Open-source alternatives to GitHub520

dnsmasq-china-list is a configuration generator and a set of DNS filter and routing lists. It converts curated domain lists into configuration files for dnsmasq to optimize regional name resolution and direct specific domain requests to regional servers. The project focuses on reducing latency and avoiding DNS hijacking for users in China by routing traffic through regional servers and directing requests to the nearest content delivery network nodes. It also provides rules to block malicious domains and advertisements by returning failure responses to prevent network injection. The system ma

DnsServer is a recursive and authoritative DNS server that provides domain name resolution and zone hosting. It functions as both a recursive resolver, performing iterative lookups across the internet, and an authoritative manager for primary and secondary DNS zones. The system distinguishes itself through high-availability clustering and a programmable HTTP API for automating server configurations and bulk record management. It supports a wide range of encrypted transport protocols, including TLS, HTTPS, and QUIC, and allows for custom functionality via a plugin-based request interception fr

ipv6-hosts is a suite of network utilities designed for DNS automation, IPv6 address generation, and the reduction of network latency through local host mapping. It functions as a DNS resolution automation tool and an IPv6 hosts file generator that maps global service domains to optimized IPv6 addresses. The project provides specialized capabilities for IPv6 address enumeration and the decoding of obfuscated server and location identifiers using substitution ciphers. These utilities allow for the generation and resolution of IPv6 addresses based on known network address prefixes. The softwar

AdAway is an Android network firewall and DNS traffic filter that functions as a local VPN ad blocker. It intercepts network requests to prevent advertisements and tracking domains from reaching the device by filtering traffic against host lists. The project features a host file manager capable of importing and converting blocklists from external third-party providers. It includes a system for managing both blocked and allowed domains, allowing for the creation of custom rules to permit specific trusted sites or block individual domains. The tool provides granular traffic control through app

Kubo is a peer-to-peer implementation of the InterPlanetary File System (IPFS) designed for decentralized data storage and content delivery. It uses content-addressing, directed acyclic graphs, and distributed hash tables to identify, distribute, and retrieve data across a network without relying on central servers. The project differentiates itself by providing a virtual filesystem via FUSE, which maps decentralized network namespaces to local operating system directories for direct file access. It also includes integrated HTTP gateways that translate peer-to-peer content into standard web t

Dev-sidecar is a local HTTP proxy tool designed to optimize development environments by intercepting and modifying network traffic. It functions as a man-in-the-middle service that routes outgoing requests through custom endpoints, enabling developers to accelerate access to remote services, manage package registry connections, and bypass regional connectivity restrictions. The tool distinguishes itself through its ability to perform dynamic DNS resolution overrides and certificate-based traffic inspection, allowing for granular control over network paths and secure data analysis. It employs

This project is a command-line utility designed to benchmark and optimize network connectivity by identifying the fastest available content delivery network nodes. It performs concurrent latency probing and speed testing across large pools of IP addresses to evaluate real-world performance based on your specific geographic location and network environment. Beyond simple benchmarking, the tool functions as an automated configuration manager that synchronizes your network settings with the best-performing endpoints discovered during testing. It integrates with external DNS management services t

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

Gasmask is a macOS utility designed to manage system-level network routing by organizing, merging, and activating multiple hosts file configurations. It provides a graphical interface that allows users to switch between different connectivity environments without manual file editing. The tool enables the aggregation of local and remote network mapping sets into a single active configuration. It supports the synchronization of external routing rules by periodically fetching data from remote web sources, ensuring that local domain redirection lists remain current. To apply changes, the applica

CoreDNS is a modular domain name system server designed for cloud-native environments. It functions as a flexible DNS resolver and forwarder that manages network traffic by routing queries based on zone-based rules and authoritative data. The server is built to integrate with service discovery systems, enabling it to map service names to network addresses within containerized infrastructure. The project is defined by a plugin-based request pipeline that allows for the extension of server functionality through custom modules. These plugins can intercept, modify, or log network requests in real

This project is an open-source software development kit and framework for implementing the Matter smart home standard. It provides a universal IPv6-based application layer and a cluster-based data model to ensure interoperability between diverse smart home devices and controllers. The system is distinguished by its multi-transport network abstraction, which maps Bluetooth LE, Thread, and Wi-Fi implementations to a common layer. It includes specialized tooling for secure device commissioning via QR codes and NFC, as well as a comprehensive over-the-air firmware update system for distributing s

This project is a technical educational guide focused on browser architecture and the internal processes used to render web pages. It provides a detailed breakdown of the web request lifecycle, from the initial networking phase to the final visual output on a screen. The guide covers specific technical sequences including the DNS resolution process across browser, operating system, and ISP caches, and the establishment of secure connections through the TLS handshake. It also details the communication flow between clients and servers using the HTTP protocol and server-side request handling. T

Dog is a command-line interface tool and network diagnostic utility used for querying DNS records and resolving domain names. It functions as a DNS query tool for retrieving domain information across various network transport protocols. The tool supports multi-protocol DNS transmission, allowing queries to be sent over UDP, TCP, TLS, and HTTPS. This enables secure DNS communication via encrypted channels to protect privacy and prevent interception. Capabilities include DNS query troubleshooting, record analysis, and network protocol testing to verify name server connectivity. The system prov

DisableWinTracking is a privacy hardening tool and telemetry blocker for Windows 10. It reduces data collection and disables diagnostic reporting through the modification of system services and registry keys. The project includes a dedicated utility for removing the OneDrive cloud storage client and cleaning its associated registry entries from the file explorer. It further manages network privacy by updating the system hosts file and configuring firewall rules to block communication with tracking servers. The tool covers broader system debloating and privacy management, including the disabl

