Awesome GitHub RepositoriesSecure Remote Access

Khoj is a self-hosted artificial intelligence platform designed for personal knowledge management and semantic information retrieval. It functions as a private assistant that indexes your local documents, notes, and external workspaces, allowing you to interact with your data through natural language queries and conversational chat. By maintaining a local-first architecture, the system ensures that your information remains under your control while providing context-aware responses grounded in your personal knowledge base. The platform distinguishes itself through a modular, cross-platform int

NetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce

Awesome Tunneling is a curated directory of technologies designed to facilitate secure connectivity between distributed devices and local services. It serves as a comprehensive resource for identifying tools that enable remote access, private network creation, and the exposure of local environments to the public internet. The collection focuses on solutions that bypass network address translation and firewall restrictions through techniques such as reverse proxy tunneling, overlay network infrastructure, and peer-to-peer connectivity. It categorizes resources based on their ability to establi

Claude Code Templates is a comprehensive framework for orchestrating specialized AI agents and automating development workflows within local environments. It provides a structured system for defining, configuring, and deploying AI personas that handle specific technical tasks, ranging from backend architecture and frontend implementation to security auditing and infrastructure management. The project distinguishes itself through a configuration-driven approach that allows teams to standardize development environments and share reusable agent definitions across projects. It includes a robust C

This project is a bash-based installation script and deployer used to automate the setup and configuration of an OpenVPN server on Linux systems. It provides a guided setup process for deploying virtual private network software across various Debian and Red Hat based distributions. The tool functions as a user management interface, allowing for the creation, removal, and administration of client profiles and the security credentials required for network access. It orchestrates the deployment of secure tunnels to enable remote network access to private environments. The system manages the ins

Chisel is a network tunneling tool that facilitates secure communication by encapsulating TCP and UDP traffic within HTTP requests. It functions as a connection multiplexer, consolidating multiple logical network streams into a single persistent connection to improve throughput and reduce overhead. By leveraging standard web protocols, the system enables firewall traversal and provides a mechanism for remote port forwarding and proxying. The project distinguishes itself through its focus on resilient connectivity and granular access control. It maintains persistent network sessions across uns

This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access. The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the set

SoftEtherVPN is a multi-protocol virtual private network server that provides secure remote access and site-to-site connectivity. It functions as a virtual network gateway, enabling encrypted communication across public internet connections while supporting both Layer 2 Ethernet bridging and Layer 3 IP routing to manage traffic between connected devices. The platform is designed to maintain connectivity in restrictive network environments by bypassing firewalls and NAT devices through techniques such as HTTPS, ICMP, and DNS-based tunneling. It eliminates the requirement for static public IP a

This project is a shell-based orchestration tool designed to automate the deployment and administration of WireGuard virtual private network servers on Linux hosts. It functions as a system-level networking utility that handles the installation of kernel modules, the configuration of secure tunnel interfaces, and the management of network routing rules to enable encrypted remote access. The tool provides an interactive command-line interface that simplifies the lifecycle management of network peers. It allows administrators to dynamically add or remove client access profiles, assign custom DN

This project is a GitOps infrastructure framework designed for managing bare metal servers, container clusters, and networking. It serves as a declarative system for orchestrating the deployment and lifecycle of self-hosted services, using Git as the source of truth to synchronize the desired state of the environment. The framework differentiates itself through a comprehensive automation suite that covers the entire hardware-to-service pipeline. It includes a PXE-based bare metal provisioner for network booting and operating system installation, alongside a lightweight container orchestration

GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of vulnerable Windows virtual machines. It serves as a security training environment for practicing Active Directory penetration testing, privilege escalation, and lateral movement across various cloud platforms and local virtualization hypervisors. The project distinguishes itself through a multi-provider infrastructure model and a system of infrastructure recipes that simulate intentional security misconfigurations. It supports the deployment of varied attack scenarios, including

This project is a containerized IPsec VPN server designed to provide secure remote network access. It functions as an IKEv2 VPN gateway, utilizing the StrongSwan daemon to manage security associations and establish encrypted tunnels between remote clients and a private network. The server acts as a certificate-based VPN manager, handling the generation and distribution of digital certificates and pre-shared keys to authenticate remote users. It includes tools for IKEv2 client management to automate the creation of configuration profiles and security keys for connecting devices. The system co

SmarGate este un utilitar de rețea conceput ca un instrument de penetrare a intranetului, tunel de rețea peer-to-peer și gateway de gestionare a dispozitivelor de la distanță. Acesta funcționează ca un sistem pentru ocolirea NAT și a firewall-urilor pentru a expune serviciile interne către internetul public, oferind în același timp capabilități de proxy SOCKS5 și HTTP și tuneluri criptate SSL/TLS. Proiectul se distinge prin implementarea rutării hibride care combină legăturile TCP peer-to-peer directe cu relay-ul proxy bazat pe cloud pentru a reduce latența. Dispune de mapare dinamică a porturilor în timp real care permite actualizarea redirecționărilor de rețea printr-un client mobil fără a necesita repornirea serverului. Software-ul acoperă o gamă largă de capabilități de rețea, inclusiv maparea porturilor interne și server-to-server, înlănțuirea proxy-urilor multi-hop și bridging-ul rețelelor IPv6. Oferă instrumente pentru administrarea dispozitivelor de la distanță, cum ar fi gestionarea fișierelor care pot fi reluate, streaming-ul audio în timp real și urmărirea locației GPS. Securitatea este gestionată prin criptare bazată pe certificate, autentificare proxy și listarea albă a domeniilor.

Otto este o platformă de orchestrare cloud hibridă concepută pentru a furniza infrastructură și a implementa workload-uri de aplicații în diverse medii cloud folosind infrastructura ca cod (IaC). Funcționează ca un furnizor de infrastructură ca cod care automatizează implementarea resurselor consistente prin workflow-uri bazate pe politici. Proiectul include un service mesh cloud hibrid pentru gestionarea descoperirii serviciilor și a comunicării securizate între aplicații, precum și un controler de acces bazat pe identitate pentru gestionarea secretelor și aplicarea controalelor de acces granulare. De asemenea, dispune de un graf de cunoștințe al infrastructurii care mapează proprietățile hibride pentru a vizualiza dependențele și a identifica oportunitățile de remediere operațională. Platforma acoperă domenii largi de capabilități, inclusiv livrarea automată a aplicațiilor pentru microservicii și aplicații monolitice, furnizarea infrastructurii cloud hibride și accesul securizat la rețea prin proxy-uri conștiente de identitate. De asemenea, oferă instrumente pentru gestionarea imaginilor de mașină și orchestrarea scalării workload-urilor în diverse medii.

This project is an Android VPN client and privacy-focused network tool. It serves as a secure tunneling application designed to encrypt internet traffic and mask IP addresses on Android devices. The application provides mobile privacy protection by routing network traffic through a secure VPN infrastructure. It enables remote network access and secure connectivity for public Wi-Fi usage to mask device identity and location.

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

WireGuard Manager is a system orchestration tool designed to automate the deployment, configuration, and lifecycle management of virtual private network infrastructure. It functions by translating high-level user intent into precise, declarative system configurations, managing kernel-level network interfaces, and enforcing firewall-based traffic control to ensure secure, isolated network routing. The project distinguishes itself by providing a centralized web-based management interface that abstracts the complexity of manual configuration files. It includes comprehensive administrative tools