Awesome GitHub RepositoriesLocal Proxy Gateways

XX-Net is a cross-platform desktop application that functions as a local proxy server and network traffic router. It intercepts outgoing network requests from a local machine and redirects them through encrypted tunnels to a distributed mesh of cloud-based nodes, facilitating secure and reliable access to external resources. The software distinguishes itself by providing a centralized management interface for coordinating complex proxy infrastructure. It employs rule-based traffic routing, allowing users to define custom logic based on destination addresses and protocols to determine the opti

Netch is a multi-protocol proxy client and network traffic interceptor designed to route internet traffic through VPN and proxy tunnels. It functions as a connection manager that tunnels outbound data to modify network paths and bypass network restrictions. The project supports a wide range of tunneling protocols, including Socks5, Shadowsocks, WireGuard, Trojan, VMess, and VLESS. It distinguishes itself by offering the ability to distribute established proxy connections to other devices on a local network and by providing UDP FullCone NAT support to maintain stable peer-to-peer connectivity

Clashfree is a network traffic routing platform designed to facilitate access to restricted online resources and digital services. It functions as a proxy configuration management tool that enables users to route internet traffic through encrypted tunnels, effectively bypassing regional access restrictions. The system provides a centralized way to manage network proxy connections and organize multiple routing profiles across various environments. The project distinguishes itself by providing automated subscription services that distribute daily updated proxy node lists and configuration files

Floci is a local emulator for AWS services and cloud infrastructure designed for developing and testing applications without a live internet connection. It serves as a containerized cloud emulator and a serverless runtime emulator, allowing users to run high-fidelity replicas of cloud databases, queues, and compute services on a local machine. The project distinguishes itself by using real container images instead of simple mocks to ensure behavioral accuracy. It functions as a local API gateway simulator with proxy-based routing for REST and WebSocket APIs, and provides a serverless environm

Fancyss is a network utility designed to function as a Shadowsocks proxy gateway. It operates as a transparent proxy manager that intercepts and routes network traffic at the gateway level, allowing for centralized management of internet access across all connected devices without requiring individual client-side configurations. The system employs policy-based routing and rule-based traffic filtering to direct data through specific network paths. It maintains multiple server connections simultaneously, utilizing failover-aware connection pooling to automatically switch traffic to healthy node

This project is a network traffic manipulation tool and proxy designed to intercept, inspect, and modify data streams between mobile applications and their servers. It functions as a scriptable content blocker and traffic router, allowing users to apply custom rules to incoming and outgoing network requests. The tool enables users to bypass regional restrictions and subscription paywalls by injecting configuration rules that override server-side validation. It also provides capabilities for removing advertisements, tracking scripts, and promotional content from mobile applications and web ser

ShellCrash is a shell-based network proxy manager and DNS and routing controller. It functions as a transparent proxy gateway that intercepts local traffic and DNS requests to route data through a proxy server. The system manages the deployment and upgrading of proxy binaries, such as sing-box and mihomo, within a shell environment. It includes a web-based management interface and traffic dashboard for visualizing network activity and modifying routing rules. The project provides capabilities for network traffic routing, including UDP proxy support, local traffic bypasses for domestic IP add

Pan-light is a tool for managing and downloading files from Baidu network storage. It provides high-speed file downloading and remote media streaming capabilities. The application uses concurrent segmented transfers to maximize network throughput and employs disk-persisted state tracking to resume interrupted downloads. It also includes a local proxy to bypass hotlinking protections, allowing remote videos to be streamed directly into a media player. The project features a cross-platform graphical user interface built with Go and Qt. Additionally, it supports remote software previews by runn

A Rust port of shadowsocks

Surfboard is a cross-platform network client and VPN manager that provides a graphical interface for establishing secure tunnel connections. It functions as a multi-protocol proxy client and a rule-based traffic router, directing outbound requests to specific proxies or bypassing them based on domain and IP patterns. The application acts as a connection orchestrator, allowing users to import, organize, and switch between multiple virtual private network profiles and server configurations. It implements various proxy standards to route traffic through remote servers for privacy and access. Th