Hickory-DNS is a DNS implementation written in Rust that provides a full suite of DNS capabilities: a client library for querying and constructing DNS messages, a recursive resolver with caching, an authoritative DNS server, and support for DNSSEC validation and signing. It can operate as a DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) client, and includes a multicast DNS (mDNS) implementation for local network discovery without a central server. The project differentiates itself through its integrated DNSSEC pipeline, which validates signatures by chaining from a root trust anchor and can auto

cf2dns is a tool for automating IP performance screening and DNS record updates. It functions as a DNS optimizer and IP filter that identifies high-performance Cloudflare IP addresses and updates DNS records via API to improve website loading speeds. The project provides a dynamic DNS route manager that maps optimized IP addresses to specific network carriers. This process includes regional connection defense to mitigate network interference and bypass connection blocks using curated IP pools. The system handles both IPv4 and IPv6 record management and includes scheduling mechanisms for regu

Lists is a curated collection of DNS blocklists, a domain blocklist generator, and a categorized library of domains used for network content filtering. The project provides a command-line pipeline that aggregates upstream sources to build and validate blocklists used to redirect unwanted traffic to null addresses. The project distinguishes itself through a CLI-driven build pipeline that automates the fetching, validation, and daily regeneration of datasets. It organizes domains into discrete functional categories rather than a single monolithic list and exports them in multiple syntaxes, incl

This project is a collection of Linux server automation scripts designed to automate the installation and configuration of core server software. It provides specialized tools for deploying proxy servers, configuring DNS servers, managing container infrastructure, and optimizing the Linux kernel. The automation suite distinguishes itself by integrating geo-restriction bypass capabilities via proxy protocols and implementing advanced network tuning, such as enabling BBR congestion control to improve throughput and latency. It also features distribution-aware automation that detects CPU architec

Glider is a multi-protocol forward proxy, transparent proxy gateway, and network service provider. It functions as a DNS and DHCP server, a Linux IP set manager, and a network traffic load balancer. The project distinguishes itself through a protocol-translation bridge that translates traffic between different proxy schemes and a chain-based routing system that sequences multiple remote proxy servers. It supports transparent traffic interception at the system level and utilizes build-time protocol stripping to minimize the binary size of the executable. The system covers a broad range of net

Findomain is a subdomain discovery tool and DNS resolver used for mapping an organization's external attack surface. It functions as a DNS infrastructure analyzer that searches for registered subdomains associated with a root domain to uncover undocumented infrastructure and services. The project includes an attack surface monitor that tracks changes to subdomains over time, using differential state monitoring to identify newly created or deleted assets. It provides real-time alerting via webhooks when changes in the monitored domain surface are detected. The system performs high-speed DNS r

WindowsSpyBlocker is a suite of utilities designed to stop operating system data collection and tracking by applying firewall rules, hosts file blocks, and telemetry restrictions. It functions as a telemetry blocker and firewall manager that prevents the operating system from sending usage data to remote servers. The project features a specialized connectivity modifier for adjusting the network connectivity status indicator to prevent external reporting. It includes a network traffic auditor to capture and analyze system traffic to identify spying activities, alongside a manager for DNS and h

Devilbox is a containerized development environment that provides a reproducible suite of web servers, databases, and language runtimes managed through a unified configuration. It functions as a Docker-based local development stack for LAMP and MEAN software stacks and as a manager for switching between different versions of these services to match specific project requirements. The system distinguishes itself by automating local network orchestration. It includes a Docker-based virtual host manager that automatically maps local directories to custom domains and a local DNS and SSL orchestrat

This project is a curated collection of domain-to-IP mappings designed to bypass network censorship and restore access to restricted web services. It provides a set of host file entries and static domain mapping files that allow users to redirect blocked traffic to accessible mirrors or proxy servers. The system functions by prioritizing local host entries over external DNS responses. It utilizes plain-text configuration files that are intended for manual injection into a system's hosts file to override default name resolution. The project covers network connectivity and DNS override managem

Maskphish is a comprehensive security toolkit that integrates capabilities for digital forensics, network vulnerability scanning, open-source intelligence, penetration testing, and social engineering. It functions as a multi-purpose framework for automating reconnaissance and executing security audits across diverse network environments. The project features a specialized phishing and social engineering toolkit used for cloning websites, masking URLs, and deploying deceptive pages to capture user credentials. It also includes a remote access Trojan builder for generating platform-specific exe

This utility provides a centralized administrative framework for managing and optimizing Windows environments. It functions by executing system-level primitives, including registry modifications, service management, and file system operations, to enforce performance, privacy, and security policies. The project distinguishes itself through its template-driven automation, which allows users to apply predefined configuration profiles to ensure consistent system states across machines. It integrates low-level adjustments—such as memory balancing, startup control, and hardware parameter tuning—wit

Haxl is a Haskell library and remote service request orchestrator designed for coordinating concurrent data fetching, request batching, and caching across multiple remote service providers. It functions as a framework for retrieving data from external databases and web services while minimizing network round trips. The project distinguishes itself through an applicative-based request batching system that groups multiple individual data requests into single calls to reduce network overhead. It employs an asynchronous parallel request scheduler to execute independent requests concurrently and u

Netmaker is a platform for automating and managing virtual mesh networks built on WireGuard. It functions as a centralized control plane that orchestrates encrypted, peer-to-peer tunnels across distributed infrastructure, including cloud environments, on-premise data centers, and containerized clusters. By automating the configuration of routing tables and access policies, the system enables secure, private connectivity between diverse devices and services without requiring manual network administration. The platform distinguishes itself through its focus on zero-trust network access and soft