Awesome GitHub RepositoriesTLS Traffic Encryption

Trojan is a censorship circumvention tool and TLS proxy server designed to bypass network restrictions by imitating legitimate web services. It functions as a TLS traffic obfuscator that masks proxy activity by mimicking the handshake and data flow of standard HTTPS requests. The system disguises network traffic as common web browsing to avoid deep packet inspection. It achieves this by wrapping TCP and UDP data within TLS encryption and forwarding unauthenticated or unauthorized requests to a legitimate destination website to hide the proxy's purpose. The project provides a tunnel that conv

uWebSockets is a C++ networking framework that serves as a high-performance WebSocket server library, HTTP web server, and pub-sub messaging system. It provides the infrastructure necessary to handle standard web requests and maintain low-latency, bidirectional connections between clients and servers. The framework is distinguished by its use of template meta-programming for compile-time optimization and zero-copy buffer management to minimize memory latency. It utilizes a backend-agnostic event loop and static route resolution to process network traffic with minimal runtime overhead. The pr

grpc-rust is a native gRPC framework for Rust designed for building high-performance remote procedure call clients and servers. It provides an asynchronous communication stack and a protocol buffers implementation for encoding, decoding, and generating type-safe code from service definitions. The project enables the implementation of unary and bi-directional data streaming over the HTTP/2 protocol. It includes specialized support for gRPC-Web integration, allowing browser-based clients to communicate with services through protocol translation. The infrastructure covers a broad range of distr

Garnet is a multi-threaded in-memory database and distributed key-value store. It functions as a high-performance remote cache store that implements the RESP wire protocol to maintain compatibility with existing Redis clients and libraries. The project is distinguished by a shared-memory architecture that enables parallel request processing across multiple cores for sub-millisecond latency. It features a tiered storage system that automatically offloads colder data from system memory to SSD or cloud storage layers, and includes a specialized vector search database for high-dimensional similar

Java-WebSocket is a collection of classes for implementing WebSocket clients and servers using pure Java. It provides a framework for hosting servers that manage connections via event-driven subclasses and tools for establishing client connections to remote servers. The library includes a secure communication tool for encrypting traffic using the WSS protocol and a compression library that uses per-message deflate extensions to reduce transmitted data size. It supports the configuration of cipher suites to limit encryption protocols and ensure compatible communication. The project enables bi

livego is a live streaming server written in Go that receives live video streams and broadcasts them to viewers in real time. It functions as a multi-protocol video gateway, serving as a backend for ingesting video and redistributing it through RTMP, HLS, and HTTP-FLV protocols. The server features dynamic protocol transmuxing to convert ingested streams into different formats for device compatibility and low-latency playback. It provides secure stream access and ingestion by validating unique channel keys and using security tokens. The system includes capabilities for encrypted stream deliv

Websocat is a specialized set of command-line tools for WebSocket communication, acting as a client, server, and stream processor. It provides a terminal-based interface for connecting to WebSocket servers, hosting secure WebSocket servers, and bridging data between WebSockets and other network transports. The project distinguishes itself by functioning as a bidirectional network relay, allowing the routing of data between WebSocket streams, TCP sockets, UNIX sockets, and standard system input and output. It includes specialized implementations for SOCKS5 and HTTP proxying, as well as a strea

Javalin is a lightweight web framework for Java and Kotlin designed for building REST APIs and web applications. It functions as an embedded Jetty web server, allowing applications to run as standalone processes without the need for an external servlet container. The project provides specialized frameworks for diverse communication patterns, including a REST API framework with automatic OpenAPI schema generation, a GraphQL API framework with query and mutation resolvers, and a WebSocket server for bidirectional real-time communication. It also includes a dedicated framework for pushing real-t

Apache Tomcat is an open-source implementation of the Jakarta Servlet, Pages, Expression Language, and WebSocket specifications, serving as a container for running Java web applications. It provides a modular architecture with a servlet container, connector abstraction for multiple I/O models, and a pipeline-based request processing system that handles cross-cutting concerns through composable components. The server supports container-managed security with configurable realms for authentication against JDBC, LDAP, or memory-based credential stores, and offers TLS encryption with optional Open

