Open-source alternatives to GUI.for.SingBox

Clashmi is a graphical proxy client designed to route internet traffic and bypass network restrictions. It provides a user interface for managing proxy cores, configuring domain lookups, and controlling virtual network interfaces. The project features a dedicated manager for proxy subscriptions and a system for rule-based traffic routing. It includes a transparent proxy controller that intercepts system-wide traffic through a virtual interface and an automatic selection mechanism that chooses the fastest server based on real-time latency. Administration is handled through a web-based control

BPB-Worker-Panel is a control panel designed for deploying and managing VLESS and Trojan proxies hosted on Cloudflare Workers. It functions as a proxy subscription generator and a manager for secure DNS over HTTPS servers and WireGuard configuration provisioning. The project distinguishes itself through network traffic obfuscation capabilities, utilizing packet fragmentation and SNI spoofing to evade detection. It provides specialized administration for Cloudflare Warp and Warp Pro connections, including the ability to optimize endpoints and export WireGuard configurations. The system covers

Throne is a cross-platform proxy client that provides a unified graphical interface for managing and routing network traffic through secure proxy protocols. It combines subscription-based node management, multi-protocol routing, TUN-based global traffic interception, and DNS leak prevention into a single application that runs on Windows, Linux, and macOS. The application supports a wide range of proxy protocols including SOCKS, HTTP, Shadowsocks, Trojan, and VMess, and can route traffic through chains of multiple proxy servers for layered routing. It creates a virtual network interface to int

This project is a network node aggregator and proxy subscription manager designed to bypass network restrictions. It functions as a tool for importing and synchronizing remote server lists and configuration files to maintain updated network node connectivity. The system includes a regional app store gateway that utilizes a rotating pool of verified accounts to download location-restricted applications from various regional stores. It also provides a curated collection of free and stable subscription links for connectivity testing and accessing blocked content. The tool provides a configurati

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

Sparkle is a desktop application that provides a graphical interface for managing Clash and Mihomo proxy configurations, rules, and subscriptions. It replaces manual configuration file editing with a visual dashboard for controlling proxy settings, outbound interfaces, and Tun mode activation. The application distinguishes itself through deep integration with Sub-Store for organizing and updating proxy subscription links from a single panel, and by bundling both stable and preview Mihomo kernels that users can switch between without external downloads. It also includes a config rewrite overri

ZeroOmega is a web-based proxy orchestrator and manager designed for real-time updates to active network gateways. It functions as a system for configuring, storing, and switching between different network proxy profiles to direct internet traffic. The project features a PAC script generator that translates structured proxy profile data into auto-configuration files. These scripts automate network routing decisions by matching requested URLs against defined patterns. Administration is handled through a browser-based interface that allows for the modification of routing rules and the manageme

Karing is a multi-protocol proxy client and network traffic router designed to manage and direct internet traffic through various proxy protocols. It functions as a proxy subscription manager that imports and converts server lists from multiple external formats and providers into a unified configuration. The project features a cross-device synchronization system that keeps network routing settings and server lists consistent across multiple devices via cloud or local sharing. It includes a latency-based server selector that measures real-time response times to automatically connect to the fas

ClashX.Meta is a macOS desktop application that provides a graphical interface for managing the Clash proxy engine. It enables rule-based traffic routing using domain, IP, and GeoIP rules, and allows users to manage proxy configurations and toggle system proxy settings directly from the menu bar. The application serves as a full-featured client for controlling the core proxy daemon on macOS. The project includes a YAML-based configuration manager with built-in schema validation, ensuring proxy profiles are valid before activation. It also provides a TUN virtual network stack that captures all

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

clash-for-linux is a proxy management platform for Linux that serves as a wrapper for Clash and Mihomo cores. It provides a system for deploying proxy binaries, managing subscriptions, and controlling network traffic interception. The platform distinguishes itself through a mixin-based configuration system that allows users to patch and override subscription settings without altering the original source files. It also includes a web-based dashboard for headless administration, enabling remote monitoring of node status, logs, and routing policies. The system supports transparent proxying via

ShadowsocksX-NG is a macOS application that functions as a Shadowsocks VPN client, SOCKS5 proxy manager, and PAC routing client. It is designed to bypass network restrictions by managing connections to Shadowsocks proxy servers through a graphical user interface. The project provides mechanisms for importing server profiles via QR codes and URLs, and it supports the integration of third-party plugins to modify network traffic. It also includes a local HTTP proxy server that translates SOCKS5 traffic into HTTP proxy format for application compatibility. The utility covers network traffic rout

SSPanel-UIM is a centralized proxy service management system used to deploy and administrate a network of proxy servers and nodes across multiple protocols. It functions as a management panel for coordinating network resources and providing a unified interface for service administration. The project incorporates a subscription billing system with integrated payment gateways to handle recurring fees and usage-based billing. It features a subscription management panel that generates and distributes proxy configuration lists in multiple formats for compatibility with various client applications.

x-ui is a web-based management interface for configuring and administering Xray-core proxy servers and routing rules. It provides a centralized suite of tools including an HTTP API proxy controller, a proxy subscription server, and an automated SSL certificate tool. The project distinguishes itself through a subscription-based distribution system that allows administrators to deliver connection configurations and update links to multiple clients via unique URLs. It further automates security with ACME-based certificate renewal and provides a decoupled architecture that allows the proxy engine

V2rayU is a native macOS network proxy tool and multi-protocol proxy manager. It functions as a V2Ray proxy client that enables users to route network traffic through secure tunnels to bypass network restrictions on Mac. The application features a TUN mode VPN client that uses a virtual network adapter to forward all system traffic through a secure tunnel. It supports configuring and switching between V2Ray, Shadowsocks, and Socks5 proxy servers via manual entry or external subscriptions. The tool provides capabilities for network traffic routing, proxy load balancing, and server configurati

This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

ntopng is a web-based network traffic monitoring tool and flow data aggregator. It functions as a network security monitor, an SNMP network management system, and an industrial protocol analyzer for OT and SCADA environments. The system provides specialized inspection for industrial protocols such as Modbus, DNP3, and IEC 60870. It distinguishes itself through behavioral threat detection, encrypted traffic analysis via handshake fingerprinting, and the ability to identify hardware and operating systems using DHCP and MAC address patterns. Its broader capabilities include real-time traffic an

Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment. The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unifie

CrowdSec is a collaborative, distributed security engine designed for threat detection and infrastructure protection. It functions as an intrusion detection system that parses logs and network traffic to identify malicious patterns, utilizing a bucket-based threshold detection model to aggregate events and trigger alerts. The platform is built on a modular architecture that includes a centralized local API server for managing security signals and a relational database for persistent storage of remediation decisions. What distinguishes the project is its decoupled enforcement model, which offl

Excelize is a library for reading and writing spreadsheet files in the Office Open XML format. It provides a comprehensive suite of tools for programmatically creating, modifying, and analyzing workbooks, worksheets, and cell data, ensuring compatibility across various office software suites through structured XML serialization. The library distinguishes itself with a built-in formula calculation engine that evaluates complex mathematical and logical expressions directly against workbook data. It also features a memory-mapped streaming architecture, which allows for the efficient processing o

This project is an orchestration system for deploying and managing encrypted proxy nodes across virtual and serverless hosting platforms. It provides a web-based management interface for configuring proxy servers and a dedicated manager for generating and synchronizing subscription links compatible with network client software. The system features a CDN tunneling orchestrator to mask origin server IP addresses using domain tunnels and CDN back-ends. It includes a Cloudflare WARP integrator to handle account configurations and route outbound traffic through specialized connections to manage ou

s-ui is a web-based management interface for Xray VPN protocols. It provides a graphical user interface for configuring and monitoring network protocols, inbounds, and outbound routing rules. The project includes a VPN subscription manager for generating and distributing configuration links to clients, as well as an access controller to enforce data usage caps and account expiration dates. Administrative access is secured through token authentication and SSL encryption via custom certificates. The system provides observability tools for tracking real-time CPU, memory, and network traffic met

Clash Party is a cross-platform desktop application that serves as a graphical interface for the Mihomo proxy engine. It functions as a network proxy configuration tool, allowing users to route and filter system-wide data packets through a central engine while monitoring traffic flow via a visual dashboard. The application distinguishes itself by consolidating multiple proxy service subscriptions into a single interface, enabling users to fetch, merge, and track active connection status across various providers. It supports a local-first approach to state persistence, ensuring that proxy conf

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures c

electron-ssr-backup is a cross-platform Electron desktop application that serves as a ShadowsocksR proxy client and system network manager. It acts as a proxy server orchestrator, allowing users to route network traffic through specific servers and automate operating system proxy configurations. The application enables the import and organization of proxy server lists via subscription URLs, QR codes, manual configuration files, or clipboard pasting. It includes a synchronization mechanism to fetch and update server databases from remote URLs. The software provides controls for toggling betwe

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers