Herramientas de VPN y redes de código abierto, instaladas y ejecutadas

La forma más fácil y segura de usar WireGuard y 2FA.

Lo que encontró la prueba: Tailscale tailscale and tailscaled binaries for Linux amd64 built and report version 1.103.0-dev20260924; 303 unit tests pass in the container. 17 minutos.

CLI no oficial y multiplataforma para Cloudflare Warp

Lo que encontró la prueba: The wgcf CLI builds, passes all 4 test suites (cloudflare, cmd/generate, util, wireguard), and successfully registers accounts, generates WireGuard profiles, and returns live account status and connection telemetry from the real Cloudflare WARP API. 3 minutos.

Implementación de WireGuard® en userspace en Rust

Lo que encontró la prueba: BoringTun library compiles and 16/25 unit tests pass (9 integration tests skipped, require TUN/sudo); CLI binary builds and outputs version 0.7.1 and full usage text. 5 minutos.

Tuneliza todo tu tráfico a través de Websocket o HTTP2 - Evade cortafuegos/DPI - Binario estático disponible

Lo que encontró la prueba: wstunnel v11.0.0 builds, all 38 runnable tests pass, and end-to-end TCP tunneling via WebSocket works: a local HTTP server served content over the tunnel returning HTTP 200. 15 minutos.

Cliente Wireguard que se expone como un proxy socks5

Lo que encontró la prueba: Wireproxy builds from source, passes all unit tests (19/19), prints version, validates configurations via --configtest, starts a WireGuard userspace interface, binds a SOCKS5 proxy port that responds correctly to SOCKS5 handshakes, and serves a health/readyz endpoint on demand. 6 minutos.

tun2socks - impulsado por la pila TCP/IP de gVisor

Lo que encontró la prueba: tun2socks builds and passes all tests with Go 1.26.8 on linux/amd64; the binary prints version info and help flags; no packages failed or were skipped. 3 minutos.

Portal de configuración de WireGuard con conexión LDAP

Lo que encontró la prueba: The wg-portal server builds, starts, serves the web UI and Prometheus metrics, accepts the documented default admin login, and its full Go test suite passes (283 tests, 0 failures). 15 minutos.

Rosenpass es una VPN segura post-cuántica que utiliza WireGuard para transportar los datos reales.

Lo que encontró la prueba: Rosenpass 0.3.0-dev builds, all 91 lib unit tests and 27 doc tests and 4 integration tests pass, the rosenpass binary prints help and generates Classic McEliece 8192 keypairs. 10 minutos.

WireGuard GTK GUI para Linux

Lo que encontró la prueba: Pre-built v1.1.0 wireguird binary runs on Xvfb virtual display, reports GTK 3.24.41 via --help and opens GUI window; Go toolchain v1.21.13 installed; endpoint categorization Go tests pass 15/15. 6 minutos.

Comando FAST para gestionar una VPN de wireguard centralizada. Piensa en wg-quick pero más rápido: generación de claves + asignación de direcciones.

Lo que encontró la prueba: dsnet builds successfully from source, all 65 unit tests pass, init generates a valid WireGuard config JSON, and add generates correct peer configs in wg-quick, vyatta, nixos, and routeros output formats. sync and report commands fail at runtime because they require root access to the WireGuard kernel netlink... 4 minutos.

Conecta tus dispositivos de forma segura a una red privada. Mesh VPN, socks5 proxy server/client

Lo que encontró la prueba: Both cmd/awl and cmd/awl-tray binaries build and report version; all 16 Go test suites pass with zero failures (including race detector); the server initializes P2P networking and the API layer, requiring only a TUN device (unavailable in this container) to reach fully operational state. 9 minutos.

Un panel de control y herramienta de gestión de WireGuard fácil de usar

Lo que encontró la prueba: The wg-manager web app installs and builds; its uvicorn server starts on 127.0.0.1:8010, serves the Angular frontend and answers the login/logout/server/api-key endpoints, and its pytest suite passes 6/6; only the WireGuard tool endpoints fail because the wg binary is absent from the container. 17 minutos.

