cgnat

NPF: packet filter with stateful inspection, NAT, IP sets, etc.

TheRouter is a software packet router based on DPDK an NPF libraries.

Fast reverse proxy on fly.io

Exposes HTTP(S) services behind NAT, CGNAT, or dynamic IPs without opening inbound ports. Mirror from https://codeberg.org/towonel/towonel

Self-hosted CGNAT bypass using WireGuard, Traefik, Cloudflare, and Docker

A docker hosted minecraft server for people who suffer from CGNAT :)

My week-long journey setting up VPN access to my homelab server behind CGNAT - from frustration to success with Tailscale

Run Plex Through Ngrok to Bypass CGNAT or Double-NAT Scenario

Portlyn is a self-hosted reverse proxy and zero-trust control plane built with Go and Next.js. It combines routing, access control, authentication, certificate management, and observability in one stack.

Sovereign P2P networking tool. Post-quantum encrypted connections, identity, file transfer, and relay infrastructure. No cloud, no accounts, no trust assumptions.

Python module for generating CGNAT rules using netmap

MAP-T Parameter Calculator for IP Networking

XDP filter protecting CGNAT/NAT-pool addresses against SYN/ACK reflection, UDP amplification and bogus-TCP-flag floods. Uses kernel conntrack as the source of truth - zero own state, fail-open by design.

High-volume proxy tester with real-browser fingerprinting, precise timing, detailed ASN, connection type, and location inspection.

Keep a DHCP lease alive for a CARP virtual IP (DHCP/CGNAT WAN failover) — OPNsense plugin

WireGuard-over-WebSocket tunnel. Single-binary Go client + server. Built for free public ingress through Cloudflare's free tier (no VPS, no Spectrum).

Open source client for ngrok

Point to Site topology using WireGuard.

Open source CLI agent for Localport. Single Go binary, zero dependencies. Exposes localhost to the internet over fast, secure tunnels (HTTP, TCP, TLS, mesh, mTLS).