The easiest, most secure way to use WireGuard and 2FA.
Go to file
Brad Fitzpatrick 5d085a6f41 controlhttp: add some docs, change Dial's path from /switch to /ts2021
When I deployed server-side changes, I put the upgrade handler at /ts2021
instead of /switch. We could move the server to /switch, but ts2021 seems
more specific and better, but I don't feel strongly.

Updates #3488

Change-Id: Ifbf8ea60a815fd2fa1bfbe1b7af1ac2a27218354
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-02-26 12:44:29 -08:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows: add some iOS CI coverage 2022-01-27 15:57:49 -08:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
chirp chirp: remove regex dependency 2022-02-03 11:24:17 -08:00
client/tailscale cmd/tailscale: propagate tailscaled 403s as AccessDeniedErrors 2022-01-25 09:58:21 -08:00
cmd cmd/tailscaled: add a no-op test for profiling init-time memory allocs 2022-02-24 14:58:12 -08:00
control controlhttp: add some docs, change Dial's path from /switch to /ts2021 2022-02-26 12:44:29 -08:00
derp derp/derphttp, wgengine/magicsock: prefer IPv6 to DERPs when IPv6 works 2022-01-29 15:55:54 -08:00
disco types/key: export constants for key size, not a method. 2021-10-29 17:39:04 -07:00
docs fix minor typo 2021-11-16 11:03:43 -08:00
envknob envknob: track, log env knobs in use 2022-02-12 21:56:10 -08:00
health net/dns: add health check for particular broken-ish Linux DNS config 2022-02-16 10:40:04 -08:00
hostinfo hostinfo: use the sentinel value set by the MSI installer to detect MSI package type 2022-02-22 12:48:20 -07:00
internal/tooldeps util/deephash: move internal/deephash to util/deephash 2021-07-02 21:33:02 -07:00
ipn ssh: make it build on darwin 2022-02-24 13:00:45 -08:00
kube ipn/store: add ability to store data as k8s secrets. 2021-09-01 12:50:59 -07:00
log log/filelogger: make filelogger remove redundant date before adding a date 2021-11-18 10:23:41 -08:00
logpolicy ipn/ipnlocal, wgengine/magicsock, logpolicy: quiet more logs 2022-02-12 16:42:29 -08:00
logtail types/logger, logtail: add mechanism to do structured JSON logs 2022-02-18 12:42:06 -08:00
metrics all: use testingutil.MinAllocsPerRun 2021-10-28 12:48:37 -07:00
net net/dns: ignore permission errors on Synology DSM7 for now 2022-02-23 10:13:53 -08:00
packages/deb packages/deb: add package to extract metadata from .deb files. 2021-06-07 16:22:23 -07:00
paths all: gofmt -w -s (simplify) tests 2021-12-15 08:43:41 -08:00
portlist envknob: add new package for all the strconv.ParseBool(os.Getenv(..)) 2022-01-24 11:51:23 -08:00
safesocket safesocket: add ConnectionStrategy, provide control over fallbacks 2021-12-09 15:46:38 -08:00
scripts scripts/installer: add Ubuntu 22.04 LTS Jammy Jellyfish (#3955) 2022-02-17 09:52:35 -05:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
ssh/tailssh ssh/tailssh: add more SSH tests, blend in env from ssh session 2022-02-24 16:02:01 -08:00
syncs syncs: mark as safe for Go 1.18 2021-10-27 18:10:09 -07:00
tailcfg ssh/tailssh: evaluate tailcfg.SSHPolicy on incoming connections 2022-02-18 18:07:39 -08:00
tempfork/pprof tempfork/wireguard-windows: remove the old windows firewall code now that we are no 2021-08-26 15:00:45 -07:00
tool tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet tsnet: fix typo in Ephemeral 2022-02-22 15:35:24 -08:00
tstest cmd/tailscaled/childproc: add be-child registration mechanism 2022-02-24 14:20:20 -08:00
tstime tstime/rate: deflake TestLongRunningQPS 2022-01-13 16:48:29 -08:00
tsweb tsweb: fix JSONHandlerFunc regression where HTTP status was lost on gzip 2022-02-09 12:17:14 -08:00
types ipn/ipnlocal: use views for Peer.PrimaryRoutes and Peer.Tags 2022-02-22 10:09:02 -08:00
util util/winutil: migrate corp's winutil into OSS. 2022-02-10 15:22:55 -07:00
version version: bump date 2022-01-07 12:40:23 -08:00
wf all: gofmt -w -s (simplify) tests 2021-12-15 08:43:41 -08:00
wgengine ssh: make it build on darwin 2022-02-24 13:00:45 -08:00
words words: more hamsters, less hampsters (#3938) 2022-02-14 15:15:30 -05:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
api.md api: document preauthorized auth keys 2022-02-17 14:27:39 -08:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
build_docker.sh tool/go: add wrapper to download and use go.toolchain.rev go version. 2022-01-04 09:45:29 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile Dockerfile: remove long-obsolete -tags=xversion 2021-12-19 18:15:09 -08:00
Dockerfile.base Dockerfile.base: update to alpine:3.15 2022-01-07 07:33:25 -08:00
go.mod go.mod: update github.com/mdlayher/netlink to 1.6.0 2022-02-21 14:31:03 -08:00
go.sum go.mod: update github.com/mdlayher/netlink to 1.6.0 2022-02-21 14:31:03 -08:00
go.toolchain.branch go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
go.toolchain.rev go.toolchain.rev: bump to Go 1.17.7 2022-02-15 13:29:17 -08:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md README.md: update platforms 2021-12-13 17:11:07 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version-embed.go go.toolchain.rev: add Go toolchain rev, tool to print it out 2022-01-03 11:56:27 -08:00
VERSION.txt VERSION.txt: This is 1.23. 2022-02-23 15:51:28 -08:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.17) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.