Open Source Go Tunneling Software
Sort By:
Go Tunneling Software
View 9320 business solutionsBrowse free open source Go Tunneling Software and projects below. Use the toggles on the left to filter open source Go Tunneling Software by OS, license, language, programming language, and project status.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
PRTG Catches Network Issues Before They Cause DowntimeReactive troubleshooting usually means hearing about a problem from frustrated users, not your monitoring tool. PRTG sets threshold-based alerts across devices, servers and applications, notifying your team by email, SMS or push the moment a metric crosses a set limit. That means catching a failing disk or overloaded server before it becomes an outage and getting time back from firefighting. Start a free trial and set your first alerts today.
-
1
AmneziaWG for Windows
AmneziaWG client for Windows
AmneziaWG for Windows is a dedicated Windows client designed for securely connecting to VPN servers using the AmneziaWG protocol. Based on the WireGuard for Windows project, it provides a familiar and efficient interface while adding support for AmneziaWG's enhanced privacy and censorship-resistance capabilities. The client uses the high-performance Wintun network driver to deliver fast and reliable VPN connections. As the official Windows implementation of AmneziaWG, it offers a trusted way to configure and manage secure tunnels on Windows devices. The application is suitable for users seeking improved resistance to VPN blocking and traffic detection. Its lightweight design, strong security foundation, and enterprise-ready deployment options make it a practical VPN solution for Windows environments. -
2
Cloudflare Tunnel Client
Cloudflare Tunnel Client
Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help. You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/web socket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help. -
3
Project X
Originates from XTLS protocol, providing a set of network tools
Project X is a powerful and extensible network proxy platform designed to provide advanced routing, tunneling, and traffic obfuscation capabilities. Originating from the XTLS protocol ecosystem, it serves as the core engine behind a wide variety of tools used for secure communication and bypassing network restrictions. The project supports multiple protocols such as VLESS, VMess, Shadowsocks, and Trojan, enabling flexible configuration for different networking scenarios. It is written primarily in Go and is optimized for high performance, making it suitable for both personal and large-scale deployments. Project X also integrates advanced features like REALITY and XTLS, which enhance encryption and disguise traffic to improve privacy and resistance to detection. The platform is highly modular, allowing developers to customize routing rules, transport layers, and proxy behaviors through configuration files or integrations. -
4
ngrok
Unified ingress for developers
ngrok is a globally distributed, secure reverse proxy and tunneling service that exposes applications running on local machines behind NATs or firewalls to the public internet. It simplifies remote debugging, webhooks integration, and secure ingress by wrapping reverse proxy, firewall traversal, API gateway, and load-balancing functionality into a single tool. ngrok is a globally distributed reverse proxy that secures, protects and accelerates your applications and network services, no matter where you run them. You can think of ngrok as the front door to your applications. ngrok combines your reverse proxy, firewall, API gateway, and global load balancing into one. ngrok can capture and analyze all traffic to your web service for later inspection and replay. -
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
5
pandora-box
Lightweight cross-platform desktop client for managing Mihomo proxies
Pandora-Box is a lightweight desktop client designed to provide a graphical interface for the Mihomo proxy core. It allows users to manage proxy configurations and subscriptions through a simple and user-friendly interface rather than working directly with configuration files. Pandora-Box supports multiple proxy protocols and provides tools to organize and control network routing rules. It is designed to work for both casual users who want an easy setup and advanced users who need more control over proxy behavior. It also supports automatic rule grouping and features such as TUN mode to enable system-wide proxy routing. Pandora-Box focuses on delivering a clean interface with practical features for importing, managing, and converting proxy subscriptions. Pandora-Box combines a desktop interface with backend components to create a functional proxy management environment that simplifies complex networking configurations. -
6
Pingtunnel
Pingtunnel is a tool that send TCP/UDP traffic over ICMP
Pingtunnel is a Go-based tunneling tool that sends TCP and UDP traffic over ICMP. It is designed for experimental, research, and network-study scenarios where ICMP transport is being explored as an alternative path for traffic forwarding. The project uses a client and server model, with the server typically requiring a publicly reachable host. It can carry application traffic through ICMP echo-style communication, which makes it distinct from common TCP, UDP, HTTP, or DNS tunnel tools. Because the tunnel traffic is not inherently presented as encrypted, sensitive usage should rely on secure protocols layered above it. pingtunnel is best understood as a specialized transport experiment for moving traffic through ICMP rather than a full privacy or security solution. -
7
WG Tunnel Desktop
A WireGuard and AmneziaWG client for desktop with a kill switch.
