# Network troubleshooting toolkit

> AI-ranked search results for `networking` on awesome-repositories.com — ordered by an LLM for relevance, best match first. 117 total matches; showing the top 27.

Explore on the web: https://awesome-repositories.com/q/networking

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [this search on awesome-repositories.com](https://awesome-repositories.com/q/networking).**

## Results

- [secdev/scapy](https://awesome-repositories.com/repository/secdev-scapy.md) (12,068 ⭐) — Scapy is a network packet manipulation tool and protocol analysis suite designed for crafting, sending, sniffing, and dissecting network traffic. It functions as a framework for building custom network tools that interact directly with low-level packet headers and payloads, enabling users to perform security research and network diagnostics.

The system distinguishes itself through a layer-based construction model that allows users to define protocols as stacked objects, which automatically handle checksums and field offsets. It utilizes dynamic field reflection to map packet structures to bin
- [nginx/nginx](https://awesome-repositories.com/repository/nginx-nginx.md) (30,903 ⭐) — Nginx is a high-performance HTTP server and reverse proxy designed to handle high-concurrency traffic through an efficient, event-driven architecture. It functions as a versatile traffic management gateway and content delivery accelerator, providing the infrastructure necessary to route client requests, balance loads across backend servers, and serve static assets with minimal resource consumption.

The project distinguishes itself through a master-worker process model that separates configuration management from request processing, ensuring stable operations under heavy load. Its modular requ
- [gyulyvgc/sniffnet](https://awesome-repositories.com/repository/gyulyvgc-sniffnet.md) (39,325 ⭐) — This application is a desktop network traffic analyzer that provides real-time monitoring and forensic inspection of data packets. By interfacing directly with low-level system drivers, it captures raw network traffic from physical or virtual adapters to identify communication patterns, track bandwidth usage, and diagnose connectivity issues.

The system distinguishes itself through an immediate-mode graphical interface that rebuilds the display state every frame, ensuring high responsiveness during live data updates. It maintains performance by using asynchronous message passing to decouple t
- [ntop/ntopng](https://awesome-repositories.com/repository/ntop-ntopng.md) (7,880 ⭐) — ntopng is a web-based network traffic monitoring tool and flow data aggregator. It functions as a network security monitor, an SNMP network management system, and an industrial protocol analyzer for OT and SCADA environments.

The system provides specialized inspection for industrial protocols such as Modbus, DNP3, and IEC 60870. It distinguishes itself through behavioral threat detection, encrypted traffic analysis via handshake fingerprinting, and the ability to identify hardware and operating systems using DHCP and MAC address patterns.

Its broader capabilities include real-time traffic an
- [v2fly/v2ray-core](https://awesome-repositories.com/repository/v2fly-v2ray-core.md) (34,136 ⭐) — V2ray-core is a modular network proxy engine designed to manage inbound and outbound traffic through a unified, rule-based processing pipeline. It functions as a background service that operates multiple concurrent network protocols within a single process, allowing for flexible traffic management and the independent handling of diverse communication streams.

The project distinguishes itself through a highly decoupled architecture that treats network protocols as swappable modules, enabling the encapsulation of various transport layers into a consistent stream-based model. It features a centr
- [jpillora/chisel](https://awesome-repositories.com/repository/jpillora-chisel.md) (15,615 ⭐) — Chisel is a network tunneling tool that facilitates secure communication by encapsulating TCP and UDP traffic within HTTP requests. It functions as a connection multiplexer, consolidating multiple logical network streams into a single persistent connection to improve throughput and reduce overhead. By leveraging standard web protocols, the system enables firewall traversal and provides a mechanism for remote port forwarding and proxying.

The project distinguishes itself through its focus on resilient connectivity and granular access control. It maintains persistent network sessions across uns
- [mhsanaei/3x-ui](https://awesome-repositories.com/repository/mhsanaei-3x-ui.md) (40,785 ⭐) — This project is a comprehensive network traffic orchestrator and server infrastructure manager designed to provide centralized control over secure tunneling, routing, and security policies. It functions as a web-based dashboard that enables administrators to deploy and maintain network services, enforce access restrictions, and manage traffic flow through a private server environment.

The platform distinguishes itself by integrating advanced traffic anonymization and routing capabilities, including support for relay networks and secure tunnels to bypass regional restrictions. It provides gran
- [snail007/goproxy](https://awesome-repositories.com/repository/snail007-goproxy.md) (16,874 ⭐) — This project is a multi-protocol proxy server and network tunneling tool designed to manage traffic across heterogeneous infrastructure. It functions as a traffic management gateway, providing the core infrastructure to route, filter, and secure network connections through a unified interface.

The software distinguishes itself through its support for cascading proxy chaining and dynamic upstream load balancing, which allow for the creation of complex, multi-hop network paths. It provides granular control over traffic flow by normalizing diverse protocols, enabling transparent port forwarding,
- [containous/traefik](https://awesome-repositories.com/repository/containous-traefik.md) (63,656 ⭐) — Traefik is a cloud-native load balancer and dynamic reverse proxy designed for microservices traffic routing. It automatically discovers services and generates network routes by listening to infrastructure changes in orchestrators and service registries.

