Top TUNNEL GitHub Repositories & Tools (2026)

Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Customer-run client for Secure MCP Tunnel: connect private or localhost MCP servers to ChatGPT, Codex, the Responses API, and AgentKit without exposing them to the public internet.

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

lnwjud — local AI-agent runtime & MCP gateway

A cross-platform relay that composes TLS/TCP and QUIC/UDP independently for every flow.

Local development against a remote Kubernetes or OpenShift cluster

An advanced, open-source client for WireGuard and AmneziaWG on Android.

:computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing

User-friendly, cross-platform SSH connection manager

Netcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.

Standalone proxy which allows players to join EVERY Minecraft server version (Classic, Alpha, Beta, Release, Bedrock)

The Ultimate Swiss Army Knife for Xray and Sing-box

High Performance reverse tunnel engine in Go, built for edge ⇄ origin server setups

Open-source AI-assisted per-application routing for Windows with OpenAI/Ollama drafts and a sing-box TUN data plane.

macOS menu-bar app for fine-grained VPN routing: bypass the VPN for chosen domains/services, force others through it, or (Custom mode) route each domain/subnet out a specific egress — direct, a specific VPN, an HTTP/SOCKS5 proxy, or a Tailscale peer. Includes a vpnb CLI.

Async network clients, down to the wire

collects test and archives Tor bridges from the official Tor Project

A blazing fast relay server adaptable to different protocols and desired levels of traffic inspection.

Publishes localhost services to the agentic web through self-hostable, trustless relays.