vpn

XTLS/Xray-core

Xray-core keeps pushing censorship-resistant proxying forward — Xray-core is the engine behind Project X, bundling protocols like VLESS, VMess, Trojan and REALITY for anti-censorship networking. Active development includes post-quantum encryption for VLESS and XHTTP as a REALITY successor, making it relevant for anyone building or running proxy/VPN tooling that needs to evade deep packet inspection.

tailscale/tailscale

The open-source core powering Tailscale's WireGuard mesh VPN — This repo holds Tailscale's open-source daemon and CLI, the code behind its mesh VPN built on WireGuard with SSO and 2FA support. It runs on Linux, Windows, macOS, and partially on FreeBSD/OpenBSD, and also underpins the iOS/Android apps, useful for developers building or packaging Tailscale themselves.

v2fly/v2ray-core

The community-driven continuation of V2Ray's proxy toolkit — V2fly maintains the V2Ray core after the original project stalled, supporting VMess, VLESS, Shadowsocks, Trojan and Socks5 protocols. It's built for users and developers who need configurable network tools to secure connections and bypass censorship, with active packaging and translation efforts.

netbirdio/netbird

Zero Trust mesh VPN now extends identity-based access to AI agents — NetBird builds WireGuard-based peer-to-peer mesh networks with centralized Zero Trust access control, skipping manual VPN configuration. Its new Agent Network beta adds identity-aware, keyless access for AI agents to LLM APIs and private resources over the same encrypted tunnels, useful for teams securing both human and automated access.

fosrl/pangolin

Self-hostable SASE: WireGuard VPN, zero-trust proxy and PAM in one — Pangolin unifies zero-trust VPN, reverse proxy, privileged access management and an identity-aware AI gateway under one identity and policy model, built on WireGuard. It explicitly targets the territory of Cloudflare One, Zscaler and Prisma but stays open-source, self-hostable and lightweight to run.

EasyTier/EasyTier

Decentralized mesh VPN in Rust, no central server needed — EasyTier offers a peer-to-peer mesh VPN written in Rust with WireGuard or AES-GCM encryption, built-in NAT traversal, subnet proxying, and latency-aware routing. It runs across Windows, macOS, Linux, FreeBSD and Android, and ships with a web console plus zero-config static binaries, useful for anyone wanting a self-hosted alternative to Tailscale or ZeroTier.

masterking32/MasterDnsVPN

DNS tunneling VPN built to outperform DNSTT and SlipStream — A Go-based DNS tunneling VPN aimed at bypassing censorship, claiming gains over DNSTT and SlipStream through low-overhead ARQ, resolver load balancing, and better stability under high packet loss. Useful for users needing resilient, fast DNS-based tunnels where conventional VPNs are blocked.

pass-with-high-score/blockads-android

Block ads system-wide on Android using local VPN-based DNS filtering. No root needed. No data collection.

AminMGMT/BackPack

A Go-built tunnel engine purpose-built for Iran-to-abroad links — BackPack is a self-contained Go binary for tunneling between Iran and abroad servers. It bundles an interactive CLI, web monitoring panel, multiple transports (TCP/UDP/KCP/WebSocket), automatic failover, and Telegram alerts—aimed at operators who need resilient routes rather than a single fixed protocol.

REBEL-ROOT/omni-browser

Omni Browser is a secure, open-source Android browser by RebelRoot. Built on Mozilla GeckoView, it features native WebExtension support, aggressive media stream interception, a private encrypted locker, and on-device machine learning tools.