Open-source alternatives to Sublink Worker

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

Sub-Store is a proxy subscription management server that aggregates multiple subscription links into a single unified stream for distribution to various clients. It functions as a transformation pipeline that filters, modifies, and reformats proxy node metadata. The system acts as a cross-platform format converter to ensure compatibility across diverse client applications. It includes an encryption decryption gateway that uses private keys to handle age-standard encrypted subscription content and a cache-layered aggregator to reduce external requests. The server provides capabilities for dyn

ACL4SSR is a rule set generation and conversion system that produces ready-to-use proxy configuration files for multiple client formats, including Clash, Quantumult, Surge, Surfboard, and Trojan. It combines modular rule fragments from a curated library, applies user-defined overrides, and filters traffic by domain category or geo-IP to produce optimized routing configurations. The project distinguishes itself through its format-agnostic conversion pipeline, which transforms proxy rule sets between different client formats using external open-source converters as a middleware layer. It provid

This project is an OpenWrt proxy client and network traffic orchestrator designed to tunnel internet traffic through remote proxy nodes. It functions as a system for managing proxy subscriptions, preventing DNS leaks, and directing traffic flow via an automatic failover gateway. The software distinguishes itself through a subscription manager that imports and synchronizes remote server lists via URLs and QR codes. It features device-specific access controls that allow the application of unique proxy rules, domain whitelists, and time-based schedules to individual network devices. The capabil

Subconverter is a network utility designed to translate, merge, and filter proxy subscription configurations. It functions as a service that converts proxy links between various client-specific formats, ensuring compatibility across different applications and platforms. By providing a unified interface for managing diverse connection sources, the tool enables consistent network policy application and streamlined configuration management. The project distinguishes itself through an HTTP-based transformation interface that processes subscription data dynamically. It utilizes an in-memory pipeli

GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni

OpenWrt-nikki is an OpenWrt proxy client and transparent proxy gateway that manages network traffic diversion through remote servers. It functions as a network access controller and DNS hijacking server, intercepting IPv4 and IPv6 traffic to route it through a proxy without requiring client-side configuration. The project features a proxy subscription manager that automates the downloading and refreshing of remote configuration profiles using custom user agents. It employs a mixin-based configuration system to inject custom rules or proxy nodes into existing profiles without overwriting sourc

chezmoi is a command-line utility designed to manage and synchronize system configuration files across multiple machines. It uses a local Git repository as the single source of truth, allowing users to track, version, and distribute dotfiles while maintaining a consistent state across diverse operating systems and hardware architectures. The project distinguishes itself through a declarative reconciliation model that computes the difference between the current filesystem and the desired state defined in the repository. It features a robust templating engine that processes configuration files

WorkerVless2sub is a serverless proxy subscription manager that runs on Cloudflare's edge network, generating optimized VMess, VLESS, and Trojan proxy links. It operates as a subscription generator that combines a default node pool with IP-replacement optimization to produce high-performance proxy configurations. The project distinguishes itself through its environment-variable-driven configuration system, allowing node parameters like host, UUID, and password to be set without code changes. It provides multiple subscription delivery methods, including a token-based quick endpoint for pre-con

V2RayAggregator is a tool designed to collect, filter, and convert network bypass nodes from multiple public sources. It functions as a proxy aggregator that identifies and gathers Shadowsocks, Trojan, and Vmess nodes to maintain a comprehensive pool of connection points. The project distinguishes itself through its ability to transform proxy lists into multiple standardized schemas, including Base64, Mixed, and Clash YAML formats, ensuring compatibility across various client applications. It also utilizes a performance filter to measure average connection speeds, allowing it to rank and iden

This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew

Script-Hub is a system for translating proxy rule sets and converting configuration modules between different network proxy environments. It serves as a translator and converter that enables cross-platform compatibility for rewrite rules and script-based logic. The project includes a script interop layer that normalizes header casing and handles execution errors to ensure scripts run consistently across different tools. It also provides a remote configuration manager for importing, updating, and modifying proxy modules and parameters via web URLs. The software covers a range of capabilities

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures c

This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access. The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the set

This project provides a collection of structured, binary-encoded routing datasets designed for proxy software to automate network traffic management. By mapping domain names and IP addresses to specific functional categories, it enables proxy clients to make granular, policy-based connection decisions. The repository serves as a centralized source for routing metadata, ensuring that traffic steering logic remains consistent across various networking implementations. The project distinguishes itself through an automated aggregation pipeline that processes community-maintained datasets into a u

