Open Source C Tunneling Software

This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy.

UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers.

SlipNet is an anti-censorship and tunneling project centered on an Android VPN client with additional command-line support for desktop platforms. It can route traffic through multiple tunnel types, including DNS tunneling, SSH, SOCKS5, NaiveProxy, Tor, and related transport methods. The project is designed for networks where ordinary traffic may be blocked, throttled, filtered, or inspected. SlipNet includes a built-in DNS scanner, which helps users identify usable DNS paths for supported tunnel modes. Its desktop CLI can read configuration URIs and start a local SOCKS5 proxy for applications that need proxy-based routing. SlipNet is best understood as a multi-transport connectivity toolkit rather than a single-protocol VPN client.

WireGuard for iOS and macOS is the official WireGuard client implementation for Apple platforms, including iOS, iPadOS, and macOS. The project delivers a native Swift-based application that integrates with Apple’s Network Extension framework to provide secure VPN tunneling with strong performance and reliability. It offers a polished graphical interface that allows users to create, import, and manage WireGuard configurations while maintaining the protocol’s emphasis on simplicity and modern cryptography. The software is designed to work seamlessly within Apple’s ecosystem, supporting keychain storage, system networking controls, and platform security features. Because WireGuard is known for its lean architecture, the Apple client maintains efficient resource usage while delivering fast connection speeds. Overall, wireguard-apple is intended for Apple device users and organizations that require a secure, modern VPN solution fully aligned with the Apple networking stack.

Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/

Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc.

A client implementation of Secure Socket Tunneling Protocol (SSTP) for Linux / Mac OS-X that allows remote access via SSTP VPN to Microsoft Windows 2008 Server. This project has been moved to https://gitlab.com/eivnaes/sstp-client

Portable OpenSSH is a cross-platform implementation of the Secure Shell (SSH) protocol that provides encrypted communication and secure remote access over untrusted networks. It originates from the OpenSSH project maintained by the OpenBSD community and adapts the core OpenBSD implementation so it can run on many operating systems including Linux, macOS, and Windows. The software suite enables administrators and developers to securely log into remote systems, transfer files, and create encrypted tunnels for network traffic. By encrypting all communications between client and server, it protects against threats such as eavesdropping, connection hijacking, and data interception. The portable distribution follows the development of the main OpenSSH codebase while adding compatibility layers for multiple operating systems and authentication systems.

Iodine is a DNS tunneling tool that allows IPv4 traffic to pass through DNS queries and responses. It is designed for situations where regular internet access is blocked but DNS resolution is still permitted. The project includes both a client and a server, requiring control of a domain and a publicly reachable server for proper setup. Iodine creates a virtual network interface so systems can communicate through an IP tunnel carried over DNS. It supports multiple DNS record types and automatically attempts to select efficient encoding methods depending on the resolver environment. Because the tunneled traffic is not encrypted by default, it is best treated as a transport layer that should be paired with secure protocols when privacy matters.

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ UDP Over SSL Tunnel UDP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). VPN client 4G ssl/tls sni + SoftEther + VPNGate CN/RU/JP/UK.. 🚀 Free VPNGate + SNI Customization 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This VPNGate server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components 🔧 Máy chủ VPNGate miễn phí có hỗ trợ SNI tùy chỉnh ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo,

Sibling project https://sourceforge.net/projects/tls-sni-injector-cloudflare/ TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). 🔧 Máy chủ Psiphon3 miễn phí có hỗ trợ SNI tùy chỉnh và meek proxy ✅ Dùng để vượt tường lửa, kiểm duyệt mạng ⚙️ Cấu hình chuyên nghiệp, phù hợp với kỹ thuật viên và người yêu công nghệ 📡 Không cần root, không quảng cáo, hoạt động ổn định. 🚀 Free Psiphon3 + SNI Customization and meek proxy 🛡️ One of the most powerful censorship bypass tools ever shared 🌍 Works globally — optimized for Vietnam, Iran, and more 💡 Try it today and experience real freedom! This Psiphon3 server setup is shared for educational and testing purposes only. Learn how SNI customization and meek proxy affect network censorship bypassing. 🧪 Try it on real-world networks to understand circumvention strategies. Buy +84-387554874 @Whatsapp This project use some open source components

