awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
cyfdecyf avatar

cyfdecyf/cow

0
View on GitHub↗
8,421 stars·1,602 forks·Go·BSD-2-Clause·13 views

Cow

This project is a Go-based HTTP proxy server designed as a censorship circumvention tool. It functions as an upstream proxy manager and SOCKS5 tunneling gateway that routes network traffic between clients and destination servers to bypass network restrictions.

The system differentiates itself through automated proxy routing, which detects unreachable websites and automatically switches traffic between direct access and a pool of parent proxies. It includes a PAC file generator to produce proxy auto-config files for browsers and integrates SSH tunneling to establish secure remote sockets.

Broader capabilities include upstream proxy load balancing, connection pooling to reduce handshake latency, and IP-based access control for restricting proxy usage. The project also monitors site connectivity and tracks visit statistics to optimize routing decisions and estimate connection timeouts.

Settings are managed through configuration files located in the executable directory.

Features

  • HTTP Proxies - Provides a Go-based HTTP proxy server that routes network traffic between clients and destination servers.
  • Censorship Bypass Routing - Routes network traffic through parent proxies to circumvent regional or national internet censorship.
  • Proxy Routing - Routes network traffic through a managed pool of HTTP and SOCKS5 parent proxies to access restricted content.
  • Automated Block Detection - Automatically detects unreachable websites and reroutes traffic through parent proxies when direct connections fail.
  • Access Control Lists - Uses configuration files to define domains that are permanently blocked or accessed directly.
  • Censorship Circumvention Tools - Functions as a tool to bypass regional network restrictions by routing blocked sites through parent proxies.
  • Direct Connection Routing - Allows specified domains to be accessed directly, bypassing the proxy to ensure connectivity to unrestricted sites.
  • Domain Traffic Filters - Matches network requests against domain lists to determine if traffic must be routed through a parent proxy.
  • Proxy Load Balancers - Distributes outgoing traffic across a pool of parent proxies using hashing, latency, or backup strategies.
  • Connectivity-Based Auto-Routing - Automatically detects unreachable websites and switches traffic between direct access and parent proxies to bypass blocks.
  • Proxy Management Systems - Manages pools of parent proxies with integrated load balancing and failure detection mechanisms.
  • Upstream Proxy Pools - Maintains and rotates a pool of upstream proxies to ensure reliable connectivity and bypass network censorship.
  • Dynamic Proxy Selection - Dynamically selects the optimal proxy node based on success-rate maps and configuration lists.
  • SOCKS5 Gateway Tunnels - Implements a SOCKS5 tunneling gateway that manages SSH tunnels for secure remote traffic forwarding.
  • Blocked Connection Monitoring - Monitors successful and failed connection attempts per domain to identify blocked websites.
  • Host Routing Statistics - Records successful visits and blocked attempts per host to determine the most effective routing method.
  • Network Visit Histories - Maintains a timestamped history of visited hosts and success rates to optimize proxy routing.
  • Connection Pooling - Reuses active network connections based on host and port to reduce handshake latency.
  • Connection Pooling Mechanisms - Shares established network connections between clients to minimize handshake overhead and reduce latency.
  • SSH Tunneling Forwarders - Integrates SSH tunneling to establish secure remote sockets and local SOCKS5 proxies.
  • Access Control Lists - Implements access control lists to restrict proxy usage based on client IP addresses and password files.
  • Client Usage Restrictions - Restricts proxy usage by authenticating users through password files or specific client identifiers.
  • SSH Tunneling - Establishes secure tunnels using system commands and public key authentication to create local SOCKS5 proxies.
  • Proxy Authentication - Enforces access control on network proxy connections through credential-based validation.
  • Host Connectivity Statistics - Tracks connection success rates for hosts to optimize routing decisions and update access lists.
  • IP Access Restrictions - Validates client IP addresses and requires credentials to restrict access to the proxy server.
  • PAC Script Generators - Generates Proxy Auto-Configuration (PAC) files to automate routing decisions in web browsers.

Star history

Star history chart for cyfdecyf/cowStar history chart for cyfdecyf/cow

How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Open-source alternatives to Cow

Similar open-source projects, ranked by how many features they share with Cow.
  • ginuerzh/gostginuerzh avatar

    ginuerzh/gost

    18,019View on GitHub↗

    gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio

    Godnsgogolang
    View on GitHub↗18,019
  • 3proxy/3proxy3proxy avatar

    3proxy/3proxy

    5,264View on GitHub↗

    3proxy is a multi-protocol proxy server and network access control gateway. It functions as a network traffic forwarder capable of routing TCP and UDP traffic across HTTP, SOCKS, and various email and file protocols. The project provides specialized capabilities for secure traffic inspection, including the decryption and analysis of HTTPS and TLS streams through certificate spoofing and mutual authentication. It further supports client identity anonymization by routing outbound traffic through recursive upstream proxy chains. The software covers a broad range of network management functions,

    Caccountingchttps-proxy
    View on GitHub↗5,264
  • bol-van/zapretbol-van avatar

    bol-van/zapret

    15,555View on GitHub↗

    Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination

    Canti-dpicensorship-circumventionfreebsd
    View on GitHub↗15,555
  • mitmproxy/mitmproxymitmproxy avatar

    mitmproxy/mitmproxy

    43,943View on GitHub↗

    Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections. The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using cust

    Pythondebugginghttphttp2
    View on GitHub↗43,943
See all 30 alternatives to Cow→

Frequently asked questions

What does cyfdecyf/cow do?

This project is a Go-based HTTP proxy server designed as a censorship circumvention tool. It functions as an upstream proxy manager and SOCKS5 tunneling gateway that routes network traffic between clients and destination servers to bypass network restrictions.

What are the main features of cyfdecyf/cow?

The main features of cyfdecyf/cow are: HTTP Proxies, Censorship Bypass Routing, Proxy Routing, Automated Block Detection, Access Control Lists, Censorship Circumvention Tools, Direct Connection Routing, Domain Traffic Filters.

What are some open-source alternatives to cyfdecyf/cow?

Open-source alternatives to cyfdecyf/cow include: ginuerzh/gost — gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted… 3proxy/3proxy — 3proxy is a multi-protocol proxy server and network access control gateway. It functions as a network traffic… bol-van/zapret — Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network… mitmproxy/mitmproxy — Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol… monkeywie/proxyee — Proxyee is a Java-based network proxy library designed for building custom proxy servers that support traffic… antoniomika/sish — Sish is a reverse SSH proxy and tunneling server designed to expose local services to the internet. It functions as an…