Open Source Linux Tunneling Software
Sort By:
Tunneling Software for Linux
View 1540 business solutionsBrowse free open source Tunneling software and projects for Linux below. Use the toggles on the left to filter open source Tunneling software by OS, license, language, programming language, and project status.
-
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
Clash Verge Rev
A modern GUI client based on Tauri
Clash Verge Rev is an open-source desktop application that provides a modern graphical interface for managing network proxy configurations and routing internet traffic through rule-based tunneling systems. Built using the Tauri framework and Rust, it delivers a lightweight yet high-performance experience across Windows, macOS, and Linux platforms. The application is based on the Mihomo (formerly Clash Meta) core, which enables advanced proxy routing capabilities, allowing users to define rules for how network traffic is handled and routed through different proxy nodes. It is designed to simplify complex proxy management tasks by offering a clean, user-friendly interface while still exposing powerful configuration options for advanced users. The tool supports features such as system proxy management, TUN mode for virtual network interfaces, and detailed rule editing, making it suitable for both everyday use and more technical networking scenarios. -
2
Amnezia VPN
Amnezia VPN Client (Desktop+Mobile)
Amnezia VPN is an open-source VPN client that enables users to easily deploy and manage their own self-hosted VPN server. Designed for both desktop and mobile platforms, it simplifies VPN setup by automatically installing and configuring VPN services on a user's server through a guided interface. The platform supports multiple VPN protocols, including OpenVPN, WireGuard, IKEv2, and its proprietary AmneziaWG protocol. Amnezia VPN also provides advanced traffic obfuscation technologies to help bypass censorship and improve privacy in restrictive network environments. With split tunneling capabilities and support for Windows, macOS, Linux, Android, and iOS, it offers flexible control over VPN usage across devices. Its combination of self-hosting, protocol diversity, and ease of deployment makes it a powerful solution for secure and private internet access. -
3
NekoBox for PC (NekoRay)
Qt based cross-platform GUI proxy configuration manager
NekoBox for PC is a Qt-based, cross-platform proxy configuration manager designed for Windows and Linux systems. It provides a user-friendly graphical interface for managing advanced proxy and tunneling configurations using the sing-box backend. NekoBox supports a wide range of modern proxy protocols, making it suitable for users who need flexible and powerful network routing options. The application offers portable builds that run without installation, allowing quick setup and easy deployment. With support for subscription-based configurations and custom cores, it caters to both casual users and advanced networking enthusiasts. Although the project has been archived and is no longer actively maintained, NekoBox for PC remains a popular and capable tool for managing complex proxy setups. -
4
DNS2SOCKS
DNS to SOCKS or HTTP proxy
This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy. -
$300 Free Credits for Your Google Cloud ProjectsLaunch your next project with $300 in free Google Cloud credits—no strings attached. Test, build, and deploy without risk. Use your credits across the entire Google Cloud platform to find what works best for your needs. After your credits are used, continue with always-free tier services. Only pay when you're ready to scale. Sign up in minutes and start exploring.
