The easiest, most secure way to use WireGuard and 2FA.
Go to file
David Anderson bdf3d2a63f cmd/pgproxy: open-source our postgres TLS-enforcing proxy.
From the original commit that implemented it:

  It accepts Postgres connections over Tailscale only, dials
  out to the configured upstream database with TLS (using
  strong settings, not the swiss cheese that postgres defaults to),
  and proxies the client through.

  It also keeps an audit log of the sessions it passed through,
  along with the Tailscale-provided machine and user identity
  of the connecting client.

In our other repo, this was:
commit 92e5edf98e8c2be362f564a408939a5fc3f8c539,
Change-Id I742959faaa9c7c302bc312c7dc0d3327e677dc28.

Co-authored-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Signed-off-by: David Anderson <danderson@tailscale.com>
2022-10-04 14:54:52 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github Drop duplicated $ 2022-09-26 10:10:50 -07:00
atomicfile refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
chirp all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
client/tailscale wgengine/magicsock: make debug-level stuff not logged by default 2022-10-04 11:05:50 -07:00
cmd cmd/pgproxy: open-source our postgres TLS-enforcing proxy. 2022-10-04 14:54:52 -07:00
control all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
derp all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
disco all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
docs docs/k8s: [proxy] fix sysctl command 2022-10-01 14:10:05 -07:00
doctor doctor: add package for running in-depth healthchecks; use in bugreport (#5413) 2022-09-26 13:07:28 -04:00
envknob envknob, health: support Synology, show parse errors in status 2022-09-17 08:42:41 -07:00
health envknob, health: support Synology, show parse errors in status 2022-09-17 08:42:41 -07:00
hostinfo refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
internal/tooldeps .github/workflows: add gofmt (goimports) check 2022-07-26 09:46:06 -07:00
ipn wgengine/magicsock: make debug-level stuff not logged by default 2022-10-04 11:05:50 -07:00
jsondb jsondb: small package to load/save JSON DBs. 2022-07-12 11:56:38 -07:00
kube all: use any instead of interface{} 2022-03-17 11:35:09 -07:00
licenses licenses: update tailscale{,d} licenses 2022-10-04 11:09:26 -07:00
log refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
logpolicy all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
logtail all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
metrics all: use testingutil.MinAllocsPerRun 2021-10-28 12:48:37 -07:00
net all: consistently initialize Logf when creating tsdial.Dialers 2022-09-30 14:40:56 -07:00
packages/deb refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
paths all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
portlist refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
prober all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
safesocket refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
scripts scripts/installer.sh: add -y for unattended install 2022-08-15 10:28:55 -07:00
smallzstd refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
ssh/tailssh all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
syncs syncs: add generic AtomicValue 2022-08-04 11:52:16 -07:00
tailcfg wgengine/magicsock: make debug-level stuff not logged by default 2022-10-04 11:05:50 -07:00
tempfork refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
tka all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
tool .github/workflows: add tsconnect static build to wasm GitHub action 2022-07-25 18:02:22 -07:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet tsnet: fix netstack leak on Close 2022-10-01 16:44:54 -07:00
tstest all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
tstime tstime: add ParseDuration helper function 2022-09-28 18:07:27 -07:00
tsweb all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
types all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
util util/singleflight: sync with upstream 2022-09-30 06:55:04 -07:00
version ipn/localapi: send Tailscale version in ACME User-Agent (#5499) 2022-08-30 16:48:59 -04:00
wf all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
wgengine wgengine/magicsock: make debug-level stuff not logged by default 2022-10-04 11:05:50 -07:00
words words: this title should have been a pun, but I chickened out (#5506) 2022-08-31 07:02:49 -07:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore Makefile: update make spk target to use the new go spk builder 2022-01-21 12:27:00 -08:00
ALPINE.txt Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
api.md api.md: added missing quote to POST DNS Searchpaths request body example 2022-07-21 17:44:51 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh build_dist.sh: add --box and --extra-small flag to produce smaller and boxed binaries 2022-07-27 16:08:52 -07:00
build_docker.sh Dockerfile: bump alpine to 3.16 2022-06-29 10:29:37 -07:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile Update Dockerfile to use golang:1.19-alpine 2022-09-16 11:40:31 -07:00
Dockerfile.base Dockerfile: bump alpine to 3.16 2022-06-29 10:29:37 -07:00
go.mod Address GO-2022-0969 2022-10-04 11:06:25 -07:00
go.sum Address GO-2022-0969 2022-10-04 11:06:25 -07:00
go.toolchain.branch go.toolchain.rev: switch to Go 1.19rc2+ 2022-07-28 11:28:21 -07:00
go.toolchain.rev go.toolchain.rev: bump to Go 1.19.1 2022-09-07 22:13:01 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile Makefile: add target for wasm and make it part of check 2022-08-15 09:43:35 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md all: require Go 1.19 2022-08-02 11:49:01 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix shell.nix: update Go toolchain to 1.19 2022-07-29 11:25:47 -07:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version_test.go Dockerfile: add test that build-env Alpine version matches go.mod 2022-09-16 12:19:09 -07:00
version-embed.go Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
VERSION.txt VERSION.txt: this is 1.31 2022-08-31 06:48:24 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We require the latest Go release, currently Go 1.19.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.