Awesome GitHub RepositoriesTLS Certificate Validations

Websocat is a specialized set of command-line tools for WebSocket communication, acting as a client, server, and stream processor. It provides a terminal-based interface for connecting to WebSocket servers, hosting secure WebSocket servers, and bridging data between WebSockets and other network transports. The project distinguishes itself by functioning as a bidirectional network relay, allowing the routing of data between WebSocket streams, TCP sockets, UNIX sockets, and standard system input and output. It includes specialized implementations for SOCKS5 and HTTP proxying, as well as a strea

Mbed TLS is an open-source TLS and DTLS library with a small footprint, designed for embedded systems and IoT devices. It provides a portable cryptographic library that includes symmetric ciphers, hashing, and public-key cryptography, along with a reference implementation of the PSA Cryptography API for standardized cryptographic operations across platforms. The library also offers X.509 certificate management for parsing, validating, and managing certificate chains in secure communications. The library is built around a platform abstraction layer that decouples it from OS-specific services t

An HTTP proxy library for Go

Hazelcast is a distributed data platform that combines an in-memory data grid with a stream processing engine to support real-time analytics and event-driven applications. It functions as a partitioned, distributed key-value store that replicates data across cluster nodes to provide low-latency access and high availability. The platform also serves as a distributed SQL query engine, allowing users to execute standard SQL statements against both in-memory datasets and external data sources. What distinguishes Hazelcast is its use of a distributed consensus subsystem to maintain strongly consis

GmSSL is an open-source cryptographic library that implements the Chinese national cryptographic standards SM2, SM3, SM4, SM9, and ZUC as a unified algorithm suite. It provides a comprehensive set of cryptographic primitives including symmetric and asymmetric encryption, digital signatures, hashing, and key exchange, all built around these national standards for government and enterprise security applications. The library distinguishes itself through several integration capabilities. It includes an OpenSSL compatibility layer that maps GmSSL functions to OpenSSL API calls, enabling drop-in re

CRI-O is an open-source container runtime that implements the Kubernetes Container Runtime Interface (CRI) to manage container images, pods, and containers on cluster nodes using OCI-compatible runtimes. It serves as a node-level container manager that handles image pulling, container lifecycle, and resource monitoring for Kubernetes clusters, running containers according to the Open Container Initiative specifications. The runtime distinguishes itself through live configuration reloading that applies changes to runtime definitions, registry mirrors, and TLS certificates without restarting th

该项目是一个多协议 API 模拟和 Mock 系统，旨在开发和测试期间替换外部依赖。它提供了一个 API Mock 服务器、网络流量代理，以及针对语言模型服务和身份提供商的专用模拟器。 该系统以其深度的 AI 模拟能力脱颖而出，包括模拟语言模型提供商和使用 JSON-RPC 2.0 的模型上下文协议 (MCP) 服务器。它支持多轮对话逻辑、AI 聊天 API 的状态跟踪，以及通过调用图和 Token 使用量跟踪实现代理执行的可视化。 广泛的功能领域包括针对 OpenAPI 规范的 API 契约测试、通过网络故障注入实现的韧性和混沌工程，以及用于实时请求修改的实时流量拦截。该项目还管理针对 OIDC、OAuth2、SAML 2.0 和 SCIM 2.0 标准的身份提供商模拟。 该服务器可以作为 Docker 容器、通过 Kubernetes Helm Chart 或作为独立的二进制文件部署。

Websockify 是一个 WebSocket 转 TCP 的代理和隧道服务器，使 Web 浏览器能够与仅支持标准 TCP 连接的服务器或应用程序进行通信。它作为网络桥接器和连接代理，将双向 WebSocket 帧转换为原始 TCP 数据包，以促进对后端服务的远程浏览器访问。 该系统充当安全套接字网关，支持多租户套接字路由，允许根据唯一的 URL 令牌或主机名将多个客户端定向到不同的后端目标。它通过将连接封装在 SSL/TLS 加密中来保护传输中的数据，并利用基于插件的系统在建立后端连接之前对用户进行身份验证。 其他功能包括用于扩展并发连接负载的多进程工作模型，以及拦截本地进程以将网络输出重定向到代理流的能力。该项目还提供了用于调试的原始网络字节流记录工具，并可以在与代理相同的端口上从本地目录提供静态 Web 内容。 该软件可以作为守护进程运行，以在没有活动终端会话的情况下保持持久连接。

This project is a DNS privacy proxy and resolver that functions as a local bridge, converting plaintext DNS traffic into encrypted requests. It acts as a client for DNS-over-HTTPS and DNS-over-TLS protocols to prevent interception and spoofing of network requests. The system implements network privacy hardening by routing domain lookups through secure tunnels, which reduces the amount of plain text data leaked to internet service providers. It utilizes a profile-based connection management system to map security profiles to specific encrypted endpoints, preventing DNS hijacking and man-in-the

