Open Source Go Tunneling Software
Sort By:
Go Tunneling Software
View 9005 business solutionsBrowse free open source Go Tunneling Software and projects below. Use the toggles on the left to filter open source Go Tunneling Software by OS, license, language, programming language, and project status.
-
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
1
ngrok
Unified ingress for developers
ngrok is a globally distributed, secure reverse proxy and tunneling service that exposes applications running on local machines behind NATs or firewalls to the public internet. It simplifies remote debugging, webhooks integration, and secure ingress by wrapping reverse proxy, firewall traversal, API gateway, and load-balancing functionality into a single tool. ngrok is a globally distributed reverse proxy that secures, protects and accelerates your applications and network services, no matter where you run them. You can think of ngrok as the front door to your applications. ngrok combines your reverse proxy, firewall, API gateway, and global load balancing into one. ngrok can capture and analyze all traffic to your web service for later inspection and replay. -
2
Cloudflare Tunnel Client
Cloudflare Tunnel Client
Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help. You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/web socket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help. -
3
AmneziaWG for Windows
AmneziaWG client for Windows
AmneziaWG for Windows is a dedicated Windows client designed for securely connecting to VPN servers using the AmneziaWG protocol. Based on the WireGuard for Windows project, it provides a familiar and efficient interface while adding support for AmneziaWG's enhanced privacy and censorship-resistance capabilities. The client uses the high-performance Wintun network driver to deliver fast and reliable VPN connections. As the official Windows implementation of AmneziaWG, it offers a trusted way to configure and manage secure tunnels on Windows devices. The application is suitable for users seeking improved resistance to VPN blocking and traffic detection. Its lightweight design, strong security foundation, and enterprise-ready deployment options make it a practical VPN solution for Windows environments. -
4
Chisel
A fast TCP/UDP tunnel over HTTP
Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
MasterDnsVPN
Advanced DNS tunneling VPN for censorship bypass, optimized beyond DNS
MasterDnsVPN is a research-oriented DNS tunneling VPN project that carries TCP traffic through DNS queries and responses. It is designed for restrictive network environments where DNS may remain available even when other connection methods are limited. The project focuses on stability, speed, and compatibility across different resolver behaviors. It uses a custom protocol with ARQ, low overhead, resolver balancing, and multipath behavior to improve performance under packet loss. MasterDnsVPN also includes client and server configuration files, Docker support, and installation scripts for easier deployment. It is best understood as an experimental transport system for DNS-based tunneling rather than a general-purpose commercial VPN. -
6
Tun2Socks
tun2socks , powered by gVisor TCP/IP stack
Proxy Everything: Handle all network traffic of any internet programs sent by the device through a proxy. Proxy Protocols: HTTP/Socks4/Socks5/Shadowsocks with authentication support for remote connections. Run Everywhere. Linux/macOS/Windows/FreeBSD/OpenBSD multi-platform support with specific optimization. Gateway Mode: Act as a layer three gateway to handle network traffic from other devices in the same network. Full IPv6 Support: All functions work in IPv6, tunnel IPv4 connections through IPv6 proxy and vice versa. Network Stack: Powered by user-space TCP/IP stack from Google container application kernel gVisor. -
7
WG Tunnel Desktop
A WireGuard and AmneziaWG client for desktop with a kill switch.
