Awesome GitHub RepositoriesLocal Proxy Gateways

XX-Net is a cross-platform desktop application that functions as a local proxy server and network traffic router. It intercepts outgoing network requests from a local machine and redirects them through encrypted tunnels to a distributed mesh of cloud-based nodes, facilitating secure and reliable access to external resources. The software distinguishes itself by providing a centralized management interface for coordinating complex proxy infrastructure. It employs rule-based traffic routing, allowing users to define custom logic based on destination addresses and protocols to determine the opti

Netch is a multi-protocol proxy client and network traffic interceptor designed to route internet traffic through VPN and proxy tunnels. It functions as a connection manager that tunnels outbound data to modify network paths and bypass network restrictions. The project supports a wide range of tunneling protocols, including Socks5, Shadowsocks, WireGuard, Trojan, VMess, and VLESS. It distinguishes itself by offering the ability to distribute established proxy connections to other devices on a local network and by providing UDP FullCone NAT support to maintain stable peer-to-peer connectivity

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Floci is a local emulator for AWS services and cloud infrastructure designed for developing and testing applications without a live internet connection. It serves as a containerized cloud emulator and a serverless runtime emulator, allowing users to run high-fidelity replicas of cloud databases, queues, and compute services on a local machine. The project distinguishes itself by using real container images instead of simple mocks to ensure behavioral accuracy. It functions as a local API gateway simulator with proxy-based routing for REST and WebSocket APIs, and provides a serverless environm

Fancyss is a network utility designed to function as a Shadowsocks proxy gateway. It operates as a transparent proxy manager that intercepts and routes network traffic at the gateway level, allowing for centralized management of internet access across all connected devices without requiring individual client-side configurations. The system employs policy-based routing and rule-based traffic filtering to direct data through specific network paths. It maintains multiple server connections simultaneously, utilizing failover-aware connection pooling to automatically switch traffic to healthy node

This project is a network traffic manipulation tool and proxy designed to intercept, inspect, and modify data streams between mobile applications and their servers. It functions as a scriptable content blocker and traffic router, allowing users to apply custom rules to incoming and outgoing network requests. The tool enables users to bypass regional restrictions and subscription paywalls by injecting configuration rules that override server-side validation. It also provides capabilities for removing advertisements, tracking scripts, and promotional content from mobile applications and web ser

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

Pan-light is a tool for managing and downloading files from Baidu network storage. It provides high-speed file downloading and remote media streaming capabilities. The application uses concurrent segmented transfers to maximize network throughput and employs disk-persisted state tracking to resume interrupted downloads. It also includes a local proxy to bypass hotlinking protections, allowing remote videos to be streamed directly into a media player. The project features a cross-platform graphical user interface built with Go and Qt. Additionally, it supports remote software previews by runn

A Rust port of shadowsocks

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

VPNHotspot est un utilitaire de routage réseau Android au niveau root conçu pour partager une connexion VPN active avec d'autres appareils via un hotspot sans fil ou un répéteur. Il fonctionne comme un gestionnaire réseau qui modifie les paramètres sans fil du système pour router le trafic partagé via un tunnel chiffré. L'outil fournit des capacités pour contourner les restrictions de partage de connexion (tethering) des opérateurs de réseau mobile en routant le trafic via un VPN ou un socksifier. Il inclut un contrôleur pour configurer le déchargement matériel sans fil et gérer le partage de connexions réseau en tant que répéteur. Le projet couvre des tâches d'administration réseau telles que la configuration de hotspot et la gestion des clients connectés. Il gère le routage réseau au niveau système via le transfert de paquets, les règles de pare-feu et le pontage réseau virtuel.

BrowserMCP is a browser automation bridge that connects AI tools to a live browser session through a local proxy server. It implements a standardized protocol for sending commands like click, type, and navigate to a real browser instance running on the user's machine, while keeping all browsing data on the device. The project distinguishes itself by preserving user sessions and fingerprints across automation tasks. It attaches to the user's existing browser profile to maintain cookies, logins, and authentication state, and uses the real browser's user agent, viewport, and extension context to

clash-for-linux est une plateforme de gestion de proxy pour Linux qui sert de wrapper pour les cœurs Clash et Mihomo. Elle fournit un système pour déployer des binaires de proxy, gérer les abonnements et contrôler l'interception du trafic réseau. La plateforme se distingue par un système de configuration basé sur des mixins qui permet aux utilisateurs de patcher et de remplacer les paramètres d'abonnement sans altérer les fichiers source originaux. Elle inclut également un tableau de bord basé sur le web pour l'administration headless, permettant la surveillance à distance du statut des nœuds, des logs et des politiques de routage. Le système prend en charge le proxying transparent via des interfaces virtuelles en mode TUN pour capturer tout le trafic système et peut être configuré comme une passerelle pour d'autres appareils sur un réseau local. Des capacités supplémentaires incluent le chaînage de relais multi-sauts et la sélection interactive de nœuds pour le pilotage du trafic. L'installation implique un déploiement binaire conscient de l'architecture et l'utilisation de services système pour assurer la persistance au démarrage et le lancement automatisé.

ByeDPIAndroid is a deep packet inspection bypass tool for Android that functions as a local SOCKS5 proxy. It modifies TCP packets to evade network censorship and bypass regional internet restrictions on mobile devices. The project operates as a network traffic obfuscator and TCP packet fragmenter. It splits network data into smaller pieces and hides the nature of internet requests to prevent automated blocking and traffic shaping by internet service providers. The system covers a range of capabilities including host-based traffic interception and dynamic packet modification. It utilizes non-

GreenTunnel est un utilitaire réseau conçu pour contourner l'inspection profonde de paquets (DPI) et la censure internet. Il fonctionne comme un outil qui modifie les paquets réseau sortants et chiffre les recherches DNS pour empêcher les fournisseurs d'accès internet et les systèmes de filtrage réseau de détecter et bloquer des destinations web spécifiques. Le projet implémente un proxy de fragmentation HTTP et un fragmenteur de handshake HTTPS. Ces composants divisent les en-têtes de requête et les enregistrements de handshake TLS sur plusieurs segments pour dissimuler les noms d'hôtes et les noms de serveurs de destination aux systèmes d'inspection. Le logiciel inclut également un client DNS-over-HTTPS pour récupérer les adresses IP en utilisant des protocoles chiffrés, empêchant l'interception ou l'usurpation des recherches DNS standard. Les capacités supplémentaires couvrent la manipulation de paquets TCP et la fragmentation de segments au niveau de la couche transport pour échapper à l'inspection du trafic.

tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It routes system network traffic through a SOCKS5 proxy using a virtual tunnel interface and provides the ability to tunnel IPv4 traffic over IPv6 or vice versa. The project implements a userspace TCP/IP stack to intercept raw IP packets and translate them for transmission to remote proxy servers. It supports multiple proxy protocols, including HTTP, SOCKS4, SOCKS5, and Shadowsocks, allowing application traffic to be redirected without per-app configuration. The software includes cap

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This project is a cloud drive media aggregator and storage proxy that merges content from multiple cloud storage providers into a unified directory. It functions as an M3U playlist generator, converting cloud files and streaming sources into standardized formats for use in external media players. The system acts as a plugin host for Python-based scripts to fetch and parse content from third-party websites. These operations are supported by a local proxy to accelerate request loading and bypass network restrictions. The software includes a web-based interface for managing server settings and

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew