Open Source BSD Tunneling Software
Sort By:
Tunneling Software for BSD
Browse free open source Tunneling software and projects for BSD below. Use the toggles on the left to filter open source Tunneling software by OS, license, language, programming language, and project status.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
DNS2SOCKS
DNS to SOCKS or HTTP proxy
This is a command line utility to resolve DNS requests via a SOCKS tunnel like Tor or a HTTP proxy. -
2
UFTP
Encrypted UDP based FTP with multicast
UFTP is an encrypted multicast file transfer program, designed to securely, reliably, and efficiently transfer files to multiple receivers simultaneously. This is useful for distributing large files to a large number of receivers, and is especially useful for data distribution over a satellite link (with two way communication), where the inherent delay makes any TCP based communication highly inefficient. The multicast encryption scheme is based on TLS with extensions to allow multiple receivers to share a common key. UFTP also has the capability to communicate over disjoint networks separated by one or more firewalls (NAT traversal) and without full end-to-end multicast capability (multicast tunneling) through the use of a UFTP proxy server. These proxies also provide scalability by aggregating responses from a group of receivers. -
3
Ligolo-ng
An advanced, yet simple, tunneling/pivoting tool
Ligolo-ng is a simple, lightweight and fast tool that allows pentesters to establish tunnels from a reverse TCP/TLS connection using a tun interface (without the need of SOCKS). When running the relay/proxy server, a tun interface is used, packets sent to this interface are translated and then transmitted to the agent's remote network. You need to download the Wintun driver (used by WireGuard) and place the wintun.dll in the same folder as Ligolo. You can listen to ports on the agent and redirect connections to your control/proxy server. You can easily hit more than 100 Mbits/sec. Here is a test using iperf from a 200Mbits/s server to a 200Mbits/s connection. -
4
SikuliX
Now continued as OculiX — see oculix.org
SikuliX is now continued as OculiX at https://oculix.org. The active development,,releases, documentation and community have moved there. SikuliX (and now OculiX) automates anything you see on the screen of your desktop computer. Running Windows, Mac or some Linux/Unix. It uses image recognition powered by OpenCV to identify GUI components and can act on them with mouse and keyboard actions. This is handy in cases when there is no easy access to a GUI's internals or the source code of the application or web page you want to act on. This SourceForge entry is preserved for historical reference. Please get the latest version from https://github.com/oculix-org/Oculix/releases. -
Build Securely on AWS with Proven FrameworksMoving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
-
5
Another Redis Desktop Manager
A faster, better and more stable Redis desktop manager
AnotherRedisDesktopManager is a cross-platform GUI client for Redis that simplifies connecting, browsing, and manipulating data. It supports standalone, Sentinel, and Cluster modes, plus SSH tunneling and ACL credentials for secure access in varied environments. The UI provides tree and table views of keys with inline editors for strings, hashes, lists, sets, sorted sets, and streams, including TTL management and batch operations. Built-in monitoring lets you watch stats, slow logs, and command activity while an integrated console executes raw Redis commands. Quality-of-life features include JSON viewers, search and filter tools, favorite connections, and dark mode. For everyday operations and troubleshooting, it offers a friendlier alternative to the command line without hiding Redis’s power. -
6
pandora-box
Lightweight cross-platform desktop client for managing Mihomo proxies
Pandora-Box is a lightweight desktop client designed to provide a graphical interface for the Mihomo proxy core. It allows users to manage proxy configurations and subscriptions through a simple and user-friendly interface rather than working directly with configuration files. Pandora-Box supports multiple proxy protocols and provides tools to organize and control network routing rules. It is designed to work for both casual users who want an easy setup and advanced users who need more control over proxy behavior. It also supports automatic rule grouping and features such as TUN mode to enable system-wide proxy routing. Pandora-Box focuses on delivering a clean interface with practical features for importing, managing, and converting proxy subscriptions. Pandora-Box combines a desktop interface with backend components to create a functional proxy management environment that simplifies complex networking configurations. -
7
Cntlm is an NTLM / NTLMv2 authenticating HTTP/1.1 proxy. It caches auth'd connections for reuse, offers TCP/IP tunneling (port forwarding) thru parent proxy and much much more. It's in C, very fast and resource-efficient. Go to http://cntlm.sf.net/
-
8
Linux and FreeBSD client for the proprietary Microsoft Point-to-Point tunneling protocol, PPTP. See the Home Page.