VPNHotspot is a root-level Android network routing utility designed to share an active VPN connection with other devices via a wireless hotspot or repeater. It functions as a network manager that modifies system wireless settings to route tethered traffic through an encrypted tunnel. The tool provides capabilities to bypass mobile network operator tethering restrictions by routing traffic through a VPN or socksifier. It includes a controller for configuring wireless hardware offload and managing the sharing of network connections as a repeater. The project covers network administration tasks

BrowserMCP is a browser automation bridge that connects AI tools to a live browser session through a local proxy server. It implements a standardized protocol for sending commands like click, type, and navigate to a real browser instance running on the user's machine, while keeping all browsing data on the device. The project distinguishes itself by preserving user sessions and fingerprints across automation tasks. It attaches to the user's existing browser profile to maintain cookies, logins, and authentication state, and uses the real browser's user agent, viewport, and extension context to

clash-for-linux este o platformă de gestionare a proxy-urilor pentru Linux care servește ca un wrapper pentru nucleele Clash și Mihomo. Oferă un sistem pentru implementarea binarilor proxy, gestionarea abonamentelor și controlul interceptării traficului de rețea. Platforma se distinge printr-un sistem de configurare bazat pe mixin care permite utilizatorilor să aplice patch-uri și să suprascrie setările abonamentului fără a altera fișierele sursă originale. Include, de asemenea, un dashboard web pentru administrare headless, permițând monitorizarea de la distanță a stării nodurilor, a log-urilor și a politicilor de rutare. Sistemul suportă proxy-ul transparent prin interfețe virtuale TUN mode pentru a captura tot traficul sistemului și poate fi configurat ca un gateway pentru alte dispozitive dintr-o rețea locală. Capabilitățile suplimentare includ înlănțuirea multi-hop relay și selecția interactivă a nodurilor pentru direcționarea traficului. Instalarea implică deployment-ul binar conștient de arhitectură și utilizarea serviciilor de sistem pentru a asigura persistența la boot și pornirea automatizată.

ByeDPIAndroid is a deep packet inspection bypass tool for Android that functions as a local SOCKS5 proxy. It modifies TCP packets to evade network censorship and bypass regional internet restrictions on mobile devices. The project operates as a network traffic obfuscator and TCP packet fragmenter. It splits network data into smaller pieces and hides the nature of internet requests to prevent automated blocking and traffic shaping by internet service providers. The system covers a range of capabilities including host-based traffic interception and dynamic packet modification. It utilizes non-

GreenTunnel este un utilitar de rețea conceput pentru a ocoli inspecția pachetelor (DPI) și a trece peste cenzura internetului. Funcționează ca un instrument care modifică pachetele de rețea de ieșire și criptează interogările DNS pentru a împiedica furnizorii de servicii internet și sistemele de filtrare a rețelei să detecteze și să blocheze anumite destinații web. Proiectul implementează un proxy de fragmentare HTTP și un fragmentator de handshake HTTPS. Aceste componente împart header-ele cererilor și înregistrările de handshake TLS în mai multe segmente pentru a ascunde numele de host și numele serverelor de destinație de sistemele de inspecție. Software-ul include, de asemenea, un client DNS-over-HTTPS pentru a prelua adrese IP folosind protocoale criptate, prevenind interceptarea sau spoofing-ul interogărilor DNS standard. Capabilitățile suplimentare acoperă manipularea pachetelor TCP și fragmentarea segmentelor la nivelul transport pentru a evita inspecția traficului.

tun2socks is a connectivity utility that functions as a transparent proxy client and Layer 3 network gateway. It routes system network traffic through a SOCKS5 proxy using a virtual tunnel interface and provides the ability to tunnel IPv4 traffic over IPv6 or vice versa. The project implements a userspace TCP/IP stack to intercept raw IP packets and translate them for transmission to remote proxy servers. It supports multiple proxy protocols, including HTTP, SOCKS4, SOCKS5, and Shadowsocks, allowing application traffic to be redirected without per-app configuration. The software includes cap

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

This project is a cloud drive media aggregator and storage proxy that merges content from multiple cloud storage providers into a unified directory. It functions as an M3U playlist generator, converting cloud files and streaming sources into standardized formats for use in external media players. The system acts as a plugin host for Python-based scripts to fetch and parse content from third-party websites. These operations are supported by a local proxy to accelerate request loading and bypass network restrictions. The software includes a web-based interface for managing server settings and

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew