Open Source Windows Tunneling Software
Sort By:
Tunneling Software for Windows
View 2951 business solutionsBrowse free open source Tunneling software and projects for Windows below. Use the toggles on the left to filter open source Tunneling software by OS, license, language, programming language, and project status.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
99.99% Uptime for MySQL and PostgreSQL DatabasesCloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
-
1
Amnezia VPN
Amnezia VPN Client (Desktop+Mobile)
Amnezia VPN is an open-source VPN client that enables users to easily deploy and manage their own self-hosted VPN server. Designed for both desktop and mobile platforms, it simplifies VPN setup by automatically installing and configuring VPN services on a user's server through a guided interface. The platform supports multiple VPN protocols, including OpenVPN, WireGuard, IKEv2, and its proprietary AmneziaWG protocol. Amnezia VPN also provides advanced traffic obfuscation technologies to help bypass censorship and improve privacy in restrictive network environments. With split tunneling capabilities and support for Windows, macOS, Linux, Android, and iOS, it offers flexible control over VPN usage across devices. Its combination of self-hosting, protocol diversity, and ease of deployment makes it a powerful solution for secure and private internet access. -
2
Proton VPN Windows App
Official ProtonVPN Windows app
The ProtonVPN Windows app project hosts the official open-source client software that lets users securely connect their Windows machines to the ProtonVPN service with full system-wide VPN protection. It includes a modern GUI built with .NET and WPF that lets users authenticate, choose VPN servers, and configure features like split tunneling or kill switch, while a background Windows service manages VPN connections using the OpenVPN protocol and handles networking tasks such as firewall and adapter configuration. The app integrates a custom TAP driver and a split tunnel callout driver to help route traffic securely and prevent leaks, and is structured so the GUI and service components work together to deliver a smooth user experience on Windows desktops and laptops. ProtonVPN’s Windows client supports both free and paid users with access to Proton’s global server network, encrypted tunnels, and privacy-first policies that block logging and respect user anonymity. -
3
Clash Verge Rev
A modern GUI client based on Tauri
Clash Verge Rev is an open-source desktop application that provides a modern graphical interface for managing network proxy configurations and routing internet traffic through rule-based tunneling systems. Built using the Tauri framework and Rust, it delivers a lightweight yet high-performance experience across Windows, macOS, and Linux platforms. The application is based on the Mihomo (formerly Clash Meta) core, which enables advanced proxy routing capabilities, allowing users to define rules for how network traffic is handled and routed through different proxy nodes. It is designed to simplify complex proxy management tasks by offering a clean, user-friendly interface while still exposing powerful configuration options for advanced users. The tool supports features such as system proxy management, TUN mode for virtual network interfaces, and detailed rule editing, making it suitable for both everyday use and more technical networking scenarios. -
4
NekoBox for PC (NekoRay)
Qt based cross-platform GUI proxy configuration manager
NekoBox for PC is a Qt-based, cross-platform proxy configuration manager designed for Windows and Linux systems. It provides a user-friendly graphical interface for managing advanced proxy and tunneling configurations using the sing-box backend. NekoBox supports a wide range of modern proxy protocols, making it suitable for users who need flexible and powerful network routing options. The application offers portable builds that run without installation, allowing quick setup and easy deployment. With support for subscription-based configurations and custom cores, it caters to both casual users and advanced networking enthusiasts. Although the project has been archived and is no longer actively maintained, NekoBox for PC remains a popular and capable tool for managing complex proxy setups. -
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
5
AmneziaWG for Windows
AmneziaWG client for Windows
AmneziaWG for Windows is a dedicated Windows client designed for securely connecting to VPN servers using the AmneziaWG protocol. Based on the WireGuard for Windows project, it provides a familiar and efficient interface while adding support for AmneziaWG's enhanced privacy and censorship-resistance capabilities. The client uses the high-performance Wintun network driver to deliver fast and reliable VPN connections. As the official Windows implementation of AmneziaWG, it offers a trusted way to configure and manage secure tunnels on Windows devices. The application is suitable for users seeking improved resistance to VPN blocking and traffic detection. Its lightweight design, strong security foundation, and enterprise-ready deployment options make it a practical VPN solution for Windows environments. -
6
DNS2SOCKS
DNS to SOCKS or HTTP proxy
This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy. -
7
Cloudflare Tunnel Client
Cloudflare Tunnel Client
Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible. Extensive documentation can be found in the Cloudflare Tunnel section of the Cloudflare Docs. All usages related with proxying to your origins are available under cloudflared tunnel help. You can also use cloudflared to access Tunnel origins (that are protected with cloudflared tunnel) for TCP traffic at Layer 4 (i.e., not HTTP/web socket), which is relevant for use cases such as SSH, RDP, etc. Such usages are available under cloudflared access help. -
8
ngrok
Unified ingress for developers
ngrok is a globally distributed, secure reverse proxy and tunneling service that exposes applications running on local machines behind NATs or firewalls to the public internet. It simplifies remote debugging, webhooks integration, and secure ingress by wrapping reverse proxy, firewall traversal, API gateway, and load-balancing functionality into a single tool. ngrok is a globally distributed reverse proxy that secures, protects and accelerates your applications and network services, no matter where you run them. You can think of ngrok as the front door to your applications. ngrok combines your reverse proxy, firewall, API gateway, and global load balancing into one. ngrok can capture and analyze all traffic to your web service for later inspection and replay. -
9
SlipNet
Android VPN client with DNS tunneling (DNSTT, NoizDNS & Slipstream)
SlipNet is an anti-censorship and tunneling project centered on an Android VPN client with additional command-line support for desktop platforms. It can route traffic through multiple tunnel types, including DNS tunneling, SSH, SOCKS5, NaiveProxy, Tor, and related transport methods. The project is designed for networks where ordinary traffic may be blocked, throttled, filtered, or inspected. SlipNet includes a built-in DNS scanner, which helps users identify usable DNS paths for supported tunnel modes. Its desktop CLI can read configuration URIs and start a local SOCKS5 proxy for applications that need proxy-based routing. SlipNet is best understood as a multi-transport connectivity toolkit rather than a single-protocol VPN client. -
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
10
Zphisher
An automated phishing tool with 30+ templates
Zphisher is an advanced open-source phishing tool for educational and penetration testing purposes. It provides a simple interface for launching phishing attacks by cloning login pages of popular websites. Built in Bash, Zphisher automates server deployment using tunneling services like Ngrok, Localhost.run, and others. It is intended for ethical hacking and security research to demonstrate how phishing attacks work and how to defend against them. -
11
UFTP
Encrypted UDP based FTP with multicast
UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers. -
12
Clash for Windows
Windows GUI client application built on the Clash core proxy engine
Clash for Windows is a desktop GUI client application built on the Clash core proxy engine, providing a user-friendly interface for managing and routing network connections through customizable rule sets and multiple proxy protocols. It targets advanced users who need fine-grained control of how traffic is routed on Windows systems, enabling scenarios like split-tunneling, region-based routing, and domain-specific proxy selection. Using Clash’s rule syntax and support for diverse inbound and outbound protocols (including SOCKS5, Shadowsocks, V2Ray, and others), this client lets users define when to route traffic through a proxy or bypass it entirely, making it useful for privacy, latency optimization, testing, and censorship circumvention. The application typically includes tools to import subscription URLs, live traffic statistics, log views, and configuration editors, reducing the complexity of managing text-based YAML configs manually. -
13
Scrcpy GUI
A simple & beautiful GUI application for scrcpy
Scrcpy was created by the team behind the popular Android emulator Genymotion, but it is not an Android emulator itself, it displays and controls Android devices connected via USB or TCP/IP, it does not require any root access. It works with GNU/Linux, Windows, and MacOS. Scrcpy works by running a server on your Android device, and the desktop application communicates using USB (or using ADB tunneling wireless). The server streams the H.264 video of the device screen. The client decodes the video frames and displays them. The client captures input (keyboard and mouse) events, sends them to the server, and the server injects them into the device. If you want to see your Android screen interact with the app or content on your desktop, record your phone screen or perform other basic tasks, then Scrcpy is a good choice. In short, Scrcpy is an excellent way to easily view your Android screen on your computer and interact with it in real time. -
14
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source code of the application or web page you want to act on. This SourceForge entry is preserved for historical reference. Please get the latest version from https://github.com/oculix-org/Oculix/releases. -
15
Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/
-
16
TunMod VPN Client
TunMod VPN Client
TunMod VPN Client is a Windows App designed for secure VPN tunneling and seamless server connections. Featuring Payload Generator, SSH Client, SSL/TLS Tunneling, and multi-profile management, it allows for customized, encrypted connections. TunMod also supports V2Ray, Xray, and XTLS protocols,l2tp,PPTP,HTTPS,OpenVPN, making it a comprehensive solution for advanced tunneling needs. Any suggestions or bug reports: tunmodsupp@gmail.com https://github.com/TunMod/TunMod-VPN-Client -
17
Divert
WinDivert: Windows Packet Divert
Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc. -
18
WG Tunnel Desktop
A WireGuard and AmneziaWG client for desktop with a kill switch.
