Projects sharing features with XX Net

Clash Nyanpasu is a network proxy client and graphical user interface for managing Clash network cores. It functions as a proxy manager and traffic monitoring dashboard, allowing users to route system traffic and handle proxying through a visual interface. The project distinguishes itself by providing a TUN mode proxy manager for controlling system-wide network tunneling. It features a core-agnostic API layer that standardizes communication between the interface and various interchangeable network core implementations. The application covers proxy configuration management, including profile

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers

Throne is a cross-platform proxy client that provides a unified graphical interface for managing and routing network traffic through secure proxy protocols. It combines subscription-based node management, multi-protocol routing, TUN-based global traffic interception, and DNS leak prevention into a single application that runs on Windows, Linux, and macOS. The application supports a wide range of proxy protocols including SOCKS, HTTP, Shadowsocks, Trojan, and VMess, and can route traffic through chains of multiple proxy servers for layered routing. It creates a virtual network interface to int

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

node-http-proxy is a Node.js HTTP proxy library and toolkit used to create programmable reverse proxies, load balancers, and traffic routers. It functions as a system for forwarding HTTP and WebSocket traffic from clients to backend target servers. The project provides capabilities for translating incoming request paths into backend addresses using programmable matching rules. It supports the creation of bidirectional tunnels to facilitate real-time communication via WebSocket proxying. The library covers the modification of request and response headers, including the rewriting of cookies an

Nekoray is a cross-platform desktop application designed to manage secure network tunnels and proxy configurations. It functions as a graphical interface that routes system traffic through encrypted remote connections to facilitate private browsing and access to geo-restricted content. The application integrates established networking cores to handle complex traffic routing and protocol implementation. By utilizing a local proxy server architecture, it intercepts system traffic and directs it through user-defined rules, allowing for granular control over how data is filtered and transmitted.

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Sozu is a high-performance, memory-safe reverse proxy and load balancer built in Rust. It is designed to manage HTTP, TCP, and UDP traffic through a multi-process architecture that leverages isolated worker processes to ensure fault tolerance and efficient resource utilization across multi-core hardware. The project distinguishes itself through a focus on continuous availability and dynamic control. It features a unique binary hot-reloading mechanism and a Unix-socket-based control plane, allowing administrators to update proxy configurations, modify listener settings, and even replace the pr

MTProxy is a proxy server that routes traffic to Telegram servers using the MTProto protocol to bypass network restrictions. It functions as a system for managing secure connections and forwarding protocol traffic between clients and destination servers. The project implements traffic obfuscation by adding random padding to packets to mask data patterns and hide proxy usage from internet service providers. It also includes a connection manager that restricts user access through the validation of specific authentication secrets. The system provides operational observability by exposing real-t

This project is a router-based network utility designed to manage and route local internet traffic through remote servers. It functions as a plugin that intercepts network packets at the kernel level, allowing users to direct traffic through encrypted tunnels to bypass regional restrictions. The system provides a centralized manager for Shadowsocks connections, utilizing subscription links to dynamically provision and organize multiple network nodes. It incorporates a modular routing engine that applies policy-based rules to classify and redirect traffic, ensuring that specific data types are

Streisand is an orchestration system for deploying multi-protocol tunneling services and traffic obfuscation tools designed to circumvent regional network restrictions. It functions as a deployment utility and manager for various VPN and proxy services on remote cloud servers. The system distinguishes itself through a network obfuscation toolkit that wraps traffic in layers to evade deep packet inspection and bandwidth throttling. It automates the setup of multiple protocols, including WireGuard, OpenVPN, Shadowsocks, OpenConnect, OpenSSH, and Tor bridges. The project also includes utilities

This project is a repository of free proxy server configurations and subscription links designed to bypass internet censorship and regional restrictions. It provides curated collections of public server addresses for the Shadowsocks, V2Ray, and Trojan network protocols. The project includes a subscription converter that transforms raw proxy node links into standardized formats compatible with mobile and desktop applications. It specifically provides subscription links for Clash and other VPN clients, utilizing an automated refresh mechanism to maintain high availability of the shared nodes.

