The easiest, most secure way to use WireGuard and 2FA.
Go to file
Mihai Parparita 3222bce02d logtail: add instance metadata to the entry logtail
Allows instances that are running with the same machine ID (due to
cloning) to be distinguished.

Also adds sequence numbers to detect duplicates.

For tailscale/corp#5244

Signed-off-by: Mihai Parparita <mihai@tailscale.com>
2022-05-18 13:57:14 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github Revert ".github/workflows: work around golang/go#51629" 2022-04-13 14:27:01 -07:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
chirp all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
client/tailscale client/tailscale: fix ExpandSNIName on non-default LocalClient 2022-05-05 12:22:38 -07:00
cmd cmd/tsshd: delete, leaving only forwarding docs 2022-05-16 11:52:44 -07:00
control control/controlclient: store netinfo and hostinfo separately 2022-05-03 15:33:01 -07:00
derp *: use WireGuard where logged, printed or named 2022-05-04 13:36:05 -07:00
disco types/key: export constants for key size, not a method. 2021-10-29 17:39:04 -07:00
docs fix minor typo 2021-11-16 11:03:43 -08:00
envknob ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet 2022-04-20 11:38:27 -07:00
health net/dns: add health check for particular broken-ish Linux DNS config 2022-02-16 10:40:04 -08:00
hostinfo hostinfo, tailcfg: add desktop detection on Linux to hostinfo 2022-04-18 14:22:15 -07:00
internal/tooldeps util/deephash: move internal/deephash to util/deephash 2021-07-02 21:33:02 -07:00
ipn ipn/ipnlocal: add missing place where we set the SSH atomic 2022-05-14 12:47:28 -07:00
kube all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
log all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
logpolicy logtail: add instance metadata to the entry logtail 2022-05-18 13:57:14 -07:00
logtail logtail: add instance metadata to the entry logtail 2022-05-18 13:57:14 -07:00
metrics all: use testingutil.MinAllocsPerRun 2021-10-28 12:48:37 -07:00
net net/dns{., resolver}: time out DNS queries after 10 seconds (#4690) 2022-05-18 10:40:04 -07:00
packages/deb all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
paths cmd/tailscaled: default to userspace-networking mode on gokrazy, set paths 2022-03-01 20:34:45 -08:00
portlist envknob: add new package for all the strconv.ParseBool(os.Getenv(..)) 2022-01-24 11:51:23 -08:00
prober prober: used keyed initializer for LimitedReader. 2022-03-26 21:45:27 -07:00
safesocket safesocket: log warning when running sandboxed Mac binary as root 2022-04-28 16:22:19 -07:00
scripts scripts/installer.sh: add Xen Enterprise 2022-05-16 08:37:39 -07:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
ssh/tailssh ssh/tailssh: exec into login when launching a shell 2022-05-09 19:17:52 -07:00
syncs syncs: use TryLock and TryRLock instead of unsafe 2022-03-17 10:57:41 -07:00
tailcfg cmd/viewer,types/views: add support for views of maps 2022-05-09 19:49:31 -07:00
tempfork ssh/tailssh: send banner messages during auth, move more to conn 2022-04-20 18:34:11 -07:00
tool tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet assorted: documentation and readability fixes 2022-04-30 18:42:19 -07:00
tstest tstest/integration/vms: use hujson.Standardize instead of hujson.Unmarshal (#4520) 2022-05-06 14:16:10 -07:00
tstime tstime/mono: fix Before function comment 2022-03-05 15:05:57 -08:00
tsweb tsweb: memoize the string forms of HTTP response codes. 2022-05-13 14:25:17 -07:00
types types/key: make NodePublic implement Shardable (#4698) 2022-05-17 10:37:25 -07:00
util util/clientmetric: add gauge_ name prefix when uploading names 2022-05-12 09:52:56 -07:00
version version: use Go 1.18's git stamping as default implementation 2022-03-16 14:53:51 -07:00
wf all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
wgengine wgengine/filter: preallocate some hot slices in MatchesFromFilterRules (#4672) 2022-05-13 13:56:53 -07:00
words words: after a Series of discussions, Bees should be included (#4606) 2022-05-04 09:20:23 -04:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
api.md api.md: document preauthorized and tags fields 2022-05-17 09:25:13 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
build_docker.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile Dockerfile: require Go 1.18 2022-03-16 12:45:28 -07:00
Dockerfile.base Dockerfile.base: update to alpine:3.15 2022-01-07 07:33:25 -08:00
go.mod go.mod: bump golang.org/x/sys for CVE-2022-29526 2022-05-10 17:57:51 -07:00
go.sum go.mod: bump golang.org/x/sys for CVE-2022-29526 2022-05-10 17:57:51 -07:00
go.toolchain.branch go.toolchain.branch: upgrade to Go 1.18 2022-03-16 12:45:28 -07:00
go.toolchain.rev go.toolchain.rev: bump Tailscale Go toolchain 2022-05-10 05:31:13 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile Makefile: add tidy target 2022-03-21 11:06:13 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md README.md: update current Go release 2022-03-16 12:45:28 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix shell.nix: update go toolchain 2022-04-21 15:47:34 -07:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version-embed.go go.toolchain.rev: add Go toolchain rev, tool to print it out 2022-01-03 11:56:27 -08:00
VERSION.txt VERSION.txt: This is 1.25.0 2022-04-22 13:26:24 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.18) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.