开源 VPN 和网络工具，安装并运行

使用 WireGuard 和 2FA 最简单、最安全的方式。

测试发现：Tailscale tailscale and tailscaled binaries for Linux amd64 built and report version 1.103.0-dev20260924; 303 unit tests pass in the container. 17 分钟。

用于 Cloudflare Warp 的跨平台、非官方 CLI

测试发现：The wgcf CLI builds, passes all 4 test suites (cloudflare, cmd/generate, util, wireguard), and successfully registers accounts, generates WireGuard profiles, and returns live account status and connection telemetry from the real Cloudflare WARP API. 3 分钟。

基于 Rust 的用户空间 WireGuard® 实现

测试发现：BoringTun library compiles and 16/25 unit tests pass (9 integration tests skipped, require TUN/sudo); CLI binary builds and outputs version 0.7.1 and full usage text. 5 分钟。

通过 Websocket 或 HTTP2 隧道传输所有流量，绕过防火墙/DPI，提供静态二进制文件。

测试发现：wstunnel v11.0.0 builds, all 38 runnable tests pass, and end-to-end TCP tunneling via WebSocket works: a local HTTP server served content over the tunnel returning HTTP 200. 15 分钟。

将自身暴露为 socks5 代理的 Wireguard 客户端

测试发现：Wireproxy builds from source, passes all unit tests (19/19), prints version, validates configurations via --configtest, starts a WireGuard userspace interface, binds a SOCKS5 proxy port that responds correctly to SOCKS5 handshakes, and serves a health/readyz endpoint on demand. 6 分钟。

tun2socks：由 gVisor TCP/IP 栈驱动

测试发现：tun2socks builds and passes all tests with Go 1.26.8 on linux/amd64; the binary prints version info and help flags; no packages failed or were skipped. 3 分钟。

带 LDAP 连接的 WireGuard 配置门户

测试发现：The wg-portal server builds, starts, serves the web UI and Prometheus metrics, accepts the documented default admin login, and its full Go test suite passes (283 tests, 0 failures). 15 分钟。

Rosenpass 是一种后量子安全的 VPN，它使用 WireGuard 来传输实际数据。

测试发现：Rosenpass 0.3.0-dev builds, all 91 lib unit tests and 27 doc tests and 4 integration tests pass, the rosenpass binary prints help and generates Classic McEliece 8192 keypairs. 10 分钟。

Linux 下的 WireGuard GTK 图形界面

测试发现：Pre-built v1.1.0 wireguird binary runs on Xvfb virtual display, reports GTK 3.24.41 via --help and opens GUI window; Go toolchain v1.21.13 installed; endpoint categorization Go tests pass 15/15. 6 分钟。

管理集中式 wireguard VPN 的 FAST 命令。可以看作 wg-quick 但更快：密钥生成 + 地址分配。

测试发现：dsnet builds successfully from source, all 65 unit tests pass, init generates a valid WireGuard config JSON, and add generates correct peer configs in wg-quick, vyatta, nixos, and routeros output formats. sync and report commands fail at runtime because they require root access to the WireGuard kernel netlink... 4 分钟。

安全地将你的设备连接到私有网络：Mesh VPN、socks5 代理服务器/客户端

测试发现：Both cmd/awl and cmd/awl-tray binaries build and report version; all 16 Go test suites pass with zero failures (including race detector); the server initializes P2P networking and the API layer, requiring only a TUN device (unavailable in this container) to reach fully operational state. 9 分钟。

一个易于使用的 WireGuard 仪表盘和管理工具

测试发现：The wg-manager web app installs and builds; its uvicorn server starts on 127.0.0.1:8010, serves the Angular frontend and answers the login/logout/server/api-key endpoints, and its pytest suite passes 6/6; only the WireGuard tool endpoints fail because the wg binary is absent from the container. 17 分钟。