Un solo comando despliega una VPN self-hosted reforzada: VLESS+Reality, XHTTP y Hysteria2 en el puerto 443, un panel web integrado y una página de conexión...

Lo que encontró la prueba: The meridian-vpn package installs, the CLI responds to all commands, and the full test suite passes (860/860 run, 6 pre-existing skips for Docker integration). 3 minutos.

La mejor lista gratuita de proxies HTTP, SOCKS4/SOCKS5, SSL, SS/SSR, configuraciones V2Ray/XRay(Vmess/Vless), Tuic, Wireguard, Hyeseria, mtproto(Telegram)...

Lo que encontró la prueba: On Go 1.27.3 installed to ~/.local, ./gfp built and ran against live sources, completing with exit 0 and writing 2,262,680 proxy lines across 17 protocol files plus an updated README table and total.svg. 7 minutos.

Un cliente GUI de wireguard para Linux hecho con nextauri

Lo que encontró la prueba: The WireGuard GUI app (Tauri + Next.js) builds and launches on Xvfb; both E2E tests pass: encryption flow (create, encrypt, lock, unlock, edit, delete, reset) and auto-lock flow (inactivity lock, blocked profile read), 2/2 tests passing via WebKit WebDriver on the X display. 33 minutos.

Túnel privado seguro hacia tus servidores locales

Lo que encontró la prueba: tunwg builds, server and client start, and the end-to-end tunnel forwards HTTP traffic from client to server in TUNWG_TEST_LOCALHOST mode. 4 minutos.

wireguard_webadmin es una interfaz web intuitiva para la gestión de VPN WireGuard, diseñada para simplificar la configuración y supervisión de VPN. Soporta...

Lo que encontró la prueba: Django web application builds with venv install, migrations run successfully, all 10 tests pass (5 Django + 5 auth-gateway), and gunicorn serves the full user flow: create-first-user, login (302 to /), and /status/ dashboard returning HTTP 200 with 'WireGuard Status | wireguard-webadmin' title. 23 minutos.

Generador de claves personalizadas para WireGuard

Lo que encontró la prueba: Binary compiles, all 20 unit tests pass, and the tool generates valid WireGuard vanity keypairs on demand. 6 minutos.

Este script automatiza el proceso de configurar Wireguard en OPNsense para conectarse a los servidores Wireguard NextGen de PIA. Creará una instancia de...

Lo que encontró la prueba: The PIAWireguard.py script completes its full workflow against mocked OPNsense and PIA APIs: creates WireGuard instance and peer, registers with PIA server, sets up port forwarding alias, and logs 'Finished' with exit 0. 27 minutos.

Archivos complementarios para el curso 'Real world Devops project from start to finish'

Lo que encontró la prueba: The backup-checker Python application runs end-to-end: connecting to MySQL (mocked), querying backup records, comparing to expected list, and sending Zulip notifications (mocked) via Apprise, exiting 0 on success and 1 on mismatch. The Go present slides tool serves on port 3999 and returns HTTP 200. 11 minutos.

Proxy de red / servidor VPN de alta disponibilidad, impulsado por WireGuard

Lo que encontró la prueba: The Go project vprox compiles successfully with all dependencies downloaded, all 62 unit tests pass covering password auth, OIDC auth, IP utils, env config, and JWT verification, and all three CLI commands (server, connect, list) display their help output. 3 minutos.

TUI para gestionar archivos de configuración de WireGuard

Lo que encontró la prueba: The project builds with go 1.25.14, all 13 unit tests pass, go vet clean, the headless config generation command produces valid WireGuard configuration files, and the TUI launches and renders the peer management interface. 4 minutos.