-
5
ngrok
Unified ingress for developers
ngrok is a globally distributed, secure reverse proxy and tunneling service that exposes applications running on local machines behind NATs or firewalls to the public internet. It simplifies remote debugging, webhooks integration, and secure ingress by wrapping reverse proxy, firewall traversal, API gateway, and load-balancing functionality into a single tool. ngrok is a globally distributed reverse proxy that secures, protects and accelerates your applications and network services, no matter where you run them. You can think of ngrok as the front door to your applications. ngrok combines your reverse proxy, firewall, API gateway, and global load balancing into one. ngrok can capture and analyze all traffic to your web service for later inspection and replay. -
6
Cloudflare Tunnel Client
Cloudflare Tunnel Client
Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help. You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/web socket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help. -
7
SlipNet
Android VPN client with DNS tunneling (DNSTT, NoizDNS & Slipstream)
SlipNet is an anti-censorship and tunneling project centered on an Android VPN client with additional command-line support for desktop platforms. It can route traffic through multiple tunnel types, including DNS tunneling, SSH, SOCKS5, NaiveProxy, Tor, and related transport methods. The project is designed for networks where ordinary traffic may be blocked, throttled, filtered, or inspected. SlipNet includes a built-in DNS scanner, which helps users identify usable DNS paths for supported tunnel modes. Its desktop CLI can read configuration URIs and start a local SOCKS5 proxy for applications that need proxy-based routing. SlipNet is best understood as a multi-transport connectivity toolkit rather than a single-protocol VPN client. -
8
Zphisher
An automated phishing tool with 30+ templates
Zphisher is an advanced open-source phishing tool for educational and penetration testing purposes. It provides a simple interface for launching phishing attacks by cloning login pages of popular websites. Built in Bash, Zphisher automates server deployment using tunneling services like Ngrok, Localhost.run, and others. It is intended for ethical hacking and security research to demonstrate how phishing attacks work and how to defend against them. -
9
UFTP
Encrypted UDP based FTP with multicast
UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
10
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source code of the application or web page you want to act on. This SourceForge entry is preserved for historical reference. Please get the latest version from https://github.com/oculix-org/Oculix/releases. -
11
ArgoSBX
Xiaobai built his own agent artifact
ArgoSBX is an advanced automation script that combines multiple networking cores, including sing-box, Xray, and Cloudflare Argo, into a unified deployment framework. It is designed to provide a highly flexible and powerful proxy solution capable of operating across various environments such as VPS, Docker, and containerized systems. The tool supports a wide range of protocols and configurations, including TLS-based and Reality-based connections, enabling users to tailor their setup to different network conditions. One of its defining features is the ability to integrate CDN-based routing and WARP combinations, offering numerous configuration permutations to optimize performance and bypass restrictions. The script is built for minimal interaction, allowing users to deploy complex setups with a single command while still retaining deep customization options. -
12
OpenFortiVPN
Client for PPP+TLS VPN tunnel services
openfortivpn is a command-line SSL VPN client for connecting to Fortinet FortiGate gateways without relying on proprietary GUIs. It negotiates the SSL/TLS tunnel, authenticates with credentials (and commonly with two-factor methods), then brings up a secure point-to-point interface and installs routes and DNS settings. The tool aims to be minimal and dependable: a single binary with an INI-style config file, systemd compatibility, and clear runtime diagnostics. It handles details like MTU tuning, split tunneling via pushed routes, and reconnect logic to keep the session stable. Because it works with the standard tun interface, it integrates smoothly with common Linux networking stacks and pairs well with desktop frontends such as NetworkManager plugins. For admins and developers, it’s a scriptable, cross-platform-friendly alternative that makes FortiGate access reliable on servers and developer workstations alike. -
13
Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/
-
14
Divert
WinDivert: Windows Packet Divert
Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc. -
15
Another Redis Desktop Manager
A faster, better and more stable Redis desktop manager
AnotherRedisDesktopManager is a cross-platform GUI client for Redis that simplifies connecting, browsing, and manipulating data. It supports standalone, Sentinel, and Cluster modes, plus SSH tunneling and ACL credentials for secure access in varied environments. The UI provides tree and table views of keys with inline editors for strings, hashes, lists, sets, sorted sets, and streams, including TTL management and batch operations. Built-in monitoring lets you watch stats, slow logs, and command activity while an integrated console executes raw Redis commands. Quality-of-life features include JSON viewers, search and filter tools, favorite connections, and dark mode. For everyday operations and troubleshooting, it offers a friendlier alternative to the command line without hiding Redis’s power. -
16
Scrcpy GUI
A simple & beautiful GUI application for scrcpy
