Projects sharing features with Tutorials

This project provides a collection of structured, binary-encoded routing datasets designed for proxy software to automate network traffic management. By mapping domain names and IP addresses to specific functional categories, it enables proxy clients to make granular, policy-based connection decisions. The repository serves as a centralized source for routing metadata, ensuring that traffic steering logic remains consistent across various networking implementations. The project distinguishes itself through an automated aggregation pipeline that processes community-maintained datasets into a u

This repository serves as a comprehensive collection of configuration templates, deployment scripts, and technical documentation for establishing secure, obfuscated network tunnels. It provides a centralized resource for users to implement advanced proxy services, focusing on the practical application of structured configuration schemas to manage complex traffic routing and protocol settings across diverse environments. The project distinguishes itself by offering a library of standardized templates for high-performance and censorship-resistant protocols. It covers a wide range of tunneling m

Clash-rules provides a standardized, declarative system for managing network traffic routing across desktop and mobile proxy clients. It functions as a centralized configuration provider that uses structured rule sets to categorize outgoing requests, allowing users to define whether specific connections should be proxied, rejected, or routed directly. The project distinguishes itself through its comprehensive, curated rulesets that enable granular control over network behavior. By employing domain-pattern matching, CIDR-based network analysis, and application-specific signatures, it ensures c

This repository provides configuration sets for the Quantumult X network proxy client. It consists of routing rules, policy groups, and script rewrites designed to manage network connectivity and automation. The project features a network traffic router that uses rules and regular expressions to direct traffic toward specific proxy servers based on destination. It includes an HTTP request rewriter to modify network requests and responses to customize application behavior or bypass restrictions. The configuration covers automated task scripts for the maintenance of external web services, regi

wireguard-go is a Go implementation of the WireGuard protocol that operates as a userspace tunneling engine. It functions as a cross-platform network interface designed to establish encrypted tunnels between peers without requiring modifications to the system kernel. By implementing the protocol in userspace, this project provides a consistent network stack that enables secure peer-to-peer communication across different operating systems. It allows for the creation and management of encrypted network interfaces and tunnels to route private traffic over public networks.

This project is a comprehensive technical manual and reference guide focused on network proxies, virtual private networks, and the circumvention of internet censorship. It provides detailed analysis of network censorship and firewall strategies, including port blocking, DNS poisoning, and SSL connection interception. The documentation explains the underlying mechanics of VPN protocols, tunnels, and proxy systems to clarify how data routing and connectivity function. It includes instructional content for configuring proxy software and resolving DNS certificate errors across Windows, macOS, and

Karing is a multi-protocol proxy client and network traffic router designed to manage and direct internet traffic through various proxy protocols. It functions as a proxy subscription manager that imports and converts server lists from multiple external formats and providers into a unified configuration. The project features a cross-device synchronization system that keeps network routing settings and server lists consistent across multiple devices via cloud or local sharing. It includes a latency-based server selector that measures real-time response times to automatically connect to the fas

ACL4SSR is a rule set generation and conversion system that produces ready-to-use proxy configuration files for multiple client formats, including Clash, Quantumult, Surge, Surfboard, and Trojan. It combines modular rule fragments from a curated library, applies user-defined overrides, and filters traffic by domain category or geo-IP to produce optimized routing configurations. The project distinguishes itself through its format-agnostic conversion pipeline, which transforms proxy rule sets between different client formats using external open-source converters as a middleware layer. It provid

dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.

x-ui is a web-based management interface for configuring and administering Xray-core proxy servers and routing rules. It provides a centralized suite of tools including an HTTP API proxy controller, a proxy subscription server, and an automated SSL certificate tool. The project distinguishes itself through a subscription-based distribution system that allows administrators to deliver connection configurations and update links to multiple clients via unique URLs. It further automates security with ACME-based certificate renewal and provides a decoupled architecture that allows the proxy engine

fhs-install-v2ray is a shell script that automates the deployment of V2Ray, a network proxy tool, on Linux servers. It downloads precompiled binaries and geographic data from a release server, places them into standard Linux filesystem directories, and registers V2Ray as a persistent background service managed by systemd. The script is designed to be idempotent, meaning repeated runs do not overwrite custom configurations, and uninstallation removes all installed files and services completely. The tool distinguishes itself by enforcing a Filesystem Hierarchy Standard (FHS) layout, mapping bin

This project provides a collection of declarative configuration sets and routing rules for the Quantumult X proxy client. It consists of rule sets designed for blocking advertisements, preventing DNS hijacking, and managing regional routing to direct network traffic. The project includes specific routing configurations to bypass geographic content restrictions by mapping media services to regional nodes. It also provides curated lists to prevent internet service provider redirects and block fraudulent domains. The broader capability surface covers network traffic orchestration, including the

