Awesome GitHub RepositoriesLocal Proxy Gateways

XX-Net is a cross-platform desktop application that functions as a local proxy server and network traffic router. It intercepts outgoing network requests from a local machine and redirects them through encrypted tunnels to a distributed mesh of cloud-based nodes, facilitating secure and reliable access to external resources. The software distinguishes itself by providing a centralized management interface for coordinating complex proxy infrastructure. It employs rule-based traffic routing, allowing users to define custom logic based on destination addresses and protocols to determine the opti

Netch is a multi-protocol proxy client and network traffic interceptor designed to route internet traffic through VPN and proxy tunnels. It functions as a connection manager that tunnels outbound data to modify network paths and bypass network restrictions. The project supports a wide range of tunneling protocols, including Socks5, Shadowsocks, WireGuard, Trojan, VMess, and VLESS. It distinguishes itself by offering the ability to distribute established proxy connections to other devices on a local network and by providing UDP FullCone NAT support to maintain stable peer-to-peer connectivity

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Floci is a local emulator for AWS services and cloud infrastructure designed for developing and testing applications without a live internet connection. It serves as a containerized cloud emulator and a serverless runtime emulator, allowing users to run high-fidelity replicas of cloud databases, queues, and compute services on a local machine. The project distinguishes itself by using real container images instead of simple mocks to ensure behavioral accuracy. It functions as a local API gateway simulator with proxy-based routing for REST and WebSocket APIs, and provides a serverless environm

Fancyss is a network utility designed to function as a Shadowsocks proxy gateway. It operates as a transparent proxy manager that intercepts and routes network traffic at the gateway level, allowing for centralized management of internet access across all connected devices without requiring individual client-side configurations. The system employs policy-based routing and rule-based traffic filtering to direct data through specific network paths. It maintains multiple server connections simultaneously, utilizing failover-aware connection pooling to automatically switch traffic to healthy node

This project is a network traffic manipulation tool and proxy designed to intercept, inspect, and modify data streams between mobile applications and their servers. It functions as a scriptable content blocker and traffic router, allowing users to apply custom rules to incoming and outgoing network requests. The tool enables users to bypass regional restrictions and subscription paywalls by injecting configuration rules that override server-side validation. It also provides capabilities for removing advertisements, tracking scripts, and promotional content from mobile applications and web ser

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

Pan-light is a tool for managing and downloading files from Baidu network storage. It provides high-speed file downloading and remote media streaming capabilities. The application uses concurrent segmented transfers to maximize network throughput and employs disk-persisted state tracking to resume interrupted downloads. It also includes a local proxy to bypass hotlinking protections, allowing remote videos to be streamed directly into a media player. The project features a cross-platform graphical user interface built with Go and Qt. Additionally, it supports remote software previews by runn

A Rust port of shadowsocks

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

VPNHotspot ist ein Android-Netzwerk-Routing-Dienstprogramm auf Root-Ebene, das dazu entwickelt wurde, eine aktive VPN-Verbindung mit anderen Geräten über einen drahtlosen Hotspot oder Repeater zu teilen. Es fungiert als Netzwerkmanager, der System-WLAN-Einstellungen modifiziert, um getetherte Datenverkehr über einen verschlüsselten Tunnel zu leiten. Das Tool bietet Funktionen zur Umgehung von Tethering-Beschränkungen des Mobilfunknetzbetreibers durch Routing des Datenverkehrs über ein VPN oder Socksifier. Es enthält einen Controller zur Konfiguration von Wireless-Hardware-Offload und zur Verwaltung der Freigabe von Netzwerkverbindungen als Repeater. Das Projekt deckt Netzwerkverwaltungsaufgaben wie Hotspot-Konfiguration und Verwaltung verbundener Clients ab. Es handhabt das systemweite Netzwerk-Routing durch Paketweiterleitung, Firewall-Regeln und virtuelles Netzwerk-Bridging.

BrowserMCP is a browser automation bridge that connects AI tools to a live browser session through a local proxy server. It implements a standardized protocol for sending commands like click, type, and navigate to a real browser instance running on the user's machine, while keeping all browsing data on the device. The project distinguishes itself by preserving user sessions and fingerprints across automation tasks. It attaches to the user's existing browser profile to maintain cookies, logins, and authentication state, and uses the real browser's user agent, viewport, and extension context to

clash-for-linux ist eine Proxy-Management-Plattform für Linux, die als Wrapper für Clash- und Mihomo-Cores dient. Sie bietet ein System zum Deployment von Proxy-Binärdateien, zur Verwaltung von Abonnements und zur Steuerung der Netzwerkverkehrs-Interzeption. Die Plattform zeichnet sich durch ein Mixin-basiertes Konfigurationssystem aus, das es Benutzern ermöglicht, Abonnementeinstellungen zu patchen und zu überschreiben, ohne die Originalquelldateien zu ändern. Sie enthält zudem ein webbasiertes Dashboard für die Headless-Administration, das die Fernüberwachung von Node-Status, Logs und Routing-Richtlinien ermöglicht. Das System unterstützt transparentes Proxying mittels TUN-Modus-virtuellen Schnittstellen, um den gesamten Systemverkehr zu erfassen, und kann als Gateway für andere Geräte in einem lokalen Netzwerk konfiguriert werden. Zusätzliche Funktionen umfassen Multi-Hop-Relay-Chaining und interaktive Node-Auswahl für die Verkehrssteuerung. Die Installation umfasst architekturabhängiges Binär-Deployment und die Verwendung von Systemdiensten, um Boot-Persistenz und automatisierten Start zu gewährleisten.

ByeDPIAndroid is a deep packet inspection bypass tool for Android that functions as a local SOCKS5 proxy. It modifies TCP packets to evade network censorship and bypass regional internet restrictions on mobile devices. The project operates as a network traffic obfuscator and TCP packet fragmenter. It splits network data into smaller pieces and hides the nature of internet requests to prevent automated blocking and traffic shaping by internet service providers. The system covers a range of capabilities including host-based traffic interception and dynamic packet modification. It utilizes non-

GreenTunnel is a network utility designed to circumvent deep packet inspection and bypass internet censorship. It functions as a tool that modifies outgoing network packets and encrypts DNS lookups to prevent internet service providers and network filtering systems from detecting and blocking specific web destinations. The project implements an HTTP fragmentation proxy and an HTTPS handshake fragmenter. These components split request headers and TLS handshake records across multiple segments to conceal hostnames and destination server names from inspection systems. The software also includes

tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It routes system network traffic through a SOCKS5 proxy using a virtual tunnel interface and provides the ability to tunnel IPv4 traffic over IPv6 or vice versa. The project implements a userspace TCP/IP stack to intercept raw IP packets and translate them for transmission to remote proxy servers. It supports multiple proxy protocols, including HTTP, SOCKS4, SOCKS5, and Shadowsocks, allowing application traffic to be redirected without per-app configuration. The software includes cap

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This project is a cloud drive media aggregator and storage proxy that merges content from multiple cloud storage providers into a unified directory. It functions as an M3U playlist generator, converting cloud files and streaming sources into standardized formats for use in external media players. The system acts as a plugin host for Python-based scripts to fetch and parse content from third-party websites. These operations are supported by a local proxy to accelerate request loading and bypass network restrictions. The software includes a web-based interface for managing server settings and

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew