Open Source ChromeOS Tunneling Software
Sort By:
Tunneling Software for ChromeOS
Browse free open source Tunneling software and projects for ChromeOS below. Use the toggles on the left to filter open source Tunneling software by OS, license, language, programming language, and project status.
-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
1
DNS2SOCKS
DNS to SOCKS or HTTP proxy
This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy. -
2
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source code of the application or web page you want to act on. This SourceForge entry is preserved for historical reference. Please get the latest version from https://github.com/oculix-org/Oculix/releases. -
3
Chisel
A fast TCP/UDP tunnel over HTTP
Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows. -
4
Another Redis Desktop Manager
A faster, better and more stable Redis desktop manager
AnotherRedisDesktopManager is a cross-platform GUI client for Redis that simplifies connecting, browsing, and manipulating data. It supports standalone, Sentinel, and Cluster modes, plus SSH tunneling and ACL credentials for secure access in varied environments. The UI provides tree and table views of keys with inline editors for strings, hashes, lists, sets, sorted sets, and streams, including TTL management and batch operations. Built-in monitoring lets you watch stats, slow logs, and command activity while an integrated console executes raw Redis commands. Quality-of-life features include JSON viewers, search and filter tools, favorite connections, and dark mode. For everyday operations and troubleshooting, it offers a friendlier alternative to the command line without hiding Redis’s power. -
$300 Free Credits for Your Google Cloud ProjectsLaunch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
-
5
Box for Root
Transparent Proxy for Android(root)
Box for Root is an Android root module that provides transparent proxy functionality through Magisk, KernelSU, or APatch. It bundles support for several proxy cores, including clash, sing-box, v2ray, hysteria, and xray. The project is intended for rooted Android devices where users want system-level proxy routing rather than app-by-app manual configuration. It stores core module files under the Android root data path and uses a settings file for configuration. An optional BFR Manager app is available to help manage the module more easily. Its main purpose is to make proxy service management more integrated on rooted Android devices while supporting multiple backend tools. -
6
Drip
Self-hosted tunneling solution to expose localhost securely
Drip is an open-source, self-hosted tunneling solution that lets you expose local services to the internet securely on your own terms. Inspired by the idea of “lighting a small lamp on your network,” Drip creates encrypted tunnels through your own infrastructure without relying on third-party servers, giving you full control over traffic direction and network endpoints. The project supports unlimited tunnels and bandwidth, making it suitable for both development and production scenarios where conventional reverse proxies may not suffice. It is written primarily in Go, which enables high performance and cross-platform deployment with minimal overhead. Drip includes a rich command-line interface for configuring, launching, and managing tunnels and supports transport protocol selection and access control features. -
7
Ligolo-ng
An advanced, yet simple, tunneling/pivoting tool
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS). When running the relay/proxy server, a tun interface is used, packets sent to this interface are translated and then transmitted to the agent's remote network. You need to download the Wintun driver (used by WireGuard) and place the wintun.dll in the same folder as Ligolo. You can listen to ports on the agent and redirect connections to your control/proxy server. You can easily hit more than 100 Mbits/sec. Here is a test using iperf from a 200Mbits/s server to a 200Mbits/s connection. -
8
pandora-box
Lightweight cross-platform desktop client for managing Mihomo proxies
Pandora-Box is a lightweight desktop client designed to provide a graphical interface for the Mihomo proxy core. It allows users to manage proxy configurations and subscriptions through a simple and user-friendly interface rather than working directly with configuration files. Pandora-Box supports multiple proxy protocols and provides tools to organize and control network routing rules. It is designed to work for both casual users who want an easy setup and advanced users who need more control over proxy behavior. It also supports automatic rule grouping and features such as TUN mode to enable system-wide proxy routing. Pandora-Box focuses on delivering a clean interface with practical features for importing, managing, and converting proxy subscriptions. Pandora-Box combines a desktop interface with backend components to create a functional proxy management environment that simplifies complex networking configurations. -
9
Wiretap
Wiretap is a transparent, VPN-like proxy server that tunnels traffic
Wiretap is a transparent, VPN-like proxy server that tunnels traffic through WireGuard. It is designed to proxy traffic without requiring special privileges to run, which makes it different from many traditional VPN tools that depend on privileged network interface setup. The project focuses on transparent routing, allowing client traffic to move through WireGuard-based paths toward the intended destination. Its documentation describes an end-to-end encryption model where packets are forwarded through Wiretap nodes until they reach the intended server, which then sends traffic to the real network destination. Wiretap is useful for research, security labs, and controlled environments where users want WireGuard-style tunneling with proxy-like behavior. It is best understood as a specialized networking tool rather than a general consumer VPN client. -
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
10
Fuso
Lightweight intranet penetration, port forwarding tool
Fuso is a lightweight intranet penetration and port-forwarding tool written in Rust. It is designed to expose internal services through a relay-style setup while remaining small, fast, and efficient. The project supports multiple connections, cascading proxy behavior, transmission encryption, and both TCP and UDP forwarding workflows. It can also work with SOCKS5 scenarios, including UDP forwarding in newer releases. Fuso is useful for developers and system administrators who need controlled access to services behind NAT, firewalls, or private networks. The project is best understood as a compact tunneling utility for learning, testing, and authorized network access rather than a commercial remote-access platform. -
11
WebTTY
Share a terminal session over WebRTC
WebTTY is a terminal-sharing tool that lets a user share an interactive shell session over WebRTC. It is useful for pair programming, collaborative debugging, remote help, or accessing systems behind NAT without setting up a traditional proxy server. The project includes a command-line workflow and an in-browser client, so a session can be joined through a static web page when needed. It supports custom commands, allowing users to share a shell, a tmux session, or another terminal-based process. The tool also includes non-interactive and one-way connection options for specialized workflows such as attaching to a build server session. webtty is experimental but practical, combining Go, WebRTC, and browser-based terminal access into a lightweight collaboration tool. -
12
Portr
Expose local http, tcp or websocket connections to the public internet
Portr is an open-source, self-hosted tunneling platform for exposing local HTTP, TCP, or WebSocket services to the public internet. It uses SSH remote port forwarding under the hood, which gives it a familiar and secure transport foundation. The project is designed for teams that need an ngrok-like workflow while keeping control of their own infrastructure. It includes both server and client components, along with a dashboard-oriented experience for managing tunnel usage. Portr can help developers test webhooks, share local applications, expose APIs, or temporarily publish development services without deploying them permanently. Its main purpose is to provide a practical self-hosted tunnel service that balances developer convenience with infrastructure ownership. -
13
Bastillion
Web-based SSH console that centrally manages administrative access
Bastillion is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with the management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login using two-factor authentication with Authy or Google Authenticator. From there they can manage their public SSH keys or connect to their systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution. Bastillion layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. -
14
tunnelto
Expose your local web server to the internet with a public URL
tunnelto is a Rust-based local tunneling tool that exposes a locally running web server through a public URL. It is designed for developers who need to test webhooks, demos, APIs, or in-progress applications without deploying them to a public server. The project includes both a hosted service model and self-hosting support, giving teams flexibility depending on their workflow and infrastructure needs. Its async architecture is built on Tokio, which helps it handle network connections efficiently. tunnelto is especially useful during development because it reduces the friction of sharing local work with clients, teammates, or third-party platforms. Its focus is simple: make a private local port reachable from the internet with minimal setup. -
15
NodePass
TCP/UDP tunneling that delivers access across network restrictions
NodePass is a lightweight enterprise-grade TCP and UDP tunneling solution for handling complex network access scenarios. It uses an all-in-one architecture that separates control and data channels while keeping deployment simple for administrators. The project supports zero-configuration setup, connection pooling, protocol conversion, and tiered TLS encryption. It is designed for DevOps professionals and system administrators who need reliable forwarding across restricted, segmented, or operationally complex networks. NodePass can be used to expose internal services, bridge environments, manage tunnels, and create fast network paths through pre-established connections. Its focus is practical tunnel management with high performance, flexible instance control, and deployment patterns that work across client and server environments. -
16
zoro
zoro can help you expose local server to external network
Zoro is a Go-based tunneling tool for exposing local services to an external network. It supports TCP and UDP forwarding, which makes it useful for HTTP, HTTPS, SSH, DNS, and other network services. The project follows a simple client-and-server model where the remote server opens an external port and forwards traffic back to a local service. It also includes HTTPS-specific server and client modes that can map local HTTP services to subdomains under a configured domain. Zoro is designed around minimal configuration, making it practical when users need a quick way to publish a private service without a full reverse proxy stack. Its main value is straightforward local-to-public service exposure across different protocol types. -
17
Mole
CLI application to create ssh tunnels focused on resiliency