Synapse 是一个 Matrix 家庭服务器实现，为去中心化、实时通信和消息传递提供了基础设施。它作为一个联邦聊天服务器，在独立的服务器实例之间同步房间数据和事件流，以实现跨域互操作性。 该服务器利用一个混合核心，将性能关键逻辑集成在 Rust 中，并配有一个 Python 编排层。它使用 PostgreSQL 关系数据库来持久化用户账户和对话历史，并使用基于 Redis 的消息系统在水平工作节点之间分配任务。 该项目涵盖了广泛的功能，包括通过 SAML 和 OpenID Connect 集成的安全身份管理、用于内容审核和房间管理的全面管理工具，以及自动媒体处理。它还包括用于去中心化联邦、异步数据库模式迁移和用于性能监控的遥测导出的系统。

Endless 是一个用于 Go HTTP 服务器的零停机服务器封装器和进程管理器。它替换了标准库监听器以协调进程转换和套接字管理，允许在不丢弃活动网络连接的情况下更新二进制文件。 该项目通过在父进程关闭之前派生一个新的子进程来接管网络套接字，从而实现零停机重启。它通过使用 TLS 加密层封装服务器来管理安全流量，并支持标准网络端口和 Unix 套接字的协调。 该系统通过信号驱动的管理处理服务器生命周期，在重启期间执行特定的设置和清理功能。它通过套接字移交协调确保持续可用性，并提供优雅的关闭机制，在定义的宽限期后耗尽活动请求或终止挂起的连接。

urllib3 是一个用于发送网络请求和接收响应的 Python HTTP 客户端库。它提供了用于管理 HTTP 连接池、通过代理路由流量、验证 TLS 证书以及执行自动请求重试的核心组件。 该库专注于网络可靠性和效率，通过维护一个重用已建立连接到多个主机的系统来降低延迟。它通过客户端证书验证确保安全通信，并使用基于策略的重试逻辑处理瞬时网络错误。 该项目涵盖了广泛的网络功能，包括多部分编码有效载荷的格式化、基于流的响应解压缩，以及对 HTTP 和 SOCKS 代理服务器的支持。

urllib3 是一个用于发送网络请求和接收响应的 Python HTTP 客户端库。它作为 HTTP 连接池管理器和 TLS 证书验证器，确保端点之间的安全通信。 该库提供了一个维护可重用网络连接的系统，以减少重复握手的开销。它还充当 HTTP 代理客户端，能够通过代理服务器路由请求，以管理源身份或绕过防火墙。 该工具涵盖了通过多部分编码进行程序化文件上传，以及通过重试和重定向跟随实现自动化网络弹性。它还管理响应有效载荷的解压缩和服务器证书的验证。

该项目是 Rust 编程语言的原生 PostgreSQL 数据库驱动程序。它作为一个类型安全的数据库映射器和连接器，提供同步和异步接口，用于针对 PostgreSQL 后端执行查询。 该库实现了一个类型安全映射系统，将 PostgreSQL 数据类型转换为 Rust 类型，确保数据传输过程中的一致性。它还充当加密数据库连接器，支持安全通信协议，以保护应用程序和数据库之间传输的数据。 该驱动程序涵盖了核心数据库功能，包括执行数据操作和管理安全数据库连接。

pgdog is a PostgreSQL sharding proxy, distributed SQL router, and connection pooler. It is designed to enable horizontal data distribution by splitting tables and indices across multiple independent servers to scale storage and processing capacity. The project distinguishes itself through online resharding capabilities, using logical replication to move data between shards without application downtime. It supports multiple routing strategies, including hash, list, and range-based query routing, and manages distributed atomic transactions using a two-phase commit process to ensure consistency

Garage is a distributed object storage system that provides an S3-compatible API gateway. It is designed to synchronize metadata across distributed nodes using conflict-free replicated data types and Merkle-tree state alignment to maintain cluster-wide consistency. The system ensures data resilience through zone-aware replication, distributing data copies across multiple physical locations. It employs quorum-based request routing and versioned layout management to validate and commit cluster configuration changes. The project covers a broad range of operational capabilities, including automa

This project is a server implementation of the Model Context Protocol designed to function as an AI knowledge retrieval tool. It acts as a semantic search engine and web scraping framework that indexes technical documentation from web sources, local files, and archives, making this information directly accessible to AI coding assistants for context-aware research and querying. The system distinguishes itself through a hybrid search architecture that combines vector-based embeddings with full-text retrieval to improve the accuracy of documentation lookups. It features a modular pipeline for co