Open-source alternatives to Hosts

This project provides collections of curated hostname-to-IP mappings designed to resolve connectivity failures and accelerate access to cloud-based service domains. It functions as a DNS host mapping list used to bypass resolution failures for specific services, including a dedicated repository of IP addresses for GitHub domains to restore image loading and page stability. The system features network configuration utilities that automate the synchronization of local hosts files with remote sources. These utilities utilize a scheduled update cycle to refresh network addresses and maintain curr

Shadowrocket is a proxy client application for mobile devices that functions as a multi-protocol proxy manager and a rule-based traffic router. It acts as a programmable network gateway, utilizing a virtual network interface to route system-level traffic through secure tunnels. The project distinguishes itself through a programmable environment that executes JavaScript scripts and modules to automate DNS resolution and handle complex network request logic. It further provides an HTTPS traffic inspector capable of decrypting encrypted traffic using custom certificates to modify headers and rew

This project is a comprehensive technical manual and reference guide focused on network proxies, virtual private networks, and the circumvention of internet censorship. It provides detailed analysis of network censorship and firewall strategies, including port blocking, DNS poisoning, and SSL connection interception. The documentation explains the underlying mechanics of VPN protocols, tunnels, and proxy systems to clarify how data routing and connectivity function. It includes instructional content for configuring proxy software and resolving DNS certificate errors across Windows, macOS, and

NoMoreWalls is a proxy subscription aggregator and configuration generator designed to bypass internet censorship. It functions as a tool for collecting public proxy nodes and compiling them into subscription files compatible with the Clash network core. The project differentiates itself by providing a local system for fetching, filtering, and provisioning curated proxy server configurations from multiple sources. It includes mechanisms to exclude specific proxy protocols and limit imported nodes to improve network stability and performance. The system manages network traffic routing through

This project is a technical resource and guide for bypassing internet censorship and network restrictions. It provides instructional documentation for configuring proxies and tunnels to circumvent IP blocking and access restricted websites and services. The guides cover the deployment of Shadowsocks, L2TP/IPSec, and SSH tunnels on virtual private servers. It focuses on masking server IP addresses by routing traffic through content delivery networks and using WebSockets to maintain connectivity. Additional technical coverage includes the implementation of SOCKS5 and HTTP proxies, the configur

x-ui-yg is a web-based proxy panel and multi-protocol manager used to deploy and manage network proxy protocols for bypassing internet censorship. It serves as a centralized administrator for secure network tunnels, providing a dashboard to obscure internet traffic and maintain user privacy. The project functions as a proxy subscription server, generating aggregated client subscription links and configuration files locally to remove reliance on third-party conversion tools. It also acts as a CDN proxy orchestrator, allowing the use of CDN domains and encryption to mask server identities and p

Edgetunnel is a serverless network proxy and VLESS proxy implementation designed to run on Cloudflare Workers. It functions as a VPN proxy that routes network traffic through edge computing platforms to provide an anonymized gateway for outbound internet requests. The project focuses on internet censorship circumvention and the bypass of network restrictions. It utilizes serverless proxy routing to mask original traffic sources and navigate regional filters or firewalls. The system manages traffic through serverless-based proxy tunneling, using WebSocket-based stream forwarding and protocol-

v2ray-core is a network proxy framework and custom proxy engine designed for censorship circumvention. It functions as a traffic routing platform that directs network data between inbound and outbound connections to access blocked content and services. The system employs a modular architecture using pluggable protocol handlers and a chain-based connection pipeline to transform and forward network traffic. It provides secure tunneling infrastructure to establish encrypted connections and uses a rule-based routing system to direct data between protocols and destinations. The framework includes

This project is a configuration guide and manual for bypassing internet censorship. It provides instructions for installing and configuring proxy software to route network traffic through secure nodes to access restricted web content. The guide focuses on proxy server configuration, including tutorials for importing remote server settings via formatted URLs and managing node-based connections. It covers the setup of secure network tunnels and the activation of proxy servers to bypass local network filters. The material covers network traffic routing, including the use of global and automatic

