Network Awesome

• VPN Awesome笔记VPN Awesome组网场景 · 基础设施组网 - 例如 Kubernetes 混合云 · tinc, n2n, ipsec · 用户组网 - 例如 公司员工接入 · nebula, wireguard, innernet, ipsec · 服务组网 - 例如 游戏，VoIP打开：/notes/service/network/vpn/awesome
• Proxy Awesome笔记Proxy AwesomeNote · 建议基于 overlay 组件内部 proxy，更安全，更好跨网。 · 对外暴露甚至选择 · | protocol | transport | UDP | Note | · | socks4 | tcp | ❌ | · | socks5 | tcp | ✅ |打开：/notes/service/network/proxy/awesome
• cjdelisle/cjdnsGitHubcjdelisle/cjdns
  • GPLv3, C+Python
  • encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing
  • 提供 Zero-Configuration Networking
• openziti/zitiGitHubopenziti/ziti
  • Apache-2.0, Go
  • zero trust, application embedded, programmable network
• Proxy/Multiplexer
  • yrutschle/sslhGitHubyrutschle/sslh
    • GPLv2, C
    • Applicative Protocol Multiplexer
    • protocol demultiplexer
    • 支持探测 HTTP, TLS/SSL (SNI, ALPN), SSH, OpenVPN, tinc, XMPP, SOCKS5
  • mholt/caddy-l4GitHubmholt/caddy-l4mholt/caddy-l4 · Apache-2.0, Go · Layer 4 (TCP/UDP) app for Caddy · 支持探测 HTTP, TLS, SNI, ALPN, SSH, PostgreSQL, QUIC, Socks4, Socks5, Winbox, Wireguard, XMPP, Proxy Protocol笔记：Caddy L4
    • Caddy L4 模块
    • 支持探测 RDP, OpenVPN, Postgres, ProxyProtocol, QUIC, Socks, SSH, TLS, Winbox, Wireguard, XMPP
• TCP over ICMP
  • esrrhs/pingtunnel/tree/deleteGitHub Fileesrrhs/pingtunnel/tree/delete
• VIP
  • Keepalived
  • UCARP
  • Hardware Load-balancer
• LoadBalancing
  • HAProxy
  • Nginx
  • Hardware Load-balancer
• OverlayWikipediaOverlay network
• Tinc笔记Tincgsliepen/tinc 是什么？ · GPLv2+, C · 2 层、3 层 NAT 穿透直连组网的 Mesh VPN · 加密、认证、压缩 · 自动全 Mesh 路由 · NAT 穿透 · bridge ethernet segments打开：/notes/service/network/vpn/tinc
• zeritier笔记Zerotierzerotier/ZeroTierOne · BSL, C++ · 中心化 P2P Mesh VPN · 2 层 网络 · 支持授权管理 · 支持 地址 配置 · 支持路由下发 · 依赖官方 root 服务器 · Manual · Router Configuration Tips打开：/notes/service/network/vpn/zerotier
• quietGitHub Orgquiet
  • TCP over Sound
• DHCP
  • coredhcp/coredhcpGitHubcoredhcp/coredhcp
• TCP/IP
  • lwip-tcpip/lwipGitHublwip-tcpip/lwip
    • small independent implementation of the TCP/IP protocol suite
• Tunnel
  • frp笔记FRPfatedier/frp 是什么？ · 基于端口的 4 层反向代理 · 基于 vhost 的 7 层反向代理 · 服务端支持 http, tcp, udp, kcp · 服务端支持 ws 暴露 - TCP over Websocket · 代理支持 tcp,udp,http,https,stcp,xtcp打开：/notes/service/network/proxy/frp
  • ssh
  • gost
  • proxytunnel/proxytunnelGitHubproxytunnel/proxytunnel
  • rapiz1/ratholeGitHubrapiz1/rathole
    • Apache-2.0, Rust
  • stunnel笔记stunnelTLS/SSL tunneling · https://www.stunnel.org/static/stunnel.html · /etc/stunnel/stunnel.conf · 类似工具 · SSH over TLS · HAProxy 也可以 terminate TLS 然后转发到 TCP打开：/notes/service/network/tunnel/stunnel
  • localtunnel笔记localtunnellocaltunnel/localtunnel · localtunnel/server打开：/notes/service/network/tunnel/localtunnel
    • NodeJS
  • mhzed/wstunnelGitHubmhzed/wstunnel
    • NodeJS, Websocket
  • MDSLab/wstunGitHubMDSLab/wstun
    • NodeJS, Websocket
  • andydunstall/pikoGitHubandydunstall/piko
    • MIT, Go
    • alternative to Ngrok
  • inlets笔记inlets 通道不支持 gRPC · 开源版本限制非常多，不建议使用 · inlets - L7 HTTP/HTTPS 通道 · MIT, Go · 反向通道 客户端和服务端 - 类似 ngrok, argo tunnel · 一个进程一个 tunnel · 自动重连打开：/notes/service/network/tunnel/inlets
  • Ngrok

Analysis

• arkime/arkimeGitHubarkime/arkimearkime/arkime · Apache-2.0, C+Vue · 之前叫 Moloch · 参考 · Architecture · demo笔记：Arkime
  • Apache-2.0, C+Vue
  • 之前叫 Moloch
• Kiougar/luci-wrtbwmonGitHubKiougar/luci-wrtbwmon
  • openwrt,wrtbwmon
• pyrovski/wrtbwmonGitHubpyrovski/wrtbwmon
  • bandwidth monitor with per-device tracking
  • 不活跃
• spot.apache.org
  • Python
  • 不活跃
  • apache/incubator-spotGitHubapache/incubator-spot
• metron.apache.org
  • Java
  • REAL-TIME BIG DATA SECURITY
  • 项目停止
• 6tunnelGitHubwojtekka/6tunnel
  • TCP proxy for non-IPv6 applications
• tlstunnel

Tools

• mtr - ping+tracerouter