30 open-source projects similar to lowertop/shadowrocket, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
This project provides a set of curated configuration rules and domain lists for the Shadowrocket app. It consists of network traffic routing rules, ad-blocking domain lists, DNS configuration profiles, and proxy bypass lists used to filter and direct network traffic. The rules establish policy-based routing logic to determine whether specific traffic is proxied, connected directly, or rejected. This includes specialized lists for proxy bypass management and the blocking of known advertising and tracking domains at the network level. The project covers a broad range of traffic management capa
Throne is a cross-platform proxy client that provides a unified graphical interface for managing and routing network traffic through secure proxy protocols. It combines subscription-based node management, multi-protocol routing, TUN-based global traffic interception, and DNS leak prevention into a single application that runs on Windows, Linux, and macOS. The application supports a wide range of proxy protocols including SOCKS, HTTP, Shadowsocks, Trojan, and VMess, and can route traffic through chains of multiple proxy servers for layered routing. It creates a virtual network interface to int
Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th
AdguardFilters is a collection of curated adblock filter lists, content blocking rulesets, and DNS blocklists. Its primary purpose is to provide the rules necessary to identify and remove advertisements, tracking scripts, and intrusive elements across web browsers and applications. The project includes specialized rules for cosmetic filtering to hide layout gaps and a malware domain database to block phishing and spyware destinations. It provides distinct filtering sets for different regions and purposes, such as social media blocking. The repository covers broad capability areas including m
AutoMergePublicNodes is a system for scraping public proxy nodes from across the internet and merging them into a unified list. It serves as an aggregator and converter that transforms these collected nodes into specialized subscription formats for various network routing clients. The project includes dedicated generators for creating configuration files and subscriptions compatible with Clash, Clash Meta, Sing-Box, and V2Ray. It handles the conversion of aggregated lists into Base64 and other standardized formats required by these specific network applications. The software also provides a
dae is a high-performance Linux network tool that functions as an eBPF transparent proxy. It intercepts and redirects packets at the kernel level to route internet traffic based on domains, IP addresses, and process names. The project distinguishes itself by modifying TLS handshakes to simulate browser signatures, which prevents server-side detection of proxy traffic. It also implements a full-cone network address translation gateway to maintain stable bidirectional connections and utilizes a latency-based node selector to automatically route traffic through the fastest available proxy nodes.
V2rayU is a native macOS network proxy tool and multi-protocol proxy manager. It functions as a V2Ray proxy client that enables users to route network traffic through secure tunnels to bypass network restrictions on Mac. The application features a TUN mode VPN client that uses a virtual network adapter to forward all system traffic through a secure tunnel. It supports configuring and switching between V2Ray, Shadowsocks, and Socks5 proxy servers via manual entry or external subscriptions. The tool provides capabilities for network traffic routing, proxy load balancing, and server configurati
Ladder is a web proxy server and HTTP response modifier designed to circumvent bot protections, CORS restrictions, and paywalls. It functions by intercepting traffic to modify HTML, CSS, and JavaScript via regular expressions and altering HTTP headers to reveal restricted content. The project distinguishes itself through its ability to bypass anti-scraping mechanisms and specialized bot detection, such as Cloudflare, by integrating with external challenge-solving services. It also enables client identity emulation by spoofing user agents and network identifiers to masquerade as different brow
ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add
Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,
3proxy is a multi-protocol proxy server and network access control gateway. It functions as a network traffic forwarder capable of routing TCP and UDP traffic across HTTP, SOCKS, and various email and file protocols. The project provides specialized capabilities for secure traffic inspection, including the decryption and analysis of HTTPS and TLS streams through certificate spoofing and mutual authentication. It further supports client identity anonymization by routing outbound traffic through recursive upstream proxy chains. The software covers a broad range of network management functions,
Karing is a multi-protocol proxy client and network traffic router designed to manage and direct internet traffic through various proxy protocols. It functions as a proxy subscription manager that imports and converts server lists from multiple external formats and providers into a unified configuration. The project features a cross-device synchronization system that keeps network routing settings and server lists consistent across multiple devices via cloud or local sharing. It includes a latency-based server selector that measures real-time response times to automatically connect to the fas
This project is an OpenWrt proxy client and network traffic orchestrator designed to tunnel internet traffic through remote proxy nodes. It functions as a system for managing proxy subscriptions, preventing DNS leaks, and directing traffic flow via an automatic failover gateway. The software distinguishes itself through a subscription manager that imports and synchronizes remote server lists via URLs and QR codes. It features device-specific access controls that allow the application of unique proxy rules, domain whitelists, and time-based schedules to individual network devices. The capabil
Clash Nyanpasu is a cross-platform proxy controller and graphical user interface for managing network traffic and routing rules. It functions as a network proxy manager that allows users to configure proxy profiles and define routing rules to control how internet traffic is tunneled. The application serves as a rule-based traffic router, directing network requests through specific proxies based on custom provider rules and script configurations. It provides a graphical interface for the administration of Clash-based engines, enabling the organization of network provider settings and the manag
This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device. The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers. The softwa
NoMoreWalls is a proxy subscription aggregator and configuration generator designed to bypass internet censorship. It functions as a tool for collecting public proxy nodes and compiling them into subscription files compatible with the Clash network core. The project differentiates itself by providing a local system for fetching, filtering, and provisioning curated proxy server configurations from multiple sources. It includes mechanisms to exclude specific proxy protocols and limit imported nodes to improve network stability and performance. The system manages network traffic routing through
