discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
AI & LLMAgents & MCPSelf-hostedNetworkingSecurityDevOps & cloudData & databasesWebMobileTerminalDeveloper toolsLearningMusic & mediaHome & IoT
PythonTypeScriptJavaScriptGoRustCC++JavaC#SwiftKotlinPHPRubyShellHTMLZig
- sketchain/Nfuse
Per-port traffic metering & circuit breaker via nftables | 端口流量统计与配额熔断
- fastcat/wirelink
Experimental P2P configuration plane for Wireguard
- Sulaiman-Dauda/windlass
Lightweight self-hosted Docker Compose control plane: projects, Git deployments, HTTPS domains, logs and backups. Wraps the real docker compose rather than replacing it, so your containers keep running if Windlass stops.
- nasnet-community/nasnet-panel
MikroTik RouterOS management platform, deployable on router using Docker with very small Docker Image
- jytt8u/Marvia
Marvia — open-source VPN clients for Android and Windows, self-hosted panel, nodes and VP1 transport
- Upellift99/GateCHA
Free, open-source (MIT) ALTCHA-compatible CAPTCHA server: API keys, multi-site, statistics. A lighter alternative to ALTCHA Sentinel.
- gnacho/netgrip
Lightweight companion panel for OpenWrt routers: a clean dashboard that complements LuCI, not a replacement. Service toggles, WiFi, VPN, VLANs, live traffic and diagnostics. Go + React, self-hosted.
- dannysheehan/nft-blocklist
Atomic nftables IP blocklist manager in Go — curated threat feeds, allowlist protection, shrink guard, systemd timers, fail2ban-friendly dynamic sets, pluggable notifications. Successor to the iptables/ipset blacklists script.
- MorpheusAIs/Morpheus-Lumerin-Node
Enable interaction with distributed, decentralized LLMs on the Morpheus network through a desktop chat experience
- Yacin1102/Knoten
Connect everything with direct, encrypted WireGuard tunnels. Self-hostable, with no central traffic point.
- newcdl/fn-WireGuard
飞牛 fnOS 上的 WireGuard 可视化管理工具，扫码即连安全回家 · Visual WireGuard manager for fnOS NAS — site-to-site mesh, LAN access, peer isolation, topology map. Never touches system network settings.
- jmrplens/cs-routeros-bouncer
CrowdSec bouncer for MikroTik RouterOS: manages address lists and firewall rules via the RouterOS API
- littlewolf9527/xdrop
Distributed XDP/eBPF firewall with wire-speed packet filtering and a central management controller.
- wentf9/xops-cli
基于 Go 的高性能、跨平台运维 CLI 工具。提供主机管理、SSH 连接、文件传输、批量执行和 Playbook 任务编排，也可通过 Model Context Protocol (MCP) 接入 AI 客户端，配置操作审批和审计。
- BA-CalderonMorales/agent-harness
A clean-room Go implementation of agentic coding harness patterns, derived from analyzing production AI agent architectures. Built for learning, extending, and teaching how to build coding agents like Claude Code, OpenCode, and Gemini CLI. Supports OpenRouter and Anthropic out of the box.
- AetherAI3/AntiFlock
Self-hosted counter-surveillance for the networks you control: map device and network exposure, verify trusted routes, and hold sensitive actions when the trusted path drops — every decision signed into a local audit log. Go + React, Apache-2.0. Pre-alpha, simulation-first.
- rknightion/tailscale2otel
Tailscale exporter for OpenTelemetry and Prometheus. Device fleet, network flow logs and audit logs as OTLP metrics & logs. Single Go binary, Grafana Cloud ready. Headscale supported.
- GlassOnTin/openwrt-mcp
An always-on MCP server hosted on your OpenWrt router: six generic tools over ubus, standing-policy authorisation, and config changes with an armed rollback timer.
- ArtixSx/RAZVILKA
Локальная панель управления обходами и маршрутами для Keenetic/Netcraze с Entware
- GeiserX/genieacs-mcp
MCP Server for GenieACS written in Go
- networking-incubator/coraza-kubernetes-operator
Web Application Firewall (WAF) for Kubernetes Gateways
- go-kvolt/kvolt
Go web framework on net/http: radix router, context API, and middleware. Optional Redis, Prometheus, and gRPC. Production-promising v2.1 — Go 1.27+.
- MyUI0/lightpanel
朱雀面板 LightPanel - 极致轻量Linux服务器管理面板，单二进制零依赖，无Docker无systemd，内置应用商店，完美适配软路由/OpenWrt/旧手机/ARM架构等轻量设备，自托管二进制项目一键部署
- 0xciph3r/ARFL
Privacy-respecting bandwidth marketplace — A decentralised VPN protocol powered by Bitcoin.
- jp1337/easywall
Web interface for the nftables firewall on Linux, written in Go. The apply undoes itself after 120 seconds unless you confirm it — you cannot lock yourself out. Debian & Docker install.
- nais/device
naisdevice is a application suite that enables Nais developers to connect to internal resources in a secure and friendly manner.
- mehdieidi/tunelo
tunelo encrypts and tunnels UDP traffic (e.g. WireGuard) over a transport protocol like websocket or TCP. Helping to use VPNs in restricted areas.
- CodesWhat/sockguard
Docker socket proxy. Filter API requests by method and path with default-deny posture, structured audit logging, and Tecnativa drop-in compatibility.
- lqs/sixup
🌐 IPv6 router daemon for Linux, fully automatic. DHCPv6-PD, RA, DHCPv6 server, NDP proxy, NAT64, 464XLAT, PCP, DS-Lite/MAP-E tunnels. One static binary.
- ebogdum/terraform-provider-routeros
Terraform provider for MikroTik RouterOS 7.x. Every menu, every property — 185 resources, 276 data sources, 75 actions. Multi-router from one provider block, deterministic firewall ordering, lockout safety guards.