The project distinguishes itself through auto-configuring service routing, which eliminates manual configuration by updating routing rules in real time as infrastructure scales. It also provides automated SSL certificate management, utilizing ACME-based automation to request and renew certificates from remote authorities.

Additional capabili
- [microsoft/ethr](https://awesome-repositories.com/repository/microsoft-ethr.md) (5,861 ⭐) — ethr is a command line network diagnostic tool and performance analyzer designed to measure throughput, latency, and packet loss across TCP, UDP, and ICMP protocols. It functions as a multi-threaded network throughput tester and a diagnostic utility for analyzing connection health between client and server endpoints.

The project differentiates itself through specialized diagnostics such as TCP retransmission monitoring and bidirectional path analysis to identify asymmetric performance differences. It provides the ability to evaluate the overhead of encrypted HTTPS connections and enforce spec
- [arkime/arkime](https://awesome-repositories.com/repository/arkime-arkime.md) (7,399 ⭐) — Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network traffic, indexing metadata, and performing network forensics. It functions as a network traffic indexer and security tool that enables the monitoring, querying, and browsing of large-scale network traffic across multi-cluster architectures.

The platform distinguishes itself through its ability to manage distributed capture clusters from a centralized administrative dashboard. It integrates external data feeds with internal traffic logs to identify known threats and provides a pro
- [haproxy/haproxy](https://awesome-repositories.com/repository/haproxy-haproxy.md) (6,344 ⭐) — HAProxy is a high-performance TCP and HTTP proxy that distributes traffic across multiple backend servers to ensure availability and fault tolerance for critical services. It operates in either TCP or HTTP mode, with an event-driven, single-threaded reactor that handles tens of thousands of connections without context switching, and supports kernel-level data transfer to minimize memory usage and latency.

What distinguishes HAProxy is its configuration-file-first design, where all load-balancing rules and runtime behavior are defined in a declarative text file parsed at startup. It embeds a L
- [flowseal/zapret-discord-youtube](https://awesome-repositories.com/repository/flowseal-zapret-discord-youtube.md) (29,594 ⭐) — This project is a censorship circumvention utility designed to maintain connectivity to restricted online services by evading deep packet inspection. It functions as a network traffic redirection service that manipulates packet headers at the transport layer to bypass regional network filters and censorship systems.

The tool distinguishes itself by providing granular control over traffic management, allowing users to define specific lists of domains and IP addresses for targeted interception. By applying custom bypass strategies only to these designated hosts, the utility ensures that the rem
- [openvswitch/ovs](https://awesome-repositories.com/repository/openvswitch-ovs.md) (3,904 ⭐) — Open vSwitch is a software-defined network switch and high-performance data plane engine. It functions as a virtual layer 2 switch and network orchestrator, implementing the OpenFlow protocol to decouple the control plane from the data plane for programmable network forwarding.

The project distinguishes itself through a userspace-kernel datapath split and the use of poll-mode drivers for kernel-bypass acceleration. It provides a network tunneling gateway to extend virtual networks across physical hosts and utilizes a transactional, schema-based configuration database with state replication fo
- [easegress-io/easegress](https://awesome-repositories.com/repository/easegress-io-easegress.md) (5,871 ⭐) — Easegress is a cloud-native traffic orchestration platform that functions as a multi-protocol API gateway and service mesh proxy. It routes, transforms, and orchestrates HTTP and MQTT traffic through configurable filter chains, providing high availability, security controls, and resilience for backend services. The platform integrates with service discovery systems like Kubernetes, Consul, and Eureka to dynamically route traffic to discovered services with automatic failover and health monitoring.

The system distinguishes itself through a pipeline-based filter chain architecture where request
- [aol/moloch](https://awesome-repositories.com/repository/aol-moloch.md) (7,399 ⭐) — Moloch is a full packet capture system and network forensics platform designed for large scale network traffic recording and indexing. It functions as a distributed packet indexer that stores raw data in PCAP format for deep packet analysis and security investigations.

The system distinguishes itself through a decentralized architecture that distributes capture and viewing components across multiple nodes to handle high volumes of network traffic. It utilizes a web-based management interface for browsing network sessions and provides a programmable API for exporting captured traffic and metad
- [fabiolb/fabio](https://awesome-repositories.com/repository/fabiolb-fabio.md) (7,332 ⭐) — Fabio is a network gateway that provides reverse proxying, layer 7 traffic management, and automated service discovery mapping. It functions as an HTTP reverse proxy, a gRPC and TCP proxy, and a service discovery gateway to route incoming traffic to healthy backend instances.

