Open-source alternatives to Sing Box

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

Argosbx is an automated deployment script and multi-protocol proxy manager designed to expose local services to the internet using Cloudflare Argo tunnels. It functions as a tool for installing and configuring network tunneling kernels, including Sing-box and Xray, to create secure proxies and bypass network restrictions without the need for open firewall ports. The project distinguishes itself by providing a proxy subscription generator that creates formatted and password-protected URLs for syncing configurations across client devices. It also manages diverse tunneling protocols, such as VLE

clash-for-linux is a proxy management platform for Linux that serves as a wrapper for Clash and Mihomo cores. It provides a system for deploying proxy binaries, managing subscriptions, and controlling network traffic interception. The platform distinguishes itself through a mixin-based configuration system that allows users to patch and override subscription settings without altering the original source files. It also includes a web-based dashboard for headless administration, enabling remote monitoring of node status, logs, and routing policies. The system supports transparent proxying via

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

This is a Go client library and protocol implementation for interacting with message brokers using the AMQP 0.9.1 standard. It serves as an asynchronous messaging toolkit and message queue client for implementing producer and consumer patterns. The library provides a programmatic interface for managing the full message lifecycle, including publishing, consumption, and delivery acknowledgments. It supports reliable delivery mechanisms such as publishing confirmations and atomic transactions. The project covers the administration of routing topologies through the declaration and binding of que

Mpush is a real-time message push system and encrypted messaging gateway designed to deliver instant notifications to mobile and web clients. It functions as a session management service and a network traffic controller, utilizing persistent network connections to ensure updates reach users without manual screen refreshing. The system includes an HTTP reverse proxy that routes external domain requests to internal IP addresses with integrated connection timeout management. It maintains communication stability through a persistent session manager that tracks client heartbeats and session expira

Clashmi is a graphical proxy client designed to route internet traffic and bypass network restrictions. It provides a user interface for managing proxy cores, configuring domain lookups, and controlling virtual network interfaces. The project features a dedicated manager for proxy subscriptions and a system for rule-based traffic routing. It includes a transparent proxy controller that intercepts system-wide traffic through a virtual interface and an automatic selection mechanism that chooses the fastest server based on real-time latency. Administration is handled through a web-based control

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers

libhv is a high-performance C/C++ network library and event-driven I/O framework used to build TCP, UDP, SSL, HTTP, WebSocket, and MQTT clients and servers. It provides a non-blocking event loop for managing network sockets, timers, and system signals across multiple threads. The project is distinguished by its integrated support for specialized network roles, including a full HTTP web server with RESTful routing and middleware, an MQTT messaging client for IoT communication, and the ability to implement SOCKS5 and HTTP proxies. It also features a reliable UDP implementation to ensure ordered

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew

SSPanel-UIM is a centralized proxy service management system used to deploy and administrate a network of proxy servers and nodes across multiple protocols. It functions as a management panel for coordinating network resources and providing a unified interface for service administration. The project incorporates a subscription billing system with integrated payment gateways to handle recurring fees and usage-based billing. It features a subscription management panel that generates and distributes proxy configuration lists in multiple formats for compatibility with various client applications.

AutoMergePublicNodes is a system for scraping public proxy nodes from across the internet and merging them into a unified list. It serves as an aggregator and converter that transforms these collected nodes into specialized subscription formats for various network routing clients. The project includes dedicated generators for creating configuration files and subscriptions compatible with Clash, Clash Meta, Sing-Box, and V2Ray. It handles the conversion of aggregated lists into Base64 and other standardized formats required by these specific network applications. The software also provides a

Hertz is a high-performance Go HTTP framework designed for building scalable microservices, RESTful APIs, and AI applications. It functions as a high-performance web server and a communication framework for microservices, utilizing non-blocking I/O and zero-copy memory management to handle high-concurrency traffic. The project distinguishes itself through a microservices communication toolkit that supports high-efficiency remote procedure calls via gRPC and Thrift protocols. It implements an asynchronous middleware engine based on an onion model, allowing for a pluggable request-response pipe

This project is an Electron-based multi-service browser and web wrapper that hosts multiple web services in isolated sessions within a single desktop window. It functions as a unified messaging desktop client and a multi-account manager, allowing users to run several concurrent instances of the same web service with different login credentials. The application serves as a customizable web view container that supports the injection of user-defined JavaScript and CSS to modify the behavior and appearance of integrated services. It includes a cloud-synced workspace manager that synchronizes conf

This project is an orchestration system for deploying and managing encrypted proxy nodes across virtual and serverless hosting platforms. It provides a web-based management interface for configuring proxy servers and a dedicated manager for generating and synchronizing subscription links compatible with network client software. The system features a CDN tunneling orchestrator to mask origin server IP addresses using domain tunnels and CDN back-ends. It includes a Cloudflare WARP integrator to handle account configurations and route outbound traffic through specialized connections to manage ou

This project is a lightweight MQTT client library for Arduino boards, specifically designed for embedded systems utilizing an Ethernet Shield. It functions as an embedded messaging client that allows hardware devices to publish and subscribe to topics on a remote message broker. The library provides core MQTT integration, including broker connection management and the maintenance of server heartbeats. It supports topic-based message publishing and subscription management, enabling the registration of listeners to trigger functions upon message arrival. The system covers network connection co

