You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Andrew Dunham 91f58c5e63 tsnet: fix panic caused by logging after test finishes 2 years ago
.bencher bencher: add config to suppress failures on benchmark regressions. 5 years ago
.github .github: Bump github/codeql-action from 3.26.9 to 3.26.11 (#13710) 2 years ago
appc appc: track metrics for route info storing 2 years ago
atomicfile various: add golangci-lint, fix issues (#7905) 3 years ago
chirp all: update copyright and license headers 3 years ago
client client/web: use tsaddr helpers 2 years ago
clientupdate clientupdate: don't link distsign on platforms that don't download 2 years ago
cmd clientupdate: don't link distsign on platforms that don't download 2 years ago
control control/controlhttp: don't link ts2021 server + websocket code on iOS 2 years ago
derp derp: fix omitted word in comment 2 years ago
disco disco: correct noun for nacl box type in disco docs 2 years ago
docs docs/windows/policy: add ADMX policy setting to configure the AuthKey 2 years ago
doctor net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2 years ago
drive drive/driveimpl: use su instead of sudo 2 years ago
envknob envknob: support disk-based envknobs on the macsys build 2 years ago
gokrazy gokrazy, various: use point versions of Go and update Nix deps 2 years ago
health control/controlhttp: fix connectivity on Alaska Air wifi 2 years ago
hostinfo hostinfo: update SetPackage doc with new Android values (#13537) 2 years ago
internal all: add test for package comments, fix, add comments as needed 2 years ago
ipn clientupdate, ipn/localapi: don't use google/uuid, thin iOS deps 2 years ago
jsondb all: update copyright and license headers 3 years ago
k8s-operator k8s-operator/apis: revert ProxyGroup readiness cond name change (#13770) 2 years ago
kube kube/egressservices: improve egress ports config readability (#13722) 2 years ago
licenses licenses: update license notices 2 years ago
log log/sockstatlog: don't block for more than 5s on shutdown 2 years ago
logpolicy logpolicy: force TLS 1.3 handshake 2 years ago
logtail logtail: close idle HTTP connections on shutdown 2 years ago
metrics metrics: revert changes to MultiLabelMap's String method 2 years ago
net net/sockstats: quiet some log spam in release builds 2 years ago
omit cmd/tailscaled, ipn/conffile: support ec2 user-data config file 2 years ago
packages/deb go.mod: upgrade nfpm to v2 (#8786) 3 years ago
paths all: use Go 1.22 range-over-int 2 years ago
portlist all: use Go 1.22 range-over-int 2 years ago
posture control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals 2 years ago
prober prober: make status page more clear 2 years ago
proxymap ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug 2 years ago
release {release,version}: add DSM7.2 specific synology builds (#13405) 2 years ago
safesocket safesocket: don't depend on go-ps on iOS 2 years ago
safeweb safeweb: allow passing http.Server in safeweb.Config (#13688) 2 years ago
scripts scripts: don't refresh the pacman repository on Arch (#12194) 2 years ago
sessionrecording sessionrecording,ssh/tailssh,k8s-operator: log connected recorder address (#13382) 2 years ago
smallzstd all: use Go 1.22 range-over-int 2 years ago
ssh/tailssh ssh/tailssh: pass window size pixels in IoctlSetWinsize events 2 years ago
syncs syncs: allocate map with Map.WithLock (#13755) 2 years ago
tailcfg tailcfg: add func to check for known valid ServiceProtos (#13668) 2 years ago
taildrop taildrop: fix defer in loop (#13757) 2 years ago
tempfork cmd/tailscale: add shell tab-completion 2 years ago
tka tka: truncate long rotation signature chains 2 years ago
tool tool/gocross: fix argument order to find 2 years ago
tsconst cmd/tailscale/cli: support passing network lock keys via files 2 years ago
tsd util/usermetrics: make usermetrics non-global 2 years ago
tsnet tsnet: fix panic caused by logging after test finishes 2 years ago
tstest clientupdate: don't link distsign on platforms that don't download 2 years ago
tstime all: use math/rand/v2 more 2 years ago
tsweb usermetric: add initial user-facing metrics 2 years ago
types types/views: add iterators to the three Map view types 2 years ago
util util/vizerror: add WrapWithMessage 2 years ago
version {release,version}: add DSM7.2 specific synology builds (#13405) 2 years ago
wf wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows 2 years ago
wgengine syncs: delete Map.Range, update callers to iterators 2 years ago
words words: raccoon dog, dog with the raccoon in 'im 2 years ago
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore tstest/tailmac: add customized macOS virtualization tooling (#13146) 2 years ago
.golangci.yml ci: run 'go vet' in golangci-lint; fix errors in tests 2 years ago
ALPINE.txt ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
AUTHORS Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS CODEOWNERS: add the start of an owners file 3 years ago
CODE_OF_CONDUCT.md Add a code of conduct. 6 years ago
Dockerfile all: switch to and require Go 1.23 2 years ago
Dockerfile.base ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
LICENSE all: update tools that manage copyright headers 3 years ago
Makefile ssh/tailssh: fix SSH on busybox systems 2 years ago
PATENTS Move Linux client & common packages into a public repo. 6 years ago
README.md all: switch to and require Go 1.23 2 years ago
SECURITY.md Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt VERSION.txt: this is v1.75.0 (#13454) 2 years ago
api.md {api.md,publicapi}: remove old API docs (#13468) 2 years ago
assert_ts_toolchain_match.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2 years ago
build_dist.sh cmd/tailscale: add shell tab-completion 2 years ago
build_docker.sh build_docker.sh: update script comment (#12970) 2 years ago
flake.lock nix: update nix and use go 1.23 2 years ago
flake.nix gokrazy, various: use point versions of Go and update Nix deps 2 years ago
go.mod cmd/{k8s-operator,containerboot},k8s-operator,kube: reconcile ExternalName Services for ProxyGroup (#13635) 2 years ago
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 2 years ago
go.sum go.mod: upgrade golangci-lint 2 years ago
go.toolchain.branch all: switch to and require Go 1.23 2 years ago
go.toolchain.rev go.toolchain.rev: bump oss, test toolchain matches go.toolchain.rev 2 years ago
gomod_test.go go.mod: add test that replace directives aren't added in oss 3 years ago
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
pkgdoc_test.go all: add test for package comments, fix, add comments as needed 2 years ago
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 3 years ago
shell.nix go.mod.sri: update SRI hash for go.mod changes 2 years ago
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh Code Improvements (#11311) 2 years ago
version-embed.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2 years ago
version_tailscale_test.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2 years ago
version_test.go go.mod,wgengine/netstack: bump gvisor 2 years ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.23. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.