ShadowsocksX-NG is a macOS application that functions as a Shadowsocks VPN client, SOCKS5 proxy manager, and PAC routing client. It is designed to bypass network restrictions by managing connections to Shadowsocks proxy servers through a graphical user interface. The project provides mechanisms for importing server profiles via QR codes and URLs, and it supports the integration of third-party plugins to modify network traffic. It also includes a local HTTP proxy server that translates SOCKS5 traffic into HTTP proxy format for application compatibility. The utility covers network traffic rout

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

ShadowsocksX-NG is a macOS application that functions as a Shadowsocks proxy client to establish encrypted tunnels for bypassing network censorship. It operates as an encrypted tunnel manager that allows for the configuration of secure ciphers and the import of proxy server profiles. The client includes a proxy converter that transforms SOCKS5 traffic into HTTP proxy traffic to provide compatibility for applications that do not support SOCKS. It also integrates a traffic steering system using Proxy Auto-Configuration files to automatically determine which network requests bypass the proxy. T

Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag

node-apn is a Node.js library and push notification driver used to send remote notifications to Apple devices via the Apple Push Notification service. It functions as an HTTP/2 client that manages the construction and transmission of JSON payloads to the Apple notification gateway. The library supports multiple identity verification methods, including certificate-based authentication using PEM or PFX files and token-based authentication with automatically renewing tokens. It includes capabilities for routing traffic through intermediary proxy servers and secure HTTP tunnels to bypass restrict

Sliver is a command and control framework designed for adversary emulation and security assessment operations. It provides a centralized platform for managing remote systems, enabling security professionals to coordinate multi-operator sessions and maintain persistent, secure communication channels across diverse network environments. The framework distinguishes itself through its focus on stealth and infrastructure flexibility. It utilizes dynamic payload obfuscation to generate unique binaries and supports in-memory execution to minimize disk artifacts. Communication is secured through mutu

This project provides an open-source VPN client that creates an unrestricted tunnel to bypass internet censorship without fees, registration, speed caps, or data limits. It offers free, unlimited VPN tunneling with no sign‑up required, enabling access to blocked websites and unrestricted browsing. The application uses the WireGuard protocol for encrypted traffic routing, backed by kernel‑level packet forwarding to minimize overhead. It includes automatic server discovery that selects the most responsive server based on real‑time latency, a connection keepalive mechanism to detect and restore

V2rayU is a native macOS network proxy tool and multi-protocol proxy manager. It functions as a V2Ray proxy client that enables users to route network traffic through secure tunnels to bypass network restrictions on Mac. The application features a TUN mode VPN client that uses a virtual network adapter to forward all system traffic through a secure tunnel. It supports configuring and switching between V2Ray, Shadowsocks, and Socks5 proxy servers via manual entry or external subscriptions. The tool provides capabilities for network traffic routing, proxy load balancing, and server configurati

SwitchyOmega is a browser proxy manager and extension that controls network traffic routing and manages proxy configurations through a graphical interface. It functions as a proxy routing orchestrator and a PAC script generator, converting user-defined rules into JavaScript auto-config scripts for automated network routing. The project enables users to organize network configurations into distinct profiles, allowing for the switching of proxying logic based on different environments. It automates the selection of proxy servers by matching requested URLs against predefined patterns to avoid ma

NekoBoxForAndroid is a network utility for Android that functions as a system-wide VPN tunneling client. It leverages the Sing-Box engine to capture and redirect device traffic through a virtual network interface, providing a centralized platform for managing proxy connections and network routing. The application distinguishes itself through its advanced configuration management, allowing users to define granular traffic rules based on domains, IP addresses, or specific applications. It supports complex network requirements by enabling multi-hop proxy chaining, custom DNS resolution strategie

This project is a service mesh platform designed to manage, secure, and observe service-to-service communication within Kubernetes clusters. It functions as a control plane that orchestrates transparent sidecar proxies, which intercept and manage network traffic to provide reliable connectivity for microservices. By automating the injection of these proxies, the platform ensures that infrastructure-level policies are applied consistently across all workloads without requiring manual configuration changes. The platform distinguishes itself through its focus on zero-trust security and cross-clu

Sing-box is a universal proxy engine and traffic router designed to manage complex network connectivity across multiple operating systems. It functions as a configuration-driven core that intercepts system-level traffic, allowing for transparent proxying through encrypted tunnels. By normalizing diverse network protocols into a unified interface, the engine enables consistent traffic forwarding and protocol translation regardless of the underlying environment. The project distinguishes itself through a declarative configuration pipeline that validates and merges modular settings into a unifie

This project is a censorship circumvention guide and internet freedom wiki. It serves as a knowledge base and network unblocking resource that provides technical methods and tools to bypass internet filtering and network restrictions. The platform focuses on internet censorship circumvention and network access recovery. It provides instructions for the implementation of privacy tools and the use of technical guides to access blocked content. The site is built using a static-site generation model with markdown-driven document structures and git-based content management. It employs client-side

This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa

This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa