The easiest, most secure way to use WireGuard and 2FA.
Go to file
Joe Tsai 539c5e44c5
util/deephash: always keep values addressable (#5328)
The logic of deephash is both simpler and easier to reason about
if values are always addressable.

In Go, the composite kinds are slices, arrays, maps, structs,
interfaces, pointers, channels, and functions,
where we define "composite" as a Go value that encapsulates
some other Go value (e.g., a map is a collection of key-value entries).

In the cases of pointers and slices, the sub-values are always addressable.

In the cases of arrays and structs, the sub-values are always addressable
if and only if the parent value is addressable.

In the case of maps and interfaces, the sub-values are never addressable.
To make them addressable, we need to copy them onto the heap.

For the purposes of deephash, we do not care about channels and functions.

For all non-composite kinds (e.g., strings and ints), they are only addressable
if obtained from one of the composite kinds that produce addressable values
(i.e., pointers, slices, addressable arrays, and addressable structs).
A non-addressible, non-composite kind can be made addressable by
allocating it on the heap, obtaining a pointer to it, and dereferencing it.

Thus, if we can ensure that values are addressable at the entry points,
and shallow copy sub-values whenever we encounter an interface or map,
then we can ensure that all values are always addressable and
assume such property throughout all the logic.

Performance:

	name                 old time/op    new time/op    delta
	Hash-24                21.5µs ± 1%    19.7µs ± 1%  -8.29%  (p=0.000 n=9+9)
	HashPacketFilter-24    2.61µs ± 1%    2.62µs ± 0%  +0.29%  (p=0.037 n=10+9)
	HashMapAcyclic-24      30.8µs ± 1%    30.9µs ± 1%    ~     (p=0.400 n=9+10)
	TailcfgNode-24         1.84µs ± 1%    1.84µs ± 2%    ~     (p=0.928 n=10+10)
	HashArray-24            324ns ± 2%     332ns ± 2%  +2.45%  (p=0.000 n=10+10)

Signed-off-by: Joe Tsai <joetsai@digital-static.net>
2022-08-09 22:00:02 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github cmd/derper: add depaware.txt 2022-08-05 11:38:10 -07:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
chirp all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
client/tailscale all: require Go 1.19 2022-08-02 11:49:01 -07:00
cmd tsconnect: pass in authkey in dev mode (#5320) 2022-08-09 13:07:01 -07:00
control tailcfg, control/controlclient: make Debug settings sticky in a map session [capver 37] 2022-08-09 14:36:09 -07:00
derp all: use syncs.AtomicValue 2022-08-04 11:52:16 -07:00
disco all: migrate more code code to net/netip directly 2022-08-02 13:59:57 -07:00
docs docs/k8s: add prefix to (#5167) 2022-07-25 15:10:07 -07:00
envknob ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet 2022-04-20 11:38:27 -07:00
health cmd/tailscale: surface authentication errors in status.Health (#4748) 2022-06-03 10:52:07 -07:00
hostinfo hostinfo, net/netcheck: use CutPrefix 2022-08-05 15:17:44 -07:00
internal/tooldeps .github/workflows: add gofmt (goimports) check 2022-07-26 09:46:06 -07:00
ipn tailcfg, control/controlclient: make Debug settings sticky in a map session [capver 37] 2022-08-09 14:36:09 -07:00
jsondb jsondb: small package to load/save JSON DBs. 2022-07-12 11:56:38 -07:00
kube all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
log wasm: drop pprof dependency 2022-06-07 12:16:16 -07:00
logpolicy logtail,logpolicy: tweak minor cosmetic things 2022-07-27 21:13:46 -07:00
logtail cmd/tsconnect: make logtail uploading work 2022-08-04 09:10:20 -07:00
metrics all: use testingutil.MinAllocsPerRun 2021-10-28 12:48:37 -07:00
net net/dns/resolver: add comments clarifying nil error returns 2022-08-09 13:32:11 -07:00
packages/deb all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
paths all: use syncs.AtomicValue 2022-08-04 11:52:16 -07:00
portlist syncs, all: move to using Go's new atomic types instead of ours 2022-08-04 07:47:59 -07:00
prober syncs, all: move to using Go's new atomic types instead of ours 2022-08-04 07:47:59 -07:00
safesocket all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
scripts scripts: update check_license_headers.sh to skip zsyscall_windows.go 2022-07-27 16:19:39 -06:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
ssh/tailssh syncs, all: move to using Go's new atomic types instead of ours 2022-08-04 07:47:59 -07:00
syncs syncs: add generic AtomicValue 2022-08-04 11:52:16 -07:00
tailcfg tailcfg, control/controlclient: make Debug settings sticky in a map session [capver 37] 2022-08-09 14:36:09 -07:00
tempfork all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
tka tka: stable text representation of AUMHash 2022-08-08 11:10:56 -07:00
tool .github/workflows: add tsconnect static build to wasm GitHub action 2022-07-25 18:02:22 -07:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet tsnet: cleanup resources upon start failure (#5301) 2022-08-04 16:20:48 -07:00
tstest all: use syncs.AtomicValue 2022-08-04 11:52:16 -07:00
tstime tstime/mono: fix Before function comment 2022-03-05 15:05:57 -08:00
tsweb all: gofmt for Go 1.19 2022-08-02 10:08:05 -07:00
types types/opt: support an explicit "unset" value for Bool 2022-08-09 13:34:56 -07:00
util util/deephash: always keep values addressable (#5328) 2022-08-09 22:00:02 -07:00
version all: use syncs.AtomicValue 2022-08-04 11:52:16 -07:00
wf all: convert more code to use net/netip directly 2022-07-25 21:53:49 -07:00
wgengine net/netcheck: try ICMP if UDP is blocked (#5056) 2022-08-04 17:10:13 -04:00
words words: The lists continue to drag-on. (#4780) 2022-06-03 10:55:17 -04:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
ALPINE.txt Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
api.md api.md: added missing quote to POST DNS Searchpaths request body example 2022-07-21 17:44:51 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist.sh: add --box and --extra-small flag to produce smaller and boxed binaries 2022-07-27 16:08:52 -07:00
build_docker.sh Dockerfile: bump alpine to 3.16 2022-06-29 10:29:37 -07:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile docs/k8s: use job control in run.sh 2022-07-21 15:43:40 -07:00
Dockerfile.base Dockerfile: bump alpine to 3.16 2022-06-29 10:29:37 -07:00
go.mod cmd/tsconnect: switch UI to Preact 2022-08-08 21:54:06 -07:00
go.sum cmd/tsconnect: switch UI to Preact 2022-08-08 21:54:06 -07:00
go.toolchain.branch go.toolchain.rev: switch to Go 1.19rc2+ 2022-07-28 11:28:21 -07:00
go.toolchain.rev all: require Go 1.19 2022-08-02 11:49:01 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile cmd/derper: add depaware.txt 2022-08-05 11:38:10 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md all: require Go 1.19 2022-08-02 11:49:01 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix shell.nix: update Go toolchain to 1.19 2022-07-29 11:25:47 -07:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version-embed.go Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
VERSION.txt VERSION.txt: this is v1.29.0 2022-07-18 10:23:52 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We require the latest Go release, currently Go 1.19.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.