Networking

a tiny, feature rich proxy server with per instance authentication built in

web management panel for the xray proxy, packaged by cloudimg

a high performance PPP and VPN server, terminating SSTP and L2TP sessions with per session authentication the moment it

AdGuard Home, a network wide DNS ad and tracker blocker, hardened and ready on Ubuntu 24.04.

AdGuard Home paired with a private Unbound resolver: network wide ad and tracker blocking with recursive, DNSSEC validat

akvorado, an open source network flow collector and visualizer that ingests NetFlow, IPFIX and sFlow, enriches it and ma

Alice-LG is the BGP looking glass web interface that lets network operators inspect route server state, neighbours and p

anubis, an open source web AI firewall, weighing the soul of every request to keep AI scrapers off your upstream.

Apache Guacamole, a clientless remote desktop gateway, ready to reach servers from a browser on first boot.

Apache ShenYu, a high performance API gateway, ready to route and secure traffic on first boot.

network configuration analysis and pre deployment validation, from the configs you already have

BFE is an open source layer 7 load balancer and reverse proxy, routing traffic to the right backend by host, path, heade

BGPalerter, a self hosted BGP and RPKI monitoring daemon that watches your prefixes and autonomous systems and alerts in

ISC BIND 9.20, the reference DNS server, configured and resolving the moment it boots.

BIRD, the full featured software router that speaks BGP, OSPF, RIP and Babel, up and routing the moment it boots.

Chisel, a fast TCP/UDP tunnel transported over HTTP and secured via SSH, from a single self contained binary.

Chrony, a secure, high accuracy NTP time server that keeps your network's clocks correct to well under a millisecond.

Cloudprober, an open source active monitoring tool that continuously probes your services over HTTP, PING, DNS, TCP, and

CoreDNS, a fast, plugin based DNS server that serves authoritative zones and a hardened recursive resolver from a single

daloRADIUS, a web management platform for FreeRADIUS, ready to manage RADIUS users and accounting on first boot.

the reference SOCKS4 and SOCKS5 proxy server, secure by default with per deployment authentication

DDNS Updater, a self hosted dynamic DNS client that watches your public IP address and keeps your domain records pointin

dnscrypt-proxy, an encrypting DNS proxy that forwards every query to public resolvers over DNSCrypt v2 and DNS over HTTP

dnsmasq, a lightweight caching DNS forwarder plus DHCP and TFTP, resolving safely the moment it boots.

E2guardian, an open source web content filtering proxy, governing and logging every outbound request from the moment it

EasyTier, a decentralized full mesh VPN that links your machines, clouds, and sites with direct, encrypted peer to peer

ExaBGP, the Python BGP swiss army knife: a programmable route injector and BGP speaker you drive from a plain text confi

Expose is a self hosted reverse tunnel server that publishes a local development site or webhook endpoint at a public UR

Ferron is a fast, memory safe web server and reverse proxy written in Rust, serving static sites and routing traffic to

Flexisip, an open source SIP proxy, registrar and presence server, ready to route and authenticate SIP on first boot.

FOG Project, a network cloning and imaging platform that captures a disk image once and deploys it to many machines over

freenginx, a community driven fork of the nginx web server, reverse proxy and load balancer, ready to serve sites and pr

frp, a fast reverse proxy that exposes services behind NAT or a firewall, ready to open secure tunnels on first boot.

FRRouting, the IP routing protocol suite that speaks BGP, OSPF and more, up and routing the moment it boots.

gdnsd, a fast authoritative only DNS server that serves the zones for your own domains, with built in weighted and multi

GenieACS, an open source CWMP auto configuration server for remotely provisioning and managing routers, modems and IoT d

a free, web-based IPAM platform with automated SNMP network discovery, subnet/VLAN/host inventory and no baked credentia

gNMIc, a self hosted gNMI client and telemetry collector that streams operational telemetry from your network devices in

GNS3 Server, the open source network emulation platform for virtual labs of routers, containers and virtual machines, wi

GoBGP, a fast open source BGP implementation that runs as a programmable route server and route injector, driven by a co

headscale, a self hosted Tailscale control server, ready to accept nodes on first boot.

hyperglass, the modern open source network looking glass, letting your peers and customers answer their own routing ques

iPerf3, the standard tool for measuring network throughput, ready to run bandwidth tests from first boot.

IRRd is the Internet Routing Registry daemon that stores and serves RPSL routing policy data over whois and an HTTP and

IXP Manager, the full stack platform that runs an internet exchange point, ready to sign in to on first boot.

