spoofdpi is a high-performance, cross-platform proxy tool written in Go that bypasses Deep Packet Inspection (DPI) by fragmenting and desynchronizing TLS handshakes and UDP packets. It operates in three modes: HTTP proxy, SOCKS5 proxy, and TUN interface (transparent proxy). The architecture is modular and clean, with clear separation of concerns: a config layer (TOML + CLI flags), a rule engine for domain/CIDR-based policy matching, a DNS resolver with multiple backends (UDP, DoH, system), a packet capture/injection layer using pcap or Linux raw sockets, and a desync engine that applies configurable split strategies (SNI, chunk, random, custom) and fake packets. The codebase demonstrates strong engineering practices: extensive use of interfaces for platform-specific code (Darwin/Linux/FreeBSD stubs), generic data structures (sharded LRU cache, TTL cache, domain trie with wildcard/globstar), concurrent connection management with idle timeouts, and structured logging with trace IDs. It includes a TUI mode using Bubble Tea. The project is actively maintained with recent commits, comprehensive CI/CD, and thorough test coverage for configuration parsing, rule matching, and desync logic. The code is of high quality and contains several reusable components.
DS2API is a production-grade API proxy/gateway that translates DeepSeek's web chat API into OpenAI, Claude, Gemini, and Ollama-compatible endpoints. It provides a full-featured web UI for administration, account management, proxy configuration, and API testing. The system handles authentication (JWT, API keys, managed accounts), streaming responses with tool call detection, and multi-protocol request normalization. Architecturally, it is a Go backend with a React frontend (Vite + Tailwind). The backend is modular: protocol-specific handlers (OpenAI chat/responses, Claude messages, Gemini generate, Ollama chat) share a common prompt compatibility layer that normalizes requests to DeepSeek's internal format. A custom DeepSeek client manages authentication, PoW challenges, session lifecycle, and streaming. The SSE parsing infrastructure, tool call sieve, account pool, and config store are reusable components with extensive test coverage. Key data flows: incoming API requests are parsed and normalized to a unified prompt representation (role-tagged messages, tool descriptions, file references). The prompt is sent to DeepSeek's web chat API via a streaming or non-streaming completion runtime. Responses are parsed from SSE chunks, transformed (thinking extraction, tool call normalization, citation handling), and streamed back in the original protocol format. The system supports retry logic, account switching, and current input file injection for large contexts. External dependencies include DeepSeek's web chat API (reverse-engineered), Go standard library, chi router, utls for TLS fingerprinting, Node.js for Vercel streaming and WebUI build, and React/Vite for the frontend. The project is actively maintained with CI/CD pipelines, Docker images, and Vercel deployment support.
ccNexus is a desktop application (built with Wails v2, Go backend + web frontend) and a headless server that acts as a smart proxy for multiple AI API endpoints, including Claude, OpenAI Chat, OpenAI Responses, and Gemini. It manages endpoint rotation with automatic failover, credential token pools (API keys, access tokens, refresh tokens), and real-time format conversion between the different API protocols. The system provides a full-featured GUI for managing endpoints, viewing usage statistics, configuring backup/restore (WebDAV, local, S3), launching Claude Code or Codex CLI terminals, and applying visual themes. A separate web UI is available for headless deployments via Docker. The architecture follows a layered design: a proxy layer handles request routing, authentication, and streaming response transformation; a transformer layer converts between API formats using a registry of converters; a storage layer persists endpoints, credentials, and stats in SQLite; and a service layer orchestrates higher-level operations like backup, updates, and terminal launching. The codebase demonstrates strong engineering practices including thread-safe configuration, adapter patterns for storage abstraction, SSE for real-time stats, and comprehensive contract tests. Notable features include zero-cost endpoint testing, incremental stats updates, and a credential lifecycle management system with rate limit tracking and automatic cooldown. While primarily an application, ccNexus includes some data-oriented components such as token counting, usage statistics aggregation, and credential rate limit parsing. However, these serve the operational needs of the proxy rather than constituting a data research pipeline. The project is actively maintained with a responsive issue tracker and regular releases.