一条命令即可部署一个加固的自托管 VPN：在 443 端口上使用 VLESS+Reality、XHTTP 和 Hysteria2，内置 Web 面板，并为每个人提供连接页面。

测试发现：The meridian-vpn package installs, the CLI responds to all commands, and the full test suite passes (860/860 run, 6 pre-existing skips for Docker integration). 3 分钟。

最佳免费 HTTP、SOCKS4/SOCKS5、SSL、SS/SSR 代理列表，V2Ray/XRay（Vmess/Vless）配置，Tuic、Wireguard、Hyeseria、mtproto（Telegram）、Trojan-Go/Trojan-GFW 服务器 - 每 30 分钟更新一次

测试发现：On Go 1.27.3 installed to ~/.local, ./gfp built and ran against live sources, completing with exit 0 and writing 2,262,680 proxy lines across 17 protocol files plus an updated README table and total.svg. 7 分钟。

使用 nextauri 构建的 Linux 版 wireguard 客户端 GUI

测试发现：The WireGuard GUI app (Tauri + Next.js) builds and launches on Xvfb; both E2E tests pass: encryption flow (create, encrypt, lock, unlock, edit, delete, reset) and auto-lock flow (inactivity lock, blocked profile read), 2/2 tests passing via WebKit WebDriver on the X display. 33 分钟。

到你的本地服务器的安全私有隧道

测试发现：tunwg builds, server and client start, and the end-to-end tunnel forwards HTTP traffic from client to server in TUNWG_TEST_LOCALHOST mode. 4 分钟。

wireguard_webadmin 是一个直观的 Web 界面，用于管理 WireGuard VPN，旨在简化 VPN 的配置和管理。它支持多用户访问和多个 WireGuard 实例。基于开源原则构建，非常适合寻求高效且友好的 VPN 管理解决方案的管理员。

测试发现：Django web application builds with venv install, migrations run successfully, all 10 tests pass (5 Django + 5 auth-gateway), and gunicorn serves the full user flow: create-first-user, login (302 to /), and /status/ dashboard returning HTTP 200 with 'WireGuard Status | wireguard-webadmin' title. 23 分钟。

WireGuard 虚荣密钥生成器

测试发现：Binary compiles, all 20 unit tests pass, and the tool generates valid WireGuard vanity keypairs on demand. 6 分钟。

该脚本自动化在 OPNsense 上设置 Wireguard 以连接 PIA 的 NextGen Wireguard 服务器的过程，并在 OPNsense 设置中创建 Wireguard 实例（本地）和对等体（端点）。

测试发现：The PIAWireguard.py script completes its full workflow against mocked OPNsense and PIA APIs: creates WireGuard instance and peer, registers with PIA server, sets up port forwarding alias, and logs 'Finished' with exit 0. 27 分钟。

“Real world Devops project from start to finish”课程的配套文件。

测试发现：The backup-checker Python application runs end-to-end: connecting to MySQL (mocked), querying backup records, comparing to expected list, and sending Zulip notifications (mocked) via Apprise, exiting 0 on success and 1 on mismatch. The Go present slides tool serves on port 3999 and returns HTTP 200. 11 分钟。

高可用性网络代理 / VPN 服务器，基于 WireGuard

测试发现：The Go project vprox compiles successfully with all dependencies downloaded, all 62 unit tests pass covering password auth, OIDC auth, IP utils, env config, and JWT verification, and all three CLI commands (server, connect, list) display their help output. 3 分钟。

用于管理 WireGuard 配置文件的 TUI

测试发现：The project builds with go 1.25.14, all 13 unit tests pass, go vet clean, the headless config generation command produces valid WireGuard configuration files, and the TUI launches and renders the peer management interface. 4 分钟。

一个用于多个 VPN 提供商的轻量 Docker 容器中的 VPN 客户端，使用 Go 编写，并使用 OpenVPN 或 Wireguard、DNS over TLS，内置少量代理服务器。