Statping is a self-hosted uptime monitoring system and status page tool. It tracks application availability by sending periodic HTTP requests to target endpoints and records the resulting health status to determine if services are online. The system features a public-facing status dashboard that renders real-time availability and operational health for end users. It utilizes a plugin-based notification system to dispatch multi-channel alerts via email, webhooks, or custom providers when services experience downtime. The project includes a Prometheus-compatible metrics exporter for external p

deepstream.io is an open-source realtime server that synchronizes JSON records, events, and remote procedure calls across clients and backend services. It functions as a realtime data sync server, event pub/sub server, record database server, and RPC server, all within a single platform. The server authenticates and authorizes every message using multiple strategies including JWT, HTTP, and file-based credentials, with a declarative permission language controlling access to records, events, and RPCs at a granular level. The platform distinguishes itself through its combination of realtime dat

netty-socketio is a Java implementation of a Socket.IO server designed for real-time bidirectional communication between clients and servers. It functions as a real-time event engine and WebSocket communication server, utilizing the Netty network framework to manage high-performance socket connections. The project enables distributed socket server scaling by acting as a distributed message broker. It synchronizes client states and broadcasts messages across multiple server nodes through the use of an external data store. The system manages traffic via namespace-based connection routing and r

This is a Golang client library for interacting with a cloud native distributed messaging system. It provides the necessary tools for Go applications to exchange messages using publish-subscribe and request-reply patterns, as well as specialized clients for managing persistent streams and distributed storage. The library includes a JetStream client for durable message streaming and replay, a Key-Value store client for managing distributed state with versioning and watchers, and an Object Store client for the storage and retrieval of large binary files via chunked delivery. The implementation

Spin is a WebAssembly serverless framework and development toolchain for building and running portable microservices. It functions as an event-driven orchestrator and runtime that executes WebAssembly components, allowing developers to map HTTP requests, Redis messages, and cron schedules to specific modules. The project distinguishes itself by implementing a Wasm-based AI inference gateway, enabling components to perform model inference and generate text embeddings. It utilizes the WebAssembly Component Model and WASI for language-agnostic composition and portable host interfacing, while emp

Dehydrated is a shell-script ACME client that automates the lifecycle of TLS certificates from certificate authorities like Let's Encrypt. It implements the ACME protocol entirely in POSIX shell script with no external dependencies beyond standard Unix tools, relying on OpenSSL for all cryptographic operations including key generation, signing, and certificate parsing. The tool manages account keys, certificates, and configuration as plain files on disk, maintaining certificate metadata and account status in simple text files without a database. It delegates domain validation challenges to us

Goatcounter is a privacy-focused web analytics platform designed to be self-hosted on your own infrastructure. It collects visitor statistics like page views, browser information, location, screen size, and referring sites without using cookies or storing any personal data, identifying unique visits through a non-identifiable hash derived from browser and network data. The platform distinguishes itself by offering multiple tracking methods that respect user privacy, including a lightweight JavaScript snippet, an image-based tracking pixel for environments without JavaScript, and the ability t

Goatcounter is a self-hosted web analytics platform that collects visitor statistics without cookies, personal data, or persistent identifiers. It uses privacy-preserving techniques like anonymous session hashing to count page views and visits, and can be deployed on your own infrastructure using a binary or Docker container with SQLite or PostgreSQL storage. The platform offers multiple data collection methods, including a lightweight JavaScript snippet, an image-based tracking pixel for environments where scripts are blocked, and server log file parsing from nginx, Apache, Caddy, or CloudFr

Mox is a self-hosted email server that runs as a single compiled Go binary, handling the full lifecycle of sending and receiving email through SMTP, IMAP4rev2, and a built-in webmail application. It is designed to be operated without external dependencies or runtime plugins, with all mail services — including spam filtering, queue management, and web interfaces for administration and account management — contained in one executable. The server distinguishes itself through automated TLS certificate management via ACME, DNS-based autoconfiguration for email clients, and file-based configuration

Automate SSL/TLS certificates on Windows with ease

wireproxy 是一个用户空间的 WireGuard 客户端和网络网关，无需 root 权限或系统级接口更改即可建立安全隧道。它作为一个 VPN 代理，可以将 WireGuard 连接暴露为 SOCKS5 或 HTTP 代理。 该项目提供专门的路由功能，包括根据服务器名称指示（SNI）引导加密流量的 TLS SNI 代理，以及用于将本地 TCP 和 UDP 端口映射到远程目标的网关。它支持多对等点管理，使用定义的 IP 范围在多个端点之间路由流量。 其他功能包括 DNS 主机名解析、通过标头进行的代理请求身份验证，以及用于保护客户端-服务器连接的 TLS 加密。该系统还支持通过管道命令将标准输入和输出流路由通过安全隧道。 该应用可作为后台系统服务集成，以确保持久性和自动恢复。