fhs-install-v2ray is a shell script that automates the deployment of V2Ray, a network proxy tool, on Linux servers. It downloads precompiled binaries and geographic data from a release server, places them into standard Linux filesystem directories, and registers V2Ray as a persistent background service managed by systemd. The script is designed to be idempotent, meaning repeated runs do not overwrite custom configurations, and uninstallation removes all installed files and services completely. The tool distinguishes itself by enforcing a Filesystem Hierarchy Standard (FHS) layout, mapping bin
Proxypin is a cross-platform HTTP and HTTPS proxy debugger designed to capture, inspect, and modify network traffic. It functions as a man-in-the-middle interceptor, allowing developers to analyze application data flows and validate network communication during development and testing. The tool distinguishes itself through its focus on mobile and remote device integration, utilizing QR-code-based configuration synchronization to simplify the setup of proxy settings and security certificates. It includes an event-driven scripting engine that enables programmatic manipulation of requests and re
NekoBoxForAndroid is a network utility for Android that functions as a system-wide VPN tunneling client. It leverages the Sing-Box engine to capture and redirect device traffic through a virtual network interface, providing a centralized platform for managing proxy connections and network routing. The application distinguishes itself through its advanced configuration management, allowing users to define granular traffic rules based on domains, IP addresses, or specific applications. It supports complex network requirements by enabling multi-hop proxy chaining, custom DNS resolution strategie
Clashmi is a graphical proxy client designed to route internet traffic and bypass network restrictions. It provides a user interface for managing proxy cores, configuring domain lookups, and controlling virtual network interfaces. The project features a dedicated manager for proxy subscriptions and a system for rule-based traffic routing. It includes a transparent proxy controller that intercepts system-wide traffic through a virtual interface and an automatic selection mechanism that chooses the fastest server based on real-time latency. Administration is handled through a web-based control
AnyCrawl is an AI-powered data extractor, automated web crawler, and headless browser orchestrator. It serves as a web content extraction API and a gateway that connects crawling and scraping tools to language models using a standardized API protocol. The project specializes in converting unstructured website content into structured JSON or markdown optimized for AI assistants. It utilizes language models and JSON schemas to pull specific information into validated formats and provides capabilities for AI page summarization and LLM-optimized content extraction. The system manages comprehensi
PCAPdroid is an Android network traffic analyzer and packet capture tool that operates without requiring root access. It functions as a VPN-based firewall and network controller, capable of recording traffic in PCAPng format and blocking connections to specific domains or malicious hosts. The project distinguishes itself through a proxy-based system for decrypting TLS traffic and routing device network traffic through SOCKS5 proxies or the Tor network. It further allows for the modification of live HTTP requests and responses via custom scripts. Its capabilities cover application connection
Mizu is a suite of tools for capturing, indexing, and visualizing cloud-native network traffic and decrypted payloads for cluster-wide diagnostics. It provides Kubernetes network observability by using eBPF to index and visualize layer 4 and layer 7 traffic with full cluster context, allowing for the mapping of workload dependencies and the diagnosis of network failures. The project distinguishes itself by using kernel-level hooks to decrypt TLS traffic in plain text without requiring private keys. It further integrates a standardized context protocol to expose indexed network telemetry to AI
GUI.for.SingBox is a desktop graphical interface client for managing the sing-box network proxy core. It functions as a network proxy manager and subscription manager, allowing users to configure routing rules, organize proxy profiles, and synchronize remote proxy server lists from external subscription providers. The application distinguishes itself through an event-driven plugin architecture and a script-based configuration middleware, enabling users to extend core functionality and programmatically modify configuration values. It also features a system for cross-platform settings synchroni
Proxypool is an automated proxy crawler and aggregator that discovers, validates, and curates proxy servers from public pages and subscription addresses. It functions as a background service that collects proxy nodes across multiple protocols and serves the resulting validated list through a network API for external consumption. The system manages the full lifecycle of proxy discovery by aggregating data from multiple sources, deduplicating entries, and utilizing a connectivity validator to ensure only active and functional nodes are maintained. Crawl sources are managed via a configuration f
Awesome VPN is a free proxy subscription aggregator that collects and distributes daily-updated proxy nodes from multiple sources. It supports the VMess, VLESS, Trojan, and Shadowsocks protocols, and delivers subscription links in Base64, Clash YAML, and Sing-box JSON formats for broad client compatibility. The service automatically refreshes its proxy node list every day at midnight UTC via a scheduled cron job, ensuring that only current working servers are distributed. To maintain reliable access in regions where GitHub is slow or blocked, subscription links are also served through alterna
MasterDnsVPN is a DNS tunneling VPN and network censorship bypass tool that encapsulates network traffic within DNS queries to circumvent restrictive firewalls. It functions as a secure tunneling protocol and SOCKS5 proxy server, allowing local application traffic to be routed through a secure tunnel to a remote destination. The project distinguishes itself through a DNS resolver load balancer that distributes traffic across multiple resolvers based on latency and packet loss scoring. It further secures and masks traffic using symmetric payload encryption—supporting ChaCha20, AES-GCM, and XOR
This project is a curated collection of domain-to-IP mappings designed to bypass network censorship and restore access to restricted web services. It provides a set of host file entries and static domain mapping files that allow users to redirect blocked traffic to accessible mirrors or proxy servers. The system functions by prioritizing local host entries over external DNS responses. It utilizes plain-text configuration files that are intended for manual injection into a system's hosts file to override default name resolution. The project covers network connectivity and DNS override managem