The project distinguishes itself through deep integration with service registries, specifically acting as a Consul load balancer to automatically synchronize routing tables and update destination targets. It manages diverse traffic types using SNI-based routing for raw TCP streams and maintains full protocol compatibilit
- [alibaba/higress](https://awesome-repositories.com/repository/alibaba-higress.md) (7,558 ⭐) — Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures.

The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c
- [shadowsocks/shadowsocks-windows](https://awesome-repositories.com/repository/shadowsocks-shadowsocks-windows.md) (59,574 ⭐) — Shadowsocks-Windows is a desktop proxy manager that provides a graphical interface for configuring system-wide network routing. It functions as a local SOCKS5 or HTTP proxy server, intercepting outbound traffic through system-level injection to route requests through secure, encrypted remote tunnels.

The application distinguishes itself through a modular architecture that supports plugin-based transport extensibility, allowing users to integrate external binaries for custom traffic obfuscation and specialized cryptographic protocols. It also enables high-availability networking by automatical
- [xx-net/xx-net](https://awesome-repositories.com/repository/xx-net-xx-net.md) (33,454 ⭐) — XX-Net is a cross-platform desktop application that functions as a local proxy server and network traffic router. It intercepts outgoing network requests from a local machine and redirects them through encrypted tunnels to a distributed mesh of cloud-based nodes, facilitating secure and reliable access to external resources.

The software distinguishes itself by providing a centralized management interface for coordinating complex proxy infrastructure. It employs rule-based traffic routing, allowing users to define custom logic based on destination addresses and protocols to determine the opti
- [metacubex/clashmetaforandroid](https://awesome-repositories.com/repository/metacubex-clashmetaforandroid.md) (34,190 ⭐) — Clash Meta for Android is a system-level network utility that functions as a rule-based proxy engine for mobile devices. It operates by intercepting system-wide network traffic through a virtual interface, allowing it to route data packets through configurable tunnels based on domain, IP, and geo-location patterns. By acting as a transparent proxy, the application manages connectivity and enhances privacy for all installed software on the device.

The project distinguishes itself by utilizing a high-performance, cross-compiled proxy kernel that handles concurrent connections and protocol trans
- [sagernet/sing-box](https://awesome-repositories.com/repository/sagernet-sing-box.md) (35,061 ⭐) — Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment.

The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unifie
- [curl/curl](https://awesome-repositories.com/repository/curl-curl.md) (42,214 ⭐) — Curl is a command-line tool and portable library for transferring data across a wide range of network protocols. It functions as a unified engine that abstracts diverse communication standards, allowing users and developers to move files and information between servers using a consistent interface. The project provides both a versatile command-line client for terminal-based automation and a stable programmatic interface for integrating complex network operations into applications.

The system is distinguished by its protocol-agnostic core and its ability to manage both synchronous and asynchro
- [pocoproject/poco](https://awesome-repositories.com/repository/pocoproject-poco.md) (9,438 ⭐) — POCO is a comprehensive C++ application framework that provides a cross-platform set of libraries for building network-centric applications. It offers a unified abstraction layer that wraps platform-specific APIs, enabling the same code to run across desktop, server, mobile, IoT, and embedded systems. The framework is organized into modular libraries that can be compiled and linked selectively, allowing developers to include only the components their application needs.

The framework distinguishes itself through its broad coverage of application infrastructure needs, including threading and sy
- [emanuele-f/pcapdroid](https://awesome-repositories.com/repository/emanuele-f-pcapdroid.md) (4,133 ⭐) — PCAPdroid is an Android network traffic analyzer and packet capture tool that operates without requiring root access. It functions as a VPN-based firewall and network controller, capable of recording traffic in PCAPng format and blocking connections to specific domains or malicious hosts.

The project distinguishes itself through a proxy-based system for decrypting TLS traffic and routing device network traffic through SOCKS5 proxies or the Tor network. It further allows for the modification of live HTTP requests and responses via custom scripts.

Its capabilities cover application connection
- [kerryjiang/supersocket](https://awesome-repositories.com/repository/kerryjiang-supersocket.md) (4,220 ⭐) — SuperSocket is a .NET socket server framework designed for building network servers and custom communication protocols. It functions as a pipeline-based network engine and a server for TCP, UDP, and WebSocket protocols.

The framework provides a socket session manager to track and control the lifecycle of network connections and client request states. It enables the implementation of bespoke communication standards and the development of socket proxies.

The system handles concurrent client connections and processes network traffic through a structured architecture of pipeline filters, middlew
- [ockam-network/ockam](https://awesome-repositories.com/repository/ockam-network-ockam.md) (4,628 ⭐) — Ockam is an end-to-end encryption framework and distributed identity provider designed to establish secure communication between applications and devices. It provides a secure network overlay that utilizes cryptographic identities and attribute-based access control to implement zero trust network access.

The project distinguishes itself through metadata-driven multi-hop routing and a pluggable transport layer, allowing encrypted traffic to move across diverse network topologies without requiring virtual IP overlays. It specifically enables secure tunneling for legacy applications by wrapping