Kea DHCP with the Stork web dashboard for subnets, address pools, host reservations and lease usage, ready on first boot

Krill, the RPKI certificate authority from NLnet Labs: run your own resource PKI and publish route origin authorizations

a self hosted caching server for game and content downloads: it transparently caches Steam, Epic, Riot, Battle.net and W

LibreNMS and Oxidized on one machine: auto discovering network monitoring and git versioned device configuration backup,

NetAlertX, a network presence scanner that continuously discovers every device on your network and tells you the moment

netboot.xyz, a network boot toolkit that serves iPXE boot menus so any machine on your network can run or install an ope

NetBox, the open source network source of truth combining IP address management and data centre infrastructure managemen

Netdisco, the web based network management tool that discovers your switches and routers over SNMP and maps every device

Netshot, the open source network configuration, inventory and compliance management server, backing up device configurat

Nexterm, a browser based server management gateway for SSH, VNC and RDP, ready to reach your servers from one console on

nfdump, the de-facto NetFlow, IPFIX and sFlow collector and analysis toolkit: nfcapd captures flows from your routers an

Nginx UI, a web management interface for nginx, ready the moment it boots.

ntopng, high speed web based network traffic monitoring with per host and per flow visibility, ready on first boot.

ntpd-rs, a memory safe NTP time server and client written in Rust that keeps this machine in sync and serves accurate ti

standards based IKEv2 for IPsec VPN tunnels, ready on first boot

OpenVPN Community 2.6, a secure VPN server, ready to accept encrypted connections the moment it boots.

OpenWISP Controller, the open source network device configuration management platform: define reusable templates, apply

the server half of Outline: hand out one access key per person, revoke it the moment they leave

Peering Manager, the open source source of truth for BGP peering, modelling autonomous systems, sessions and Internet ex

Pi-hole on Ubuntu 24.04 LTS, a network wide DNS ad blocker and resolver for your whole estate.

pmacct is a network traffic accounting collector that ingests NetFlow, sFlow and IPFIX from your routers and switches, a

Poweradmin is the web control panel for PowerDNS, where you create zones and edit DNS records in a browser instead of ha

PowerDNS Authoritative Server, a high performance authoritative DNS server backed by a SQL database and a full REST API.

PowerDNS Recursor, a high performance standards compliant recursive DNS resolver that answers queries for your clients f

PowerDNS Recursor behind dnsdist: a private recursive resolver that answers your clients over plain DNS, DNS over TLS an

Privoxy, a non caching filtering web proxy for privacy, ad blocking and content control, ready the moment it boots.

a self hosted web app and CLI to document your home lab and small IT estate: track racks, servers, switches, routers, fi

rConfig, the open source network configuration management tool, with automated scheduled backups, versioning and diffs f

Routinator, RPKI route origin validation that feeds validated prefixes to your routers over the RTR protocol.

sish, an open source self hosted SSH tunnelling server that publishes any local service on a public URL over a plain ssh

SmartDNS asks several upstream resolvers at once and hands back the address that actually answers fastest.

A fast, memory-safe Rust HTTP reverse proxy and load balancer, reconfigurable at runtime with zero downtime.

encrypted, authenticated pipes between two endpoints using a pre shared key

Squid, a caching forward proxy that accelerates web access and controls outbound traffic, restricted to your own private

a filtered, caching forward web proxy in one appliance: e2guardian applies url, domain and content policy and returns a

SSHPiper, an SSH reverse proxy that routes each connection to the right upstream host by username, ready on first boot.

sslh, an open source protocol multiplexer, letting ssh and https share a single port.

add TLS encryption to any TCP service without changing the application

TeemIp, self hosted IP address management with integrated DHCP and DNS, ready the moment it boots.

browser based SSH terminal and server connection manager, packaged by cloudimg

Tinyproxy, a small, fast HTTP and HTTPS forward proxy for controlled outbound access, restricted to your own private net

Tyk Gateway, a high performance open source API gateway that authenticates, rate limits and proxies your APIs from a sin

Unbound, a validating, recursive, caching DNS resolver that answers safely the moment it boots.

UpSnap, a self hosted wake on lan console that powers the machines on your network on and off from one dashboard or on a

Vinyl Cache, a high performance HTTP reverse proxy and caching accelerator, ready the moment it boots.

WatchYourLAN, a lightweight network scanner with a web dashboard that shows every host on your network, ready the moment

WebSSH, a web based SSH client that puts a full terminal in the browser so you can open an SSH session to a host from a

wg-easy on Ubuntu 24.04, WireGuard VPN with a simple web interface for managing peers.

cloudimg packages whois-api-server, the self hosted whois and rdap lookup service, to answer domain, ip and asn queries

Wiredoor, self hosted ingress as a service: publish services from private networks to the internet over WireGuard tunnel

WireGuard VPN on Ubuntu 24.04, a fast, modern and lean VPN ready to configure.

a secure websocket tunnel that carries tcp and udp traffic through restrictive firewalls and proxies

Yggdrasil, an end to end encrypted IPv6 mesh router that gives every node a stable cryptographic address and self arrang

Zonemaster, an open source DNS delegation and DNSSEC health checker, ready on first boot.

Zoraxy, a self hosted reverse proxy and network toolkit with a web management UI, ready to configure the moment it boots