Open Source BSD Tunneling Software - Page 2

WarpTunnel is a porting of http tunnel 3.3 from C into .NET C# platform. WarpTunnel creates a bidirectional virtual data path tunnelled in HTTP requests through firewall or proxy servers.Support DIGEST proxy & SOCKS4/4a/5.Client for Compact Framework 2.0

Aleksoft Proxy allows tunneling TCP/IP traffic through a proxy server located outside of both service provider and consumer firewalls. The proxy consists of two executables, listener and connector, which may run on the same or different computers.

Tunnel all your your shell commands/tools through HTTP, Socks4 or Socks5 proxies. Different proxy types can be mixed in the same chain and supports authentication for HTTP and Socks5. It works by hooking all the calls to connect().

ArgoSBX is an advanced automation script that combines multiple networking cores, including sing-box, Xray, and Cloudflare Argo, into a unified deployment framework. It is designed to provide a highly flexible and powerful proxy solution capable of operating across various environments such as VPS, Docker, and containerized systems. The tool supports a wide range of protocols and configurations, including TLS-based and Reality-based connections, enabling users to tailor their setup to different network conditions. One of its defining features is the ability to integrate CDN-based routing and WARP combinations, offering numerous configuration permutations to optimize performance and bypass restrictions. The script is built for minimal interaction, allowing users to deploy complex setups with a single command while still retaining deep customization options.

ArgoX is a shell-based deployment project for setting up Xray proxy services with Cloudflare Argo Tunnel support on VPS environments. It focuses on one-click installation and interactive configuration, making it easier to deploy a multi-protocol proxy stack without manually assembling every component. The project supports several protocol options, including VLESS, VMess, Trojan, Shadowsocks, Hysteria2, Reality, WebSocket, gRPC, and XHTTP-based modes. ArgoX uses Cloudflare tunnel behavior to reduce direct exposure of inbound service ports in supported configurations. It also includes generated node information and subscription-style outputs for easier client setup. The project is best understood as an automation script for advanced proxy deployment rather than a general-purpose hosting panel.

Bastillion is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with the management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login using two-factor authentication with Authy or Google Authenticator. From there they can manage their public SSH keys or connect to their systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution. Bastillion layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding.

Box for Root is an Android root module that provides transparent proxy functionality through Magisk, KernelSU, or APatch. It bundles support for several proxy cores, including clash, sing-box, v2ray, hysteria, and xray. The project is intended for rooted Android devices where users want system-level proxy routing rather than app-by-app manual configuration. It stores core module files under the Android root data path and uses a settings file for configuration. An optional BFR Manager app is available to help manage the module more easily. Its main purpose is to make proxy service management more integrated on rooted Android devices while supporting multiple backend tools.

CallMe is a minimalist plugin for Claude Code that bridges computational tasks with real-world alerts by letting the AI call your phone, smartwatch, or even a landline when an operation finishes, gets stuck, or needs a user decision. It is designed to let users start a long-running task, leave their device, and then be notified in a natural way with a phone call instead of second-guessing progress in the console. The plugin uses a local MCP server alongside a webhook tunnel (typically via ngrok) to connect with voice providers like Telnyx or Twilio for outbound calls, with prompts and responses flowing between Claude Code and the user’s voice device. Multi-turn conversations are supported, so users can respond in real time to questions the agent asks during execution, giving it a practical human-in-the-loop capability for complex workflows.

Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.

Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows.

An Open Source portable pure Java game library with example games, Swing-based sprite animation engine, deployment framework, and firewall tunneling networking. The code is documented in the book Advanced Java Game Programming by David Wallace Croft.

This project intends to make a SOCKS compatible tunnel proxy which communicates to the server part, running on your nameserver, over standard DNS (UDP) protocol. That way you can bypass network firewalls allowing no other IP traffic but DNS.

Enable servers behind a firewall to export services to the external networks with the assistance from an externel host as proxy (Jumppoint). The firewall tunnel consists of two parts: a frontend as "Jumppoint" and a backend running behind the firewall

Fuso is a lightweight intranet penetration and port-forwarding tool written in Rust. It is designed to expose internal services through a relay-style setup while remaining small, fast, and efficient. The project supports multiple connections, cascading proxy behavior, transmission encryption, and both TCP and UDP forwarding workflows. It can also work with SOCKS5 scenarios, including UDP forwarding in newer releases. Fuso is useful for developers and system administrators who need controlled access to services behind NAT, firewalls, or private networks. The project is best understood as a compact tunneling utility for learning, testing, and authorized network access rather than a commercial remote-access platform.

This project implements an IPTables extension and the associated kernel loadable module to handle tunneling of GTP user-plane data.

JavaTunnel is a java, free, tunneling program. It can function in two ways: 1 It can open TCP/IP tunnel between two computers, using HTTP as a transport(not yet). 2 It can open a connection directly, witht he help of a SSL-HTTP proxy(avaible now).

Kinoglaz is a pure C++ RTSP Streaming Server. Features seek / scale support, TCP tunneling, playlists, runtime stream composition. Actually supports MPEG4 video (like xvid), MPEG2 / MP3 / AAC audio.

This project focuses on bringing commercial quality L2TP support to Linux and possibly other Unixes. L2TP stands for Layer 2 Tunneling Protocol. It is a VPN similar to PPTP and a number of others. L2TP often competes with PPPoE.

An easy, yet highly-configurable iptables-based firewall solution designed for everybody from home users to network admins. Functionality for IPv6, tunneling, IPSec, and advanced routing is planned.

A HTTP tunnel for POP and SMTP access via a proxy.

HTTP Tunnel that works with ANY HTTP proxy: no CONNECT method required! You can use the port redirector or Socks 4/4a/5 to connect outside your (restricted) LAN. An external web server is required, to be used as gateway.

Mole is a command-line application for creating SSH tunnels with an emphasis on resilience and user experience. It is designed to help users access or expose services that are behind firewalls, private networks, or otherwise unreachable from the current machine. Mole uses SSH access to a jump server as the bridge between the user and the target service. It simplifies common tunneling workflows that would otherwise require remembering long SSH commands and port-forwarding flags. The project is useful for developers, operators, and administrators who frequently connect to internal databases, dashboards, or web services through secure tunnels. Its focus is not to replace SSH, but to make SSH tunneling more reliable, readable, and easier to manage.

A lightweight, compact, stand-alone, platform-independent application to forward TCP (over IPv4 or IPv6) connections to another host. Possible uses include - but not limited to - firewall hacking, tunneling, proxying, fortifying ADSL, creating multi-plat

Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. It includes a Dockerfile to facilitate containerized usage, requiring sufficient network capabilities (e.g. NET_ADMIN) inside the container. Behind the scenes, the code is modular: for instance, parts of the logic around installation and utility functions are separated into Perl modules (e.g. in lib/Nipe/Utils/Install.pm).

NodePass is a lightweight enterprise-grade TCP and UDP tunneling solution for handling complex network access scenarios. It uses an all-in-one architecture that separates control and data channels while keeping deployment simple for administrators. The project supports zero-configuration setup, connection pooling, protocol conversion, and tiered TLS encryption. It is designed for DevOps professionals and system administrators who need reliable forwarding across restricted, segmented, or operationally complex networks. NodePass can be used to expose internal services, bridge environments, manage tunnels, and create fast network paths through pre-established connections. Its focus is practical tunnel management with high performance, flexible instance control, and deployment patterns that work across client and server environments.