Open-source alternatives to Sublink Worker

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

Sub-Store is a proxy subscription management server that aggregates multiple subscription links into a single unified stream for distribution to various clients. It functions as a transformation pipeline that filters, modifies, and reformats proxy node metadata. The system acts as a cross-platform format converter to ensure compatibility across diverse client applications. It includes an encryption decryption gateway that uses private keys to handle age-standard encrypted subscription content and a cache-layered aggregator to reduce external requests. The server provides capabilities for dyn

ACL4SSR is a rule set generation and conversion system that produces ready-to-use proxy configuration files for multiple client formats, including Clash, Quantumult, Surge, Surfboard, and Trojan. It combines modular rule fragments from a curated library, applies user-defined overrides, and filters traffic by domain category or geo-IP to produce optimized routing configurations. The project distinguishes itself through its format-agnostic conversion pipeline, which transforms proxy rule sets between different client formats using external open-source converters as a middleware layer. It provid

This project is an OpenWrt proxy client and network traffic orchestrator designed to tunnel internet traffic through remote proxy nodes. It functions as a system for managing proxy subscriptions, preventing DNS leaks, and directing traffic flow via an automatic failover gateway. The software distinguishes itself through a subscription manager that imports and synchronizes remote server lists via URLs and QR codes. It features device-specific access controls that allow the application of unique proxy rules, domain whitelists, and time-based schedules to individual network devices. The capabil

Subconverter is a network utility designed to translate, merge, and filter proxy subscription configurations. It functions as a service that converts proxy links between various client-specific formats, ensuring compatibility across different applications and platforms. By providing a unified interface for managing diverse connection sources, the tool enables consistent network policy application and streamlined configuration management. The project distinguishes itself through an HTTP-based transformation interface that processes subscription data dynamically. It utilizes an in-memory pipeli

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

OpenWrt-nikki is an OpenWrt proxy client and transparent proxy gateway that manages network traffic diversion through remote servers. It functions as a network access controller and DNS hijacking server, intercepting IPv4 and IPv6 traffic to route it through a proxy without requiring client-side configuration. The project features a proxy subscription manager that automates the downloading and refreshing of remote configuration profiles using custom user agents. It employs a mixin-based configuration system to inject custom rules or proxy nodes into existing profiles without overwriting sourc

chezmoi is a command-line utility designed to manage and synchronize system configuration files across multiple machines. It uses a local Git repository as the single source of truth, allowing users to track, version, and distribute dotfiles while maintaining a consistent state across diverse operating systems and hardware architectures. The project distinguishes itself through a declarative reconciliation model that computes the difference between the current filesystem and the desired state defined in the repository. It features a robust templating engine that processes configuration files

This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa

WorkerVless2sub is a serverless proxy subscription manager that runs on Cloudflare's edge network, generating optimized VMess, VLESS, and Trojan proxy links. It operates as a subscription generator that combines a default node pool with IP-replacement optimization to produce high-performance proxy configurations. The project distinguishes itself through its environment-variable-driven configuration system, allowing node parameters like host, UUID, and password to be set without code changes. It provides multiple subscription delivery methods, including a token-based quick endpoint for pre-con

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew

Script-Hub is a system for translating proxy rule sets and converting configuration modules between different network proxy environments. It serves as a translator and converter that enables cross-platform compatibility for rewrite rules and script-based logic. The project includes a script interop layer that normalizes header casing and handles execution errors to ensure scripts run consistently across different tools. It also provides a remote configuration manager for importing, updating, and modifying proxy modules and parameters via web URLs. The software covers a range of capabilities

This project provides a collection of structured, binary-encoded routing datasets designed for proxy software to automate network traffic management. By mapping domain names and IP addresses to specific functional categories, it enables proxy clients to make granular, policy-based connection decisions. The repository serves as a centralized source for routing metadata, ensuring that traffic steering logic remains consistent across various networking implementations. The project distinguishes itself through an automated aggregation pipeline that processes community-maintained datasets into a u

This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access. The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the set

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures c

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

ClashMac is a macOS network proxy manager and graphical user interface client for the Clash core. It serves as a system tool for controlling network traffic routing, managing proxy nodes, and organizing network subscriptions. The project distinguishes itself through an interactive network traffic visualizer that renders real-time data flows and multi-hop proxy connection paths on a global map. It also includes a command line network controller that provides machine-readable data for custom scripting and network automation. The software covers broad capability areas including rule-based traff

Clash-freenode is a tool that automatically fetches, aggregates, and generates subscription links for free proxy nodes from public sources, supporting Clash, V2Ray, and SSR formats. It operates by scraping Telegram channels and scanning public repositories to harvest proxy links, then converting them into static subscription URLs that clients can consume without manual updates. The project distinguishes itself by combining multiple aggregation methods—daily feed parsing, repository-based link harvesting, and Telegram channel scraping—into a single pipeline that produces protocol-compatible ou

BPB-Worker-Panel is a control panel designed for deploying and managing VLESS and Trojan proxies hosted on Cloudflare Workers. It functions as a proxy subscription generator and a manager for secure DNS over HTTPS servers and WireGuard configuration provisioning. The project distinguishes itself through network traffic obfuscation capabilities, utilizing packet fragmentation and SNI spoofing to evade detection. It provides specialized administration for Cloudflare Warp and Warp Pro connections, including the ability to optimize endpoints and export WireGuard configurations. The system covers

s-ui is a web-based management interface for Xray VPN protocols. It provides a graphical user interface for configuring and monitoring network protocols, inbounds, and outbound routing rules. The project includes a VPN subscription manager for generating and distributing configuration links to clients, as well as an access controller to enforce data usage caps and account expiration dates. Administrative access is secured through token authentication and SSL encryption via custom certificates. The system provides observability tools for tracking real-time CPU, memory, and network traffic met

SmarGate is a C++ intranet penetration tool and remote management gateway designed to expose internal network services to the public internet. It functions as a multi-link proxy aggregator and peer-to-peer network tunnel, enabling secure remote access to internal servers and databases. The system distinguishes itself by combining peer-to-peer TCP links with proxy-based routing to ensure stable connectivity and reduced latency. It utilizes SSL and TLS encrypted tunnels with certificate-based verification to protect data transmission between remote nodes. The project covers a broad range of ne

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

x-ui is a web-based management interface for configuring and administering Xray-core proxy servers and routing rules. It provides a centralized suite of tools including an HTTP API proxy controller, a proxy subscription server, and an automated SSL certificate tool. The project distinguishes itself through a subscription-based distribution system that allows administrators to deliver connection configurations and update links to multiple clients via unique URLs. It further automates security with ACME-based certificate renewal and provides a decoupled architecture that allows the proxy engine

node-http-proxy is a Node.js HTTP proxy library used for forwarding requests to target servers. It functions as reverse proxy middleware capable of mapping incoming routes to target destinations and transforming request and response data streams. The library includes a WebSocket proxy gateway that upgrades standard HTTP connections into bidirectional streams between clients and backend servers. It also provides a response transformer for modifying bodies, location headers, and cookie domains. The project covers traffic routing management via rule-based translation tables and secure connectio

VPNHotspot is a root-level Android network routing utility designed to share an active VPN connection with other devices via a wireless hotspot or repeater. It functions as a network manager that modifies system wireless settings to route tethered traffic through an encrypted tunnel. The tool provides capabilities to bypass mobile network operator tethering restrictions by routing traffic through a VPN or socksifier. It includes a controller for configuring wireless hardware offload and managing the sharing of network connections as a repeater. The project covers network administration tasks

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add