WG Tunnel Desktop is a free and open-source desktop client for managing WireGuard and AmneziaWG VPN tunnel configurations. It is designed for users who want a flexible desktop VPN tool with strong privacy controls and support for modern tunneling protocols. The application supports Windows and Linux, with macOS support planned for the future. WG Tunnel Desktop runs tunnels through a system daemon, allowing VPN connections to operate independently from the graphical interface. It includes security-focused tools such as an independent lockdown mode, encrypted configuration storage, and tunnel restoration on boot. With import, export, editing, sorting, and live statistics features, WG Tunnel Desktop provides a practical way to manage secure VPN connections on desktop systems. -
8
Hysteria
Hysteria is a powerful, lightning fast and censorship resistant proxy
Hysteria is a high-performance, censorship-resistant proxy and VPN-like networking tool designed to deliver fast, reliable connectivity over unstable or lossy networks by leveraging a custom UDP/QUIC-based transport layer that can masquerade as standard HTTP/3 traffic to evade detection. It supports a wide range of use cases including SOCKS5 and HTTP proxying, TCP/UDP forwarding, Linux TProxy for network redirection, and even tunneling via TUN interfaces, making it a flexible choice for developers and network engineers needing robust remote access or traffic obfuscation. Because it’s implemented in Go and MIT-licensed, the project provides cross-platform builds for major operating systems and architectures, letting users deploy servers and clients for both personal and infrastructural purposes. -
9
S-UI
An advanced Web Panel • Built for SagerNet/Sing-Box
S-UI is an advanced web-based management panel built on top of SagerNet and Sing-box, designed to simplify the configuration and monitoring of proxy and networking services through an intuitive graphical interface. It provides a centralized dashboard where users can manage inbound and outbound connections, configure routing rules, and monitor traffic usage in real time. The platform supports multiple protocols and clients, making it flexible for different networking scenarios such as proxy servers, tunneling, and custom routing setups. It includes features for generating subscription links in various formats, allowing easy distribution of configurations to client devices. The system is built with a full-stack architecture combining a Go backend and a modern frontend, ensuring both performance and usability. It also exposes API endpoints for automation and integration with external tools, enabling advanced users to build custom workflows. -
Already Paying for an RMM? Get 50% Off Splashtop AEMAutomated OS and third-party patching for Windows and macOS, CVE prioritization with AI patch summaries, and built-in remote control that also supports Linux. Qualifying organizations switching from another RMM get up to 50% off year one.
-
10
Tun2Socks
tun2socks , powered by gVisor TCP/IP stack
Proxy Everything: Handle all network traffic of any internet programs sent by the device through a proxy. Proxy Protocols: HTTP/Socks4/Socks5/Shadowsocks with authentication support for remote connections. Run Everywhere. Linux/macOS/Windows/FreeBSD/OpenBSD multi-platform support with specific optimization. Gateway Mode: Act as a layer three gateway to handle network traffic from other devices in the same network. Full IPv6 Support: All functions work in IPv6, tunnel IPv4 connections through IPv6 proxy and vice versa. Network Stack: Powered by user-space TCP/IP stack from Google container application kernel gVisor. -
11
MasterDnsVPN
Advanced DNS tunneling VPN for censorship bypass, optimized beyond DNS
MasterDnsVPN is a research-oriented DNS tunneling VPN project that carries TCP traffic through DNS queries and responses. It is designed for restrictive network environments where DNS may remain available even when other connection methods are limited. The project focuses on stability, speed, and compatibility across different resolver behaviors. It uses a custom protocol with ARQ, low overhead, resolver balancing, and multipath behavior to improve performance under packet loss. MasterDnsVPN also includes client and server configuration files, Docker support, and installation scripts for easier deployment. It is best understood as an experimental transport system for DNS-based tunneling rather than a general-purpose commercial VPN. -
12
Chisel
A fast TCP/UDP tunnel over HTTP
Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows. -
13
gost
GO Simple Tunnel, a simple tunnel written in golang