-
9
A client implementation of Secure Socket Tunneling Protocol (SSTP) for Linux / Mac OS-X that allows remote access via SSTP VPN to Microsoft Windows 2008 Server. This project has been moved to https://gitlab.com/eivnaes/sstp-client
-
99.99% Uptime for MySQL and PostgreSQL DatabasesCloud SQL Enterprise Plus delivers near-zero downtime with 35 days of point-in-time recovery. Supports MySQL, PostgreSQL, and SQL Server.
-
10
Box for Root
Transparent Proxy for Android(root)
Box for Root is an Android root module that provides transparent proxy functionality through Magisk, KernelSU, or APatch. It bundles support for several proxy cores, including clash, sing-box, v2ray, hysteria, and xray. The project is intended for rooted Android devices where users want system-level proxy routing rather than app-by-app manual configuration. It stores core module files under the Android root data path and uses a settings file for configuration. An optional BFR Manager app is available to help manage the module more easily. Its main purpose is to make proxy service management more integrated on rooted Android devices while supporting multiple backend tools. -
11
Chisel
A fast TCP/UDP tunnel over HTTP
Chisel is a lightweight tunneling tool designed to move TCP and UDP traffic through HTTP while securing the connection with SSH. It packages both client and server functionality into a single Go-based executable, which makes it practical for fast deployment across different environments. The project is especially useful when direct network access is restricted but HTTP or HTTPS traffic is still allowed. It can expose internal services, create secure endpoints, and support reverse forwarding when the reachable side needs to initiate the tunnel. Chisel also supports proxy-aware setups, including SOCKS5 and HTTP CONNECT scenarios. Its design favors simplicity, portability, and reliable reconnection behavior for practical network tunneling workflows. -
12
Sing-box
Sing-box multi-protocol proxy tool
Sing-box is a shell-script-based deployment project for setting up multi-protocol sing-box proxy environments across different hosting platforms and VPS scenarios. It is built around quick, automated installation rather than manual configuration, making it useful for users who want a bundled setup process. The project supports several proxy protocols, including VLESS Reality, VMess over WebSocket and TLS, Hysteria2, and Tuic. It also includes optional Nezha monitoring integration, which can help users observe node status from a monitoring panel. The scripts reference support for platforms such as Serv00, CT8, Hostuno, VPS environments, and Alpine-based systems. Overall, it functions as an automation toolkit for deploying and managing sing-box-based proxy nodes with multiple protocol options. -
13
tunnelto
Expose your local web server to the internet with a public URL
tunnelto is a Rust-based local tunneling tool that exposes a locally running web server through a public URL. It is designed for developers who need to test webhooks, demos, APIs, or in-progress applications without deploying them to a public server. The project includes both a hosted service model and self-hosting support, giving teams flexibility depending on their workflow and infrastructure needs. Its async architecture is built on Tokio, which helps it handle network connections efficiently. tunnelto is especially useful during development because it reduces the friction of sharing local work with clients, teammates, or third-party platforms. Its focus is simple: make a private local port reachable from the internet with minimal setup. -
14
piko
An open-source alternative to Ngrok, designed to serve production
Piko is an open-source reverse proxy and tunneling system designed as a self-hostable alternative to ngrok. It lets upstream services open outbound-only connections to Piko, then routes incoming traffic back through those established tunnels. This design is useful for services that are private, behind NAT, firewalled, or otherwise not publicly routable. Piko is built for production-oriented hosting rather than only short-lived development demos. It supports a server and agent model, with the agent running near the upstream service and forwarding traffic from named endpoints to local ports. The project also includes Kubernetes-oriented deployment guidance, clustering behavior, and a single binary that can run in both server and agent modes. -
15
Nipe
An engine to make Tor network your default gateway
Nipe is a Perl-based engine whose primary aim is to make the Tor network act as the default gateway for outgoing traffic. In practice, it configures system firewall rules (iptables) and network routing so that almost all IPv4 traffic is redirected through Tor. The tool provides commands such as install, start, stop, restart, and status to manage its behavior. When “start” is issued, it sets up the necessary rules; when “stop” is used, it attempts to remove those rules. Nipe currently operates over IPv4 and does not yet support IPv6, meaning that users with IPv6 connectivity may bypass Tor routing. It includes a Dockerfile to facilitate containerized usage, requiring sufficient network capabilities (e.g. NET_ADMIN) inside the container. Behind the scenes, the code is modular: for instance, parts of the logic around installation and utility functions are separated into Perl modules (e.g. in lib/Nipe/Utils/Install.pm). -
16
Portr
Expose local http, tcp or websocket connections to the public internet
Portr is an open-source, self-hosted tunneling platform for exposing local HTTP, TCP, or WebSocket services to the public internet. It uses SSH remote port forwarding under the hood, which gives it a familiar and secure transport foundation. The project is designed for teams that need an ngrok-like workflow while keeping control of their own infrastructure. It includes both server and client components, along with a dashboard-oriented experience for managing tunnel usage. Portr can help developers test webhooks, share local applications, expose APIs, or temporarily publish development services without deploying them permanently. Its main purpose is to provide a practical self-hosted tunnel service that balances developer convenience with infrastructure ownership. -
17
ANts P2P realizes a third generation P2P net. It protects your privacy while you are connected and makes you not trackable, hiding your identity (ip) and crypting everything you are sending/receiving from others.
