Outils VPN et de réseau open source, installés et exécutés

Le moyen le plus simple et le plus sécurisé d'utiliser WireGuard et la 2FA.

Ce que le test a constaté : Tailscale tailscale and tailscaled binaries for Linux amd64 built and report version 1.103.0-dev20260924; 303 unit tests pass in the container. 17 minutes.

🚤 Cross-platform, unofficial CLI for Cloudflare Warp

Ce que le test a constaté : The wgcf CLI builds, passes all 4 test suites (cloudflare, cmd/generate, util, wireguard), and successfully registers accounts, generates WireGuard profiles, and returns live account status and connection telemetry from the real Cloudflare WARP API. 3 minutes.

Implémentation de WireGuard® dans l'espace utilisateur en Rust

Ce que le test a constaté : BoringTun library compiles and 16/25 unit tests pass (9 integration tests skipped, require TUN/sudo); CLI binary builds and outputs version 0.7.1 and full usage text. 5 minutes.

Faire transiter tout votre trafic via Websocket ou HTTP2 - Contourner les pare-feu/DPI - Binaire statique disponible

Ce que le test a constaté : wstunnel v11.0.0 builds, all 38 runnable tests pass, and end-to-end TCP tunneling via WebSocket works: a local HTTP server served content over the tunnel returning HTTP 200. 15 minutes.

Client Wireguard qui se présente comme un proxy socks5.

Ce que le test a constaté : Wireproxy builds from source, passes all unit tests (19/19), prints version, validates configurations via --configtest, starts a WireGuard userspace interface, binds a SOCKS5 proxy port that responds correctly to SOCKS5 handshakes, and serves a health/readyz endpoint on demand. 6 minutes.

tun2socks - propulsé par la pile TCP/IP de gVisor

Ce que le test a constaté : tun2socks builds and passes all tests with Go 1.26.8 on linux/amd64; the binary prints version info and help flags; no packages failed or were skipped. 3 minutes.

Portail de configuration WireGuard avec connexion LDAP

Ce que le test a constaté : The wg-portal server builds, starts, serves the web UI and Prometheus metrics, accepts the documented default admin login, and its full Go test suite passes (283 tests, 0 failures). 15 minutes.

Rosenpass est un VPN sécurisé post-quantique qui utilise WireGuard pour transporter les données réelles.

Ce que le test a constaté : Rosenpass 0.3.0-dev builds, all 91 lib unit tests and 27 doc tests and 4 integration tests pass, the rosenpass binary prints help and generates Classic McEliece 8192 keypairs. 10 minutes.

WireGuard gtk gui pour Linux

Ce que le test a constaté : Pre-built v1.1.0 wireguird binary runs on Xvfb virtual display, reports GTK 3.24.41 via --help and opens GUI window; Go toolchain v1.21.13 installed; endpoint categorization Go tests pass 15/15. 6 minutes.

Commande FAST pour gérer un VPN WireGuard centralisé. Pensez à wg-quick mais plus rapide: génération de clés + allocation d'adresses.

Ce que le test a constaté : dsnet builds successfully from source, all 65 unit tests pass, init generates a valid WireGuard config JSON, and add generates correct peer configs in wg-quick, vyatta, nixos, and routeros output formats. sync and report commands fail at runtime because they require root access to the WireGuard kernel netlink... 4 minutes.

Connectez vos appareils en toute sécurité à un réseau privé. Mesh VPN, serveur/client proxy socks5.

Ce que le test a constaté : Both cmd/awl and cmd/awl-tray binaries build and report version; all 16 Go test suites pass with zero failures (including race detector); the server initializes P2P networking and the API layer, requiring only a TUN device (unavailable in this container) to reach fully operational state. 9 minutes.

Un dashboard WireGuard et outil de gestion facile à utiliser.