ClashMac is a macOS network proxy manager and graphical user interface client for the Clash core. It serves as a system tool for controlling network traffic routing, managing proxy nodes, and organizing network subscriptions. The project distinguishes itself through an interactive network traffic visualizer that renders real-time data flows and multi-hop proxy connection paths on a global map. It also includes a command line network controller that provides machine-readable data for custom scripting and network automation. The software covers broad capability areas including rule-based traff

This project is a configuration guide and manual for bypassing internet censorship. It provides instructions for installing and configuring proxy software to route network traffic through secure nodes to access restricted web content. The guide focuses on proxy server configuration, including tutorials for importing remote server settings via formatted URLs and managing node-based connections. It covers the setup of secure network tunnels and the activation of proxy servers to bypass local network filters. The material covers network traffic routing, including the use of global and automatic

s-ui is a web-based management interface for Xray VPN protocols. It provides a graphical user interface for configuring and monitoring network protocols, inbounds, and outbound routing rules. The project includes a VPN subscription manager for generating and distributing configuration links to clients, as well as an access controller to enforce data usage caps and account expiration dates. Administrative access is secured through token authentication and SSL encryption via custom certificates. The system provides observability tools for tracking real-time CPU, memory, and network traffic met

VPNHotspot is a root-level Android network routing utility designed to share an active VPN connection with other devices via a wireless hotspot or repeater. It functions as a network manager that modifies system wireless settings to route tethered traffic through an encrypted tunnel. The tool provides capabilities to bypass mobile network operator tethering restrictions by routing traffic through a VPN or socksifier. It includes a controller for configuring wireless hardware offload and managing the sharing of network connections as a repeater. The project covers network administration tasks

node-http-proxy is a Node.js HTTP proxy library and toolkit used to create programmable reverse proxies, load balancers, and traffic routers. It functions as a system for forwarding HTTP and WebSocket traffic from clients to backend target servers. The project provides capabilities for translating incoming request paths into backend addresses using programmable matching rules. It supports the creation of bidirectional tunnels to facilitate real-time communication via WebSocket proxying. The library covers the modification of request and response headers, including the rewriting of cookies an

x-ui is a web-based management interface for configuring and administering Xray-core proxy servers and routing rules. It provides a centralized suite of tools including an HTTP API proxy controller, a proxy subscription server, and an automated SSL certificate tool. The project distinguishes itself through a subscription-based distribution system that allows administrators to deliver connection configurations and update links to multiple clients via unique URLs. It further automates security with ACME-based certificate renewal and provides a decoupled architecture that allows the proxy engine

BPB-Worker-Panel is a control panel designed for deploying and managing VLESS and Trojan proxies hosted on Cloudflare Workers. It functions as a proxy subscription generator and a manager for secure DNS over HTTPS servers and WireGuard configuration provisioning. The project distinguishes itself through network traffic obfuscation capabilities, utilizing packet fragmentation and SNI spoofing to evade detection. It provides specialized administration for Cloudflare Warp and Warp Pro connections, including the ability to optimize endpoints and export WireGuard configurations. The system covers

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

node-http-proxy is a Node.js HTTP proxy library used for forwarding requests to target servers. It functions as reverse proxy middleware capable of mapping incoming routes to target destinations and transforming request and response data streams. The library includes a WebSocket proxy gateway that upgrades standard HTTP connections into bidirectional streams between clients and backend servers. It also provides a response transformer for modifying bodies, location headers, and cookie domains. The project covers traffic routing management via rule-based translation tables and secure connectio

dubbo-admin is a web-based administration console and management interface for the Apache Dubbo ecosystem. It serves as a centralized tool for configuring and monitoring services, providers, and consumers across distributed microservices architectures. The project functions as a traffic control plane and service governance tool, enabling the implementation of request routing rules, canary deployments, and traffic regulation. It provides a dedicated interface for orchestrating service mesh data planes and proxy configurations to connect services within a unified network management layer. The

Axonhub is an AI gateway and multi-model API proxy that provides a unified interface for routing requests to multiple large language model providers. It functions as a load balancer and translation layer, converting a standardized API format into provider-specific payloads to enable communication with various AI models without provider-specific code. The system manages traffic through rule-based routing and automatic failover to maintain high availability. It differentiates its operations by providing a provider-agnostic interface that decouples client requests from specific model backends us