ShadowsocksBio is a documentation site and technical resource dedicated to network proxy guides and censorship circumvention. It serves as a specialized guide for using Shadowsocks to route traffic around internet firewalls and bypass network restrictions. The project provides technical explanations of encrypted proxy protocols and DNS modification methods. It includes an analysis of various proxy clients across mobile and desktop platforms, comparing their features and pricing. The content covers the configuration of Shadowsocks proxy clients across different operating systems and documents

Shadowsocks-qt5 is a cross-platform graphical interface for configuring and managing Shadowsocks proxy connections. It functions as a SOCKS5 proxy manager used to route network traffic through remote encrypted proxy servers. The project includes a proxy latency tester to measure round-trip times to remote servers and a network traffic monitor that tracks the volume of data sent and received through active connections. The software provides mechanisms for proxy profile management, allowing users to store and switch between different server configurations. It also includes a proxy connection i

v2ray-core is a network proxy framework and custom proxy engine designed for censorship circumvention. It functions as a traffic routing platform that directs network data between inbound and outbound connections to access blocked content and services. The system employs a modular architecture using pluggable protocol handlers and a chain-based connection pipeline to transform and forward network traffic. It provides secure tunneling infrastructure to establish encrypted connections and uses a rule-based routing system to direct data between protocols and destinations. The framework includes

Edgetunnel is a serverless network proxy and VLESS proxy implementation designed to run on Cloudflare Workers. It functions as a VPN proxy that routes network traffic through edge computing platforms to provide an anonymized gateway for outbound internet requests. The project focuses on internet censorship circumvention and the bypass of network restrictions. It utilizes serverless proxy routing to mask original traffic sources and navigate regional filters or firewalls. The system manages traffic through serverless-based proxy tunneling, using WebSocket-based stream forwarding and protocol-

This project is a censorship circumvention proxy client and cross-platform installer. It provides software designed to bypass internet filters, restrictive network firewalls, and the Great Firewall of China to enable access to blocked global websites. The software enables the download and installation of proxy and VPN clients across multiple desktop and mobile operating systems. These tools route traffic to bypass national firewalls and restrictive network filters. The project also covers network access acceleration to improve connection stability when accessing foreign servers and the manag

ShadowsocksR-Windows is a proxy client for Windows designed to route network traffic through ShadowsocksR proxy servers. It functions as a network proxy that establishes secure tunnels to bypass internet censorship and regional restrictions. The application manages system-wide network routing and provides SOCKS5 proxy client capabilities to hide origin IP addresses. It redirects local traffic through a remote server to maintain internet privacy and circumvent network-level blocks. The project incorporates traffic interception and encapsulation through a user-mode network wrapper and TAP-base

Cloak is a set of censorship circumvention tools designed for secure proxy tunneling and internet traffic obfuscation. It focuses on bypassing restrictive firewalls and state surveillance by disguising proxy connections as standard web browsing. The project utilizes HTTP fingerprint masquerading to imitate common browser signatures and routes traffic through content delivery networks to mask the identity of the origin server. To further hide the server's purpose, it includes a mechanism to redirect unauthenticated connection requests to a third-party website. The system implements transport

Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination

Shadowsocks is a secure network tunneling tool designed for censorship circumvention and private internet connectivity. It functions as a proxy system that routes traffic through encrypted tunnels, allowing users to bypass regional network restrictions and protect data from interception across public infrastructures. The project utilizes a lightweight, custom proxy protocol that incorporates stream-based cipher encryption to obfuscate payload content and prevent deep packet inspection. By employing an asynchronous, event-driven networking model, the system manages concurrent connections effic

OpenVPN is a cross-platform networking solution that establishes secure virtual private network connections by wrapping data traffic within encrypted tunnels. It functions as a server-side application that authenticates remote endpoints and routes encrypted traffic to provide access to private network resources across untrusted public networks. The software utilizes standard cryptographic protocols to perform mutual authentication and key exchange over a dedicated control channel. It verifies the identity of remote systems through certificate-based authentication, ensuring that only trusted e

Subconverter is a network utility designed to translate, merge, and filter proxy subscription configurations. It functions as a service that converts proxy links between various client-specific formats, ensuring compatibility across different applications and platforms. By providing a unified interface for managing diverse connection sources, the tool enables consistent network policy application and streamlined configuration management. The project distinguishes itself through an HTTP-based transformation interface that processes subscription data dynamically. It utilizes an in-memory pipeli

This project is a censorship circumvention utility designed to maintain connectivity to restricted online services by evading deep packet inspection. It functions as a network traffic redirection service that manipulates packet headers at the transport layer to bypass regional network filters and censorship systems. The tool distinguishes itself by providing granular control over traffic management, allowing users to define specific lists of domains and IP addresses for targeted interception. By applying custom bypass strategies only to these designated hosts, the utility ensures that the rem

Netmaker is a platform for automating and managing virtual mesh networks built on WireGuard. It functions as a centralized control plane that orchestrates encrypted, peer-to-peer tunnels across distributed infrastructure, including cloud environments, on-premise data centers, and containerized clusters. By automating the configuration of routing tables and access policies, the system enables secure, private connectivity between diverse devices and services without requiring manual network administration. The platform distinguishes itself through its focus on zero-trust network access and soft