How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
wireguard-go is a Go implementation of the WireGuard protocol that operates as a userspace tunneling engine. It functions as a cross-platform network interface designed to establish encrypted tunnels between peers without requiring modifications to the system kernel. By implementing the protocol in userspace, this project provides a consistent network stack that enables secure peer-to-peer communication across different operating systems. It allows for the creation and management of encrypted network interfaces and tunnels to route private traffic over public networks.
dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.
tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It routes system network traffic through a SOCKS5 proxy using a virtual tunnel interface and provides the ability to tunnel IPv4 traffic over IPv6 or vice versa. The project implements a userspace TCP/IP stack to intercept raw IP packets and translate them for transmission to remote proxy servers. It supports multiple proxy protocols, including HTTP, SOCKS4, SOCKS5, and Shadowsocks, allowing application traffic to be redirected without per-app configuration. The software includes cap
SSHFS is a network filesystem client that maps remote server directories to local mount points. It functions as a userspace implementation of a filesystem, allowing users to access and manage remote files as if they were on a local disk using the SFTP protocol over SSH. The tool distinguishes itself by offering multiple transport options, including encrypted SSH tunnels for security and direct TCP socket connections to bypass encryption for higher throughput. It also supports connectivity via virtual sockets to access directories hosted inside virtual machines. The system includes capabiliti
sshuttle is an SSH tunneling proxy and user-space network router that forwards local network traffic to a remote network via an encrypted SSH connection. It serves as an alternative to traditional VPN installations for routing traffic and accessing private remote resources.
The main features of apenwarr/sshuttle are: SSH Tunneling, VPN Alternatives, SSH, Network Routers, Network Stacks, Network Traffic Routing, Transparent Network Proxies, Remote Administration.
Projects with overlapping indexed features include: wireguard/wireguard-go — wireguard-go is a Go implementation of the WireGuard protocol that operates as a userspace tunneling engine. It… xjasonlyu/tun2socks — tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It… daeuniverse/dae — dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects… libfuse/sshfs — SSHFS is a network filesystem client that maps remote server directories to local mount points. It functions as a… mutagen-io/mutagen — Mutagen is a cross-platform file synchronization engine and development environment orchestrator. It provides… bol-van/zapret — Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network…