测试发现：The Go project builds, all non-privileged unit tests pass, and the binary successfully executes CLI commands (genkey, healthcheck) and starts up to the iptables initialization step. 11 分钟。

非官方 WireGuard 文档：设置、用法、配置，以及支持服务器和漫游客户端的 VPN 的完整示例配置。

测试发现：The repo's example start.sh/stop.sh scripts run successfully on the container's built-in kernel WireGuard (built wg/ip toolchain in /tmp/wgtools), establishing real encrypted tunnels and passing TCP echo traffic across the example-simple-server-to-server, example-simple-client-to-server, example-internet-browsing-vpn... 30 分钟。

WireGuard REST API

测试发现：Built wgrest, ran its full test suite (51 passed, 0 failed), and launched the HTTP API server which answered authenticated device list with 200/'[]', rejected unauthenticated requests with 401, and served Swagger docs at /docs/ with 200. 3 分钟。

一个开源、自托管的 Tailscale 控制服务器实现

测试发现：Headscale builds and all 12 test packages pass, 11 hscontrol subpackages plus cmd/headscale, including the in-process servertest harness (content verification, consistency, ping). The headscale binary runs, reports version and help, and accepts commands. Go toolchain installed via extracted tarball since nix is... 47 分钟。

在一台全新的 Ubuntu 或 Debian VPS 上，通过一条命令安装你自己的 AmneziaWG 3.1 VPN 服务器。专为封锁 WireGuard 的网络设计。无需 Docker，支持 QR 码导入，2.0 版本可应要求用于路由器。

测试发现：All 156 Bats test suites pass on Ubuntu 24.04. The AmneziaWG installer shell scripts (awg_common.sh, manage scripts, install scripts) are verified through isolated unit tests covering CIDR helpers, config validation, PPA key embedding, QR code generation (structural), all v5.x bugfixes, protocol markers, routing... 36 分钟。

通过零配置网状 VPN 将内网接入互联网。

测试发现：OmniEdge CLI v2.9.0 builds from source, the omniedge binary responds to --help and --version, and all 74 unit tests across 7 crates pass. 9 分钟。

自愈 WireGuard 网状网络。在数秒内绕过故障，无需协调服务器，完全开源。

测试发现：Nylon builds cleanly and its unit, router, and integration suites pass; the daemon launches rootless via NYLON_RUN_DIR and answers live IPC status queries, while config verification and sealed-bundle open round-trips succeed. 22 分钟。

基于 Nebula 的自托管 P2P 优先的虚拟局域网，支持服务共享、多中继和 AI 自动化。

测试发现：Go toolchain and Nebula installed; tests pass 56/56; the MeshLAN server binary built and its HTTPS control plane served /admin 200, issued a verified device certificate via /v1/pair, returned admin sessions and heartbeat service mapping 200, and the node agent enrolled successfully; only the Nebula overlay itself did... 19 分钟。

极速远程访问

测试发现：Rust data-plane workspace builds gateway v1.6.3, headless-client v1.5.14, and http-test-server; 789 library tests pass; http-test-server responds 200 on its /bytes endpoint. 20 分钟。

适用于 Ubuntu、Debian、AlmaLinux、Rocky Linux、CentOS 和 Fedora 的 WireGuard road warrior 安装程序

测试发现：The wireguard-install.sh script has valid shell syntax and all four code paths (install, add client, remove client, uninstall) execute correctly through their logic; the npm wireguard-tools.js package provides WireGuard key generation and config management that works in this container without root. 13 分钟。

Kilo 是一个基于 WireGuard 构建、专为 Kubernetes 设计的多云网络覆盖层（k8s + wg = kg）

测试发现：Both binaries (kg, kgctl) compile and run. All 5 unit test packages pass. The kgctl CLI responds with correct usage output for all 5 commands. 31 分钟。

用于 Docker 容器的自动 Tailscale 反向代理。Zero 边车。基于标签的配置。自动 HTTPS。

测试发现：Binary at tmp/tsdproxy builds, all 1900 unit tests pass, the server serves HTTP 200 on localhost:8080 for both the dashboard root and health/ready endpoints, and Tailscale proxy creation awaits real OAuth/AuthKey credentials. 7 分钟。

自托管的入口即服务平台，允许你将运行在私有或本地网络中的应用和服务暴露到互联网。

测试发现：All 10 test suites pass (88/88 tests), TypeScript compiles with no errors, and the application boots past database migration with a mock wg binary in PATH, failing only at system-level directory creation (/etc/wireguard, /etc/nginx) which requires root. 8 分钟。

用户空间 WireGuard® 的 Rust 实现

测试发现：GotaTun builds with cargo, installs via 'cargo install --bin gotatun --path gotatun-cli', its --version answers 'gotatun-cli 0.10.2', and its library unit-test suite passes 76 tests, with 4 IPv6-bound socket tests failing solely because this rootless container has IPv6 disabled. 7 分钟。

用户空间 WireGuard 端口转发（Rust）

测试发现：onetun 0.3.10 built with cargo build --release, its 9-test suite passes, the binary answers --version/--help, and running it bound local TCP port 18080, accepted an inbound connection, and transmitted valid WireGuard handshake-initiation packets to a UDP listener the test stood up at 127.0.0.1:51820. 7 分钟。

简单 Wireguard 2FA

测试发现：Wag binary builds, all unit tests pass across 3 packages (data, routetypes, watcher), both frontend UIs compile, binary runs and prints help/version. 11 分钟。

适用于 MikroTik RouterOS v7 的实时开源控制中心。通过 WebSocket 将实时 CPU、流量、无线客户端、DHCP、WireGuard、防火墙和地理连接数据从路由器 API 直接传输到浏览器。支持告警、报告、配置管理和零接触部署。单个静态 Go 二进制文件，可自托管，支持 Docker。

测试发现：Go source builds and all Go tests pass; 94 of 96 web tests pass with polyfills for Node.js v18 gaps; the mikrodash binary starts and serves HTTP on port 3082, redirecting to /login. 42 分钟。

自托管 Web 面板，用于 Hysteria 2 和 Xray VLESS 代理服务器。功能包括：级联网络拓扑（正向/反向链）、SSH 自动设置、服务器组、负载均衡、ACL 流量过滤、带作用域的 API、webhooks、S3 备份、MCP 集成，以及 Clash/Sing-box/Hiddify 的订阅。

测试发现：C3 CELERITY panel v1.6.13 boots against an in-memory MongoDB and mock Redis, listens on port 3000, and serves the login page and health endpoint with HTTP 200; all 35+ unit test scripts in the project pass with zero failures. 11 分钟。

一个使用 Flask 和 Python 构建的 Wireguard 管理面板。该仪表板可帮助管理 Wireguard 对等节点、跟踪流量使用情况，并监控 CPU、RAM 和磁盘等系统指标。它还集成了 Telegram 机器人，用于通知和对等节点管理。

测试发现：The Wireguard Panel Flask app starts via Gunicorn on port 5000, serves all pages (health API returns 200, login/register/index pages render 200, static files 200), runs background scheduler with 4 jobs (time decrement, traffic monitoring, automated backup, system metrics), and detects system timezone correctly... 6 分钟。

Shahan Vpn Panel，具有添加/删除用户、在线用户、限制用户功能

测试发现：The HTTP login page renders (200) and posting the real admin/123456 credentials performs the MySQL lookup and creates an authenticated admin session against a locally extracted MariaDB instance. 81 分钟。

每个设备一个 Wi-Fi 密码。广告拦截与隐私屏蔽列表。基于策略的网络访问。

测试发现：Go API builds and 69 unit tests pass covering DNS, validation, alerts, parental controls, scheduling, forwarding rules, and plugin networking. 12 分钟。