Athens is an open-source, enterprise-ready Go module proxy server that implements the Go Modules download protocol. It caches and serves Go modules from upstream sources, providing a private, reliable, and fast proxy for module downloads. The system is a monolithic HTTP server built in Go, with a modular architecture that supports multiple storage backends (disk, GCP, Azure Blob, S3, Minio, MongoDB, in-memory, external HTTP) and distributed locking mechanisms (etcd, Redis, GCS, Azure Blob) for concurrent stash operations. It includes middleware for request ID, structured logging, authentication, filter rules, validation webhooks, and OpenTelemetry tracing. The proxy is configured via environment variables and TOML files, and it provides health and readiness endpoints, as well as an integrity verification sweep against the Go checksum database. Key features include a pluggable storage interface with a compliance test suite, a flexible download mode system (sync, redirect, async, none) with HCL-based per-module rules, and a distributed singleflight pattern to deduplicate concurrent module fetches across nodes. The codebase is well-structured with clear separation of concerns, though it has a large dependency surface and some legacy cloud SDK versions. The project is actively maintained with CI/CD pipelines, Docker images, and a Helm chart. It is designed for production deployments in cloud and on-premises environments.
SLRP is a rotating open proxy multiplexer that automatically discovers, validates, and rotates proxies from dozens of online sources. It runs as a single Go binary with an embedded Web UI and provides both a REST API and an MITM HTTP/HTTPS proxy endpoint. Internally, it uses a modular architecture with components for source scraping, proxy checking, pool management, request history recording, and IP geolocation. It features a custom query language for filtering proxy pool, history, and blacklist data, and includes a code generator to create type-safe dataset accessors from Go struct definitions. The system persists state to disk and can be configured via YAML or environment variables.
This is a self-contained tool for detecting third-party AI API model substitution by analyzing the statistical fingerprint of random number generation. The backend is a Python proxy server (http.server) that forwards requests to OpenAI/Anthropic endpoints, handles GitHub baseline retrieval with caching, and provides an auto-update mechanism. The frontend is a single HTML file with embedded JavaScript (no bundler) that handles all user interaction: calibration of official models, testing of unknown channels, quick one-click verification against pre-downloaded baselines, and multi-channel comparison. The tool uses cosine similarity and Jensen-Shannon divergence to compare distributions, with special handling for model-specific parameters (max_tokens vs max_completion_tokens). The code is functional and well-organized for a single-developer tool, but lacks modularity (everything in one HTML file, backend in one script) and has no test suite. The baseline data files are precomputed artifacts, not part of a live data pipeline.
Firefly is a high-performance asynchronous networking framework for the JVM, written in Java and Kotlin. It provides a comprehensive set of I/O primitives including HTTP/1.1, HTTP/2, WebSocket (RFC 6455), TCP, and UDP, with both client and server implementations. The framework is designed around Kotlin coroutines and Java NIO2 (AIO), offering non-blocking, backpressure-aware streams and a router-based HTTP server with support for content negotiation, CORS, static file serving, and HTTP/2 upgrade. It also includes built-in SLF4J logging with XML configuration, a JSON serialization service, a WeChat enterprise bot module, and a JNI helper for native code integration. The codebase is modular (firefly-common, firefly-net, firefly-slf4j, firefly-serialization, firefly-wechat, firefly-example) and demonstrates deep protocol-level craftsmanship with custom HPACK, Huffman coding, and state-machine parsers. While primarily a library for building network services, it also serves as a reference implementation for protocol handling on the JVM.
This is a comprehensive V2Ray installation and management script written in Bash. It provides a one-click installer (install.sh) and a management CLI (v2ray.sh) for deploying and operating V2Ray proxy servers on Linux (Ubuntu/Debian/CentOS). The script automates V2Ray core installation, configuration generation for multiple protocols (VMess, VLESS, Trojan, Shadowsocks, Socks, Dokodemo-Door), TLS certificate management via Caddy, dynamic port allocation, BBR enablement, and DNS configuration. It uses a modular architecture with separate source files for each functional area (core.sh for protocol logic, caddy.sh for TLS, dns.sh, bbr.sh, systemd.sh for service management, download.sh for fetching binaries, log.sh, old.sh for migration). The script manages multiple simultaneous configurations via JSON files in /etc/v2ray/conf/ and uses V2Ray's API for hot-reloading. It supports both interactive menu-driven operation and direct command-line arguments for automation.