network
Dynamic Routing on WireGuard for everyone.
Nylon is a Resilient Overlay Network built from WireGuard, designed to be performant, secure, reliable, and most importantly, easy to use.
flannel is a network fabric for containers, designed for Kubernetes. Flannel is a simple and easy way to configure a layer 3 network fabric designed for Kubernetes.
Flannel is responsible for providing a layer 3 IPv4 network between multiple nodes in a cluster. Flannel does not control how containers are networked to the host, only how the traffic is transported between hosts. However, flannel does provide a CNI plugin for Kubernetes and a guidance on integrating with Docker.
Related contents:
A "public suffix" is one under which Internet users can (or historically could) directly register names. Some examples of public suffixes are com, co.uk and pvt.k12.ma.us. The Public Suffix List is a list of all known public suffixes.
The Public Suffix List is an initiative of Mozilla, but is maintained as a community resource. It is available for use in any software, but was originally created to meet the needs of browser manufacturers.
Remembering the Sun Microsystems Network File System.
This website gathers material related to the Sun Microsystems Network File System, a project that began in 1983 and remains a fundamental technology for today’s distributed computer systems.
Networking component for interconnecting Pods and Services across Kubernetes clusters.
Submariner enables direct networking between Pods and Services in different Kubernetes clusters, either on-premises or in the cloud.
Lighthouse provides DNS discovery to Kubernetes clusters connected by Submariner in multi-cluster environments.
This tool automates Cisco Catalyst SD-WAN lab deployment inside Cisco Modeling Labs (CML).
vTunnel is a tool that proxies IP traffic between guest and host networks by using the VSOCK protocol.
This project provides the ability to tunnel IP traffic through the hypervisor so that connections can be proxied into or out of virtual machines.
Related contents:
Mercator is a Web application for managing the mapping of an information system as described in the Mapping the Information System Guide from ANSSI.
Mercator's objective is to enable a team to manage the mapping of an information system in a complete and consistent way, and to automatically generate the various reports needed to facilitate the maintenance and communication of this mapping.
Related contents:
A lightweight, browser-based tool for mapping Ethernet connections. Create switches, patch panels, wall ports, routers, etc. Assign ports, connect them, and visualise how your network is wired.
A cross-platform network monitoring terminal UI tool built with Rust.
RustNet provides real-time visibility into network connections with detailed state information, connection lifecycle management, deep packet inspection, and a terminal user interface.
Related contents:
The ZMap Project is a collection of open source measurement tools for performing large-scale studies of the hosts and services that compose the public Internet.
ZMap is a fast single packet network scanner designed for Internet-wide network surveys.
Related contents:
Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
sandmap is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.
A modern network scanner for GNOME.
A modern libadwaita-based network scanner for GNOME that helps you discover devices on your local network.
Related contents:
A lightweight mac status bar development port monitor.
A lightweight cross-platform status bar app that monitors and manages development processes running on configurable ports. The app provides real-time process detection and allows you to kill individual processes or all processes at once.
Related contents:
Mesh network sidecars for NixOS Services.
meshSidecar provides a flexible way to integrate mesh networking capabilities with NixOS services. It allows services to participate in mesh networks without requiring direct modification of the service itself.
Related contents:
Another Looking-glass Server.
NetMirror is a modern, feature-rich looking-glass server with a beautiful web interface for network diagnostics and performance testing.
Bitcoin-powered WiFi Network. Community-built, Sovereign Wi-Fi Infrastructure
TollGate is the pay-as-you-go internet access on open networks. Streaming Sats for Free(dom) internet Access. Powered by Bitcoin Lightning Ecash.
Related contents:
A scalable overlay networking tool with a focus on performance, simplicity and security.
Nebula is a scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world. Nebula is portable, and runs on Linux, OSX, Windows, iOS, and Android. It can be used to connect a small number of computers, but is also able to connect tens of thousands of computers.
Related contents:
Easy, direct connections that punch through NATs & stay connected as network conditions change.
Dumb pipes are Iroh Connections. The dumbpipe tool is a 200-line wrapper around the iroh rust crate. You can use the iroh Endpoint to create a connection to use as a dumb pipe in your own app.
Cloud native networking and network security.
Calico is a single platform for networking, network security, and observability for any Kubernetes distribution in the cloud, on-premises, or at the edge. Whether you're just starting with Kubernetes or operating at scale, Calico's open source, enterprise, and cloud editions provide the networking, security, and observability you need.
Related contents:
A self-hosted, real-time port monitoring and discovery tool.
By auto-discovering services on your systems, portracker provides a live, accurate map of your network. It helps eliminate manual tracking in spreadsheets and prevents deployment failures caused by port conflicts.