WG Tunnel Desktop is a free and open-source desktop client for managing WireGuard and AmneziaWG VPN tunnel configurations. It is designed for users who want a flexible desktop VPN tool with strong privacy controls and support for modern tunneling protocols. The application supports Windows and Linux, with macOS support planned for the future. WG Tunnel Desktop runs tunnels through a system daemon, allowing VPN connections to operate independently from the graphical interface. It includes security-focused tools such as an independent lockdown mode, encrypted configuration storage, and tunnel restoration on boot. With import, export, editing, sorting, and live statistics features, WG Tunnel Desktop provides a practical way to manage secure VPN connections on desktop systems. -
8
Hysteria
Hysteria is a powerful, lightning fast and censorship resistant proxy
Hysteria is a high-performance, censorship-resistant proxy and VPN-like networking tool designed to deliver fast, reliable connectivity over unstable or lossy networks by leveraging a custom UDP/QUIC-based transport layer that can masquerade as standard HTTP/3 traffic to evade detection. It supports a wide range of use cases including SOCKS5 and HTTP proxying, TCP/UDP forwarding, Linux TProxy for network redirection, and even tunneling via TUN interfaces, making it a flexible choice for developers and network engineers needing robust remote access or traffic obfuscation. Because it’s implemented in Go and MIT-licensed, the project provides cross-platform builds for major operating systems and architectures, letting users deploy servers and clients for both personal and infrastructural purposes. -
9
pandora-box
Lightweight cross-platform desktop client for managing Mihomo proxies
Pandora-Box is a lightweight desktop client designed to provide a graphical interface for the Mihomo proxy core. It allows users to manage proxy configurations and subscriptions through a simple and user-friendly interface rather than working directly with configuration files. Pandora-Box supports multiple proxy protocols and provides tools to organize and control network routing rules. It is designed to work for both casual users who want an easy setup and advanced users who need more control over proxy behavior. It also supports automatic rule grouping and features such as TUN mode to enable system-wide proxy routing. Pandora-Box focuses on delivering a clean interface with practical features for importing, managing, and converting proxy subscriptions. Pandora-Box combines a desktop interface with backend components to create a functional proxy management environment that simplifies complex networking configurations. -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
10
gost
GO Simple Tunnel, a simple tunnel written in golang
A simple security tunnel written in Golang. Listening on multiple ports, multi-level forward proxies - proxy chain, standard HTTP/HTTPS/HTTP2/SOCKS4(A)/SOCKS5 proxy protocols support. Probing resistance support for web proxy, TLS encryption via negotiation support for SOCKS5 proxy. Support multiple tunnel types, tunnel UDP over TCP. Local/remote TCP/UDP port forwarding, TCP/UDP Transparent proxy, Shadowsocks Protocol (TCP/UDP), and SNI Proxy. Permission control, load balancing, route control, DNS resolver and proxy, and TUN/TAP Device. In GOST, GOST and other proxy services are considered as proxy nodes, GOST can handle the requests itself, or forward the requests to any one or more proxy nodes. In addition to configuring services directly from the command line, parameters can also be set by specifying the external configuration file with the -C parameter. -
11
AWL
Securely connect your devices into a private network
Anywherelan (AWL) is a peer-to-peer mesh VPN solution designed to securely connect devices across diverse networks without relying on centralized servers. By leveraging WireGuard tunneling and built-in NAT traversal, AWL facilitates seamless device connectivity at the IP level, enabling users to access services like SSH, RDP, or self-hosted applications without complex configurations. Its decentralized architecture ensures that traffic flows directly between devices, enhancing privacy and reducing latency. AWL is particularly beneficial for scenarios such as remote work, gaming, or accessing geographically restricted content. -
12
mieru
mieru is a socks5 / HTTP / HTTPS proxy to bypass censorship
mieru is a secure proxy software suite built around a client called mieru and a server called mita. It is designed to provide SOCKS5, HTTP, and HTTPS proxy access over TCP or UDP-based transport. The project emphasizes traffic that is difficult to classify or probe, making it relevant for privacy-focused and censorship-resistance research. It includes encrypted communication and uses a dedicated protocol rather than simply wrapping a common proxy format. mieru can run on multiple platforms and provides release packages for different operating systems and architectures. Its overall goal is to offer a configurable proxy system that balances usability, transport flexibility, and resistance to simple traffic identification. -
13
Ligolo-ng
An advanced, yet simple, tunneling/pivoting tool
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS). When running the relay/proxy server, a tun interface is used, packets sent to this interface are translated and then transmitted to the agent's remote network. You need to download the Wintun driver (used by WireGuard) and place the wintun.dll in the same folder as Ligolo. You can listen to ports on the agent and redirect connections to your control/proxy server. You can easily hit more than 100 Mbits/sec. Here is a test using iperf from a 200Mbits/s server to a 200Mbits/s connection. -