Cliente VPN en un container Docker ligero para múltiples proveedores de VPN, escrito en Go, y usando OpenVPN o Wireguard, DNS sobre TLS, con algunos servidores...

Lo que encontró la prueba: The Go project builds, all non-privileged unit tests pass, and the binary successfully executes CLI commands (genkey, healthcheck) and starts up to the iptables initialization step. 11 minutos.

Documentación no oficial de WireGuard: Instalación, Uso, Configuración y ejemplos completos de configuración para VPNs que admiten tanto servidores como...

Lo que encontró la prueba: The repo's example start.sh/stop.sh scripts run successfully on the container's built-in kernel WireGuard (built wg/ip toolchain in /tmp/wgtools), establishing real encrypted tunnels and passing TCP echo traffic across the example-simple-server-to-server, example-simple-client-to-server, example-internet-browsing-vpn... 30 minutos.

API REST de WireGuard

Lo que encontró la prueba: Built wgrest, ran its full test suite (51 passed, 0 failed), and launched the HTTP API server which answered authenticated device list with 200/'[]', rejected unauthenticated requests with 401, and served Swagger docs at /docs/ with 200. 3 minutos.

Una implementación de código abierto y self-hosted del servidor de control de Tailscale

Lo que encontró la prueba: Headscale builds and all 12 test packages pass, 11 hscontrol subpackages plus cmd/headscale, including the in-process servertest harness (content verification, consistency, ping). The headscale binary runs, reports version and help, and accepts commands. Go toolchain installed via extracted tarball since nix is... 47 minutos.

Instala tu propio servidor VPN AmneziaWG 3.1 en un VPS limpio de Ubuntu o Debian con un solo comando. Hecho para redes que bloquean WireGuard. Sin Docker...

Lo que encontró la prueba: All 156 Bats test suites pass on Ubuntu 24.04. The AmneziaWG installer shell scripts (awg_common.sh, manage scripts, install scripts) are verified through isolated unit tests covering CIDR helpers, config validation, PPA key embedding, QR code generation (structural), all v5.x bugfixes, protocol markers, routing... 36 minutos.

Llevando la intranet a internet con Zero-Config Mesh VPNs.

Lo que encontró la prueba: OmniEdge CLI v2.9.0 builds from source, the omniedge binary responds to --help and --version, and all 74 unit tests across 7 crates pass. 9 minutos.

Malla WireGuard auto-reparable. Reenruta alrededor de fallos en segundos, sin servidor de coordinación, totalmente FOSS.

Lo que encontró la prueba: Nylon builds cleanly and its unit, router, and integration suites pass; the daemon launches rootless via NYLON_RUN_DIR and answers live IPC status queries, while config verification and sealed-bundle open round-trips succeed. 22 minutos.

LAN virtual self-hosted con prioridad P2P, compartición de servicios, multi-retransmisión y automatización con IA, construido sobre Nebula.

Lo que encontró la prueba: Go toolchain and Nebula installed; tests pass 56/56; the MeshLAN server binary built and its HTTPS control plane served /admin 200, issued a verified device certificate via /v1/pair, returned admin sessions and heartbeat service mapping 200, and the node agent enrolled successfully; only the Nebula overlay itself did... 19 minutos.

Acceso remoto ultrarrápido

Lo que encontró la prueba: Rust data-plane workspace builds gateway v1.6.3, headless-client v1.5.14, and http-test-server; 789 library tests pass; http-test-server responds 200 on its /bytes endpoint. 20 minutos.

Instalador de WireGuard road warrior para Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS y Fedora

Lo que encontró la prueba: The wireguard-install.sh script has valid shell syntax and all four code paths (install, add client, remove client, uninstall) execute correctly through their logic; the npm wireguard-tools.js package provides WireGuard key generation and config management that works in this container without root. 13 minutos.

Kilo es un overlay de red multinube construido sobre WireGuard y diseñado para Kubernetes (k8s + wg = kg).

