Open Source Linux Tunneling Software - Page 3
Sort By:
Tunneling Software for Linux
View 1525 business solutions-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
1
File Tunnel
Tunnel TCP connections through a file
File-Tunnel is a tunneling tool that moves TCP connections through a shared file or file server. It is built around the unusual idea that two systems can exchange network data by reading and writing files that both sides can access. This makes it useful in environments where direct TCP connectivity is blocked but a shared folder, FTP server, S3-compatible storage, Dropbox folder, RDP drive share, or similar file channel is available. The project provides portable executables for Windows, Linux, and macOS, which makes it practical for cross-platform testing. Its documentation includes examples for bypassing firewall limitations, tunneling through FTP, using remote internet access, and routing through remote desktop file shares. File-Tunnel is best understood as a specialized connectivity workaround for controlled environments where file access exists but normal network routing does not. -
2
UDPspeeder
A Tunnel which Improves your Network Quality
UDPspeeder is a tunneling utility focused on improving UDP traffic quality over high-latency, unstable, or packet-loss-prone links. Its core technique is Forward Error Correction, which sends redundant data so the connection can recover from packet loss without waiting for retransmission. Used by itself, it improves UDP-based connections, but it can also be paired with UDP-based VPN tools to support broader traffic types through the VPN layer. The project is especially relevant for gaming, remote access, VPN transport, and other latency-sensitive use cases where packet loss creates visible performance problems. It gives users adjustable parameters so they can balance bandwidth overhead, latency, and resilience. UDPspeeder is not a general VPN by itself, but a network-quality enhancement layer for UDP tunnels. -
3
XUI-PRO
XUI-PRO nginx reverse proxy with ws/grpc/httpupgrade/splithttp
XUI-PRO is a shell-based deployment project for setting up a web-managed proxy environment with Nginx and Xray-related components. It combines several tools into an automated installation workflow, making it easier to deploy a lightweight proxy server without manually configuring each service. The project references support for protocols and transports such as VLESS, VMess, Trojan, Shadowsocks, WebSocket, gRPC, HTTPUpgrade, SplitHTTP, XTLS, SSR, and V2Fly-related options. It also includes Cloudflare SSL and Nginx reverse proxy behavior for supported configurations. x-ui-pro is aimed at users who want a web panel and bundled setup process for managing complex proxy configurations. Because it deals with network circumvention and proxy infrastructure, it should be used only in lawful, authorized environments. -
4
zrok
Secure internet sharing made simple
zrok is a secure sharing platform for exposing web services, files, and network resources across the internet or private networks. It is built on OpenZiti, a zero-trust networking overlay that allows sharing without inbound connectivity, firewall changes, or port forwarding. The tool can publish resources publicly or share them privately with other zrok users, depending on the workflow. It supports use cases such as temporary web previews, file sharing, private service access, testing, development, and secure resource collaboration. zrok focuses on making internet sharing simple while keeping authentication, authorization, and encrypted transport in the underlying networking model. It is well suited for developers, teams, and infrastructure users who want secure tunnels without exposing raw network services directly. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
5
BoringTun
Userspace WireGuard Implementation in Rust
BoringTun is a high-performance, portable implementation of the WireGuard VPN protocol written in Rust, designed so that developers and system integrators can run WireGuard tunnels entirely in user space across a variety of operating systems without kernel modules. It implements the core WireGuard protocol — including key exchange, encryption (ChaCha20-Poly1305), and authenticated transport — while omitting platform-specific tunneling stacks, allowing embedment in custom VPN client applications or userspace networking tools. The repository includes both a library for programmatic use and a command-line executable that can act as a userspace WireGuard interface on supported platforms like Linux and macOS. Because it’s written in Rust, BoringTun benefits from strong safety guarantees, memory safety without garbage collection, and cross-platform support, making it suitable for mobile, desktop, and server environments. -
6
DarkFlare
DarkFlare Firewall Piercing (TCP over CDN)
DarkFlare is a tunneling utility that moves TCP traffic through HTTPS-looking requests routed across CDN-style infrastructure. It is designed for situations where direct TCP connections are restricted but outbound HTTPS traffic is still permitted. The project presents itself as a firewall-piercing tool, so it is best suited for authorized testing, private infrastructure access, or controlled research environments. Its approach focuses on making tunneled traffic resemble ordinary web traffic rather than exposing a raw TCP service directly. darkflare uses a client and server model, with the server side relaying traffic toward the intended destination. It is a specialized networking project, not a full VPN platform, and its value comes from combining TCP forwarding with an HTTPS-like transport layer. -
7
GooseRelayVPN
Socks5 VPN that tunnels raw TCP through Google Apps Script to your VPS
GooseRelayVPN is a Go-based SOCKS5 VPN-style tunneling project that carries raw TCP traffic through a Google Apps Script relay to a user-controlled VPS exit server. Its local client accepts SOCKS5 traffic, encrypts TCP data with AES-256-GCM, and sends it through HTTPS requests toward a Google-facing endpoint. The Apps Script component acts as a relay and forwards encrypted data without holding the plaintext key. The VPS exit server decrypts the traffic, opens the real outbound connection, and returns responses through the same relay path. This design allows SOCKS5-compatible applications to use the tunnel while the network path mainly sees HTTPS traffic to Google infrastructure. GooseRelayVPN is a specialized transport system that requires a VPS and should be used only where it complies with applicable rules and service terms. -
