The easiest, most secure way to use WireGuard and 2FA.
Go to file
Brad Fitzpatrick 68a98a3fd0 wgengine/netstack: avoid delivering incoming packets to both netstack + host
The earlier eb06ec172f fixed
the flaky SSH issue (tailscale/corp#1725) by making sure that packets
addressed to Tailscale IPs in hybrid netstack mode weren't delivered
to netstack, but another issue remained:

All traffic handled by netstack was also potentially being handled by
the host networking stack, as the filter hook returned "Accept", which
made it keep processing. This could lead to various random racey chaos
as a function of OS/firewalls/routes/etc.

Instead, once we inject into netstack, stop our caller's packet
processing.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-05-05 20:50:08 -07:00
.github workflows: execute benchmarks 2021-05-04 20:21:03 -07:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
client/tailscale ipn/ipnlocal, etc: require file sharing capability to send/recv files 2021-04-16 10:58:19 -07:00
cmd cmd/tailscale: gofmt 2021-05-04 13:04:33 -07:00
control/controlclient ipnlocal: don't pause the controlclient until we get at least one netmap. 2021-04-30 09:18:13 -04:00
derp derp/derpmap: add São Paulo (derp11) 2021-04-21 11:04:47 -07:00
disco Added 2 fuzzers 2021-04-10 11:40:10 -07:00
health wgengine/magicsock: always run ReceiveIPv6 2021-04-28 11:07:14 -07:00
internal wgengine: move DNS configuration out of wgengine/router. 2021-04-05 10:55:35 -07:00
ipn types/logger: add key grinder stats lines to rate-limiting exemption list 2021-05-05 08:25:15 -07:00
log log/filelogger: move our Windows disk file writing+rotation package here 2020-10-29 14:59:44 -07:00
logpolicy logpolicy: set log target on windows based on a registry key (#1542) 2021-03-18 13:23:56 -04:00
logtail logtail/filch: add staticcheck annotation 2021-05-04 08:54:50 -07:00
metrics metrics: add LabelMap.GetFloat 2020-07-19 12:31:12 -07:00
net net/tsaddr: add NewContainsIPFunc (move from wgengine) 2021-05-05 13:15:50 -07:00
paths paths: add synology socket path 2021-05-03 11:18:58 -07:00
portlist portlist: suppress staticcheck error 2021-05-04 08:54:50 -07:00
safesocket safesocket: delete unused function 2021-05-04 08:54:50 -07:00
scripts Allow 2021 in LICENSE header. 2021-01-08 10:23:32 -08:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
syncs syncs: stop running TestWatchMultipleValues on CI 2021-05-04 10:21:21 -07:00
tailcfg control/controlclient, tailcfg: add Debug.SleepSeconds (mapver 19) 2021-04-21 22:05:41 -07:00
tempfork tempfork/wireguard-windows/firewall: add. 2021-03-01 19:37:22 -08:00
tsconst net/netns: add windows support. 2020-09-14 16:28:49 -07:00
tstest types/logger: add key grinder stats lines to rate-limiting exemption list 2021-05-05 08:25:15 -07:00
tstime tstime: add RandomDurationBetween helper 2021-01-21 07:54:14 -08:00
tsweb tsweb: add num_goroutines expvar 2021-02-01 14:38:59 -08:00
types wgengine/netstack: don't pass non-subnet traffic to netstack in hybrid mode 2021-05-05 13:38:55 -07:00
util util/cmpver: move into OSS from corp repo. 2021-04-23 20:55:45 -07:00
version version: bump date 2021-05-05 14:49:20 -07:00
wgengine wgengine/netstack: avoid delivering incoming packets to both netstack + host 2021-05-05 20:50:08 -07:00
.gitattributes .gitattributes: add a smudge filter for go.mod. 2020-02-19 20:02:02 -05:00
.gitignore Revert "cmd/tailscaled: split package main into main shim + package" 2021-03-25 09:06:00 -07:00
api.md api.md: clarify response behaviour for ACL POST endpoint 2021-04-10 11:38:12 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist: fix after version refactor. 2020-11-03 14:40:09 -08:00
build_docker.sh build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
go.mod ipn/ipnlocal: switch from testify to quicktest 2021-05-03 10:09:13 -07:00
go.sum ipn/ipnlocal: switch from testify to quicktest 2021-05-03 10:09:13 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile wgengine/netstack: fix 32-bit build broken from prior commit 2021-03-01 11:19:31 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
README.md Switch to Go 1.16. 2021-02-19 13:18:31 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
VERSION.txt VERSION.txt: this is 1.7.0. 2021-03-16 19:04:55 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs primarily on Linux; it also works to varying degrees on FreeBSD, OpenBSD, Darwin, and Windows.

The Android app is at https://github.com/tailscale/tailscale-android

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.16) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.