🚀 An 800KB RAM ultra-lightweight Cloudflare WARP SOCKS5 proxy in Docker. 仅需 800KB 内存的纯内核态 Cloudflare WARP 代理 - Docker

测试发现：microsocks SOCKS5 proxy built from source and verified with real traffic, usque v4.2.1 binary extracted and registered with real Cloudflare WARP MASQUE API, entrypoint script passes shellcheck and runs both WireGuard and MASQUE paths end-to-end through real WARP registration into listening SOCKS5 proxies. 16 分钟。

通过 IP 地址直接连接到 Docker-for-Mac 容器

测试发现：Both Go modules build and pass vet cleanly. Host binary cross-compiles to darwin (8.9 MB). Client binary compiles to linux (3.7 MB). No Docker or macOS available to run the full application. 6 分钟。

Linux 服务器的 WireGuard VPN 安装程序

测试发现：The bash script passes syntax, shellcheck, and shfmt validation. Its core functions (OS detection, home directory resolution, error handling) were verified via mock tests passing 10/10. The CI lint workflow (the project's only automated check) is green. The installer cannot proceed past the root-check because this... 5 分钟。

适用于 Ubuntu、Debian、AlmaLinux、Rocky Linux、CentOS、Fedora、openSUSE、Amazon Linux 和 Raspberry Pi OS 的 OpenVPN 服务器安装程序。包含交互式设置和客户端管理。

测试发现：The script's shell syntax, all validation utilities, argument parsing, OS detection logic, and install flow path are verified correct; OpenSSL cryptographic primitives work. Real installation and service launch require root, /dev/net/tun, and package installation, all unavailable in this container. 14 分钟。

基于 docker compose 的自托管完整媒体服务器 Jellyfin，包含 sonarr、radarr、jackett、prowlarr、qbittorrent、flaredolverr 和 gluetun Nord VPN Proton VPN

测试发现：All project YAML compose files and shell scripts are syntactically valid, but the container lacks a Docker daemon and the mount syscall is blocked, making it impossible to launch any Docker Compose services. 10 分钟。

最简单的 VPN 安装程序，专为 Raspberry Pi 设计

测试发现：All PiVPN scripts pass syntax validation and ShellCheck with zero errors. The WireGuard management scripts (makeCONF/list/remove) are verified functional with real key generation via extracted wg binary. The installer requires root privileges on a Debian/Ubuntu system to complete system installation. 24 分钟。

Tailscale - Home Assistant 社区应用

测试发现：All 131 bash scripts pass syntax check, 3 YAML files parse correctly, Dockerfile is structurally complete, s6 overlay hierarchy consistent, config schema matches translations, repo is clean with no modifications needed but cannot be built or launched in this non-root, no-Docker, user-namespace-disabled container. 9 分钟。

一个自托管的“Stealth VPN”实现，fork 自 xray-core 和 WireGuard。它让你的流量看起来像正常的 TLS 流量，但你的 ISP 并不知道里面藏着一条完整的加密 WireGuard 隧道……

测试发现：All 6 Bash scripts pass syntax checking, all 4 JSON configs are valid, the config generation pipeline produces structurally correct Xray and sing-box client configs with proper chained WG+VLESS+REALITY+Vision fields and correct variable substitution, and the CLI help command works, but the project cannot be fully... 5 分钟。

我的 arr 技术栈。加固的 Docker Compose 配置，用于 Jellyfin + Sonarr/Radarr + qBittorrent，并带有 VPN 命名空间隔离和零信任入口。

测试发现：Neither Docker nor any container runtime is available in this environment. The Docker Compose files at arr/docker-compose.yml (9 services) and infra/docker-compose.yml (1 service) parse and validate correctly with docker-compose config (exit 0 after .env setup). Shell scripts setup.sh and 10-config.sh pass bash -n... 6 分钟。