-
18
Doffen SSH Tunnel
Manage hierarchy of ssh sessions and tunnels
Ssh terminal, file transfer and tunneling tool. The focus is on running tunnels inside tunnels. That one has to jump through several machines. Please see the wiki pages for documentation. https://sourceforge.net/p/doffensshtunnel/wiki/Home/ -
19
Enables tunneling of network connections through restrictive HTTP proxies. Features: Portmapping, SOCKS4, SOCKS5, web-based admin interface, possibility to use standalone server (perl) or hosted server (PHP), optional authorization from LDAP or MySQL
-
20
WebTTY
Share a terminal session over WebRTC
WebTTY is a terminal-sharing tool that lets a user share an interactive shell session over WebRTC. It is useful for pair programming, collaborative debugging, remote help, or accessing systems behind NAT without setting up a traditional proxy server. The project includes a command-line workflow and an in-browser client, so a session can be joined through a static web page when needed. It supports custom commands, allowing users to share a shell, a tmux session, or another terminal-based process. The tool also includes non-interactive and one-way connection options for specialized workflows such as attaching to a build server session. webtty is experimental but practical, combining Go, WebRTC, and browser-based terminal access into a lightweight collaboration tool. -
21
xkcptun
xkcptun is kcp tunnel for OpenWRT&LEDE, implemented in c language
xkcptun is a C-language implementation of kcptun built on KCP and libevent2. It is mainly designed for embedded and router-oriented environments such as LEDE and OpenWrt, where lightweight networking tools are often preferred. The project provides client and server components that use KCP-based tunneling to improve performance over unreliable or high-latency network links. It also includes a spy utility, making the generated build more than a minimal two-binary tunnel setup. xkcptun can be built with CMake and supports static linking for easier deployment on constrained systems. It is most relevant to users who need a compact KCP tunnel implementation for routers, gateways, and custom network appliances. -
22
Convert Webmail to POP3.Is also included a SMTP/POP3 tunneling system that allow send and receive email in a private network HTTP PROXY based. All connection are plugin based. Over 450 email server supported and tested, GMAIL POP3/SMTP over Proxy Network.
-
23
-
24
Bypass is an IP forwarding/tunneling tool which can be used where limited bypassing of a firewall is necessary, but relaxing the restrictions in the actual firewall is not an option. The aim is for bypass to be automatic and transparent.
-
25
Handy TCP/IP Server/Client Tools
Various TCP/IP servers, clients and network management tools
IPtools is an all in one package that includes various TCP/IP tools. Server: - FTP - TFTP - Syslog - Web - Remote Command - General UDP server - Multicast server Client utilities: - Multicast client - TFTP client Starting on version 0.2.0, a powerful network connection tools UBridge is added, it can bridge: - VXLAN (newly released) - UDP sessions - NIC card of the PC - Connections to Cisco Router Simulator "GNS3/dynamips" and H3C Router Simulator (LITO/CEN). UBridge can also be used as a Ethernet over UDP tunnel to remote bridge PC's local NIC, VXLAN, UDP proxy etc. Visit the Wiki page for detail. GUI tools include a network monitoring tool PMON, a SNMP and IP scanner. The project aim is to make them as light weight tools that can be directly executed in command prompt without the need of installation. (Except pmon and UBridge to bridge PC's NIC which require Winpcap). The whole package can be put into USB flash and 伴侶highly portable.