Ce que le test a constaté : The wg-manager web app installs and builds; its uvicorn server starts on 127.0.0.1:8010, serves the Angular frontend and answers the login/logout/server/api-key endpoints, and its pytest suite passes 6/6; only the WireGuard tool endpoints fail because the wg binary is absent from the container. 17 minutes.

Une commande déploie un VPN auto-hébergé renforcé: VLESS+Reality, XHTTP et Hysteria2 sur le port 443, un panneau web intégré, et une page de connexion pour...

Ce que le test a constaté : The meridian-vpn package installs, the CLI responds to all commands, and the full test suite passes (860/860 run, 6 pre-existing skips for Docker integration). 3 minutes.

La meilleure liste gratuite de proxys HTTP, SOCKS4/SOCKS5, SSL, SS/SSR, de configurations V2Ray/XRay(Vmess/Vless), Tuic, Wireguard, Hyeseria...

Ce que le test a constaté : On Go 1.27.3 installed to ~/.local, ./gfp built and ran against live sources, completing with exit 0 and writing 2,262,680 proxy lines across 17 protocol files plus an updated README table and total.svg. 7 minutes.

Une interface graphique de client wireguard pour Linux, réalisée avec nextauri.

Ce que le test a constaté : The WireGuard GUI app (Tauri + Next.js) builds and launches on Xvfb; both E2E tests pass: encryption flow (create, encrypt, lock, unlock, edit, delete, reset) and auto-lock flow (inactivity lock, blocked profile read), 2/2 tests passing via WebKit WebDriver on the X display. 33 minutes.

Tunnel privé sécurisé vers vos serveurs locaux

Ce que le test a constaté : tunwg builds, server and client start, and the end-to-end tunnel forwards HTTP traffic from client to server in TUNWG_TEST_LOCALHOST mode. 4 minutes.

wireguard_webadmin est une interface web intuitive pour la gestion de VPN WireGuard, conçue pour simplifier la configuration et la supervision des VPN. Elle...

Ce que le test a constaté : Django web application builds with venv install, migrations run successfully, all 10 tests pass (5 Django + 5 auth-gateway), and gunicorn serves the full user flow: create-first-user, login (302 to /), and /status/ dashboard returning HTTP 200 with 'WireGuard Status | wireguard-webadmin' title. 23 minutes.

Générateur de clés personnalisées WireGuard

Ce que le test a constaté : Binary compiles, all 20 unit tests pass, and the tool generates valid WireGuard vanity keypairs on demand. 6 minutes.

Ce script automatise le processus de configuration de Wireguard sur OPNsense pour se connecter aux serveurs Wireguard NextGen de PIA. Il créera une instance...

Ce que le test a constaté : The PIAWireguard.py script completes its full workflow against mocked OPNsense and PIA APIs: creates WireGuard instance and peer, registers with PIA server, sets up port forwarding alias, and logs 'Finished' with exit 0. 27 minutes.

Fichiers d’accompagnement pour le cours « Real world Devops project from start to finish »

Ce que le test a constaté : The backup-checker Python application runs end-to-end: connecting to MySQL (mocked), querying backup records, comparing to expected list, and sending Zulip notifications (mocked) via Apprise, exiting 0 on success and 1 on mismatch. The Go present slides tool serves on port 3999 and returns HTTP 200. 11 minutes.

Proxy réseau / serveur VPN à haute disponibilité, propulsé par WireGuard.

Ce que le test a constaté : The Go project vprox compiles successfully with all dependencies downloaded, all 62 unit tests pass covering password auth, OIDC auth, IP utils, env config, and JWT verification, and all three CLI commands (server, connect, list) display their help output. 3 minutes.

TUI pour gérer les fichiers de configuration WireGuard

Ce que le test a constaté : The project builds with go 1.25.14, all 13 unit tests pass, go vet clean, the headless config generation command produces valid WireGuard configuration files, and the TUI launches and renders the peer management interface. 4 minutes.