A simple security tunnel written in Golang. Listening on multiple ports, multi-level forward proxies - proxy chain, standard HTTP/HTTPS/HTTP2/SOCKS4(A)/SOCKS5 proxy protocols support. Probing resistance support for web proxy, TLS encryption via negotiation support for SOCKS5 proxy. Support multiple tunnel types, tunnel UDP over TCP. Local/remote TCP/UDP port forwarding, TCP/UDP Transparent proxy, Shadowsocks Protocol (TCP/UDP), and SNI Proxy. Permission control, load balancing, route control, DNS resolver and proxy, and TUN/TAP Device. In GOST, GOST and other proxy services are considered as proxy nodes, GOST can handle the requests itself, or forward the requests to any one or more proxy nodes. In addition to configuring services directly from the command line, parameters can also be set by specifying the external configuration file with the -C parameter. -
14
GO Simple Tunnel
A simple tunnel written in golang
GOST, or GO Simple Tunnel, is a flexible tunneling and proxy tool written in Go for building secure traffic forwarding chains. It supports proxying, port forwarding, reverse proxying, and tunnel-based access to services behind NAT or firewalls. The project is designed around protocol composition, allowing users to combine multiple protocols into multi-level forwarding chains. It can handle TCP and UDP forwarding, transparent proxying, DNS proxying, TUN/TAP workflows, and tun2socks scenarios. GOST also includes operational features such as load balancing, routing control, admission control, rate limiting, dynamic configuration, Prometheus metrics, and a Web API. It is useful for network engineers, developers, and self-hosters who need a configurable, cross-platform networking toolkit for complex proxy and tunnel setups. -
15
Venom
A Multi-hop Proxy for Penetration Testers
Venom is a Go-based multi-hop proxy tool designed for authorized penetration testing, red-team labs, and security education. It helps operators connect multiple nodes and use them as stepping stones for routing traffic across segmented internal networks. The project uses an admin-and-agent architecture, allowing the controller to manage connected nodes and build proxy chains. Venom is useful for studying pivoting, internal routing, SOCKS proxying, and controlled traffic relay in lab or approved assessment environments. It supports several connection and forwarding behaviors, giving testers flexibility when working with different network paths. Because of its security-testing focus, it should only be used in environments where the user has explicit permission. -
16
Ligolo-ng
An advanced, yet simple, tunneling/pivoting tool
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS). When running the relay/proxy server, a tun interface is used, packets sent to this interface are translated and then transmitted to the agent's remote network. You need to download the Wintun driver (used by WireGuard) and place the wintun.dll in the same folder as Ligolo. You can listen to ports on the agent and redirect connections to your control/proxy server. You can easily hit more than 100 Mbits/sec. Here is a test using iperf from a 200Mbits/s server to a 200Mbits/s connection. -
17
mieru
mieru is a socks5 / HTTP / HTTPS proxy to bypass censorship
mieru is a secure proxy software suite built around a client called mieru and a server called mita. It is designed to provide SOCKS5, HTTP, and HTTPS proxy access over TCP or UDP-based transport. The project emphasizes traffic that is difficult to classify or probe, making it relevant for privacy-focused and censorship-resistance research. It includes encrypted communication and uses a dedicated protocol rather than simply wrapping a common proxy format. mieru can run on multiple platforms and provides release packages for different operating systems and architectures. Its overall goal is to offer a configurable proxy system that balances usability, transport flexibility, and resistance to simple traffic identification. -
18
zrok
Secure internet sharing made simple
zrok is a secure sharing platform for exposing web services, files, and network resources across the internet or private networks. It is built on OpenZiti, a zero-trust networking overlay that allows sharing without inbound connectivity, firewall changes, or port forwarding. The tool can publish resources publicly or share them privately with other zrok users, depending on the workflow. It supports use cases such as temporary web previews, file sharing, private service access, testing, development, and secure resource collaboration. zrok focuses on making internet sharing simple while keeping authentication, authorization, and encrypted transport in the underlying networking model. It is well suited for developers, teams, and infrastructure users who want secure tunnels without exposing raw network services directly. -
19
KubeVPN
KubeVPN offers a Cloud Native Dev Environment
KubeVPN is a cloud-native development tool that connects a local machine to a Kubernetes cluster network. It lets developers access cluster resources directly through service names, Pod IPs, or Service IPs, which can make local debugging feel closer to working inside the cluster. The project supports traffic interception so inbound requests for a remote Kubernetes workload can be redirected to a local development process. It can also run a Kubernetes pod locally in Docker while preserving key environment, volume, and networking behavior. KubeVPN includes local SOCKS5 proxy options for cases where route-based access is difficult because another VPN or network tool controls the operating system routes. Overall, it is designed to make Kubernetes development more convenient by blending local workflows with remote cluster networking. -