Optimized Node Monitoring for Network Analysis.
SONAR is designed to simplify network configuration audits in critical environments. With a clean interface and a robust architecture, it enables any personnel — even non-technical — to understand and document network flows independently.
Extend Docker with IPv6 NAT, similar to IPv4. This project mimics the way Docker does NAT for IPv4 and applies it to IPv6. Jump to Usage to get started right away.
Docker was not created with IPv6 in mind. It was added later and, while it has come a long way, is still not as usable as one would want. Much discussion is still going on as to how IPv6 should be used in a containerized world; see the various GitHub issues linked below.
Simple wireless router setup for Debian-based devices.
RaspAP is feature-rich wireless router software that just works on many popular Debian-based devices, including the Raspberry Pi. Our custom OS images, Quick installer and Docker container create a known-good default configuration for all current Raspberry Pis with onboard wireless. A fully responsive, mobile-ready interface gives you control over the relevant services and networking options. Advanced DHCP settings, WireGuard and OpenVPN support, SSL certificates, ad blocking, security audits, captive portal integration, themes and multilingual options are included.
a network diagnostic tool.
Trippy combines the functionality of traceroute and ping and is designed to assist with the analysis of networking issues.
DNS Measurement, Troubleshooting and Security Auditing Toolset.
Ever been wondering if your ISP is hijacking your DNS traffic? Ever observed any misbehavior with your DNS responses? Ever been redirected to wrong address and suspected something is wrong with your DNS? Here we have a set of tools to perform basic audits on your DNS requests and responses to make sure your DNS is working as you expect.
Related contents:
🤖 The Modern Port Scanner 🤖
The Modern Port Scanner. Find ports quickly (3 seconds at its fastest). Run scripts through our scripting engine (Python, Lua, Shell supported).
Network Top -- Help you monitor network traffic with bpf.
netop is a terminal command line interface that can customize the
network traffic bpf filter rule 🎯.
Related contents:
Wireshark forDocker containers. See all incoming and outgoing requests in Docker containers with just one command.
Subtrace is Wireshark for your Docker containers. It lets developers see all incoming and outgoing requests in their backend server so that they can resolve production issues faster.
🏎 Nping mean NB Ping, A Ping Tool in Rust with Real-Time Data and Visualizations.
Nping is a Ping tool developed in Rust. It supports concurrent Ping for multiple addresses, visual chart display, real-time data updates, and other features.
Related contents:
Bash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm
A Dumb WhoIs.
A simple web application for looking up WHOIS, IP, and ASN information using free APIs. The application automatically detects the type of query and provides formatted results with a clean, modern UI that supports both light and dark modes.
View the HTTP and HTTPS requests made by any linux program by running httptap -- <command>.
WIFI / LAN intruder detector. Check the devices connected and alert you with unknown devices. It also warns of the disconnection of "always connected" devices
Network Analysis Tool.
BruteShark is a Network Forensic Analysis Tool (NFAT) that performs deep processing and inspection of network traffic (mainly PCAP files, but it also capable of directly live capturing from a network interface). It includes: password extracting, building a network map, reconstruct TCP sessions, extract hashes of encrypted passwords and even convert them to a Hashcat format in order to perform an offline Brute Force attack.
Fast and friendly network scanner. the original IP scanner for Windows, Mac and Linux.
Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports as well as has many other features.
Related contents:
Online PCAP Analysis and Network Traffic Insights.
Effortless PCAP File Analysis in Your Browser
Explore and analyze PCAP files online using A-Packets, designed to provide comprehensive insights into network protocols like IPv4/IPv6, HTTP, Telnet, FTP, DNS, SSDP, and WPA2. This tool allows users to easily view details of network communications and dissect layers of data transmission.
Graphical Management for Kea DHCP.
Stork is an open source ISC project providing a monitoring application and dashboard for ISC Kea DHCP and (eventually) ISC BIND 9. A limited configuration management for Kea is available and is expected to grow substantially in the near future.
Stork provides a web-based graphical interface for monitoring, troubleshooting, and maintaining the configuration of, Kea DHCP servers. Stork provides a single point for administrative control for your Kea servers, including integration with LDAP for administrator authentication and authorization. The graphical interface makes it possible for network administrators to easily make configuration updates to the DHCP service without having to struggle with unfamiliar CLI.
Related contents:
SmokePing is a deluxe latency measurement tool. It can measure, store and display latency, latency distribution and packet loss. SmokePing uses RRDtool to maintain a longterm data-store and to draw pretty graphs, giving up to the minute information on the state of each network connection.
