling-location-gateway

    245smthdagg/wificalling-location-gateway · Rust

    An all-in-one gateway for OpenWrt/ImmortalWrt routers: a Rust daemon routes a designated test device's Wi-Fi Calling through a chosen sing-box node and rewrites Apple WLOC location responses so they match that node's region, all managed from a LuCI web UI.

  35. 38

    Tailtab

    216Stocist/Tailtab · Go

    Tailtab gives every browser profile its own Tailscale node, so different profiles (or even different Tailscale/Headscale accounts) can sit on completely separate tailnets at the same time, while the rest of the machine is untouched.

  36. 39

    redStackPRO

    161devZero-Security/redStackPRO · Python

    redStackPRO is a web canvas for designing red team attack infrastructure and defensive Active Directory cyber ranges; you compose a topology visually, and it exports a ready-to-run Terraform and Ansible working directory that you deploy yourself.

  37. 40

    nyx

    158thecynetx/nyx · TypeScript

    Nyx Panel is a self-hosted web management suite for Xray-core proxy servers, built to resist heavy censorship (Iran-focused) using VLESS+REALITY, XHTTP/SplitHTTP, packet fragmentation and Cloudflare WARP.

Often tagged together