The easiest, most secure way to use WireGuard and 2FA.
Go to file
Christine Dodrill 6b234323a0
tstest/integration/vms: fix flake when testing (#2145)
Occasionally the test framework would fail with a timeout due to a
virtual machine not phoning home in time. This seems to be happen
whenever qemu can't bind the VNC or SSH ports for a virtual machine.
This was fixed by taking the following actions:

1. Don't listen on VNC unless the `-use-vnc` flag is passed, this
   removes the need to listen on VNC at all in most cases. The option to
   use VNC is still left in for debugging virtual machines, but removing
   this makes it easier to deal with (VNC uses this odd system of
   "displays" that are mapped to ports above 5900, and qemu doesn't
   offer a decent way to use a normal port number, so we just disable
   VNC by default as a compromise).
2. Use a (hopefully) inactive port for SSH. In an ideal world I'd just
   have the VM's SSH port be exposed via a Unix socket, however the QEMU
   documentation doesn't really say if you can do this or not. While I
   do more research, this stopgap will have to make do.
3. Strictly tie more VM resource lifetimes to the tests themselves.
   Previously the disk image layers for virtual machines were only
   cleaned up at the end of the test and existed in the parent
   test-scoped temporary folder. This can make your tmpfs run out of
   space, which is not ideal. This should minimize the use of temporary
   storage as much as I know how to.
4. Strictly tie the qemu process lifetime to the lifetime of the test
   using testing.T#Cleanup. Previously it used a defer statement to
   clean up the qemu process, however if the tests timed out this defer
   was not run. This left around an orphaned qemu process that had to be
   killed manually. This change ensures that all qemu processes exit
   when their relevant tests finish.

Signed-off-by: Christine Dodrill <xe@tailscale.com>
2021-06-25 14:45:12 -04:00
.github .github/workflows: add integration test with a custom runner (#2044) 2021-06-08 12:49:23 -04:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
client/tailscale client/tailscale: document SetDNS more 2021-06-08 15:25:03 -07:00
cmd derp,cmd/derper: allow server to verify clients 2021-06-24 14:11:16 -07:00
control/controlclient hostinfo: add hostinfo package, move stuff out of controlclient 2021-06-17 14:27:01 -07:00
derp derp,cmd/derper: allow server to verify clients 2021-06-24 14:11:16 -07:00
disco all: adapt to opaque netaddr types 2021-05-16 14:52:00 -07:00
health wgengine/magicsock: always run ReceiveIPv6 2021-04-28 11:07:14 -07:00
hostinfo hostinfo: add hostinfo package, move stuff out of controlclient 2021-06-17 14:27:01 -07:00
internal internal/deephash: remove remaining type special cases 2021-05-24 15:22:44 -07:00
ipn net/dns{,/resolver}: refactor DNS forwarder, send out of right link on macOS/iOS 2021-06-23 16:04:10 -07:00
log log/filelogger: move our Windows disk file writing+rotation package here 2020-10-29 14:59:44 -07:00
logpolicy logpolicy: set log target on windows based on a registry key (#1542) 2021-03-18 13:23:56 -04:00
logtail staticcheck.conf: turn off noisy lint errors 2021-06-18 15:48:20 -07:00
metrics metrics: add LabelMap.GetFloat 2020-07-19 12:31:12 -07:00
net net/dns: remove ref to managerImpl 2021-06-25 07:06:23 -07:00
packages/deb packages/deb: add package to extract metadata from .deb files. 2021-06-07 16:22:23 -07:00
paths cmd/tailscale/web: restrict web access to synology admins. 2021-06-03 08:41:47 +05:00
portlist staticcheck.conf: turn off noisy lint errors 2021-06-18 15:48:20 -07:00
safesocket safesocket: delete unused function 2021-05-04 08:54:50 -07:00
scripts scripts: fix up installer script comments. 2021-05-14 14:13:31 -07:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
syncs syncs: add AtomicUint32 2021-06-23 08:51:37 -07:00
tailcfg tailcfg/derpmap: add flag to omit ts's derps 2021-06-23 10:10:33 -07:00
tempfork tempfork/wireguard-windows/firewall: add. 2021-03-01 19:37:22 -08:00
tsconst net/netns: add windows support. 2020-09-14 16:28:49 -07:00
tsnet all: adapt to opaque netaddr types 2021-05-16 14:52:00 -07:00
tstest tstest/integration/vms: fix flake when testing (#2145) 2021-06-25 14:45:12 -04:00
tstime tstime: add RandomDurationBetween helper 2021-01-21 07:54:14 -08:00
tsweb tsweb: replace NewMux with a more flexible DebugHandler. 2021-06-16 19:00:47 -07:00
types types/logger: fix deadlock RateLimitedFn reentrancy 2021-06-25 08:38:08 -07:00
util cmd/tailscale/web: add support for QNAP 2021-06-10 19:06:05 +05:00
version cmd/tailscale/web: add support for QNAP 2021-06-10 19:06:05 +05:00
wf wf: loopback condition should use MatchTypeFlagsAllSet. 2021-06-16 12:57:57 +05:00
wgengine wgengine/filter: add a debug flag for filter logs (#2241) 2021-06-25 10:10:26 -04:00
.gitattributes .gitattributes: add a smudge filter for go.mod. 2020-02-19 20:02:02 -05:00
.gitignore Revert "cmd/tailscaled: split package main into main shim + package" 2021-03-25 09:06:00 -07:00
api.md api.md: clarify response behaviour for ACL POST endpoint 2021-04-10 11:38:12 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist.sh: add a command to output the shell vars. 2021-06-05 19:02:42 -07:00
build_docker.sh build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
go.mod go.mod: update netstack 2021-06-22 10:34:14 -07:00
go.sum go.mod: update netstack 2021-06-22 10:34:14 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile wgengine/netstack: fix 32-bit build broken from prior commit 2021-03-01 11:19:31 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
README.md Switch to Go 1.16. 2021-02-19 13:18:31 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
VERSION.txt VERSION.txt: this is v1.11.0. 2021-06-24 15:45:08 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs primarily on Linux; it also works to varying degrees on FreeBSD, OpenBSD, Darwin, and Windows.

The Android app is at https://github.com/tailscale/tailscale-android

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.16) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.