14
Drip
Self-hosted tunneling solution to expose localhost securely
Drip is an open-source, self-hosted tunneling solution that lets you expose local services to the internet securely on your own terms. Inspired by the idea of “lighting a small lamp on your network,” Drip creates encrypted tunnels through your own infrastructure without relying on third-party servers, giving you full control over traffic direction and network endpoints. The project supports unlimited tunnels and bandwidth, making it suitable for both development and production scenarios where conventional reverse proxies may not suffice. It is written primarily in Go, which enables high performance and cross-platform deployment with minimal overhead. Drip includes a rich command-line interface for configuring, launching, and managing tunnels and supports transport protocol selection and access control features. -
15
Portr
Expose local http, tcp or websocket connections to the public internet
Portr is an open-source, self-hosted tunneling platform for exposing local HTTP, TCP, or WebSocket services to the public internet. It uses SSH remote port forwarding under the hood, which gives it a familiar and secure transport foundation. The project is designed for teams that need an ngrok-like workflow while keeping control of their own infrastructure. It includes both server and client components, along with a dashboard-oriented experience for managing tunnel usage. Portr can help developers test webhooks, share local applications, expose APIs, or temporarily publish development services without deploying them permanently. Its main purpose is to provide a practical self-hosted tunnel service that balances developer convenience with infrastructure ownership. -
16
Venom
A Multi-hop Proxy for Penetration Testers
Venom is a Go-based multi-hop proxy tool designed for authorized penetration testing, red-team labs, and security education. It helps operators connect multiple nodes and use them as stepping stones for routing traffic across segmented internal networks. The project uses an admin-and-agent architecture, allowing the controller to manage connected nodes and build proxy chains. Venom is useful for studying pivoting, internal routing, SOCKS proxying, and controlled traffic relay in lab or approved assessment environments. It supports several connection and forwarding behaviors, giving testers flexibility when working with different network paths. Because of its security-testing focus, it should only be used in environments where the user has explicit permission. -
17
Project X
Originates from XTLS protocol, providing a set of network tools
Project X is a powerful and extensible network proxy platform designed to provide advanced routing, tunneling, and traffic obfuscation capabilities. Originating from the XTLS protocol ecosystem, it serves as the core engine behind a wide variety of tools used for secure communication and bypassing network restrictions. The project supports multiple protocols such as VLESS, VMess, Shadowsocks, and Trojan, enabling flexible configuration for different networking scenarios. It is written primarily in Go and is optimized for high performance, making it suitable for both personal and large-scale deployments. Project X also integrates advanced features like REALITY and XTLS, which enhance encryption and disguise traffic to improve privacy and resistance to detection. The platform is highly modular, allowing developers to customize routing rules, transport layers, and proxy behaviors through configuration files or integrations. -
18
zrok
Secure internet sharing made simple
zrok is a secure sharing platform for exposing web services, files, and network resources across the internet or private networks. It is built on OpenZiti, a zero-trust networking overlay that allows sharing without inbound connectivity, firewall changes, or port forwarding. The tool can publish resources publicly or share them privately with other zrok users, depending on the workflow. It supports use cases such as temporary web previews, file sharing, private service access, testing, development, and secure resource collaboration. zrok focuses on making internet sharing simple while keeping authentication, authorization, and encrypted transport in the underlying networking model. It is well suited for developers, teams, and infrastructure users who want secure tunnels without exposing raw network services directly. -
19
NodePass
TCP/UDP tunneling that delivers access across network restrictions
NodePass is a lightweight enterprise-grade TCP and UDP tunneling solution for handling complex network access scenarios. It uses an all-in-one architecture that separates control and data channels while keeping deployment simple for administrators. The project supports zero-configuration setup, connection pooling, protocol conversion, and tiered TLS encryption. It is designed for DevOps professionals and system administrators who need reliable forwarding across restricted, segmented, or operationally complex networks. NodePass can be used to expose internal services, bridge environments, manage tunnels, and create fast network paths through pre-established connections. Its focus is practical tunnel management with high performance, flexible instance control, and deployment patterns that work across client and server environments. -