Lo que encontró la prueba: Both binaries (kg, kgctl) compile and run. All 5 unit test packages pass. The kgctl CLI responds with correct usage output for all 5 commands. 31 minutos.

Proxy inverso automático de Tailscale para Docker containers. Cero contenedores auxiliares. Configuración basada en etiquetas. HTTPS automático.

Lo que encontró la prueba: Binary at tmp/tsdproxy builds, all 1900 unit tests pass, the server serves HTTP 200 on localhost:8080 for both the dashboard root and health/ready endpoints, and Tailscale proxy creation awaits real OAuth/AuthKey credentials. 7 minutos.

Plataforma self-hosted de ingress-como-servicio que te permite exponer aplicaciones y servicios que se ejecutan en redes privadas o locales a internet

Lo que encontró la prueba: All 10 test suites pass (88/88 tests), TypeScript compiles with no errors, and the application boots past database migration with a mock wg binary in PATH, failing only at system-level directory creation (/etc/wireguard, /etc/nginx) which requires root. 8 minutos.

Implementación de WireGuard® en espacio de usuario en Rust

Lo que encontró la prueba: GotaTun builds with cargo, installs via 'cargo install --bin gotatun --path gotatun-cli', its --version answers 'gotatun-cli 0.10.2', and its library unit-test suite passes 76 tests, with 4 IPv6-bound socket tests failing solely because this rootless container has IPv6 disabled. 7 minutos.

Reenvío de puertos WireGuard en espacio de usuario en Rust

Lo que encontró la prueba: onetun 0.3.10 built with cargo build --release, its 9-test suite passes, the binary answers --version/--help, and running it bound local TCP port 18080, accepted an inbound connection, and transmitted valid WireGuard handshake-initiation packets to a UDP listener the test stood up at 127.0.0.1:51820. 7 minutos.

Wireguard 2FA simple

Lo que encontró la prueba: Wag binary builds, all unit tests pass across 3 packages (data, routetypes, watcher), both frontend UIs compile, binary runs and prints help/version. 11 minutos.

Centro de comando en tiempo real y código abierto para MikroTik RouterOS v7. Transmite datos en vivo de CPU, tráfico, clientes inalámbricos, DHCP, WireGuard...

Lo que encontró la prueba: Go source builds and all Go tests pass; 94 of 96 web tests pass with polyfills for Node.js v18 gaps; the mikrodash binary starts and serves HTTP on port 3082, redirecting to /login. 42 minutos.

Panel web self-hosted para servidores proxy Hysteria 2 y Xray VLESS. Incluye topología de red en cascada (Forward/Reverse Chain), configuración automática de...

Lo que encontró la prueba: C3 CELERITY panel v1.6.13 boots against an in-memory MongoDB and mock Redis, listens on port 3000, and serves the login page and health endpoint with HTTP 200; all 35+ unit test scripts in the project pass with zero failures. 11 minutos.

Un panel de gestión de Wireguard construido con Flask y Python. Este panel ayuda a gestionar los peers de Wireguard, rastrear el uso de tráfico y monitorizar...

Lo que encontró la prueba: The Wireguard Panel Flask app starts via Gunicorn on port 5000, serves all pages (health API returns 200, login/register/index pages render 200, static files 200), runs background scheduler with 4 jobs (time decrement, traffic monitoring, automated backup, system metrics), and detects system timezone correctly... 6 minutos.

Shahan Vpn Panel con Agregar/Eliminar Usuarios - Usuarios en Línea - Limitar Usuarios

Lo que encontró la prueba: The HTTP login page renders (200) and posting the real admin/123456 credentials performs the MySQL lookup and creates an authenticated admin session against a locally extracted MariaDB instance. 81 minutos.

Una contraseña wifi por dispositivo. Listas de bloqueo de anuncios y privacidad. Acceso a la red basado en políticas.