8
Network Flight Simulator
A utility to safely generate malicious network traffic patterns
flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other suspicious traffic patterns. -
9
RDM
Cross-platform GUI management tool for Redis
Cross-platform open source database management tool for Redis. RDM is easy-to-use GUI tool available for Windows, Linux, MacOS and iPadOS. Analyse your Redis ® memory usage with RDM and remove obsolete data with bulk removal. RDM supports all latest Redis ® features: ACL, Streams, Cluster, Sentinel, ReJSON module, HyperLogLog, etc. Build-in TLS, SSH and TLS-over-SSH tunneling for easy and secure access to any redis-server. RDM works with Amazon ElastiCache, Microsoft Azure Redis Cache, Digital Ocean and other Redis ® clouds. RDM displays JSON, MessagePack, CBOR, PHP, Pickle, numpy.Array, pandas.DataFrame and binary data in human readable form and supports Native Formatters. RDM offers you an easy-to-use GUI to access your Redis ® databases and perform some basic operations. RDM allows to perform bulk operations which simplifies developer daily routines. -
Host LLMs in Production With On-Demand GPUsDeploy your model, get an endpoint, pay only for compute time. No GPU provisioning or infrastructure management required.
-
10
jprq
join public router. quickly
jprq is an open-source tunneling tool for exposing local servers to the public internet. It is designed as a developer-friendly alternative to hosted tunneling platforms, making it useful for testing webhooks, APIs, websites, SSH, and other TCP-based services. The tool can publish a local port through a public address so external users or services can reach something running on a developer’s machine. It supports HTTP and general TCP use cases, which makes it more flexible than tools focused only on local web previews. jprq includes command-line workflows and installation options for multiple operating systems. Its main purpose is to make temporary public access to local development services fast, simple, and repeatable. -
11
MasterDnsVPN
Advanced DNS tunneling VPN for censorship bypass
MasterDnsVPN is a research-oriented DNS tunneling VPN project that carries TCP traffic through DNS queries and responses. It is designed for restrictive network environments where DNS may remain available even when other connection methods are limited. The project focuses on stability, speed, and compatibility across different resolver behaviors. It uses a custom protocol with ARQ, low overhead, resolver balancing, and multipath behavior to improve performance under packet loss. MasterDnsVPN also includes client and server configuration files, Docker support, and installation scripts for easier deployment. It is best understood as an experimental transport system for DNS-based tunneling rather than a general-purpose commercial VPN. -
12
-
13
Proxifier is a command line tool which allows users to tunnel Internet applications through HTTPS, SOCKS v4, and SOCKS v5 Proxy Servers. Proxifier can be used to: access the Internet from a home or corporate network through a proxy server running on th
-
14
Enables tunneling of network connections through restrictive HTTP proxies. Features: Portmapping, SOCKS4, SOCKS5, web-based admin interface, possibility to use standalone server (perl) or hosted server (PHP), optional authorization from LDAP or MySQL
-
15
Doffen SSH Tunnel
Manage hierarchy of ssh sessions and tunnels
Ssh terminal, file transfer and tunneling tool. The focus is on running tunnels inside tunnels. That one has to jump through several machines. Please see the wiki pages for documentation. https://sourceforge.net/p/doffensshtunnel/wiki/Home/ -
16
ArgoSBX
Xiaobai built his own agent artifact
ArgoSBX is an advanced automation script that combines multiple networking cores, including sing-box, Xray, and Cloudflare Argo, into a unified deployment framework. It is designed to provide a highly flexible and powerful proxy solution capable of operating across various environments such as VPS, Docker, and containerized systems. The tool supports a wide range of protocols and configurations, including TLS-based and Reality-based connections, enabling users to tailor their setup to different network conditions. One of its defining features is the ability to integrate CDN-based routing and WARP combinations, offering numerous configuration permutations to optimize performance and bypass restrictions. The script is built for minimal interaction, allowing users to deploy complex setups with a single command while still retaining deep customization options. -
17
Expose
A beautiful, fully open-source, tunneling service
Expose is an open source tunneling service that allows developers to securely share locally running web applications with the public internet through temporary public URLs. The project functions as an alternative to tools like ngrok by creating encrypted tunnels that route incoming requests from a publicly accessible server directly to a developer’s local machine. This makes it possible to test webhooks, demonstrate applications, or collaborate with teammates without deploying the project to a staging server. Expose is written in PHP and can be self-hosted, giving developers full control over their infrastructure, domains, and traffic while avoiding reliance on third-party tunneling services. The system includes both a client and server component, where the client runs locally and the server manages incoming connections and tunnel routing. It can bypass common restrictions such as firewalls or VPN limitations by establishing an outbound connection from the local machine to the tunnel s -
18
Narrowlink
A self-hosted solution to enable secure connectivity between devices