20
Clash
A rule based proxy in Go
Clash is an open-source rule-based proxy and networking tool written in Go that allows users to route internet traffic through multiple proxy protocols based on configurable rules. It is designed to give users fine-grained control over how different types of traffic are handled, enabling selective routing, filtering, or blocking depending on domains, IP addresses, or geographic conditions. The system supports multiple proxy protocols and can act as a local proxy server for HTTP, HTTPS, and SOCKS connections, making it compatible with a wide range of applications and devices. Clash uses a configuration-driven approach, where users define proxy groups, routing rules, and fallback strategies to optimize performance or bypass restrictions. It also includes features such as GeoIP-based routing and dynamic proxy selection, allowing traffic to be automatically directed through the most appropriate route. -
21
nebula
Overlay networking tool with a focus on performance and simplicity
Nebula is a scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world. Nebula is portable, and runs on Linux, OSX, Windows, iOS, and Android. It can be used to connect a small number of computers, but is also able to connect tens of thousands of computers. Nebula incorporates a number of existing concepts like encryption, security groups, certificates, and tunneling, and each of those individual pieces existed before Nebula in various forms. What makes Nebula different to existing offerings is that it brings all of these ideas together, resulting in a sum that is greater than its individual parts. Nebula is a mutually authenticated peer-to-peer software defined network based on the Noise Protocol Framework. Nebula uses certificates to assert a node's IP address, name, and membership within user-defined groups. -
22
AWL
Securely connect your devices into a private network
Anywherelan (AWL) is a peer-to-peer mesh VPN solution designed to securely connect devices across diverse networks without relying on centralized servers. By leveraging WireGuard tunneling and built-in NAT traversal, AWL facilitates seamless device connectivity at the IP level, enabling users to access services like SSH, RDP, or self-hosted applications without complex configurations. Its decentralized architecture ensures that traffic flows directly between devices, enhancing privacy and reducing latency. AWL is particularly beneficial for scenarios such as remote work, gaming, or accessing geographically restricted content. -
23
Stowaway
Multi-hop Proxy Tool for pentesters
Stowaway is a Go-based multi-hop proxy tool created for authorized penetration testing, red-team labs, and security training environments. It uses an admin-and-agent model that allows operators to build a chain of connected nodes across segmented networks. The tool supports active and passive connection modes, making it adaptable to different network layouts. It can route traffic through SOCKS5 and HTTP proxy settings, and it also supports TCP, HTTP-style, and WebSocket-style upstream or downstream transport modes. Stowaway includes encrypted node communication through a shared key, with optional TLS support noted in its runtime parameters. Its feature set makes it useful for studying pivoting, port forwarding, and controlled internal network routing in legitimate test environments. -
24
tls SNI injector + VPNGate Free Server
Value Added VPN 4G ssl/tls sni VPNGate CN/RU/JP/UK..
Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components 🔧 Máy chủ VPNGate miễn phí có hỗ trợ SNI tùy chỉnh ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, -
25
FRP Manager
A user-friendly desktop GUI client for FRP on Windows
FRP Manager is a free, open-source Windows application that simplifies configuring and managing reverse proxies using Fast Reverse Proxy (FRP). It helps users expose local servers behind NAT networks or firewalls without manually editing configuration files. Its graphical interface combines proxy configuration, service launching, connection monitoring, and management tools. Users can maintain multiple configurations to connect to different FRP server nodes. Running configurations operate as background Windows services, even after the application window closes. Automatic startup enables proxy services to launch during system boot without requiring user login. Hot reloading applies configuration changes without interrupting active proxy connections. Additional options include configuration import and export, connection status monitoring, and temporary self-destructing configurations.