Lo que encontró la prueba: Go API builds and 69 unit tests pass covering DNS, validation, alerts, parental controls, scheduling, forwarding rules, and plugin networking. 12 minutos.

Un proxy SOCKS5 de Cloudflare WARP ultra ligero de 800KB de RAM en Docker. Proxy de Cloudflare WARP de núcleo puro que solo necesita 800KB de RAM - Docker

Lo que encontró la prueba: microsocks SOCKS5 proxy built from source and verified with real traffic, usque v4.2.1 binary extracted and registered with real Cloudflare WARP MASQUE API, entrypoint script passes shellcheck and runs both WireGuard and MASQUE paths end-to-end through real WARP registration into listening SOCKS5 proxies. 16 minutos.

Conecta directamente a los containers de Docker-for-Mac mediante dirección IP

Lo que encontró la prueba: Both Go modules build and pass vet cleanly. Host binary cross-compiles to darwin (8.9 MB). Client binary compiles to linux (3.7 MB). No Docker or macOS available to run the full application. 6 minutos.

Instalador de WireGuard VPN para servidores Linux

Lo que encontró la prueba: The bash script passes syntax, shellcheck, and shfmt validation. Its core functions (OS detection, home directory resolution, error handling) were verified via mock tests passing 10/10. The CI lint workflow (the project's only automated check) is green. The installer cannot proceed past the root-check because this... 5 minutos.

Instalador de servidor OpenVPN para Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux y Raspberry Pi OS. Incluye configuración...

Lo que encontró la prueba: The script's shell syntax, all validation utilities, argument parsing, OS detection logic, and install flow path are verified correct; OpenSSL cryptographic primitives work. Real installation and service launch require root, /dev/net/tun, and package installation, all unavailable in this container. 14 minutos.

Servidor multimedia completo self-hosted con Jellyfin, sonarr, radarr, jackett, prowlarr, qbittorrent, flaredolverr y gluetun Nord VPN Proton VPN en docker...

Lo que encontró la prueba: All project YAML compose files and shell scripts are syntactically valid, but the container lacks a Docker daemon and the mount syscall is blocked, making it impossible to launch any Docker Compose services. 10 minutos.

El instalador de VPN más sencillo, diseñado para Raspberry Pi.

Lo que encontró la prueba: All PiVPN scripts pass syntax validation and ShellCheck with zero errors. The WireGuard management scripts (makeCONF/list/remove) are verified functional with real key generation via extracted wg binary. The installer requires root privileges on a Debian/Ubuntu system to complete system installation. 24 minutos.

Tailscale - Aplicación comunitaria de Home Assistant

Lo que encontró la prueba: All 131 bash scripts pass syntax check, 3 YAML files parse correctly, Dockerfile is structurally complete, s6 overlay hierarchy consistent, config schema matches translations, repo is clean with no modifications needed but cannot be built or launched in this non-root, no-Docker, user-namespace-disabled container. 9 minutos.

Una implementación 'Stealth VPN' self-hosted, bifurcada de xray-core y WireGuard. Hace que tu tráfico parezca tráfico TLS normal, pero tu ISP no sabe que...

Lo que encontró la prueba: All 6 Bash scripts pass syntax checking, all 4 JSON configs are valid, the config generation pipeline produces structurally correct Xray and sing-box client configs with proper chained WG+VLESS+REALITY+Vision fields and correct variable substitution, and the CLI help command works, but the project cannot be fully... 5 minutos.

Mi stack de arr. Configuración reforzada de Docker Compose para Jellyfin + Sonarr/Radarr + qBittorrent con aislamiento de espacio de nombres VPN e ingreso de...

Lo que encontró la prueba: Neither Docker nor any container runtime is available in this environment. The Docker Compose files at arr/docker-compose.yml (9 services) and infra/docker-compose.yml (1 service) parse and validate correctly with docker-compose config (exit 0 after .env setup). Shell scripts setup.sh and 10-config.sh pass bash -n... 6 minutos.