A simple wrapper over nmcli using wifiscanner made in rust.
A Turn-key Suricata-based Network Detection and Response System. SELKS is now Clear NDR - Community
As the next generation open source turnkey Suricata implementation from Stamus Networks, the Clear NDR - Community edition is the successor to SELKS. We incorporated many lessons learned from the 10 years of SELKS innovation and user feedback into this platform.
Kea includes all the most-requested features, is far newer, and is designed for a more modern network environment.
A Simple & Powerful Network Tracing Tool.
Visualize the time packets spend in the kernel, watch & analyze in command line. Capture http/redis/mysql requests/responses in command line.
A fast, customizable service detection tool powered by a flexible fingerprint system. It helps you identify services, APIs, and network configurations across your infrastructure.
Cloud-Native Load-balancer.
loxilb is an open source cloud-native load-balancer based on GoLang/eBPF with the goal of achieving cross-compatibility across a wide range of on-prem, public-cloud or hybrid K8s environments. loxilb is being developed to support the adoption of cloud-native tech in telco, mobility, and edge computing.
portchecker.io is a free utility to check the port status of a given hostname or IP address.
portchecker.io is an open-source API for checking port availability on specified hostnames or IP addresses. Ideal for developers and network admins, it helps troubleshoot network setups, validate firewall rules, and assess potential access points.
Network Analysis & Packet Capture. It's amazing what you discover when you start looking.
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
WiFi Solver is a web-based simulation tool that lets you simulate the WiFi signal strength in your house.
It is the evolution of the Android app WiFi Solver FDTD, originally launched in 2014. This app was written in the aftermath of a blog post about simulating WiFi called Helmhurts, which went a bit viral back then.
Multi-vendor library to simplify Paramiko SSH connections to network devices.
Network automation to screen-scraping devices is primarily concerned with gathering output from show commands and with making configuration changes.
Netmiko aims to accomplish both of these operations and to do it across a very broad set of platforms. It seeks to do this while abstracting away low-level state control (i.e. eliminate low-level regex pattern matching to the extent practical).
eBPF implementation that runs on top of Windows.
eBPF is a well-known technology for providing programmability and agility, especially for extending an OS kernel, for use cases such as DoS protection and observability. This project is a work-in-progress that allows existing eBPF toolchains and APIs familiar in the Linux ecosystem to be used on top of Windows. That is, this project takes existing eBPF projects as submodules and adds the layer in between to make them run on top of Windows.
Quickly and easily design network layouts. Split and join subnets, add notes and color, then collaborate with others by sharing a custom link to your design.
Enter the network you wish to subnet and use the Split/Join buttons on the right to start designing!
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
Monitors network activity made by a process through the use of Windows Event Tracing (ETW) and Full Packet Capture (FPC). Filters a generated .pcap file with BPF based on the detected network activity made by the process. This application makes process network monitoring hella' easy.
🖧🔍 WIFI / LAN intruder detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.
Get visibility of what's going on on your WIFI/LAN network. Schedule scans for devices, port changes and get alerts if unknown devices or changes are found. Write your own Plugins with auto-generated UI and in-build notification system. Build out and easily maintain your network source of truth (NSoT).
Related contents:
The software that empowers network professionals.
Build, Design and Test your network in a risk-free virtual environment and access the largest networking community to help. Whether you are studying for your first networking exam or building out a state-wide telecommunications network, GNS3 offers an easy way to design and build networks of any size without the need for hardware. And the best part is it's free!
Go CLI and Library for quickly mapping organization network ranges using ASN information.
WoLi WebGUI is an extremely lightweight (under 8MB) container image for sending WoL Magic Packets easily to a public WoL proxy of your choice.
Lightweight network IP scanner. Can be used to notify about new hosts and monitor host online/offline history
An Open Source DNS Server For Privacy & Security. Block ads & malware at DNS level for your entire network!
Technitium DNS Server is an open source authoritative as well as recursive DNS server that can be used for self hosting a DNS server for privacy & security. It works out-of-the-box with no or minimal configuration and provides a user friendly web console accessible using any modern web browser.
Related contents:
NetBox - The Premier Network Source of Truth.
NetBox is the source of truth for everything on your network, from physical components like power systems and cabling to virtual assets like IP addresses and VLANs. Network automation and observability tools depend on NetBox’s authoritative data to roll out configurations, monitor changes, and accelerate operations across the enterprise.
Nmap Dashboard Mini Project.
nmap-did-what is a Grafana docker container and a Python script to parse Nmap XML output to an SQLite database. The SQLite database is used as a datasource within Grafana to view the Nmap scan details in a dashboard.