Client VPN dans un conteneur Docker léger pour plusieurs fournisseurs VPN, écrit en Go, et utilisant OpenVPN ou Wireguard, DNS over TLS, avec quelques serveurs...

Ce que le test a constaté : The Go project builds, all non-privileged unit tests pass, and the binary successfully executes CLI commands (genkey, healthcheck) and starts up to the iptables initialization step. 11 minutes.

Documentation non officielle de WireGuard: installation, utilisation, configuration et exemples complets de configuration pour des VPN prenant en charge à la...

Ce que le test a constaté : The repo's example start.sh/stop.sh scripts run successfully on the container's built-in kernel WireGuard (built wg/ip toolchain in /tmp/wgtools), establishing real encrypted tunnels and passing TCP echo traffic across the example-simple-server-to-server, example-simple-client-to-server, example-internet-browsing-vpn... 30 minutes.

WireGuard REST API

Ce que le test a constaté : Built wgrest, ran its full test suite (51 passed, 0 failed), and launched the HTTP API server which answered authenticated device list with 200/'[]', rejected unauthenticated requests with 401, and served Swagger docs at /docs/ with 200. 3 minutes.

Une implémentation open source et auto-hébergée du serveur de supervision Tailscale.

Ce que le test a constaté : Headscale builds and all 12 test packages pass, 11 hscontrol subpackages plus cmd/headscale, including the in-process servertest harness (content verification, consistency, ping). The headscale binary runs, reports version and help, and accepts commands. Go toolchain installed via extracted tarball since nix is... 47 minutes.

Installez votre propre serveur VPN AmneziaWG 3.1 sur une machine vierge Ubuntu ou Debian VPS avec une seule commande. Conçu pour les réseaux qui bloquent...

Ce que le test a constaté : All 156 Bats test suites pass on Ubuntu 24.04. The AmneziaWG installer shell scripts (awg_common.sh, manage scripts, install scripts) are verified through isolated unit tests covering CIDR helpers, config validation, PPA key embedding, QR code generation (structural), all v5.x bugfixes, protocol markers, routing... 36 minutes.

Amener l'intranet sur Internet avec des VPN Mesh Zero-Config.

Ce que le test a constaté : OmniEdge CLI v2.9.0 builds from source, the omniedge binary responds to --help and --version, and all 74 unit tests across 7 crates pass. 9 minutes.

Maillage WireGuard auto-réparateur. Contourne les pannes en quelques secondes, sans serveur de coordination, entièrement FOSS.

Ce que le test a constaté : Nylon builds cleanly and its unit, router, and integration suites pass; the daemon launches rootless via NYLON_RUN_DIR and answers live IPC status queries, while config verification and sealed-bundle open round-trips succeed. 22 minutes.

LAN virtuel auto-hébergé, P2P en priorité, partage de services, multi-relais et automatisation par IA, construit sur Nebula.

Ce que le test a constaté : Go toolchain and Nebula installed; tests pass 56/56; the MeshLAN server binary built and its HTTPS control plane served /admin 200, issued a verified device certificate via /v1/pair, returned admin sessions and heartbeat service mapping 200, and the node agent enrolled successfully; only the Nebula overlay itself did... 19 minutes.

Accès à distance ultra-rapide

Ce que le test a constaté : Rust data-plane workspace builds gateway v1.6.3, headless-client v1.5.14, and http-test-server; 789 library tests pass; http-test-server responds 200 on its /bytes endpoint. 20 minutes.

Installeur WireGuard road warrior pour Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS et Fedora

Ce que le test a constaté : The wireguard-install.sh script has valid shell syntax and all four code paths (install, add client, remove client, uninstall) execute correctly through their logic; the npm wireguard-tools.js package provides WireGuard key generation and config management that works in this container without root. 13 minutes.

Kilo est un overlay réseau multi-cloud construit sur WireGuard et conçu pour Kubernetes (k8s + wg = kg).

