Go to file
Andrew Lytvynov 3a4b622276
.github/workflows/govulncheck.yml: send messages to another channel (#15295)
Updates #cleanup

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2025-03-14 12:30:29 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows/govulncheck.yml: send messages to another channel (#15295) 2025-03-14 12:30:29 -07:00
appc appc: fix a deadlock in route advertisements (#15031) 2025-02-18 11:31:14 -08:00
atomicfile atomicfile: use ReplaceFile on Windows so that attributes and ACLs are preserved 2025-01-15 13:57:37 -05:00
chirp all: update copyright and license headers 2023-01-27 15:36:29 -08:00
client client/web: fix CSRF handler order in web UI (#15143) 2025-02-27 11:58:45 -08:00
clientupdate clientupdate: refuse to update in tsnet binaries (#14911) 2025-02-04 15:51:03 -08:00
cmd cmd/containerboot: manage HA Ingress TLS certs from containerboot (#15303) 2025-03-14 17:33:08 +00:00
control control/controlclient, ipn: add client audit logging (#14950) 2025-03-12 10:37:03 -04:00
derp cmd/derper, derp/derphttp: support, generate self-signed IP address certs 2025-03-07 05:36:55 -08:00
disco disco: correct noun for nacl box type in disco docs 2023-12-14 16:41:53 -08:00
docs ipn/ipnlocal,util/syspolicy,docs/windows/policy: implement the ReconnectAfter policy setting 2025-02-24 17:07:19 -06:00
doctor net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2024-04-28 07:34:52 -07:00
drive cmd/viewer,all: consistently use "read-only" instead of "readonly" 2025-01-14 08:26:56 -08:00
envknob ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) 2025-03-13 14:14:03 +00:00
feature feature/capture: move packet capture to feature/*, out of iOS + CLI 2025-01-24 17:52:43 -08:00
gokrazy gokrazy/natlab: update gokrazy, wire up natlab tests to GitHub CI 2025-03-04 18:57:29 -08:00
health health: relax no-derp-home warnable to not fire if not in map poll 2025-01-27 20:39:37 +00:00
hostinfo feature/*: make Wake-on-LAN conditional, start supporting modular features 2025-01-22 17:16:15 -08:00
internal client/tailscale,cmd/k8s-operator,internal/client/tailscale: move VIP service client methods into internal control client 2025-02-18 16:25:17 -06:00
ipn ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) 2025-03-13 14:14:03 +00:00
jsondb all: update copyright and license headers 2023-01-27 15:36:29 -08:00
k8s-operator cmd/k8s-operator: reinstate HA Ingress reconciler (#14887) 2025-02-04 13:09:43 +00:00
kube ipn/{ipnlocal,store},kube/kubeclient: store TLS cert and key pair to a Secret in a single operation. (#15147) 2025-02-27 22:41:05 +00:00
licenses licenses: update license notices 2025-03-05 08:54:00 -08:00
log log/sockstatlog: don't block for more than 5s on shutdown 2024-07-12 17:50:11 +01:00
logpolicy logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903) 2025-02-04 12:51:27 -08:00
logtail logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903) 2025-02-04 12:51:27 -08:00
maths maths: add exponentially weighted moving average type 2025-02-25 11:59:19 -08:00
metrics metrics,syncs: add ShardedInt support to metrics.LabelMap 2024-12-23 13:10:18 -08:00
net net/packet: implement Geneve header serialization (#15301) 2025-03-13 13:33:26 -07:00
omit cmd/tailscaled, ipn/conffile: support ec2 user-data config file 2024-05-30 09:49:18 -07:00
packages/deb go.mod: upgrade nfpm to v2 (#8786) 2023-08-03 13:00:45 -07:00
paths all: illumos/solaris userspace only support 2025-01-09 14:46:23 -08:00
portlist all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
posture control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals 2024-09-04 15:25:19 -05:00
prober all: use new LocalAPI client package location 2025-02-05 14:41:42 -08:00
proxymap ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug 2024-09-10 14:23:33 -07:00
release release/dist: clamp min / max version for synology package centre (#13857) 2024-10-18 14:20:40 -06:00
safesocket safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275) 2025-03-11 13:24:11 -04:00
safeweb go.mod: bump gorilla/csrf for security fix (#14822) 2025-01-29 12:44:01 -08:00
scripts scripts/installer.sh: explicitly chmod 0644 installed files (#15171) 2025-03-02 18:22:15 +00:00
sessionrecording sessionrecording: implement v2 recording endpoint support (#14105) 2024-11-18 09:55:54 -08:00
smallzstd all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
