awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
daeuniverse avatar

daeuniverse/dae

0
View on GitHub↗
5,876 stars·376 forks·Go·AGPL-3.0·68 views

Dae

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names.

The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

Broad capabilities include multi-protocol proxy management, advanced DNS traffic control to prevent pollution, and network filtering using geo-IP databases and domain lists. The system further optimizes performance by forwarding non-proxied traffic through kernel-stage Layer 3 routing to minimize transitions between kernel and user space.

Features

  • eBPF Interceptors - Implements eBPF-based kernel interception to transparently redirect network traffic.
  • Transparent Network Proxies - Functions as a high-performance transparent network proxy using eBPF for kernel-level packet interception.
  • Domain-Based DNS Query Blockings - Intercepts DNS requests to associate domain names with destination IP addresses for precise routing.
  • DNS Query Routers - Routes DNS queries to specific upstream servers based on query type or response source.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI
  • Layer 3 Packet Forwarders - Routes non-proxied traffic directly via kernel-level Layer 3 forwarding to minimize overhead.
  • Connection Access Filters - Provides connection access filters using geo-IP databases and domain lists to control data access.
  • Network Traffic Routers - Splits and routes internet traffic based on complex criteria including process names and destination domains.
  • Network Traffic Routing - Directs internet traffic through custom network paths based on domain names, IP addresses, and process identities.
  • Latency-Based Path Selection - Automatically selects the lowest-latency proxy node by testing real-time TCP and UDP performance.
  • Outbound Connection Managers - Manages outbound connections by chaining multiple communication protocols to remote servers.
  • Proxy Tunnels - Redirects network traffic through local or remote proxy services using secure tunnels.
  • Traffic Interception - Transparently intercepts network packets to route them through proxy protocols or direct connections.
  • Traffic Proxying - Forwards intercepted traffic through proxy protocols to obscure or redirect original connections.
  • Traffic Routing - Splits network traffic into different paths based on domains, IP addresses, ports, or protocols.
  • Traffic Routing Rules - Uses system filters to apply kernel-level routing rules based on process names or MAC addresses.
  • Source-Based Routing - Applies different routing rules based on local process names or MAC addresses.
  • TLS Fingerprint Impersonators - Simulates browser TLS signatures during handshakes to evade server-side proxy detection.
  • Network Traffic Filtering - Blocks or allows network connections using geo-IP databases, domain lists, and IP addresses.
  • Multi-Protocol Proxy Managers - Manages diverse proxy standards and protocols to obscure or redirect network connections.
  • Proxy Node Failover - Automatically switches to backup proxy nodes when the primary connection exceeds latency thresholds.
  • Connection and Latency Optimizers - Optimizes network performance by automatically selecting the lowest-latency path using real-time TCP and UDP metrics.
  • DNS Override Resolvers - Intercepts system DNS queries and routes them through proxy tunnels to prevent leaks.
  • Multi-Protocol DNS Resolvers - Processes domain queries using diverse protocols with fallback servers for optimal routing.
  • User-Space Domain Sniffing - Retrieves original domain names from proxied traffic in user space to bypass DNS pollution.
  • Next-Hop Node Selection - Automatically selects the optimal proxy node by testing TCP and UDP latencies across IPv4 and IPv6.
  • Direct Socket-Port Association - Reduces packet processing overhead by associating socket buffers directly with listening ports.
  • DNS Traffic Managers - Implements advanced DNS resolution rules and query interception to manage traffic and avoid DNS pollution.
  • Network Stack Bypasses - Reduces processing overhead by associating socket buffers directly with listening ports.
  • Proxy Node Selection Strategies - Optimizes node selection by testing multiple latency types across a pool of available proxy servers.
  • FullCone NAT Mapping - Provides FullCone NAT mapping to ensure stable bidirectional connectivity for UDP traffic.
  • FullCone NAT Support - Implements full-cone NAT to maintain stable bidirectional connections and support applications requiring open ports.
  • User-Space Domain Sniffing - Retrieves original domain names from proxied traffic in user space to bypass DNS pollution.
  • Custom DNS Resolvers - Performs domain lookups using multiple protocols with support for fallback servers.
  • Real-Time Network Monitors - Tracks real-time traffic statistics and node latency to optimize active connections.
  • Star history

    Star history chart for daeuniverse/daeStar history chart for daeuniverse/dae

    How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

    Frequently asked questions

    What does daeuniverse/dae do?

    dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names.

    What are the main features of daeuniverse/dae?

    The main features of daeuniverse/dae are: eBPF Interceptors, Transparent Network Proxies, Domain-Based DNS Query Blockings, DNS Query Routers, Layer 3 Packet Forwarders, Connection Access Filters, Network Traffic Routers, Network Traffic Routing.

    Which projects share features with daeuniverse/dae?

    Projects with overlapping indexed features include: ginuerzh/gost — gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted… matsuridayo/nekoboxforandroid — NekoBoxForAndroid is a network utility for Android that functions as a system-wide VPN tunneling client. It leverages… bol-van/zapret — Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network… linkerd/linkerd2 — This project is a service mesh platform designed to manage, secure, and observe service-to-service communication… karingx/karing — Karing is a multi-protocol proxy client and network traffic router designed to manage and direct internet traffic… v2fly/fhs-install-v2ray — fhs-install-v2ray is a shell script that automates the deployment of V2Ray, a network proxy tool, on Linux servers. It…

    Projects sharing features with Dae

    These projects share indexed features with Dae. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
    • ginuerzh/gostginuerzh avatar

      ginuerzh/gost

      18,019View on GitHub↗

      gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio

      Godnsgogolang
      View on GitHub↗18,019
    • matsuridayo/nekoboxforandroidMatsuriDayo avatar

      MatsuriDayo/NekoBoxForAndroid

      21,403View on GitHub↗

      NekoBoxForAndroid is a network utility for Android that functions as a system-wide VPN tunneling client. It leverages the Sing-Box engine to capture and redirect device traffic through a virtual network interface, providing a centralized platform for managing proxy connections and network routing. The application distinguishes itself through its advanced configuration management, allowing users to define granular traffic rules based on domains, IP addresses, or specific applications. It supports complex network requirements by enabling multi-hop proxy chaining, custom DNS resolution strategie

      Kotlinandroidgfwproxy
      View on GitHub↗21,403
    • bol-van/zapretbol-van avatar

      bol-van/zapret

      15,555View on GitHub↗

      Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination

      Canti-dpicensorship-circumventionfreebsd
      View on GitHub↗15,555
    • linkerd/linkerd2linkerd avatar

      linkerd/linkerd2

      11,424View on GitHub↗

      This project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu

      Gocloud-nativegolangkubernetes
      View on GitHub↗11,424
    Compare all 30 related projects→