Ce que le test a constaté : Both binaries (kg, kgctl) compile and run. All 5 unit test packages pass. The kgctl CLI responds with correct usage output for all 5 commands. 31 minutes.

Proxy inverse automatique Tailscale pour conteneurs Docker. Zéro sidecars. Configuration basée sur les labels. HTTPS automatique.

Ce que le test a constaté : Binary at tmp/tsdproxy builds, all 1900 unit tests pass, the server serves HTTP 200 on localhost:8080 for both the dashboard root and health/ready endpoints, and Tailscale proxy creation awaits real OAuth/AuthKey credentials. 7 minutes.

Plateforme auto-hébergée ingress-as-a-service qui vous permet d'exposer des applications et services exécutés dans des réseaux privés ou locaux sur Internet.

Ce que le test a constaté : All 10 test suites pass (88/88 tests), TypeScript compiles with no errors, and the application boots past database migration with a mock wg binary in PATH, failing only at system-level directory creation (/etc/wireguard, /etc/nginx) which requires root. 8 minutes.

Implémentation de WireGuard® dans l'espace utilisateur en Rust

Ce que le test a constaté : GotaTun builds with cargo, installs via 'cargo install --bin gotatun --path gotatun-cli', its --version answers 'gotatun-cli 0.10.2', and its library unit-test suite passes 76 tests, with 4 IPv6-bound socket tests failing solely because this rootless container has IPv6 disabled. 7 minutes.

Transfert de port WireGuard en espace utilisateur en Rust

Ce que le test a constaté : onetun 0.3.10 built with cargo build --release, its 9-test suite passes, the binary answers --version/--help, and running it bound local TCP port 18080, accepted an inbound connection, and transmitted valid WireGuard handshake-initiation packets to a UDP listener the test stood up at 127.0.0.1:51820. 7 minutes.

Wireguard 2FA simple

Ce que le test a constaté : Wag binary builds, all unit tests pass across 3 packages (data, routetypes, watcher), both frontend UIs compile, binary runs and prints help/version. 11 minutes.

Centre de commande open source en temps réel pour MikroTik RouterOS v7. Diffuse en direct les données CPU, trafic, clients sans fil, DHCP, WireGuard, pare-feu...

Ce que le test a constaté : Go source builds and all Go tests pass; 94 of 96 web tests pass with polyfills for Node.js v18 gaps; the mikrodash binary starts and serves HTTP on port 3082, redirecting to /login. 42 minutes.

Panneau web auto-hébergé pour les serveurs proxy Hysteria 2 et Xray VLESS. Fonctionnalités: topologie réseau en cascade (chaîne Forward/Reverse), configuration...

Ce que le test a constaté : C3 CELERITY panel v1.6.13 boots against an in-memory MongoDB and mock Redis, listens on port 3000, and serves the login page and health endpoint with HTTP 200; all 35+ unit test scripts in the project pass with zero failures. 11 minutes.

Un panneau de gestion Wireguard construit avec Flask et Python. Ce dashboard aide à gérer les pairs Wireguard, à mesurer l'utilisation du trafic et à...

Ce que le test a constaté : The Wireguard Panel Flask app starts via Gunicorn on port 5000, serves all pages (health API returns 200, login/register/index pages render 200, static files 200), runs background scheduler with 4 jobs (time decrement, traffic monitoring, automated backup, system metrics), and detects system timezone correctly... 6 minutes.

Panneau VPN Shahan avec ajout/suppression d'utilisateurs - Utilisateurs en ligne - Limite d'utilisateurs

Ce que le test a constaté : The HTTP login page renders (200) and posting the real admin/123456 credentials performs the MySQL lookup and creates an authenticated admin session against a locally extracted MariaDB instance. 81 minutes.

Un mot de passe wifi par appareil. Blocage de publicités et listes de blocage de la vie privée. Accès réseau basé sur des politiques.