WG Tunnel Desktop is a free and open-source desktop client for managing WireGuard and AmneziaWG VPN tunnel configurations. It is designed for users who want a flexible desktop VPN tool with strong privacy controls and support for modern tunneling protocols. The application supports Windows and Linux, with macOS support planned for the future. WG Tunnel Desktop runs tunnels through a system daemon, allowing VPN connections to operate independently from the graphical interface. It includes security-focused tools such as an independent lockdown mode, encrypted configuration storage, and tunnel restoration on boot. With import, export, editing, sorting, and live statistics features, WG Tunnel Desktop provides a practical way to manage secure VPN connections on desktop systems. -
19
Another Redis Desktop Manager
A faster, better and more stable Redis desktop manager
AnotherRedisDesktopManager is a cross-platform GUI client for Redis that simplifies connecting, browsing, and manipulating data. It supports standalone, Sentinel, and Cluster modes, plus SSH tunneling and ACL credentials for secure access in varied environments. The UI provides tree and table views of keys with inline editors for strings, hashes, lists, sets, sorted sets, and streams, including TTL management and batch operations. Built-in monitoring lets you watch stats, slow logs, and command activity while an integrated console executes raw Redis commands. Quality-of-life features include JSON viewers, search and filter tools, favorite connections, and dark mode. For everyday operations and troubleshooting, it offers a friendlier alternative to the command line without hiding Redis’s power. -
20
Tun2Socks
tun2socks , powered by gVisor TCP/IP stack
Proxy Everything: Handle all network traffic of any internet programs sent by the device through a proxy. Proxy Protocols: HTTP/Socks4/Socks5/Shadowsocks with authentication support for remote connections. Run Everywhere. Linux/macOS/Windows/FreeBSD/OpenBSD multi-platform support with specific optimization. Gateway Mode: Act as a layer three gateway to handle network traffic from other devices in the same network. Full IPv6 Support: All functions work in IPv6, tunnel IPv4 connections through IPv6 proxy and vice versa. Network Stack: Powered by user-space TCP/IP stack from Google container application kernel gVisor. -
21
Wintun
Simple and minimal TUN driver for the Windows kernel
Wintun is an open-source Layer 3 TUN driver for Windows that gives userspace applications a simple network adapter for reading and writing packets. Originally created for WireGuard, it is designed to support a wide range of networking protocols, VPN clients, and experimental network tools. Wintun functions similarly to Linux’s /dev/net/tun and BSD’s /dev/tun, making it useful for developers who need low-level packet handling on Windows. The driver is intentionally minimal, focusing on simplicity, performance, and straightforward integration through the Windows NDIS framework. Applications can integrate Wintun by including a single wintun.dll file, with signed builds available for multiple Windows architectures. Its open-source design and signed distribution model make it a reliable foundation for secure, high-performance tunneling applications. -
22
XX-Net
A web proxy tool
XX-Net is an easy-to-use, anti-censorship web proxy tool from China. It includes GAE_proxy and X-Tunnel, with support for multiple platforms. -
23
HTTP Proxy Injector
Custom HTTP Proxy Header Injection Application
HTTP Proxy Injector Custom HTTP Proxy Header Injection Application HTTP Proxy Injector is a simple but powerful tool to modify http proxy header requests and respons, to use with SSH or VPN on Windows OS. Access blocked websites behind firewall and many other functions. Free to use for everyone. Want to help HTTP Proxy Injector keep in existence and get better ? Please visit and share our Patreon, Google Sites or Facebook Page :) You can help HTTP Proxy Injector on or using : Patreon : https://www.patreon.com/httpproxyinjector KitaBisa : https://kitabisa.com/campaign/httpproxyinjector PayPal : https://paypal.me/co2thunderboy HTTP Proxy Injector support pages : Google Sites : https://hpi.co2thunderboy.net/ Facebook Page : https://www.facebook.com/co2thunderboy.net A-Developer1412 Page : https://www.facebook.com/A.Developer1412 Best Regards, co2thunderboy™ zone www.co2thunderboy.net -
24
KubeVPN
KubeVPN offers a Cloud Native Dev Environment
KubeVPN is a cloud-native development tool that connects a local machine to a Kubernetes cluster network. It lets developers access cluster resources directly through service names, Pod IPs, or Service IPs, which can make local debugging feel closer to working inside the cluster. The project supports traffic interception so inbound requests for a remote Kubernetes workload can be redirected to a local development process. It can also run a Kubernetes pod locally in Docker while preserving key environment, volume, and networking behavior. KubeVPN includes local SOCKS5 proxy options for cases where route-based access is difficult because another VPN or network tool controls the operating system routes. Overall, it is designed to make Kubernetes development more convenient by blending local workflows with remote cluster networking. -
25
Project X
Originates from XTLS protocol, providing a set of network tools
Project X is a powerful and extensible network proxy platform designed to provide advanced routing, tunneling, and traffic obfuscation capabilities. Originating from the XTLS protocol ecosystem, it serves as the core engine behind a wide variety of tools used for secure communication and bypassing network restrictions. The project supports multiple protocols such as VLESS, VMess, Shadowsocks, and Trojan, enabling flexible configuration for different networking scenarios. It is written primarily in Go and is optimized for high performance, making it suitable for both personal and large-scale deployments. Project X also integrates advanced features like REALITY and XTLS, which enhance encryption and disguise traffic to improve privacy and resistance to detection. The platform is highly modular, allowing developers to customize routing rules, transport layers, and proxy behaviors through configuration files or integrations.
