Open Source Android Tunneling Apps

Clash Meta for Android is an Android application that functions as a rule-based network tunneling and proxy management tool, enabling users to control how their internet traffic is routed through different proxy servers. Built on the Clash.Meta core, it allows advanced routing based on customizable rules, making it possible to selectively direct traffic for specific apps, domains, or regions. The application is commonly used for bypassing network restrictions, optimizing routing performance, and managing multiple proxy configurations in a unified interface. It provides a user-friendly mobile interface while maintaining powerful underlying functionality for advanced users who need granular control over network behavior. The project is actively maintained and integrates updates from the Clash.Meta kernel, ensuring compatibility with evolving proxy protocols and features. It supports various proxy types and configurations, making it highly flexible for different networking scenarios.

Clash for Android is the mobile counterpart to desktop Clash clients, offering Android users a powerful proxy routing environment based on the Clash core, designed to let them control how network traffic is handled on their devices according to flexible rule sets. It provides a front end to define inbound and outbound proxy rules, supports various protocols like SOCKS5, Shadowsocks, V2Ray, and more, and lets users import configurations through URLs or local files, handling dynamic subscription updates. With its ability to route app or domain-specific traffic, Android users can implement split-tunneling, bypass geographic restrictions, and optimize latency for performance-sensitive apps without requiring full VPN profiles. The application usually includes features like logs, traffic monitoring, and status indicators so users can see how rules are applied in real time, and it fits into Android’s VPN API to create a local virtual network interface for routing.

Project X is a powerful and extensible network proxy platform designed to provide advanced routing, tunneling, and traffic obfuscation capabilities. Originating from the XTLS protocol ecosystem, it serves as the core engine behind a wide variety of tools used for secure communication and bypassing network restrictions. The project supports multiple protocols such as VLESS, VMess, Shadowsocks, and Trojan, enabling flexible configuration for different networking scenarios. It is written primarily in Go and is optimized for high performance, making it suitable for both personal and large-scale deployments. Project X also integrates advanced features like REALITY and XTLS, which enhance encryption and disguise traffic to improve privacy and resistance to detection. The platform is highly modular, allowing developers to customize routing rules, transport layers, and proxy behaviors through configuration files or integrations.

GooseRelayVPN is a Go-based SOCKS5 VPN-style tunneling project that carries raw TCP traffic through a Google Apps Script relay to a user-controlled VPS exit server. Its local client accepts SOCKS5 traffic, encrypts TCP data with AES-256-GCM, and sends it through HTTPS requests toward a Google-facing endpoint. The Apps Script component acts as a relay and forwards encrypted data without holding the plaintext key. The VPS exit server decrypts the traffic, opens the real outbound connection, and returns responses through the same relay path. This design allows SOCKS5-compatible applications to use the tunnel while the network path mainly sees HTTPS traffic to Google infrastructure. GooseRelayVPN is a specialized transport system that requires a VPS and should be used only where it complies with applicable rules and service terms.

Seeker is an open source project that demonstrates how to obtain precise location information from devices using social engineering and web-based techniques. The tool sets up a phishing page that asks for location permissions, allowing GPS and other device data to be shared if the user consents. It can capture latitude, longitude, accuracy, altitude, direction, and even speed, with results displayed in a terminal. The project supports both manual deployment and tunneling services like Ngrok for external access. While primarily intended as an educational resource on security awareness, it highlights the risks of exposing geolocation data online. Its simplicity and effectiveness have made it a popular project in cybersecurity learning circles.

UDPspeeder is a tunneling utility focused on improving UDP traffic quality over high-latency, unstable, or packet-loss-prone links. Its core technique is Forward Error Correction, which sends redundant data so the connection can recover from packet loss without waiting for retransmission. Used by itself, it improves UDP-based connections, but it can also be paired with UDP-based VPN tools to support broader traffic types through the VPN layer. The project is especially relevant for gaming, remote access, VPN transport, and other latency-sensitive use cases where packet loss creates visible performance problems. It gives users adjustable parameters so they can balance bandwidth overhead, latency, and resilience. UDPspeeder is not a general VPN by itself, but a network-quality enhancement layer for UDP tunnels.

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components 🔧 Máy chủ VPNGate miễn phí có hỗ trợ SNI tùy chỉnh ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo,

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). 🔧 Máy chủ Psiphon3 miễn phí có hỗ trợ SNI tùy chỉnh và meek proxy ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, hoạt động ổn định. 🚀 Free Psiphon3 + SNI Customization and meek proxy 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This Psiphon3 server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components

BoringTun is a high-performance, portable implementation of the WireGuard VPN protocol written in Rust, designed so that developers and system integrators can run WireGuard tunnels entirely in user space across a variety of operating systems without kernel modules. It implements the core WireGuard protocol — including key exchange, encryption (ChaCha20-Poly1305), and authenticated transport — while omitting platform-specific tunneling stacks, allowing embedment in custom VPN client applications or userspace networking tools. The repository includes both a library for programmatic use and a command-line executable that can act as a userspace WireGuard interface on supported platforms like Linux and macOS. Because it’s written in Rust, BoringTun benefits from strong safety guarantees, memory safety without garbage collection, and cross-platform support, making it suitable for mobile, desktop, and server environments.

Cake is a compact, powerful toolkit that combines a flexible TCP/UDP proxy, port forwarding system, and connection manager designed for both development and penetration testing scenarios. It enables users to create complex networking flows where traffic can be proxied, relayed, and manipulated between endpoints — useful for debugging networked applications, inspecting protocols, or tunneling traffic through different hops. The tool is designed to work with multiple protocols and supports dynamic rule definitions so that incoming and outgoing connections can be routed, rewritten, or logged according to user-defined policies. Unlike many simple proxies, Cake can act as a full connection broker: it can bind to arbitrary interfaces, handle simultaneous upstream/downstream sessions, and apply traffic rules on the fly. This makes it suitable for troubleshooting tricky network behavior, simulating network conditions, or chaining services in a modular test environment.

gogoc is a gateway6 client used on the host computer to connect to a tunnel broker using the TSP protocol and to get the information for its tunnel. When it receives the information for the tunnel, the Gateway6 client creates the static tunnel on its operating system. GogoDroid is an Android gogoc client.