The easiest, most secure way to use WireGuard and 2FA.
Go to file
Brad Fitzpatrick 97204fdc52 safesocket: remove/update some old TODOs
Windows auth is done by looking at the owner of the TCP connection.

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2021-04-19 11:35:02 -07:00
.github Switch to Go 1.16. 2021-02-19 13:18:31 -08:00
atomicfile atomicfile: don't Chmod on windows 2020-07-15 12:31:40 -07:00
client/tailscale ipn/ipnlocal, etc: require file sharing capability to send/recv files 2021-04-16 10:58:19 -07:00
cmd ipn, cmd/tailscale/cli: add pref to configure sudo-free operator user 2021-04-19 10:12:41 -07:00
control/controlclient tailcfg, control/controlclient: allow empty MapResponse.Domain (mapver17) 2021-04-19 09:31:21 -07:00
derp derp: handle net.ErrClosed in TestSendFreeze 2021-04-12 15:23:36 -07:00
disco Added 2 fuzzers 2021-04-10 11:40:10 -07:00
health health: add DNS subsystem and plumb errors in. 2021-04-05 10:55:35 -07:00
internal wgengine: move DNS configuration out of wgengine/router. 2021-04-05 10:55:35 -07:00
ipn ipn, cmd/tailscale/cli: add pref to configure sudo-free operator user 2021-04-19 10:12:41 -07:00
log log/filelogger: move our Windows disk file writing+rotation package here 2020-10-29 14:59:44 -07:00
logpolicy logpolicy: set log target on windows based on a registry key (#1542) 2021-03-18 13:23:56 -04:00
logtail logtail: reduce PublicID.UnmarshalText from 2 allocs to 0 2021-04-15 10:42:12 -07:00
metrics metrics: add LabelMap.GetFloat 2020-07-19 12:31:12 -07:00
net net/tsaddr: add new IP range for ephemeral nodes in Tailscale ULA (#1715) 2021-04-16 14:47:55 -04:00
paths ipn, paths, cmd/tailscaled: remove LegacyConfigPath, relaynode migration 2021-04-07 10:15:45 -07:00
portlist portlist: de-dup services on same (proto, port) on both IPv4/IPv6 2021-04-13 14:40:33 -07:00
safesocket safesocket: remove/update some old TODOs 2021-04-19 11:35:02 -07:00
scripts Allow 2021 in LICENSE header. 2021-01-08 10:23:32 -08:00
smallzstd smallzstd: new package that constructs zstd small encoders/decoders. 2020-07-02 16:13:06 -07:00
syncs syncs: disable TestWatchMultipleValues on Windows CI builds 2021-03-27 13:25:33 -07:00
tailcfg tailcfg, control/controlclient: allow empty MapResponse.Domain (mapver17) 2021-04-19 09:31:21 -07:00
tempfork tempfork/wireguard-windows/firewall: add. 2021-03-01 19:37:22 -08:00
tsconst net/netns: add windows support. 2020-09-14 16:28:49 -07:00
tstest tstest/natlab: use net.ErrClosed 2021-03-24 09:46:36 -07:00
tstime tstime: add RandomDurationBetween helper 2021-01-21 07:54:14 -08:00
tsweb tsweb: add num_goroutines expvar 2021-02-01 14:38:59 -08:00
types types/netmap: remove some old TODOs 2021-04-18 19:30:13 -07:00
util control/controlclient: only use a single DNS label as the hostname. 2021-04-15 17:08:58 -07:00
version tailcfg, control/controlclient: (mapver 16) add Node.Online, MapResponse.OnlineChange 2021-04-15 20:07:24 -07:00
wgengine ipn/ipnlocal, etc: require file sharing capability to send/recv files 2021-04-16 10:58:19 -07:00
.gitattributes .gitattributes: add a smudge filter for go.mod. 2020-02-19 20:02:02 -05:00
.gitignore Revert "cmd/tailscaled: split package main into main shim + package" 2021-03-25 09:06:00 -07:00
api.md api.md: clarify response behaviour for ACL POST endpoint 2021-04-10 11:38:12 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist: fix after version refactor. 2020-11-03 14:40:09 -08:00
build_docker.sh build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile build_docker.sh, Dockerfile: fix bug with shell quoting 2021-03-05 10:38:32 -08:00
go.mod go.mod: update wireguard-go again 2021-04-03 10:35:17 -07:00
go.sum go.mod: update wireguard-go again 2021-04-03 10:35:17 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile wgengine/netstack: fix 32-bit build broken from prior commit 2021-03-01 11:19:31 -08:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
README.md Switch to Go 1.16. 2021-02-19 13:18:31 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix add nix-shell boilerplate (#1028) 2020-12-29 12:17:03 -05:00
VERSION.txt VERSION.txt: this is 1.7.0. 2021-03-16 19:04:55 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs primarily on Linux; it also works to varying degrees on FreeBSD, OpenBSD, Darwin, and Windows.

The Android app is at https://github.com/tailscale/tailscale-android

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We only guarantee to support the latest Go release and any Go beta or release candidate builds (currently Go 1.16) in module mode. It might work in earlier Go versions or in GOPATH mode, but we're making no effort to keep those working.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.