The easiest, most secure way to use WireGuard and 2FA.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
mattn 1d04e01d1e
use C:\Windows\System32\OpenSSH\ssh.exe (#4933)
22 hours ago
.bencher bencher: add config to suppress failures on benchmark regressions. 9 months ago
.github .github/workflows: windows-race: print gcc version 2 days ago
atomicfile atomicfile: don't Chmod on windows 2 years ago
chirp all: use any instead of interface{} 3 months ago
client/tailscale client/tailscale: update ACLRow and ACLTest with new ACL fields 2 days ago
cmd use C:\Windows\System32\OpenSSH\ssh.exe (#4933) 22 hours ago
control control/controlclient, ipn/ipnlocal: remove Client.SetExpirySooner, fix race 7 days ago
derp net/wsconn: remove homegrown wrapper for turning a websocket.Conn into a net.Conn 3 weeks ago
disco types/key: export constants for key size, not a method. 8 months ago
docs build_docker.sh: add run.sh as an entrypoint to the docker image 3 weeks ago
envknob ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet 2 months ago
health cmd/tailscale: surface authentication errors in status.Health (#4748) 3 weeks ago
hostinfo hostinfo,distro: Identify Western Digital MyCloud devices. 3 weeks ago
internal/tooldeps util/deephash: move internal/deephash to util/deephash 12 months ago
ipn control/controlclient, ipn/ipnlocal: remove Client.SetExpirySooner, fix race 7 days ago
kube all: use any instead of interface{} 3 months ago
log wasm: drop pprof dependency 3 weeks ago
logpolicy tsnet: use proper log ID 3 weeks ago
logtail logtail: do not panic in PrivateID.PublicID (#4815) 3 weeks ago
metrics all: use testingutil.MinAllocsPerRun 8 months ago
net net/dns: set appropriate Windows registry values to prevent it from sending DNS changes concerning our interface to AD domain controllers. 2 days ago
packages/deb all: use any instead of interface{} 3 months ago
paths net/dns, paths, util/winutil: change net/dns/windowsManager NRPT management to support more than 50 domains. 1 month ago
portlist wasm: exclude code that's not used on iOS for Wasm too 3 weeks ago
prober prober: used keyed initializer for LimitedReader. 3 months ago
safesocket safesocket: log warning when running sandboxed Mac binary as root 2 months ago
scripts Adding pkg for Freebsd installation 6 days ago
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2 years ago
ssh/tailssh ssh/tailssh: limit setgroups to 16 on macOS 22 hours ago
syncs syncs: use TryLock and TryRLock instead of unsafe 3 months ago
tailcfg tailcfg: define some Node.Capabilities about SSH, its config 1 week ago
tempfork ssh/tailssh: send banner messages during auth, move more to conn 2 months ago
tool tool/go: add wrapper to download and use go.toolchain.rev go version. 6 months ago
tsconst net/interfaces/windows: update Tailscale interface detection logic to 8 months ago
tsnet tsnet: use tailscaled as prefix for state file names (#4816) 2 weeks ago
tstest net/portmapper: enable for iOS 2 weeks ago
tstime tstime/mono: fix Before function comment 4 months ago
tsweb tsweb: implement interceptor for error page presentation 3 weeks ago
types control/controlclient, types/netmap: remove unused LocalPort field 1 week ago
util util/deephash: add canMemHash func + typeInfo property 1 day ago
version hostinfo,distro: Identify Western Digital MyCloud devices. 3 weeks ago
wf all: use any instead of interface{} 3 months ago
wgengine wgengine/router: windows: set SkipAsSource on IPv6 LL addresses 4 days ago
words words: The lists continue to drag-on. (#4780) 3 weeks ago
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 7 months ago
.gitignore Makefile: update make spk target to use the new go spk builder 5 months ago
AUTHORS Move Linux client & common packages into a public repo. 2 years ago
CODE_OF_CONDUCT.md Add a code of conduct. 2 years ago
Dockerfile Dockerfile: require Go 1.18 3 months ago
Dockerfile.base Dockerfile.base: update to alpine:3.15 6 months ago
LICENSE LICENSE: Reformat for Github 1 year ago
Makefile Makefile: add tidy target 3 months ago
PATENTS Move Linux client & common packages into a public repo. 2 years ago
README.md README.md: update current Go release 3 months ago
SECURITY.md Add a SECURITY.md for vulnerability reports. 2 years ago
VERSION.txt VERSION.txt: this is v1.27.0 3 weeks ago
api.md api.md: document preauthorized and tags fields 1 month ago
build_dist.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 6 months ago
build_docker.sh build_docker.sh: add run.sh as an entrypoint to the docker image 3 weeks ago
go.mod go.mod: bump go4.org/unsafe/assume-no-moving-gc for Go 1.19beta1 1 week ago
go.sum go.mod: bump go4.org/unsafe/assume-no-moving-gc for Go 1.19beta1 1 week ago
go.toolchain.branch go.toolchain.branch: upgrade to Go 1.18 3 months ago
go.toolchain.rev go.toolchain.rev: bump Go to 1.18.3 (+ Tailscale patches) 3 weeks ago
pull-toolchain.sh go.toolchain.rev: add update script 6 months ago
shell.nix shell.nix: use 1.18 from system nixpkgs 5 days ago
staticcheck.conf staticcheck.conf: remove unnecessary warning 1 year ago
version-embed.go go.toolchain.rev: add Go toolchain rev, tool to print it out 6 months ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.18) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.