Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge. Learn more →
Top 23 Go TLS Projects
-
Project mention: New FrankenPHP feature: package your PHP apps as standalone, self-executable binaries | /r/PHP | 2023-12-08
Fun fact, the website is "dynamically static", it's just markdown files being processed and rendered by Caddy itself using https://caddyserver.com/docs/caddyfile/directives/templates. It's also how the https://caddyserver.com/ is built as well. Also includes syntax highlighting for Caddyfile config, using a library called Chroma; I wrote the Caddyfile lexer myself a while back! I think it's pretty neat that Caddy can syntax highlight its own code 😁
-
mkcert
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
-
InfluxDB
Collect and Analyze Billions of Data Points in Real Time. Manage all types of time series data in a single, purpose-built database. Run at any scale in any environment in the cloud, on-premises, or at the edge.
-
Xray-core
Xray, Penetrates Everything. Also the best v2ray-core, with XTLS support. Fully compatible configuration.
Project mention: Russia starts blocking VPN at the protocol (WireGuard, OpenVPN) level | news.ycombinator.com | 2023-08-10I have been researching VPN protocols that work in China and found that Xray [0] is the most recommended route to escape the GFW. An ideal VPN setup is one where packets appear as normal https traffic. Some VPN setups take it a step further and proxy the traffic through Cloudflare. Setting all this up is nowhere as easy as Wireguard. Coincidentally, I came across this project on Github earlier today which is an obfuscation proxy for Wireguard [1], but I haven't found any information about how well it works.
-
goproxy
🔥 Proxy is a high performance HTTP(S) proxies, SOCKS5 proxies,WEBSOCKET, TCP, UDP proxy server implemented by golang. Now, it supports chain-style proxies,nat forwarding in different lan,TCP/UDP port forwarding, SSH forwarding.Proxy是golang实现的高性能http,https,websocket,tcp,socks5代理服务器,支持内网穿透,链式代理,通讯加密,智能HTTP,SOCKS5代理,黑白名单,限速,限流量,限连接数,跨平台,KCP支持,认证API。
Are you looking to do proxy chaining? If so, something like https://github.com/snail007/goproxy may help. It's likely overkill for your situation, but it supports chaining.
-
With a combination of Gost and cloudflare tunnel you can access literally anything on the local LAN network.
-
Programming is very flexible, more can be found in documentation and other articles of this blog
-
Project mention: An opinionated template for deploying a single k3s cluster with Ansible backed by Flux, SOPS, GitHub Actions, Renovate, Cilium, Cloudflare and more! | /r/kubernetes | 2023-12-04
SSL certificates thanks to Cloudflare and cert-manager
-
Onboard AI
Learn any GitHub repo in 59 seconds. Onboard AI learns any GitHub repo in minutes and lets you chat with it to locate functionality, understand different parts, and generate new code. Use it for free at www.getonboard.dev.
-
trojan-go
Go实现的Trojan代理,支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件,多平台,无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/
-
Project mention: Running one’s own root Certificate Authority in 2023 | news.ycombinator.com | 2023-09-16
This ACME client looks promising, but I haven’t tried it yet: https://github.com/go-acme/lego
-
certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Project mention: Running one’s own root Certificate Authority in 2023 | news.ycombinator.com | 2023-09-16 -
Ponzu
Headless CMS with automatic JSON API. Featuring auto-HTTPS from Let's Encrypt, HTTP/2 Server Push, and flexible server framework written in Go.
-
There's no reason you couldn't run your own ACME server (the Let's Encrypt folk publish an open source one, boulder, but there's plenty of others). Then you can just use certbot in your VMs to manage certificates, configured to point to your CA server instead of the Let's Encrypt one.
-
Project mention: Show HN: Clace – Platform for secure internal web applications | news.ycombinator.com | 2023-10-18
-
cli
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc. (by smallstep)
Project mention: Running one’s own root Certificate Authority in 2023 | news.ycombinator.com | 2023-09-16 -
-
-
take a look at gobetween for a L4 load balancer, but I don't know if you can have what you are looking for :/
-
-
utls
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
-
-
-
ssl-proxy
:lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided)
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Go TLS related posts
- SSL Certificates for Home Network
- Simplifying Localhost HTTPS Setup with mkcert and stunnel
- 10 reasons you should quit your HTTP client
- Deploy Rancher on AWS EKS using Terraform & Helm Charts
- Setup/Design internal PKI
- Show HN: Anchor – developer-friendly private CAs for internal TLS
- Running one’s own root Certificate Authority in 2023
-
A note from our sponsor - InfluxDB
www.influxdata.com | 10 Dec 2023
Index
What are some of the best open-source TLS projects in Go? This list will help you:
Project | Stars | |
---|---|---|
1 | Caddy | 50,929 |
2 | mkcert | 43,741 |
3 | Xray-core | 19,525 |
4 | goproxy | 14,645 |
5 | gost | 14,354 |
6 | brook | 13,992 |
7 | cert-manager | 10,937 |
8 | trojan-go | 7,068 |
9 | lego | 6,570 |
10 | certificates | 5,780 |
11 | Ponzu | 5,602 |
12 | boulder | 4,837 |
13 | certmagic | 4,674 |
14 | cli | 3,346 |
15 | certstrap | 2,139 |
16 | acmetool | 2,015 |
17 | gobetween | 1,884 |
18 | ghostunnel | 1,806 |
19 | utls | 1,359 |
20 | grpc-tools | 1,162 |
21 | certigo | 900 |
22 | ssl-proxy | 685 |
23 | CycleTLS | 660 |