l2tpns is a layer 2 tunneling protocol network server (LNS). It supports up to 65535 concurrent sessions per server/cluster plus ISP features such as rate limiting, walled garden, usage accounting, and more. NOTE: this project is no longer under active development here. For a more up-to-date repository, see http://git.sameswireless.fr/l2tpns.git git.sameswireless.fr/l2tpns.git has been merged to sameswireless branch.

TCP over RDP tunneling tool

It is a versatile DNS Proxy server with DNS firewall which filters DNS traffic between local computer and DNS servers with flexible rules, supports blocking by IP geography, caching, import/export rules into XML. With a click of a button acts as a DNS proxy (or DNS server), supports multiple client authentication methods, calculates statistics for DNS servers and proxy clients, supports load balancing between multiple upstream DNS servers.

TCP Over SSL Tunnel TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support ( SSL Injector ). ## License This project includes some open-source components. This software is sold as a proprietary product. A license to use this software is granted only to those who have completed the payment process. For full license terms, please refer to the [Proprietary-License](./LICENSE) file.

Bypass is an IP forwarding/tunneling tool which can be used where limited bypassing of a firewall is necessary, but relaxing the restrictions in the actual firewall is not an option. The aim is for bypass to be automatic and transparent.

Heyoka is an advanced tool to perform DNS tunneling in a flexible and reliable way. It uses binary encoding in order to speed up the data transfer, and spoofs the DNS requests in order to be harder to detect. Currently in alpha state.

phc -- proxy hunter customed -- for validation of free SOCKS 4/5 or HTTP proxies. It is highly customed. Current first release 1.0 validate http proxies from a file with CONNECT or GET method bypass a basic auth http tunnel. Delay is recorded, too.

oSKY (OpenSKY) is a full communication framework to implement PSoTN (Public Social Telephony Network). In contrast with PSTN (Public Switched Telephony Network), oSKY intends to implement an open paradigm in the internet domain, gaining more than 100 years of experience from traditional telephone network. oSKY goals: -enhanced security (SSL, SCTP) -embedded NAT tunneling -Global title discovering on Internet style -Peer2Peer mode and Gateway mode -more to come ... oSKY project drivers: - drastically reduce bandwidth usage by performing smart lookup of enum numbering space. avoiding PSTN outbound trunking when not necessary and linking IPPABXs in the internet domain with failover capabilities.

HTTP Proxy Client is the set of libraries and scripts, provides transparent access to Internet via HTTP proxy tunnel for programms, which uses TCP/IP for communication. The tunnel provided by CONNECT method of HTTP proxy. Supported external DNS resolving.

Surfboard is a filtering HTTP 1.1 proxy. It features dynamic filter management through an interactive HTML console, IP tunneling, WindowMaker applets, and a suite of filters.

proxyconnect send HTTP CONNECT request to HTTP proxy to build transparent tunnel between its stdin/stdout and dedicated port on remote host. can be used to provide proxy support for SSH by adding a ProxyCommand directive in ssh_config.

Aleksoft Proxy allows tunneling TCP/IP traffic through a proxy server located outside of both service provider and consumer firewalls. The proxy consists of two executables, listener and connector, which may run on the same or different computers.

Tunnel all your your shell commands/tools through HTTP, Socks4 or Socks5 proxies. Different proxy types can be mixed in the same chain and supports authentication for HTTP and Socks5. It works by hooking all the calls to connect().

Campagnol is a decentralized VPN over UDP tunneling. It uses UDP hole punching to open connections through NAT/firewall and OpenSSL's DTLSv1 implementation for mutual authentication and encryption.