Hiddify-Manager is a VPN management panel and multi-protocol proxy server designed for internet censorship circumvention. It provides a central system for deploying and administering tunneling protocols to mask internet traffic and origin IP addresses. The project features a user subscription manager for distributing dynamic configuration links and a DNS privacy suite that implements DNS over HTTPS to prevent identity leaks. It integrates a CDN routing gateway to hide server locations and provides a web-based interface for managing multiple obfuscated connection methods. The platform covers

ShadowsocksR-Windows is a proxy client for Windows designed to route network traffic through ShadowsocksR proxy servers. It functions as a network proxy that establishes secure tunnels to bypass internet censorship and regional restrictions. The application manages system-wide network routing and provides SOCKS5 proxy client capabilities to hide origin IP addresses. It redirects local traffic through a remote server to maintain internet privacy and circumvent network-level blocks. The project incorporates traffic interception and encapsulation through a user-mode network wrapper and TAP-base

MTProxy is a proxy server that routes traffic to Telegram servers using the MTProto protocol to bypass network restrictions. It functions as a system for managing secure connections and forwarding protocol traffic between clients and destination servers. The project implements traffic obfuscation by adding random padding to packets to mask data patterns and hide proxy usage from internet service providers. It also includes a connection manager that restricts user access through the validation of specific authentication secrets. The system provides operational observability by exposing real-t

This project is an orchestration system for deploying and managing encrypted proxy nodes across virtual and serverless hosting platforms. It provides a web-based management interface for configuring proxy servers and a dedicated manager for generating and synchronizing subscription links compatible with network client software. The system features a CDN tunneling orchestrator to mask origin server IP addresses using domain tunnels and CDN back-ends. It includes a Cloudflare WARP integrator to handle account configurations and route outbound traffic through specialized connections to manage ou

This project provides an open-source VPN client that creates an unrestricted tunnel to bypass internet censorship without fees, registration, speed caps, or data limits. It offers free, unlimited VPN tunneling with no sign‑up required, enabling access to blocked websites and unrestricted browsing. The application uses the WireGuard protocol for encrypted traffic routing, backed by kernel‑level packet forwarding to minimize overhead. It includes automatic server discovery that selects the most responsive server based on real‑time latency, a connection keepalive mechanism to detect and restore

Zapret is a deep packet inspection bypass tool and packet manipulation framework designed to circumvent network censorship. It operates as a transparent network proxy and TCP traffic obfuscator that modifies packets to deceive network inspection systems. The project distinguishes itself through advanced desynchronization strategies, including the modification of TLS client hello handshakes and the use of fake packet injection. It utilizes a combination of TCP stream segmentation, sequence overlapping, and TTL adjustment to hide prohibited requests from firewalls while ensuring the destination

GreenTunnel is a network utility designed to circumvent deep packet inspection and bypass internet censorship. It functions as a tool that modifies outgoing network packets and encrypts DNS lookups to prevent internet service providers and network filtering systems from detecting and blocking specific web destinations. The project implements an HTTP fragmentation proxy and an HTTPS handshake fragmenter. These components split request headers and TLS handshake records across multiple segments to conceal hostnames and destination server names from inspection systems. The software also includes

Streisand is an orchestration system for deploying multi-protocol tunneling services and traffic obfuscation tools designed to circumvent regional network restrictions. It functions as a deployment utility and manager for various VPN and proxy services on remote cloud servers. The system distinguishes itself through a network obfuscation toolkit that wraps traffic in layers to evade deep packet inspection and bandwidth throttling. It automates the setup of multiple protocols, including WireGuard, OpenVPN, Shadowsocks, OpenConnect, OpenSSH, and Tor bridges. The project also includes utilities

Trojan-go is a network proxy implementation that uses the Trojan protocol to disguise internet traffic as standard TLS to bypass censorship and deep packet inspection. It functions as a tunneling gateway that encapsulates network data within encrypted tunnels to mimic ordinary web browsing. The project distinguishes itself through advanced obfuscation techniques, including TLS fingerprint mimicry to avoid detection by client signature identification and the use of WebSockets to relay encrypted traffic through content delivery networks. It also supports UDP forwarding through the Trojan protoc

