Awesome GitHub RepositoriesProtocol Gateways

Tasmota is a universal firmware platform for ESP8266 and ESP32 microcontrollers, designed to provide local control and management of smart home hardware. It functions as an event-driven automation controller that replaces proprietary factory firmware, allowing users to manage relays, sensors, and lighting systems without relying on external cloud services. The system is built on a modular driver architecture that enables dynamic hardware configuration and peripheral support through a web-based management interface. The platform distinguishes itself through a template-driven hardware mapping s

Go-micro is a distributed systems development toolkit designed for building, connecting, and managing modular microservices. It provides a comprehensive framework for service discovery, remote procedure call abstraction, and event-driven messaging, allowing developers to create decoupled architectures that communicate asynchronously through shared message brokers. The project distinguishes itself by integrating autonomous agent orchestration and language model tool binding directly into the service lifecycle. By exposing internal service endpoints as standardized tools, it enables AI agents t

ZLMediaKit is a high-concurrency streaming engine designed to function as a protocol gateway and media server. It provides a native development kit for embedding streaming and transcoding capabilities directly into custom applications, supporting the ingestion, distribution, and recording of live video feeds across various network protocols. The platform distinguishes itself through a high-performance architecture that bridges legacy surveillance protocols with modern web-compatible streaming standards. It utilizes a thread-per-core execution model and zero-copy buffer management to maintain

This project is a high-performance, distributed API gateway designed to manage, secure, and observe traffic for microservices, serverless functions, and artificial intelligence model providers. It functions as a dynamic service proxy and cloud-native ingress controller, centralizing policy enforcement and traffic routing through a unified configuration interface that synchronizes state across multiple nodes in real time. The platform distinguishes itself through a highly extensible architecture that utilizes a high-performance scripting engine to execute modular logic directly within the requ

Filestash is a unified storage management platform that provides a web-based interface for browsing, managing, and accessing files across diverse local and cloud storage backends. It functions as a centralized gateway, aggregating services such as S3, SFTP, WebDAV, and FTP into a single, consistent environment for remote filesystem administration and secure document handling. The platform distinguishes itself through a modular, plugin-based architecture that supports custom storage drivers, authentication providers, and authorization logic. It includes built-in capabilities for server-side me

cc-connect is an AI agent messaging bridge and session manager that connects local AI coding agents to third-party messaging platforms. It acts as a multimodal AI chat relay and a OneBot protocol gateway, allowing users to control local AI agents remotely via a variety of chat interfaces. The project distinguishes itself by providing a remote AI agent controller that enables the management of agents through slash commands and a web management dashboard. It supports multi-tenant project orchestration and session-based context isolation, ensuring that independent conversation threads are mainta

Nakama is a distributed server framework designed for real-time multiplayer games and social applications. It provides an authoritative runtime environment for executing game logic, ensuring consistent state and cheat-resistant gameplay across diverse client platforms. The system acts as a centralized backend, managing persistent player identities, social graphs, and real-time communication channels to support complex multiplayer interactions. The platform distinguishes itself through an integrated suite of LiveOps tools that allow developers to manage game economies, schedule time-bound even

Twemproxy is a lightweight proxy that routes and distributes requests across multiple Redis and Memcached backend servers. It functions as a protocol translation gateway and distributed cache shard manager, partitioning data across clusters to balance load and storage capacity. The system acts as a high-availability cache orchestrator, employing health monitoring and automatic server ejection to maintain continuous access to cached data. It integrates with sentinels for dynamic master and replica discovery and utilizes consistent hashing and tag-based key grouping to manage data distribution

This project is an open-source identity provider and single sign-on platform that centralizes user authentication for multiple web applications and services. It functions as a multi-protocol authentication gateway, verifying user identities and issuing tokens through the CAS protocol as well as industry standards including SAML, OAuth2, and OpenID Connect. The system acts as a federated identity server, allowing authentication to be delegated to external third-party or corporate identity providers. It distinguishes itself through identity attribute governance, which manages which specific use

Dex is an OpenID Connect provider and identity federation proxy that translates authentication signals from various upstream sources into a unified OpenID Connect interface. It functions as a multi-protocol identity broker, enabling client applications to implement a single standard while delegating user verification to external identity providers. The project distinguishes itself through a pluggable connector architecture that bridges disparate protocols including LDAP, SAML, and OAuth2. It provides specific integrations for services such as GitHub, Google, GitLab, and Microsoft, while offer

rpcx is a high-performance remote procedure call framework for building scalable microservices in Go. It functions as a binary protocol RPC system and a service mesh, providing the necessary infrastructure for low-latency inter-service communication and distributed cloud environments. The project features a cross-language service gateway that provides an HTTP entry point, allowing clients written in any programming language to invoke Go remote services via protocol translation. It also includes a specialized RPC traffic analyzer for capturing and analyzing binary packets to debug network comm

Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

Kanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies

AirConnect هي بوابة صوت عبر البروتوكول ووكيل شبكة يقوم بترحيل تدفقات صوت AirPlay إلى أجهزة غير تابعة لـ Apple، مثل Chromecast وSonos ومشغلات وسائط أخرى متوافقة مع UPnP. تعمل كجهاز بث صوتي متعدد المنصات يتيح بث الصوت من أجهزة Apple إلى مجموعة متنوعة من مكبرات الصوت الذكية وأجهزة صوت الشبكة عبر شبكة محلية. يستخدم المشروع محاكاة جهاز AirPlay افتراضي لتقليد هوية شبكة جهاز الاستقبال، مما يسمح لأجهزة Apple بالتعرف على الوكيل كهدف بث صالح. يقوم بترجمة إشارات AirPlay ويقوم بتحويل ترميز الصوت وإعادة ترميزه أثناء التنقل ليتناسب مع متطلبات الترميز المحددة لمشغلات الأجهزة المختلفة. يدير النظام توجيه الوسائط عبر البروتوكولات من خلال توجيه الصوت القائم على الوكيل واكتشاف الجهاز القائم على UPnP. يتضمن آليات لمزامنة التحكم في التشغيل لترحيل تغييرات مستوى الصوت والأوامر، بالإضافة إلى إدارة التخزين المؤقت للتعامل مع زمن انتقال التشغيل ومنع تقطع تدفق الشبكة.

gh-aw is a GitHub automation platform and orchestration framework that uses an agentic workflow engine to automate repository management and code reviews. It translates natural language markdown and configuration files into secure, automated task sequences driven by large language models. The system integrates a Model Context Protocol gateway to route calls between AI agents and external tools. It distinguishes itself through a comprehensive security guardrail system that provides sandboxed execution for protocol servers, network egress controls via domain allowlists, and human-in-the-loop ap

هذا المشروع عبارة عن وحدة تحكم دخول (ingress controller) لـ Kubernetes تدير حركة المرور الخارجية عن طريق تكوين موازن أحمال HAProxy ديناميكياً. يعمل كجسر بين موارد العنقود ومستوى بيانات الشبكة، مترجماً تعريفات الدخول عالية المستوى إلى تكوينات وكيل نشطة لتوجيه حركة مرور HTTP، وTCP، وUDP إلى بيئات الحاويات. تتميز وحدة التحكم بمعمارية مفككة تفصل منطق مستوى التحكم عن عملية الوكيل، مما يسمح بإدارة دورة الحياة المستقلة والإصدار. وتستخدم توليد التكوين القائم على القالب وإعادة التحميل الساخن في الوقت الفعلي عبر مآخذ Unix لتطبيق تحديثات التوجيه دون انقطاع الخدمة. من خلال دعم أنماط حركة المرور المتقدمة مثل تنسيق النشر الأزرق والأخضر، ومعالجة الرؤوس، وحقن المعلمات المخصصة، فإنها توفر بديلاً خفيف الوزن لتنفيذات شبكة الخدمة الكاملة لإدارة حركة مرور الحافة. تتضمن المنصة مجموعة شاملة من القدرات التشغيلية، تغطي إدارة شهادات TLS المؤتمتة، وسياسات التحكم في الوصول الدقيقة، والتكامل مع جدران حماية تطبيقات الويب الخارجية. كما توفر رؤية تشغيلية قوية من خلال تسجيل حركة المرور المخصص، ومقاييس الأداء، وفحوصات الصحة المساعدة التي تضبط أوزان موازنة الأحمال ديناميكياً بناءً على حالة الخلفية في الوقت الفعلي. تدعم وحدة التحكم نماذج نشر مرنة، بما في ذلك النطاق على مستوى مساحة الاسم وتصفية الموارد، لتمكين التشغيل متعدد المستأجرين داخل عنقود واحد. وتتكامل مع أنماط شبكات Kubernetes القياسية وGateway API لضمان التوافق مع سير عمل البنية التحتية الحالي.