Scrcpy was created by the team behind the popular Android emulator Genymotion, but it is not an Android emulator itself, it displays and controls Android devices connected via USB or TCP/IP, it does not require any root access. It works with GNU/Linux, Windows, and MacOS. Scrcpy works by running a server on your Android device, and the desktop application communicates using USB (or using ADB tunneling wireless). The server streams the H.264 video of the device screen. The client decodes the video frames and displays them. The client captures input (keyboard and mouse) events, sends them to the server, and the server injects them into the device. If you want to see your Android screen interact with the app or content on your desktop, record your phone screen or perform other basic tasks, then Scrcpy is a good choice. In short, Scrcpy is an excellent way to easily view your Android screen on your computer and interact with it in real time. -
17
Tun2Socks
tun2socks , powered by gVisor TCP/IP stack
Proxy Everything: Handle all network traffic of any internet programs sent by the device through a proxy. Proxy Protocols: HTTP/Socks4/Socks5/Shadowsocks with authentication support for remote connections. Run Everywhere. Linux/macOS/Windows/FreeBSD/OpenBSD multi-platform support with specific optimization. Gateway Mode: Act as a layer three gateway to handle network traffic from other devices in the same network. Full IPv6 Support: All functions work in IPv6, tunnel IPv4 connections through IPv6 proxy and vice versa. Network Stack: Powered by user-space TCP/IP stack from Google container application kernel gVisor. -
18
MasterDnsVPN
Advanced DNS tunneling VPN for censorship bypass, optimized beyond DNS
MasterDnsVPN is a research-oriented DNS tunneling VPN project that carries TCP traffic through DNS queries and responses. It is designed for restrictive network environments where DNS may remain available even when other connection methods are limited. The project focuses on stability, speed, and compatibility across different resolver behaviors. It uses a custom protocol with ARQ, low overhead, resolver balancing, and multipath behavior to improve performance under packet loss. MasterDnsVPN also includes client and server configuration files, Docker support, and installation scripts for easier deployment. It is best understood as an experimental transport system for DNS-based tunneling rather than a general-purpose commercial VPN. -
19
Linux and FreeBSD client for the proprietary Microsoft Point-to-Point tunneling protocol, PPTP. See the Home Page.
-
20
XX-Net
A web proxy tool
XX-Net is an easy-to-use, anti-censorship web proxy tool from China. It includes GAE_proxy and X-Tunnel, with support for multiple platforms. -
21
Chisel
A fast TCP/UDP tunnel over HTTP
Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows. -
22
WG Tunnel Desktop
A WireGuard and AmneziaWG client for desktop with a kill switch.
WG Tunnel Desktop is a free and open-source desktop client for managing WireGuard and AmneziaWG VPN tunnel configurations. It is designed for users who want a flexible desktop VPN tool with strong privacy controls and support for modern tunneling protocols. The application supports Windows and Linux, with macOS support planned for the future. WG Tunnel Desktop runs tunnels through a system daemon, allowing VPN connections to operate independently from the graphical interface. It includes security-focused tools such as an independent lockdown mode, encrypted configuration storage, and tunnel restoration on boot. With import, export, editing, sorting, and live statistics features, WG Tunnel Desktop provides a practical way to manage secure VPN connections on desktop systems. -
23
pandora-box
Lightweight cross-platform desktop client for managing Mihomo proxies
Pandora-Box is a lightweight desktop client designed to provide a graphical interface for the Mihomo proxy core. It allows users to manage proxy configurations and subscriptions through a simple and user-friendly interface rather than working directly with configuration files. Pandora-Box supports multiple proxy protocols and provides tools to organize and control network routing rules. It is designed to work for both casual users who want an easy setup and advanced users who need more control over proxy behavior. It also supports automatic rule grouping and features such as TUN mode to enable system-wide proxy routing. Pandora-Box focuses on delivering a clean interface with practical features for importing, managing, and converting proxy subscriptions. Pandora-Box combines a desktop interface with backend components to create a functional proxy management environment that simplifies complex networking configurations. -
24
Seeker
Accurately Locate Smartphones using Social Engineering
Seeker is an open source project that demonstrates how to obtain precise location information from devices using social engineering and web-based techniques. The tool sets up a phishing page that asks for location permissions, allowing GPS and other device data to be shared if the user consents. It can capture latitude, longitude, accuracy, altitude, direction, and even speed, with results displayed in a terminal. The project supports both manual deployment and tunneling services like Ngrok for external access. While primarily intended as an educational resource on security awareness, it highlights the risks of exposing geolocation data online. Its simplicity and effectiveness have made it a popular project in cybersecurity learning circles. -
25
A client implementation of Secure Socket Tunneling Protocol (SSTP) for Linux / Mac OS-X that allows remote access via SSTP VPN to Microsoft Windows 2008 Server. This project has been moved to https://gitlab.com/eivnaes/sstp-client