20
GO Simple Tunnel
A simple tunnel written in golang
GOST, or GO Simple Tunnel, is a flexible tunneling and proxy tool written in Go for building secure traffic forwarding chains. It supports proxying, port forwarding, reverse proxying, and tunnel-based access to services behind NAT or firewalls. The project is designed around protocol composition, allowing users to combine multiple protocols into multi-level forwarding chains. It can handle TCP and UDP forwarding, transparent proxying, DNS proxying, TUN/TAP workflows, and tun2socks scenarios. GOST also includes operational features such as load balancing, routing control, admission control, rate limiting, dynamic configuration, Prometheus metrics, and a Web API. It is useful for network engineers, developers, and self-hosters who need a configurable, cross-platform networking toolkit for complex proxy and tunnel setups. -
21
Wiretap
Wiretap is a transparent, VPN-like proxy server that tunnels traffic
Wiretap is a transparent, VPN-like proxy server that tunnels traffic through WireGuard. It is designed to proxy traffic without requiring special privileges to run, which makes it different from many traditional VPN tools that depend on privileged network interface setup. The project focuses on transparent routing, allowing client traffic to move through WireGuard-based paths toward the intended destination. Its documentation describes an end-to-end encryption model where packets are forwarded through Wiretap nodes until they reach the intended server, which then sends traffic to the real network destination. Wiretap is useful for research, security labs, and controlled environments where users want WireGuard-style tunneling with proxy-like behavior. It is best understood as a specialized networking tool rather than a general consumer VPN client. -
22
KubeVPN
KubeVPN offers a Cloud Native Dev Environment
KubeVPN is a cloud-native development tool that connects a local machine to a Kubernetes cluster network. It lets developers access cluster resources directly through service names, Pod IPs, or Service IPs, which can make local debugging feel closer to working inside the cluster. The project supports traffic interception so inbound requests for a remote Kubernetes workload can be redirected to a local development process. It can also run a Kubernetes pod locally in Docker while preserving key environment, volume, and networking behavior. KubeVPN includes local SOCKS5 proxy options for cases where route-based access is difficult because another VPN or network tool controls the operating system routes. Overall, it is designed to make Kubernetes development more convenient by blending local workflows with remote cluster networking. -
23
Pingtunnel
Pingtunnel is a tool that send TCP/UDP traffic over ICMP
Pingtunnel is a Go-based tunneling tool that sends TCP and UDP traffic over ICMP. It is designed for experimental, research, and network-study scenarios where ICMP transport is being explored as an alternative path for traffic forwarding. The project uses a client and server model, with the server typically requiring a publicly reachable host. It can carry application traffic through ICMP echo-style communication, which makes it distinct from common TCP, UDP, HTTP, or DNS tunnel tools. Because the tunnel traffic is not inherently presented as encrypted, sensitive usage should rely on secure protocols layered above it. pingtunnel is best understood as a specialized transport experiment for moving traffic through ICMP rather than a full privacy or security solution. -
24
nebula
Overlay networking tool with a focus on performance and simplicity
Nebula is a scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world. Nebula is portable, and runs on Linux, OSX, Windows, iOS, and Android. It can be used to connect a small number of computers, but is also able to connect tens of thousands of computers. Nebula incorporates a number of existing concepts like encryption, security groups, certificates, and tunneling, and each of those individual pieces existed before Nebula in various forms. What makes Nebula different to existing offerings is that it brings all of these ideas together, resulting in a sum that is greater than its individual parts. Nebula is a mutually authenticated peer-to-peer software defined network based on the Noise Protocol Framework. Nebula uses certificates to assert a node's IP address, name, and membership within user-defined groups. -
25
GooseRelayVPN
Socks5 VPN that tunnels raw TCP through Google Apps Script to your VPS
GooseRelayVPN is a Go-based SOCKS5 VPN-style tunneling project that carries raw TCP traffic through a Google Apps Script relay to a user-controlled VPS exit server. Its local client accepts SOCKS5 traffic, encrypts TCP data with AES-256-GCM, and sends it through HTTPS requests toward a Google-facing endpoint. The Apps Script component acts as a relay and forwards encrypted data without holding the plaintext key. The VPS exit server decrypts the traffic, opens the real outbound connection, and returns responses through the same relay path. This design allows SOCKS5-compatible applications to use the tunnel while the network path mainly sees HTTPS traffic to Google infrastructure. GooseRelayVPN is a specialized transport system that requires a VPS and should be used only where it complies with applicable rules and service terms.