Mole is a command-line application for creating SSH tunnels with an emphasis on resilience and user experience. It is designed to help users access or expose services that are behind firewalls, private networks, or otherwise unreachable from the current machine. Mole uses SSH access to a jump server as the bridge between the user and the target service. It simplifies common tunneling workflows that would otherwise require remembering long SSH commands and port-forwarding flags. The project is useful for developers, operators, and administrators who frequently connect to internal databases, dashboards, or web services through secure tunnels. Its focus is not to replace SSH, but to make SSH tunneling more reliable, readable, and easier to manage. -
18
piko
An open-source alternative to Ngrok, designed to serve production
Piko is an open-source reverse proxy and tunneling system designed as a self-hostable alternative to ngrok. It lets upstream services open outbound-only connections to Piko, then routes incoming traffic back through those established tunnels. This design is useful for services that are private, behind NAT, firewalled, or otherwise not publicly routable. Piko is built for production-oriented hosting rather than only short-lived development demos. It supports a server and agent model, with the agent running near the upstream service and forwarding traffic from named endpoints to local ports. The project also includes Kubernetes-oriented deployment guidance, clustering behavior, and a single binary that can run in both server and agent modes. -
19
Doffen SSH Tunnel
Manage hierarchy of ssh sessions and tunnels
Ssh terminal, file transfer and tunneling tool. The focus is on running tunnels inside tunnels. That one has to jump through several machines. Please see the wiki pages for documentation. https://sourceforge.net/p/doffensshtunnel/wiki/Home/ -
20
-
21
Enables tunneling of network connections through restrictive HTTP proxies. Features: Portmapping, SOCKS4, SOCKS5, web-based admin interface, possibility to use standalone server (perl) or hosted server (PHP), optional authorization from LDAP or MySQL
-
22
ArgoSBX
Xiaobai built his own agent artifact
ArgoSBX is an advanced automation script that combines multiple networking cores, including sing-box, Xray, and Cloudflare Argo, into a unified deployment framework. It is designed to provide a highly flexible and powerful proxy solution capable of operating across various environments such as VPS, Docker, and containerized systems. The tool supports a wide range of protocols and configurations, including TLS-based and Reality-based connections, enabling users to tailor their setup to different network conditions. One of its defining features is the ability to integrate CDN-based routing and WARP combinations, offering numerous configuration permutations to optimize performance and bypass restrictions. The script is built for minimal interaction, allowing users to deploy complex setups with a single command while still retaining deep customization options. -
23
CallMe
Minimal plugin that lets Claude Code call you on the phone
CallMe is a minimalist plugin for Claude Code that bridges computational tasks with real-world alerts by letting the AI call your phone, smartwatch, or even a landline when an operation finishes, gets stuck, or needs a user decision. It is designed to let users start a long-running task, leave their device, and then be notified in a natural way with a phone call instead of second-guessing progress in the console. The plugin uses a local MCP server alongside a webhook tunnel (typically via ngrok) to connect with voice providers like Telnyx or Twilio for outbound calls, with prompts and responses flowing between Claude Code and the user’s voice device. Multi-turn conversations are supported, so users can respond in real time to questions the agent asks during execution, giving it a practical human-in-the-loop capability for complex workflows. -
24
Shadowsocks-Nodejs
Node.js port of Shadowsocks
Shadowsocks-Nodejs is a Node.js implementation of the Shadowsocks proxy protocol, providing server and client components that let users create an encrypted proxy tunnel to bypass network filtering and protect traffic in transit. The project reimplements the lightweight, stream-oriented Shadowsocks protocol in JavaScript so operators can run servers and clients using Node.js environments rather than native binaries or Python ports. It exposes typical Shadowsocks features such as configurable ciphers, listening ports, and worker process models that let operators tune performance for their deployment. Historically, the Node.js port has been used when convenience or platform compatibility mattered, though some maintainers and users note that performance and memory characteristics differ from other implementations. The codebase includes CLI helpers and configuration parsing so it can be run as a service or embedded in other Node.js tooling. -
25
Sing-box
Sing-box multi-protocol proxy tool
Sing-box is a shell-script-based deployment project for setting up multi-protocol sing-box proxy environments across different hosting platforms and VPS scenarios. It is built around quick, automated installation rather than manual configuration, making it useful for users who want a bundled setup process. The project supports several proxy protocols, including VLESS Reality, VMess over WebSocket and TLS, Hysteria2, and Tuic. It also includes optional Nezha monitoring integration, which can help users observe node status from a monitoring panel. The scripts reference support for platforms such as Serv00, CT8, Hostuno, VPS environments, and Alpine-based systems. Overall, it functions as an automation toolkit for deploying and managing sing-box-based proxy nodes with multiple protocol options.