NetworkManager is the standard Linux network management daemon, providing D-Bus and file-based APIs to control network interfaces, connections, VPNs, and system-wide DNS. The architecture is a modular system daemon (`NetworkManager`) with a rich GObject-based client library (`libnm`), a command-line tool (`nmcli`), a text UI (`nmtui`), and an initrd generator for early-boot networking. The daemon manages Ethernet, Wi-Fi (via wpa_supplicant or IWD), Bluetooth, WWAN (ModemManager), VLANs, bonds, bridges, VXLAN, WireGuard, and many other device types through a pluggable device model. Configuration is stored in keyfile format (or legacy ifcfg-rh). The codebase integrates heavily with systemd (sd-event, sd-device, DHCP6 stack) and bundles several high-quality low-level C libraries (c-list, c-rbtree, c-siphash, n-acd, n-dhcp4) for performance and correctness. While the project is mature and actively maintained, it carries technical debt from deprecated subsystems (WiMAX, ifcfg-rh) and a large vendored systemd core that requires periodic upstream synchronization. Overall, it is a masterclass in large-scale system C programming using GLib, D-Bus, and modern Linux APIs.
This repository contains a monolithic Bash script (`sing-box.sh`) that automates the deployment, configuration, and management of the sing-box proxy server on Linux VPS. It supports 12+ proxy protocols (Reality, Hysteria2, TUIC, ShadowTLS, Shadowsocks, Trojan, VMess/VLess over WebSocket, H2/gRPC Reality, AnyTLS, NaiveProxy) and integrates Cloudflare Argo Tunnel for CDN-based inbound. The script handles end-to-end setup: dependency installation, self-signed certificate generation, sing-box binary download, JSON configuration generation for each protocol, firewall rule management (iptables/UFW/firewalld), and creation of systemd/OpenRC service files. It also generates subscription links for multiple clients (Clash, V2rayN, ShadowRocket, Throne, sing-box) and provides a menu-driven interface for post-install modifications (port changes, CDN switching, protocol add/remove, WARP account management). The architecture is a single large Bash script with modular functions, heavy use of global variables, and runtime dependency fetching. While functional and actively maintained, the codebase is tightly coupled and not designed for reuse outside its specific deployment context.
This repository provides a bash script (`mnf`) and an nftables rules file (`mullvad.rules`) that enable running Mullvad VPN alongside Tailscale or Zerotier on Linux. The script orchestrates the Mullvad CLI, nftables, and the mesh networking service to ensure traffic from the Tailscale/Zerotier network bypasses the VPN (or is correctly routed) while all other traffic goes through Mullvad. It supports country selection, RAM-only servers, custom DNS, and selective teardown. The code is a single, well-structured bash script with clear functions and argument parsing. It is not a library or framework but a purpose-built tool for a specific network configuration problem. The repository has a small footprint, no tests, and no CI/CD, but it is actively maintained (last commit dated 2026-05-07, though this appears anomalous). The nftables rules file is a simple configuration that marks packets from excluded IP ranges. There are no reusable software components beyond the script itself, which is tightly coupled to the Mullvad/Tailscale/Zerotier ecosystem.
This repository is a curated collection of proxy rule configurations for multiple proxy clients (Clash, Stash, Shadowrocket, Surge, Surfboard, QuantumultX, Egern). It provides pre-built rule sets for routing traffic for specific services (YouTube, Netflix, Disney+, Bilibili, TikTok, HoYoGames, etc.), ad blocking via MITM rewriting, DNS configuration, and various utility overrides (e.g., cron scripts for JD sign-in, Bilibili manga, Epic free games). The repository is essentially a personal configuration template set, with the actual logic and maintenance delegated to external upstream rule repositories (e.g., blackmatrix7/ios_rule_script, NobyDa, app2smile). The code (configs) is well-organized by tool and purpose, with clear Chinese comments. It demonstrates a thorough understanding of proxy tool capabilities, especially Stash's override system for advanced MITM rewriting and ad blocking. However, it is not a reusable software library or application; it is a static configuration archive. The primary value is for users of these proxy tools who want an out-of-the-box rule set with minimal customization.