Open Source C Tunneling Software

This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy.

SlipNet is an anti-censorship and tunneling project centered on an Android VPN client with additional command-line support for desktop platforms. It can route traffic through multiple tunnel types, including DNS tunneling, SSH, SOCKS5, NaiveProxy, Tor, and related transport methods. The project is designed for networks where ordinary traffic may be blocked, throttled, filtered, or inspected. SlipNet includes a built-in DNS scanner, which helps users identify usable DNS paths for supported tunnel modes. Its desktop CLI can read configuration URIs and start a local SOCKS5 proxy for applications that need proxy-based routing. SlipNet is best understood as a multi-transport connectivity toolkit rather than a single-protocol VPN client.

UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers.

WireGuard for iOS and macOS is the official WireGuard client implementation for Apple platforms, including iOS, iPadOS, and macOS. The project delivers a native Swift-based application that integrates with Apple’s Network Extension framework to provide secure VPN tunneling with strong performance and reliability. It offers a polished graphical interface that allows users to create, import, and manage WireGuard configurations while maintaining the protocol’s emphasis on simplicity and modern cryptography. The software is designed to work seamlessly within Apple’s ecosystem, supporting keychain storage, system networking controls, and platform security features. Because WireGuard is known for its lean architecture, the Apple client maintains efficient resource usage while delivering fast connection speeds. Overall, wireguard-apple is intended for Apple device users and organizations that require a secure, modern VPN solution fully aligned with the Apple networking stack.

Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/

Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc.

A client implementation of Secure Socket Tunneling Protocol (SSTP) for Linux / Mac OS-X that allows remote access via SSTP VPN to Microsoft Windows 2008 Server. This project has been moved to https://gitlab.com/eivnaes/sstp-client

Portable OpenSSH is a cross-platform implementation of the Secure Shell (SSH) protocol that provides encrypted communication and secure remote access over untrusted networks. It originates from the OpenSSH project maintained by the OpenBSD community and adapts the core OpenBSD implementation so it can run on many operating systems including Linux, macOS, and Windows. The software suite enables administrators and developers to securely log into remote systems, transfer files, and create encrypted tunnels for network traffic. By encrypting all communications between client and server, it protects against threats such as eavesdropping, connection hijacking, and data interception. The portable distribution follows the development of the main OpenSSH codebase while adding compatibility layers for multiple operating systems and authentication systems.

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components 🔧 Máy chủ VPNGate miễn phí có hỗ trợ SNI tùy chỉnh ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo,

Iodine is a DNS tunneling tool that allows IPv4 traffic to pass through DNS queries and responses. It is designed for situations where regular internet access is blocked but DNS resolution is still permitted. The project includes both a client and a server, requiring control of a domain and a publicly reachable server for proper setup. Iodine creates a virtual network interface so systems can communicate through an IP tunnel carried over DNS. It supports multiple DNS record types and automatically attempts to select efficient encoding methods depending on the resolver environment. Because the tunneled traffic is not encrypted by default, it is best treated as a transport layer that should be paired with secure protocols when privacy matters.

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). 🔧 Máy chủ Psiphon3 miễn phí có hỗ trợ SNI tùy chỉnh và meek proxy ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, hoạt động ổn định. 🚀 Free Psiphon3 + SNI Customization and meek proxy 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This Psiphon3 server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components

l2tpns is a layer 2 tunneling protocol network server (LNS). It supports up to 65535 concurrent sessions per server/cluster plus ISP features such as rate limiting, walled garden, usage accounting, and more. NOTE: this project is no longer under active development here. For a more up-to-date repository, see http://git.sameswireless.fr/l2tpns.git git.sameswireless.fr/l2tpns.git has been merged to sameswireless branch.

Bored of having HTTP-only connection to the Internet? Tired of being unable to connect to irc through a HTTP proxy? desproxy (a TCP tunnel for HTTP proxies) just makes you able to tunnel all your TCP traffic through a HTTP proxy! Keywords: HTTP pr

TCP over RDP tunneling tool

Bypass is an IP forwarding/tunneling tool which can be used where limited bypassing of a firewall is necessary, but relaxing the restrictions in the actual firewall is not an option. The aim is for bypass to be automatic and transparent.

Tunnel all your your shell commands/tools through HTTP, Socks4 or Socks5 proxies. Different proxy types can be mixed in the same chain and supports authentication for HTTP and Socks5. It works by hooking all the calls to connect().

It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers.

proxyconnect send HTTP CONNECT request to HTTP proxy to build transparent tunnel between its stdin/stdout and dedicated port on remote host. can be used to provide proxy support for SSH by adding a ProxyCommand directive in ssh_config.

HTTP Proxy Client is the set of libraries and scripts, provides transparent access to Internet via HTTP proxy tunnel for programms, which uses TCP/IP for communication. The tunnel provided by CONNECT method of HTTP proxy. Supported external DNS resolving.

TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). ## License This project includes some open-source components. This software is sold as a proprietary product. A license to use this software is granted only to those who have completed the payment process. For full license terms, please refer to the [Proprietary-License](./LICENSE) file.

Heyoka is an advanced tool to perform DNS tunneling in a flexible and reliable way. It uses binary encoding in order to speed up the data transfer, and spoofs the DNS requests in order to be harder to detect. Currently in alpha state.

Aleksoft Proxy allows tunneling TCP/IP traffic through a proxy server located outside of both service provider and consumer firewalls. The proxy consists of two executables, listener and connector, which may run on the same or different computers.

Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.

Enable servers behind a firewall to export services to the external networks with the assistance from an externel host as proxy (Jumppoint). The firewall tunnel consists of two parts: a frontend as "Jumppoint" and a backend running behind the firewall

This project implements an IPTables extension and the associated kernel loadable module to handle tunneling of GTP user-plane data.