Awesome GitHub RepositoriesSecure Remote Access

Khoj is a self-hosted artificial intelligence platform designed for personal knowledge management and semantic information retrieval. It functions as a private assistant that indexes your local documents, notes, and external workspaces, allowing you to interact with your data through natural language queries and conversational chat. By maintaining a local-first architecture, the system ensures that your information remains under your control while providing context-aware responses grounded in your personal knowledge base. The platform distinguishes itself through a modular, cross-platform int

NetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce

Awesome Tunneling is a curated directory of technologies designed to facilitate secure connectivity between distributed devices and local services. It serves as a comprehensive resource for identifying tools that enable remote access, private network creation, and the exposure of local environments to the public internet. The collection focuses on solutions that bypass network address translation and firewall restrictions through techniques such as reverse proxy tunneling, overlay network infrastructure, and peer-to-peer connectivity. It categorizes resources based on their ability to establi

Claude Code Templates is a comprehensive framework for orchestrating specialized AI agents and automating development workflows within local environments. It provides a structured system for defining, configuring, and deploying AI personas that handle specific technical tasks, ranging from backend architecture and frontend implementation to security auditing and infrastructure management. The project distinguishes itself through a configuration-driven approach that allows teams to standardize development environments and share reusable agent definitions across projects. It includes a robust C

This project is a bash-based installation script and deployer used to automate the setup and configuration of an OpenVPN server on Linux systems. It provides a guided setup process for deploying virtual private network software across various Debian and Red Hat based distributions. The tool functions as a user management interface, allowing for the creation, removal, and administration of client profiles and the security credentials required for network access. It orchestrates the deployment of secure tunnels to enable remote network access to private environments. The system manages the ins

Chisel is a network tunneling tool that facilitates secure communication by encapsulating TCP and UDP traffic within HTTP requests. It functions as a connection multiplexer, consolidating multiple logical network streams into a single persistent connection to improve throughput and reduce overhead. By leveraging standard web protocols, the system enables firewall traversal and provides a mechanism for remote port forwarding and proxying. The project distinguishes itself through its focus on resilient connectivity and granular access control. It maintains persistent network sessions across uns

This project provides a shell-based automation utility for deploying and managing OpenVPN servers on Linux hosts. It functions as an orchestration tool that handles the installation of networking software, the configuration of system-level routing rules, and the generation of cryptographic credentials required to establish secure, encrypted tunnels for remote network access. The tool distinguishes itself by automating the entire lifecycle of a private network gateway, including the management of peer identities and the distribution of standardized configuration profiles. It simplifies the set

SoftEtherVPN is a multi-protocol virtual private network server that provides secure remote access and site-to-site connectivity. It functions as a virtual network gateway, enabling encrypted communication across public internet connections while supporting both Layer 2 Ethernet bridging and Layer 3 IP routing to manage traffic between connected devices. The platform is designed to maintain connectivity in restrictive network environments by bypassing firewalls and NAT devices through techniques such as HTTPS, ICMP, and DNS-based tunneling. It eliminates the requirement for static public IP a

This project is a shell-based orchestration tool designed to automate the deployment and administration of WireGuard virtual private network servers on Linux hosts. It functions as a system-level networking utility that handles the installation of kernel modules, the configuration of secure tunnel interfaces, and the management of network routing rules to enable encrypted remote access. The tool provides an interactive command-line interface that simplifies the lifecycle management of network peers. It allows administrators to dynamically add or remove client access profiles, assign custom DN

This project is a GitOps infrastructure framework designed for managing bare metal servers, container clusters, and networking. It serves as a declarative system for orchestrating the deployment and lifecycle of self-hosted services, using Git as the source of truth to synchronize the desired state of the environment. The framework differentiates itself through a comprehensive automation suite that covers the entire hardware-to-service pipeline. It includes a PXE-based bare metal provisioner for network booting and operating system installation, alongside a lightweight container orchestration

GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of vulnerable Windows virtual machines. It serves as a security training environment for practicing Active Directory penetration testing, privilege escalation, and lateral movement across various cloud platforms and local virtualization hypervisors. The project distinguishes itself through a multi-provider infrastructure model and a system of infrastructure recipes that simulate intentional security misconfigurations. It supports the deployment of varied attack scenarios, including

This project is a containerized IPsec VPN server designed to provide secure remote network access. It functions as an IKEv2 VPN gateway, utilizing the StrongSwan daemon to manage security associations and establish encrypted tunnels between remote clients and a private network. The server acts as a certificate-based VPN manager, handling the generation and distribution of digital certificates and pre-shared keys to authenticate remote users. It includes tools for IKEv2 client management to automate the creation of configuration profiles and security keys for connecting devices. The system co

SmarGate 是一款网络实用工具，设计为内网穿透工具、点对点网络隧道和远程设备管理网关。它作为一个用于绕过 NAT 和防火墙以将内部服务暴露给公共互联网的系统，同时提供 SOCKS5 和 HTTP 代理功能以及 SSL/TLS 加密隧道。 该项目通过实现结合直接点对点 TCP 链接与基于云的代理中继的混合路由来降低延迟，从而脱颖而出。它具有实时动态端口映射功能，允许通过移动客户端更新网络重定向，而无需重启服务器。 该软件涵盖了广泛的网络能力，包括内部和服务器到服务器的端口映射、多跳代理链以及 IPv6 网络桥接。它提供了用于远程设备管理的工具，例如可恢复文件管理、实时音频流传输和 GPS 位置跟踪。安全性通过基于证书的加密、代理身份验证和域名白名单进行管理。

Otto 是一个混合云编排平台，旨在通过基础设施即代码（IaC）在不同的云环境中配置基础设施并部署应用工作负载。它作为一个 IaC 配置工具，通过策略驱动的工作流实现一致性资源的自动化部署。 该项目包含一个用于管理服务发现和应用间安全通信的混合云服务网格，以及一个用于管理密钥和实施细粒度访问控制的基于身份的访问控制器。它还具备一个基础设施知识图谱，能够映射混合云资产，从而可视化依赖关系并识别运营修复机会。 该平台涵盖了广泛的功能领域，包括微服务和单体应用的自动化交付、混合云基础设施配置，以及通过身份感知代理实现的安全网络访问。此外，它还提供了管理机器镜像和在不同环境中编排工作负载伸缩的工具。

This project is an Android VPN client and privacy-focused network tool. It serves as a secure tunneling application designed to encrypt internet traffic and mask IP addresses on Android devices. The application provides mobile privacy protection by routing network traffic through a secure VPN infrastructure. It enables remote network access and secure connectivity for public Wi-Fi usage to mask device identity and location.

Octelium is a zero-trust network access platform and identity-aware proxy designed to secure private HTTP, SSH, and SQL resources. It functions as a secure gateway that validates human and workload identities using OIDC, SAML, and FIDO2 passkeys before granting access to internal applications and SaaS APIs. The system is distinguished by its secretless access broker, which injects credentials—such as API keys, passwords, and AWS Sigv4 signatures—at the gateway level so users can access databases and cloud resources without managing secrets. It further specializes in AI gateway administration,

WireGuard Manager is a system orchestration tool designed to automate the deployment, configuration, and lifecycle management of virtual private network infrastructure. It functions by translating high-level user intent into precise, declarative system configurations, managing kernel-level network interfaces, and enforcing firewall-based traffic control to ensure secure, isolated network routing. The project distinguishes itself by providing a centralized web-based management interface that abstracts the complexity of manual configuration files. It includes comprehensive administrative tools