InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →
Top 23 Go Tunnel Projects
-
frp
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
In the previous article, I wrote about a temporary SSH tunneling technique to bypass CGNAT. This method is not suitable for exposing permanent services, at least not without autossh manager. Proper tools for this are rapiz1/rathole or fatedier/frp. I chose Rathole since it's written in Rust and offers better performance and benchmarks.
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
nps
一款轻量级、高性能、功能强大的内网穿透代理服务器。支持tcp、udp、socks5、http等几乎所有流量转发，可用来访问内网网站、本地支付接口调试、ssh访问、远程桌面，内网dns解析、内网socks5代理等等……，并带有功能强大的web管理端。a lightweight, high-performance, powerful intranet penetration proxy server, with a powerful web management terminal. (by ehang-io)
-
-
Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
wget https://github.com/XTLS/Xray-core/releases/download/v25.3.6/Xray-linux-64.zip unzip Xray-linux-64.zip chmod +x xray mv xray /usr/bin/xray
-
Also, not all SOCKS5 servers support UDP associate. Dante, 3proxy and gost support it, but ssh -D doesn't.
-
Project mention: Doxx/Darkflare: DarkFlare TCPoCDN (TCP over CDN) | news.ycombinator.com | 2024-11-20
-
trojan-go
Go实现的Trojan代理，支持多路复用/路由功能/CDN中转/Shadowsocks混淆插件，多平台，无依赖。A Trojan proxy written in Go. An unidentifiable mechanism that helps you bypass GFW. https://p4gefau1t.github.io/trojan-go/
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
Project mention: KubeVPN: Revolutionizing Kubernetes Local Development | news.ycombinator.com | 2025-02-19
-
-
Project mention: Pico.sh (The ultimate SSH powered services for developers) | news.ycombinator.com | 2025-04-02
We’re actually using Unix sockets as the underlying transport layer for this. We’re also not using sshd, we custom wrote our own daemon that’s entire job is tunneling. If you’re curious about this, you can find the project here: https://github.com/antoniomika/sish
sish was actually my first foray into SSH apps. It was a lot of fun to write and pretty much implements tunnels with a routing system on top. It manages connectivity, routing, and reverse proxying all within user space. No namespaces required!
tuns can actually even tunnel UDP traffic over SSH, also entirely in user space. Docs for that can be found here: https://pico.sh/tuns#udp-tunneling
-
Project mention: Httptap: View HTTP/HTTPS requests made by any Linux program | news.ycombinator.com | 2025-02-03
Interesting. Care to share any info about your setup? Would it be a matter of httptap reading a certain environment variable and then forwarding traffic to a SOCKS proxy?
FWIW there is also the excellent tun2socks (https://github.com/xjasonlyu/tun2socks), which was a significant inspiration for this project, and is specifically designed to forward traffic from a TUN device to a SOCKS proxy.
-
glider
glider is a forward proxy with multiple protocols support, and also a dns/dhcp server with ipset management features(like dnsmasq). (by nadoo)
-
-
-
-
-
-
zoro
zoro can help you expose local server to external network. Support both TCP/UDP, of course support HTTP. Zero-Configuration.
-
-
mieru
mieru is a socks5 / HTTP / HTTPS proxy to bypass censorship. 見える是一款 socks5 / HTTP / HTTPS 网络代理翻墙工具。 (by enfein)
-
# Contribute your first PR git clone https://github.com/kubenetworks/kubevpn.git make kubevpn
-
Project mention: Reverse SSH – Have your SSH daemon connect back to you | news.ycombinator.com | 2024-05-29
-
wiretap
Wiretap is a transparent, VPN-like proxy server that tunnels traffic via WireGuard and requires no special privileges to run.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Go Tunnel discussion
Go Tunnel related posts
-
Expose home server with Rathole tunnel and Traefik
-
Wiredoor VS frp - a user suggested alternative
2 projects | 26 Apr 2025 -
Как я поднял свой VPN
-
Show HN: SafeHaven – A Minimal VPN Implementation in Go
-
KubeVPN: Revolutionizing Kubernetes Local Development
-
KubeVPN: Revolutionizing Kubernetes Local Development
-
Show HN: Connet – A P2P reverse proxy with NAT traversal
-
A note from our sponsor - InfluxDB
www.influxdata.com | 18 May 2025
Index
What are some of the best open-source Tunnel projects in Go? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | frp | 93,854 |
| 2 | nps | 32,517 |
| 3 | v2ray-core | 31,061 |
| 4 | Xray-core | 28,374 |
| 5 | gost | 16,720 |
| 6 | chisel | 14,504 |
| 7 | trojan-go | 8,025 |
| 8 | telepresence | 6,819 |
| 9 | gost | 5,082 |
| 10 | sish | 4,221 |
| 11 | tun2socks | 3,836 |
| 12 | glider | 3,410 |
| 13 | go-http-tunnel | 3,262 |
| 14 | pingtunnel | 3,210 |
| 15 | Stowaway | 3,018 |
| 16 | ghostunnel | 2,038 |
| 17 | mole | 1,713 |
| 18 | zoro | 1,545 |
| 19 | inlets | 1,374 |
| 20 | mieru | 1,279 |
| 21 | kubevpn | 1,144 |
| 22 | reverse_ssh | 1,094 |
| 23 | wiretap | 943 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com