Open Source C Tunneling Software

SlipNet is an anti-censorship and tunneling project centered on an Android VPN client with additional command-line support for desktop platforms. It can route traffic through multiple tunnel types, including DNS tunneling, SSH, SOCKS5, NaiveProxy, Tor, and related transport methods. The project is designed for networks where ordinary traffic may be blocked, throttled, filtered, or inspected. SlipNet includes a built-in DNS scanner, which helps users identify usable DNS paths for supported tunnel modes. Its desktop CLI can read configuration URIs and start a local SOCKS5 proxy for applications that need proxy-based routing. SlipNet is best understood as a multi-transport connectivity toolkit rather than a single-protocol VPN client.

This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy.

UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers.

WireGuard for iOS and macOS is the official WireGuard client implementation for Apple platforms, including iOS, iPadOS, and macOS. The project delivers a native Swift-based application that integrates with Apple’s Network Extension framework to provide secure VPN tunneling with strong performance and reliability. It offers a polished graphical interface that allows users to create, import, and manage WireGuard configurations while maintaining the protocol’s emphasis on simplicity and modern cryptography. The software is designed to work seamlessly within Apple’s ecosystem, supporting keychain storage, system networking controls, and platform security features. Because WireGuard is known for its lean architecture, the Apple client maintains efficient resource usage while delivering fast connection speeds. Overall, wireguard-apple is intended for Apple device users and organizations that require a secure, modern VPN solution fully aligned with the Apple networking stack.

Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc.

Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/

A client implementation of Secure Socket Tunneling Protocol (SSTP) for Linux / Mac OS-X that allows remote access via SSTP VPN to Microsoft Windows 2008 Server. This project has been moved to https://gitlab.com/eivnaes/sstp-client

Portable OpenSSH is a cross-platform implementation of the Secure Shell (SSH) protocol that provides encrypted communication and secure remote access over untrusted networks. It originates from the OpenSSH project maintained by the OpenBSD community and adapts the core OpenBSD implementation so it can run on many operating systems including Linux, macOS, and Windows. The software suite enables administrators and developers to securely log into remote systems, transfer files, and create encrypted tunnels for network traffic. By encrypting all communications between client and server, it protects against threats such as eavesdropping, connection hijacking, and data interception. The portable distribution follows the development of the main OpenSSH codebase while adding compatibility layers for multiple operating systems and authentication systems.

ProxyBridge is a free, open-source proxy management application designed to redirect network traffic from individual programs on Windows, macOS, and Linux. It enables applications without native proxy support to communicate through HTTP or SOCKS5 proxy servers. The software intercepts network connections at the system level without requiring changes to target applications. Users can create rules to route, allow, or block traffic based on processes, IP addresses, ports, protocols, and hostnames. ProxyBridge supports both TCP and UDP traffic, including connections used by games, databases, and remote access tools. Its graphical interface and command-line tools accommodate different networking workflows. Configuration import and export capabilities simplify rule management across systems.

Iodine is a DNS tunneling tool that allows IPv4 traffic to pass through DNS queries and responses. It is designed for situations where regular internet access is blocked but DNS resolution is still permitted. The project includes both a client and a server, requiring control of a domain and a publicly reachable server for proper setup. Iodine creates a virtual network interface so systems can communicate through an IP tunnel carried over DNS. It supports multiple DNS record types and automatically attempts to select efficient encoding methods depending on the resolver environment. Because the tunneled traffic is not encrypted by default, it is best treated as a transport layer that should be paired with secure protocols when privacy matters.

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components 🔧 Máy chủ VPNGate miễn phí có hỗ trợ SNI tùy chỉnh ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo,

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). 🔧 Máy chủ Psiphon3 miễn phí có hỗ trợ SNI tùy chỉnh và meek proxy ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, hoạt động ổn định. 🚀 Free Psiphon3 + SNI Customization and meek proxy 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This Psiphon3 server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components

xkcptun is a C-language implementation of kcptun built on KCP and libevent2. It is mainly designed for embedded and router-oriented environments such as LEDE and OpenWrt, where lightweight networking tools are often preferred. The project provides client and server components that use KCP-based tunneling to improve performance over unreliable or high-latency network links. It also includes a spy utility, making the generated build more than a minimal two-binary tunnel setup. xkcptun can be built with CMake and supports static linking for easier deployment on constrained systems. It is most relevant to users who need a compact KCP tunnel implementation for routers, gateways, and custom network appliances.

l2tpns is a layer 2 tunneling protocol network server (LNS). It supports up to 65535 concurrent sessions per server/cluster plus ISP features such as rate limiting, walled garden, usage accounting, and more. NOTE: this project is no longer under active development here. For a more up-to-date repository, see http://git.sameswireless.fr/l2tpns.git git.sameswireless.fr/l2tpns.git has been merged to sameswireless branch.

TCP over RDP tunneling tool

Bypass is an IP forwarding/tunneling tool which can be used where limited bypassing of a firewall is necessary, but relaxing the restrictions in the actual firewall is not an option. The aim is for bypass to be automatic and transparent.

Bored of having HTTP-only connection to the Internet? Tired of being unable to connect to irc through a HTTP proxy? desproxy (a TCP tunnel for HTTP proxies) just makes you able to tunnel all your TCP traffic through a HTTP proxy! Keywords: HTTP pr

Tunnel all your your shell commands/tools through HTTP, Socks4 or Socks5 proxies. Different proxy types can be mixed in the same chain and supports authentication for HTTP and Socks5. It works by hooking all the calls to connect().

Aleksoft Proxy allows tunneling TCP/IP traffic through a proxy server located outside of both service provider and consumer firewalls. The proxy consists of two executables, listener and connector, which may run on the same or different computers.

Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.

Enable servers behind a firewall to export services to the external networks with the assistance from an externel host as proxy (Jumppoint). The firewall tunnel consists of two parts: a frontend as "Jumppoint" and a backend running behind the firewall

This project implements an IPTables extension and the associated kernel loadable module to handle tunneling of GTP user-plane data.

gogoc is a gateway6 client used on the host computer to connect to a tunnel broker using the TSP protocol and to get the information for its tunnel. When it receives the information for the tunnel, the Gateway6 client creates the static tunnel on its operating system. GogoDroid is an Android gogoc client.

HTTP Proxy Client is the set of libraries and scripts, provides transparent access to Internet via HTTP proxy tunnel for programms, which uses TCP/IP for communication. The tunnel provided by CONNECT method of HTTP proxy. Supported external DNS resolving.

This project focuses on bringing commercial quality L2TP support to Linux and possibly other Unixes. L2TP stands for Layer 2 Tunneling Protocol. It is a VPN similar to PPTP and a number of others. L2TP often competes with PPPoE.