Ce que le test a constaté : Go API builds and 69 unit tests pass covering DNS, validation, alerts, parental controls, scheduling, forwarding rules, and plugin networking. 12 minutes.

Un proxy SOCKS5 Cloudflare WARP ultra-léger avec 800KB de RAM dans Docker. Un proxy Cloudflare WARP en mode noyau pur ne nécessitant que 800KB de mémoire -...

Ce que le test a constaté : microsocks SOCKS5 proxy built from source and verified with real traffic, usque v4.2.1 binary extracted and registered with real Cloudflare WARP MASQUE API, entrypoint script passes shellcheck and runs both WireGuard and MASQUE paths end-to-end through real WARP registration into listening SOCKS5 proxies. 16 minutes.

Connect directly to Docker-for-Mac containers via IP address 🐳 💻

Ce que le test a constaté : Both Go modules build and pass vet cleanly. Host binary cross-compiles to darwin (8.9 MB). Client binary compiles to linux (3.7 MB). No Docker or macOS available to run the full application. 6 minutes.

Installeur WireGuard VPN pour serveurs Linux

Ce que le test a constaté : The bash script passes syntax, shellcheck, and shfmt validation. Its core functions (OS detection, home directory resolution, error handling) were verified via mock tests passing 10/10. The CI lint workflow (the project's only automated check) is green. The installer cannot proceed past the root-check because this... 5 minutes.

Installeur de serveur OpenVPN pour Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux et Raspberry Pi OS. Inclut une configuration...

Ce que le test a constaté : The script's shell syntax, all validation utilities, argument parsing, OS detection logic, and install flow path are verified correct; OpenSSL cryptographic primitives work. Real installation and service launch require root, /dev/net/tun, and package installation, all unavailable in this container. 14 minutes.

Serveur multimédia complet auto-hébergé Jellyfin avec sonarr, radarr, jackett, prowlarr, qbittorrent, flaredolverr et gluetun Nord VPN Proton VPN dans docker...

Ce que le test a constaté : All project YAML compose files and shell scripts are syntactically valid, but the container lacks a Docker daemon and the mount syscall is blocked, making it impossible to launch any Docker Compose services. 10 minutes.

L'installateur VPN le plus simple, conçu pour Raspberry Pi.

Ce que le test a constaté : All PiVPN scripts pass syntax validation and ShellCheck with zero errors. The WireGuard management scripts (makeCONF/list/remove) are verified functional with real key generation via extracted wg binary. The installer requires root privileges on a Debian/Ubuntu system to complete system installation. 24 minutes.

Tailscale - Application communautaire Home Assistant

Ce que le test a constaté : All 131 bash scripts pass syntax check, 3 YAML files parse correctly, Dockerfile is structurally complete, s6 overlay hierarchy consistent, config schema matches translations, repo is clean with no modifications needed but cannot be built or launched in this non-root, no-Docker, user-namespace-disabled container. 9 minutes.

Une implémentation de « Stealth VPN » auto-hébergée, forké depuis xray-core et WireGuard. Elle rend votre trafic semblable à un trafic TLS normal, mais votre...

Ce que le test a constaté : All 6 Bash scripts pass syntax checking, all 4 JSON configs are valid, the config generation pipeline produces structurally correct Xray and sing-box client configs with proper chained WG+VLESS+REALITY+Vision fields and correct variable substitution, and the CLI help command works, but the project cannot be fully... 5 minutes.

Mon arr stack. Configuration Docker Compose durcie pour Jellyfin + Sonarr/Radarr + qBittorrent avec isolation des espaces de noms VPN et ingress zero-trust.

Ce que le test a constaté : Neither Docker nor any container runtime is available in this environment. The Docker Compose files at arr/docker-compose.yml (9 services) and infra/docker-compose.yml (1 service) parse and validate correctly with docker-compose config (exit 0 after .env setup). Shell scripts setup.sh and 10-config.sh pass bash -n... 6 minutes.