ScribeJava is a Java library used to implement OAuth authentication and authorization flows. It functions as an OAuth client implementation and a third-party API integrator, allowing Java applications and Android environments to securely exchange data with external identity providers. The library provides a framework for managing secure data exchanges through pre-configured provider settings. It enables applications to link to external login services for user authentication and interaction with third-party APIs without requiring the local storage of passwords. The project covers identity pro

V2rayU is a native macOS network proxy tool and multi-protocol proxy manager. It functions as a V2Ray proxy client that enables users to route network traffic through secure tunnels to bypass network restrictions on Mac. The application features a TUN mode VPN client that uses a virtual network adapter to forward all system traffic through a secure tunnel. It supports configuring and switching between V2Ray, Shadowsocks, and Socks5 proxy servers via manual entry or external subscriptions. The tool provides capabilities for network traffic routing, proxy load balancing, and server configurati

cfnew is a V2Ray subscription management system and network proxy orchestrator designed to route traffic across multiple protocols, including VLESS, Trojan, and xhttp. It functions as a latency testing tool and a web-based proxy controller for managing node configurations and preferred IP addresses. The project features a subscription format converter that uses user-agent detection to deliver network configurations in formats compatible with specific client applications. It also provides a web-based configuration interface backed by a key-value store for updating system settings and routing r

SwitchyOmega is a browser proxy manager and extension that controls network traffic routing and manages proxy configurations through a graphical interface. It functions as a proxy routing orchestrator and a PAC script generator, converting user-defined rules into JavaScript auto-config scripts for automated network routing. The project enables users to organize network configurations into distinct profiles, allowing for the switching of proxying logic based on different environments. It automates the selection of proxy servers by matching requested URLs against predefined patterns to avoid ma

Awesome VPN is a free proxy subscription aggregator that collects and distributes daily-updated proxy nodes from multiple sources. It supports the VMess, VLESS, Trojan, and Shadowsocks protocols, and delivers subscription links in Base64, Clash YAML, and Sing-box JSON formats for broad client compatibility. The service automatically refreshes its proxy node list every day at midnight UTC via a scheduled cron job, ensuring that only current working servers are distributed. To maintain reliable access in regions where GitHub is slow or blocked, subscription links are also served through alterna

Qv2ray is a multi-protocol proxy client and a graphical user interface for managing V2Ray network proxy connections. Built as a cross-platform desktop application, it provides a consistent visual experience for configuring traffic routing across Linux, Windows, and macOS. The application utilizes a plugin-based architecture that allows for the integration of third-party extensions to add support for additional network proxy protocols. This modular system enables the software to be extended without modifying the core binary. The tool covers multi-protocol proxy routing for tunneling protocols

This project is a shell-based deployment script for configuring multi-protocol proxy servers using sing-box. It provides a system for installing and managing network proxy environments on remote servers, supporting protocols such as Reality, Hysteria2, TUIC, Trojan, and Shadowsocks. The tool includes a proxy subscription generator that creates formatted node lists compatible with various proxy clients via a single subscription link. It also implements specialized network configurations, including Cloudflare WARP proxy chains for bypassing regional restrictions and Argo tunnel gateways for NAT

OpenWrt-passwall is a network proxy management tool designed for OpenWrt firmware to facilitate internet censorship circumvention. It enables the routing of traffic through proxy servers or VPN tunnels to bypass network blocks and regional restrictions. The project integrates VPN client functionality directly into the router, allowing all connected devices to secure their traffic without individual software installations. It manages the configuration and switching of various proxy protocols and servers to control how local network traffic exits the gateway. The system utilizes a Lua-based we

OpenClash is a network traffic controller designed for embedded router hardware. It functions as a kernel-level traffic management solution that intercepts network packets to enforce user-defined routing policies and connectivity rules across home or office network environments. The project distinguishes itself through a comprehensive build and deployment pipeline tailored for diverse firmware architectures. It provides a cross-compilation environment that transforms source code into hardware-specific installation files, while also offering a package management system to handle the retrieval

Dev-sidecar is a local HTTP proxy tool designed to optimize development environments by intercepting and modifying network traffic. It functions as a man-in-the-middle service that routes outgoing requests through custom endpoints, enabling developers to accelerate access to remote services, manage package registry connections, and bypass regional connectivity restrictions. The tool distinguishes itself through its ability to perform dynamic DNS resolution overrides and certificate-based traffic inspection, allowing for granular control over network paths and secure data analysis. It employs

Shadowsocks-Windows is a desktop proxy manager that provides a graphical interface for configuring system-wide network routing. It functions as a local SOCKS5 or HTTP proxy server, intercepting outbound traffic through system-level injection to route requests through secure, encrypted remote tunnels. The application distinguishes itself through a modular architecture that supports plugin-based transport extensibility, allowing users to integrate external binaries for custom traffic obfuscation and specialized cryptographic protocols. It also enables high-availability networking by automatical