This project is a censorship circumvention proxy client and cross-platform installer. It provides software designed to bypass internet filters, restrictive network firewalls, and the Great Firewall of China to enable access to blocked global websites. The software enables the download and installation of proxy and VPN clients across multiple desktop and mobile operating systems. These tools route traffic to bypass national firewalls and restrictive network filters. The project also covers network access acceleration to improve connection stability when accessing foreign servers and the manag

This project is a repository of free proxy server configurations and subscription links designed to bypass internet censorship and regional restrictions. It provides curated collections of public server addresses for the Shadowsocks, V2Ray, and Trojan network protocols. The project includes a subscription converter that transforms raw proxy node links into standardized formats compatible with mobile and desktop applications. It specifically provides subscription links for Clash and other VPN clients, utilizing an automated refresh mechanism to maintain high availability of the shared nodes.

Lantern is a network utility designed to provide access to restricted internet content by tunneling traffic through encrypted connections. It functions as a censorship circumvention tool that enables private web browsing and ensures reliable connectivity in environments where standard network access is blocked or monitored. The application employs a decentralized infrastructure that routes data through a network of distributed proxy nodes. To maintain connectivity in the face of interference, it utilizes dynamic proxy discovery and adaptive fallback mechanisms that automatically switch betwee

ByeDPIAndroid is a deep packet inspection bypass tool for Android that functions as a local SOCKS5 proxy. It modifies TCP packets to evade network censorship and bypass regional internet restrictions on mobile devices. The project operates as a network traffic obfuscator and TCP packet fragmenter. It splits network data into smaller pieces and hides the nature of internet requests to prevent automated blocking and traffic shaping by internet service providers. The system covers a range of capabilities including host-based traffic interception and dynamic packet modification. It utilizes non-

SwitchHosts is a desktop application for managing and switching between multiple sets of system hosts file entries. It functions as a network environment switcher and an operating system hosts file manager, allowing users to map domain names to specific IP addresses for local DNS management. The tool distinguishes itself through remote hosts synchronization, which fetches and updates local data from remote URLs on a defined schedule. It enables rapid configuration toggling via a main window and system tray menu to swap between different network routing sets instantly. The application include

Cloak is a set of censorship circumvention tools designed for secure proxy tunneling and internet traffic obfuscation. It focuses on bypassing restrictive firewalls and state surveillance by disguising proxy connections as standard web browsing. The project utilizes HTTP fingerprint masquerading to imitate common browser signatures and routes traffic through content delivery networks to mask the identity of the origin server. To further hide the server's purpose, it includes a mechanism to redirect unauthenticated connection requests to a third-party website. The system implements transport

This project is a censorship circumvention utility designed to maintain connectivity to restricted online services by evading deep packet inspection. It functions as a network traffic redirection service that manipulates packet headers at the transport layer to bypass regional network filters and censorship systems. The tool distinguishes itself by providing granular control over traffic management, allowing users to define specific lists of domains and IP addresses for targeted interception. By applying custom bypass strategies only to these designated hosts, the utility ensures that the rem

Shadowsocks is a secure network tunneling tool designed for censorship circumvention and private internet connectivity. It functions as a proxy system that routes traffic through encrypted tunnels, allowing users to bypass regional network restrictions and protect data from interception across public infrastructures. The project utilizes a lightweight, custom proxy protocol that incorporates stream-based cipher encryption to obfuscate payload content and prevent deep packet inspection. By employing an asynchronous, event-driven networking model, the system manages concurrent connections effic

This project is a centralized management interface and orchestrator for deploying censorship circumvention protocols and stealth proxies. It functions as a network censorship bypass tool that routes traffic through encrypted communication protocols to avoid internet firewalls and regional blocks. The system distinguishes itself through a multi-protocol VPN manager and an automated proxy server orchestrator that handles software updates and system backups. It utilizes content delivery networks to mask origin server identities and implements encrypted DNS over HTTPS to prevent DNS poisoning and