Narrowlink is a zero-config tunneling and reverse proxy solution that enables secure access to services behind firewalls or NATs without exposing public IPs. Unlike traditional tools like ngrok, Narrowlink is peer-to-peer and privacy-focused, using WireGuard and WebRTC to establish direct encrypted tunnels between peers. It is designed to make exposing local services simple, fast, and secure with no need for port forwarding or cloud relays. Narrowlink is ideal for developers, self-hosters, and remote teams looking for frictionless, encrypted connectivity. -
19
NodePass
TCP/UDP tunneling that delivers access across network restrictions
NodePass is a lightweight enterprise-grade TCP and UDP tunneling solution for handling complex network access scenarios. It uses an all-in-one architecture that separates control and data channels while keeping deployment simple for administrators. The project supports zero-configuration setup, connection pooling, protocol conversion, and tiered TLS encryption. It is designed for DevOps professionals and system administrators who need reliable forwarding across restricted, segmented, or operationally complex networks. NodePass can be used to expose internal services, bridge environments, manage tunnels, and create fast network paths through pre-established connections. Its focus is practical tunnel management with high performance, flexible instance control, and deployment patterns that work across client and server environments. -
20
Orion Visor
A high-value, modern automated operation and maintenance
Orion Visor is a modern operations and lightweight bastion host platform for managing Linux and Windows systems. It provides centralized asset management so teams can organize hosts, identities, keys, and authorization rules in one interface. The platform supports multiple remote access methods, including SSH, SFTP, RDP, and VNC, which makes it useful for mixed infrastructure environments. It also includes online terminals, file management, batch command execution, multi-host file distribution, and scheduled tasks through cron expressions. orion-visor adds monitoring and alerting for system metrics such as CPU, memory, disk, and network usage. Its main purpose is to make routine server operations safer, more visible, and more efficient through a web-based operational workspace. -
21
Pingtunnel
Pingtunnel is a tool that send TCP/UDP traffic over ICMP
Pingtunnel is a Go-based tunneling tool that sends TCP and UDP traffic over ICMP. It is designed for experimental, research, and network-study scenarios where ICMP transport is being explored as an alternative path for traffic forwarding. The project uses a client and server model, with the server typically requiring a publicly reachable host. It can carry application traffic through ICMP echo-style communication, which makes it distinct from common TCP, UDP, HTTP, or DNS tunnel tools. Because the tunnel traffic is not inherently presented as encrypted, sensitive usage should rely on secure protocols layered above it. pingtunnel is best understood as a specialized transport experiment for moving traffic through ICMP rather than a full privacy or security solution. -
22
SuperEdge
An edge-native container management system for edge computing
SuperEdge is an open-source container management system for edge computing to manage compute resources and container applications in multiple edge regions. These resources and applications, in the current approach, are managed as one single Kubernetes cluster. A native Kubernetes cluster can be easily converted to a SuperEdge cluster. SuperEdge extends the powerful container orchestration and scheduling capabilities of Kubernetes to the edge. It makes non-intrusive enhancements to Kubernetes and is fully compatible with all Kubernetes APIs and resources. Kubernetes users can leverage SuperEdge easily for edge environments with minimal learning. When the network connection between the edge and the cloud is unstable, or the edge node is offline, the node can still work independently. But at this time, edge node can't do anything associated with writing operation, such as create/delete/update. -
23
Tunnelmole
Connect to local servers from anywhere
Tunnelmole is a command-line tool that gives locally running HTTP and HTTPS servers a public URL. It is designed for developers who need to expose a local app, API, Docker container, Node project, React app, or static site for testing and sharing. By running a simple command with a local port, users can route public traffic to a service running on their own machine. The project is often compared to ngrok, but it is open source and can be used with the public hosted service or a self-hosted Tunnelmole service. It is especially useful for testing webhooks, sharing work-in-progress apps, mobile testing, client previews, and development demos. Its main value is making local development reachable from the internet without manual router configuration or deployment. -
24
WebTTY
Share a terminal session over WebRTC
WebTTY is a terminal-sharing tool that lets a user share an interactive shell session over WebRTC. It is useful for pair programming, collaborative debugging, remote help, or accessing systems behind NAT without setting up a traditional proxy server. The project includes a command-line workflow and an in-browser client, so a session can be joined through a static web page when needed. It supports custom commands, allowing users to share a shell, a tmux session, or another terminal-based process. The tool also includes non-interactive and one-way connection options for specialized workflows such as attaching to a build server session. webtty is experimental but practical, combining Go, WebRTC, and browser-based terminal access into a lightweight collaboration tool. -
25
Weron
Overlay networks based on WebRTC.
Weron is a peer-to-peer overlay network built using WebRTC and WebSockets, enabling remote access and tunneling between machines behind NATs without the need for centralized servers. It uses Golang on the backend and supports secure connections using WireGuard-compatible encryption. Weron allows developers to create scalable mesh or point-to-point networks for applications like remote desktop, Kubernetes access, or collaborative tools—all without requiring public IPs or complicated port forwarding.