Use all your network adapters at once on Windows/Linux/Mac: per-connection load balancing over Wi-Fi, Ethernet and phone/USB tethers (TUN + Wintun)
ARTEX · AI autonomous penetration testing system (multi-agent LLM, Go + Next.js) · AI 自主渗透测试系统 · 百度 agent+ 攻防挑战赛冠军
ARTEX 한국어판 · AI 자율 침투 테스트 프레임워크(upstream: Autumn-27/ARTEX, AGPL-3.0)
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS, Windows; imports Lucky configs.
The easiest, most secure way to use WireGuard and 2FA.
ARTEX - AI autonomous penetration testing system (English translation)
Production-Grade Container Scheduling and Management
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
The universal proxy platform
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
NetBird securely connects people, machines and AI agents across any network with one identity-based Zero Trust platform. Powered by peer-to-peer WireGuard®
SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables, designed to handle billions of files with O(1) disk access and effortless horizontal scaling.
Container runtimes on macOS (and Linux) with minimal setup
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Heterogeneous GPU Sharing on Kubernetes
Run:ai is the AI workload orchestration platform for Kubernetes. This monorepo contains the control plane services, in-cluster Kubernetes operator/controllers, shared libraries and clients, the installer, and the local dev environment.
Distributed reliable key-value store for the most critical data of a distributed system
The Cloud Native Application Proxy
The fastest path to AI-powered full stack observability, even for lean teams.
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Vocat is an open-source web control panel and engineering toolkit for Quectel EC20/EC25-class cellular modems. It combines modem discovery, live radio status, AT and USSD terminals, SMS, WiFi Calling, eSIM management, network selection, proxy routing, notifications, audit logs, and release automation in one self-contained service.
agent-sandbox enables easy management of isolated, stateful, singleton workloads, ideal for use cases like AI agent runtimes and reinforcement learning (RL).
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Application Kernel for Containers
All-in-one terminal covering 30+ protocols — SSH, RDP, SFTP, databases, Kubernetes and more. With a built-in AI Agent that runs multi-turn shell commands autonomously.
Internet access is a right, not a privilege. 互聯網本非特權。Доступ к интернету — право, а не привилегия. دسترسی به اینترنت حق است، نه امتیاز.
Manages Unified Access to Generative AI Services built on Envoy Gateway
Open-source Token as a Service (TaaS) platform on Kubernetes — deploy LLMs, price by model × GPU, and meter/bill usage via an OpenAI-compatible API.
Scalable open-source game backend server: multiplayer, matchmaking, leaderboards, chat, and social features for games.
Net Switch: per-app internet for Windows. Choose which connection each app uses, combine your lines, and fail over automatically.
Cloudflare Tunnel client
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
VPN client in a thin Docker container for multiple VPN providers, written in Go, and using OpenVPN or Wireguard, DNS over TLS, with a few proxy servers built-in.
Self-hosted alternative to Vercel and Coolify. Git push, HTTPS, logs, rollback. No Kubernetes.
eBPF-based Networking, Security, and Observability
DNS-based feed reader and lite messenger for environments where only DNS queries work. Read Telegram channels and public X accounts, and exchange end-to-end-encrypted messages with other users — all over DNS.
like netcat, but over Tailscale's data plane, without Tailscale's control plane
The missing open-source Kubernetes UI with a built-in MCP server for AI agents. See what's broken, why, and what changed. Issues, Topology, event timeline, Helm, GitOps, live service traffic, and cluster audits - all in one Go binary.
Self-hosted realtime soundscape analyser for birds, bats and other wildlife. Multi-model local AI inference, runs 24/7 on a Raspberry Pi.
Agentshield is open source defense for Kubernetes and AWS. It learns how your workloads really talk, flags lateral movement with evidence, and proposes fixes you approve.
Declarative Continuous Deployment for Kubernetes
An open source trusted cloud native registry project that stores, signs, and scans content.
An advanced Web Panel • Built for SagerNet/Sing-Box
Fast, encrypted TCP/UDP tunnel that keeps working when the network only lets ping through. ICMP, UDP, TCP, TLS, WebSocket, HTTP/2 and gRPC carriers in one process.
Real-time monitoring dashboard for Proxmox VE, PBS, Docker, Kubernetes, TrueNAS and vSphere. Self-hosted, with alerts for failed backups, full disks, unhealthy containers and offline nodes.
CN Windows 多网卡聚合与网络加速工具。一键融合有线、Wi-Fi、热点等连接,实现多路径传输与智能流量调度。 EN Windows multi-NIC network accelerator. Combine Ethernet, Wi-Fi, hotspots and more for multi-path transmission and smart traffic routing.
An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.
Podman: A tool for managing OCI containers and pods.
The Kubernetes Package Manager
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
An open, programmable decision layer for models and compute.
Autonomous Pentest Agent — LLM multi-agent autonomous penetration testing system (Go backend + Next.js UI). AGPL-3.0.
A platform for building proxies to bypass network restrictions.
🏔 Love Freedom - ❌ Block Mass Surveillance
Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.
The self-hosted AI SRE agent. You don't have to monitor your systems alone. Versus Incident will keep track of your services, applications, and systems, detect new or unexpected problems, and provide your team with the evidence needed to investigate.
The Clash core builds on mihomo and is adapted to the constraints of Apple’s NetworkExtension framework. It processes traffic on your device, with performance tested on real hardware and the full source code open for review.
A lightweight tool for deploying and managing containerised applications across a network of Docker hosts. Bridging the gap between Docker and Kubernetes ✨