ssh/tailssh ssh/tailssh: fix typo in forwardedEnviron method, add docs 2025-03-10 20:28:36 -07:00
syncs syncs: add ShardedInt expvar.Var type 2024-12-19 14:58:28 -08:00
tailcfg control/controlclient, ipn: add client audit logging (#14950) 2025-03-12 10:37:03 -04:00
taildrop taildrop: fix defer in loop (#13757) 2024-10-09 14:09:58 -07:00
tempfork tempfork/acme: pull in latest changes for Go 1.24 (#15062) 2025-02-19 10:42:06 -08:00
tka tka: truncate long rotation signature chains 2024-09-04 22:17:21 +01:00
tool tool/gocross: remove trimpath from test builds 2024-10-28 16:10:55 -07:00
tsconst cmd/tailscale/cli: support passing network lock keys via files 2024-08-14 09:18:34 -07:00
tsd control/controlclient, ipn: add client audit logging (#14950) 2025-03-12 10:37:03 -04:00
tsnet tsnet,wgengine: fix src to primary Tailscale IP for TCP dials 2025-03-11 13:11:01 -07:00
tstest wgengine/magicsock: use learned DERP route as send path of last resort 2025-03-07 05:37:24 -08:00
tstime all: use math/rand/v2 more 2024-06-05 15:24:04 -07:00
tsweb tsweb: add title to DebugHandler and helper registration methods 2025-03-12 19:21:25 -07:00
types all: statically enforce json/v2 interface satisfaction (#15154) 2025-02-27 12:33:31 -08:00
util util/eventbus: add basic throughput benchmarks (#15284) 2025-03-13 08:06:20 -07:00
version safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275) 2025-03-11 13:24:11 -04:00
wf wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows 2024-10-02 18:36:01 -05:00
wgengine net/netmon, wgengine/magicsock: be quieter with portmapper logs 2025-03-12 17:45:26 -04:00
words words: append to the tail of the wordlists (#15278) 2025-03-11 17:23:21 -04:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore tstest/tailmac: add customized macOS virtualization tooling (#13146) 2024-08-19 15:01:19 -04:00
.golangci.yml .github: Bump golangci/golangci-lint-action from 6.3.1 to 6.5.0 (#15046) 2025-03-09 13:31:02 -06:00
ALPINE.txt Revert "Dockerfile: bump base alpine image (#14604)" (#14620) 2025-01-13 10:02:26 -08:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh feature/capture: move packet capture to feature/*, out of iOS + CLI 2025-01-24 17:52:43 -08:00
build_docker.sh Makefile,./build_docker.sh: update kube operator image build target name (#14251) 2024-11-29 15:32:18 +00:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
CODEOWNERS CODEOWNERS: add the start of an owners file 2023-08-16 15:57:29 -07:00
Dockerfile go.toolchain.branch: update to Go 1.24 (#15016) 2025-02-19 10:55:49 -08:00
Dockerfile.base Revert "Dockerfile: bump base alpine image (#14604)" (#14620) 2025-01-13 10:02:26 -08:00
flake.lock nix: update nix and use go 1.23 2024-08-29 17:25:13 +02:00
flake.nix gokrazy, various: use point versions of Go and update Nix deps 2024-09-16 16:06:43 -04:00
go.mod go.mod update golang.org/x/net to 0.36.0 for govulncheck (#15296) 2025-03-13 10:37:42 -07:00
go.mod.sri go.mod.sri: update SRI hash for go.mod changes 2024-09-05 10:06:02 -07:00
go.sum go.mod update golang.org/x/net to 0.36.0 for govulncheck (#15296) 2025-03-13 10:37:42 -07:00
go.toolchain.branch go.toolchain.branch: update to Go 1.24 (#15016) 2025-02-19 10:55:49 -08:00
go.toolchain.rev go.toolchain.rev: bump to go1.24.1 (#15209) 2025-03-04 16:17:57 -08:00
gomod_test.go go.mod: add test that replace directives aren't added in oss 2023-09-29 12:31:52 -07:00
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 2023-12-14 13:51:59 +00:00
LICENSE all: update tools that manage copyright headers 2023-01-27 15:36:29 -08:00
Makefile go.mod: bump depaware, add --internal flag to stop hiding internal packages 2025-01-26 21:12:34 +00:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go all: add test for package comments, fix, add comments as needed 2024-07-10 09:57:00 -07:00
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 2023-02-09 15:04:01 -08:00
README.md Update README to reference correct Commit Style URL 2025-01-04 15:11:10 -08:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix go.mod.sri: update SRI hash for go.mod changes 2024-09-05 10:06:02 -07:00
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
update-flake.sh Code Improvements (#11311) 2024-03-08 15:24:36 -08:00
version_tailscale_test.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
version_test.go go.mod,wgengine/netstack: bump gvisor 2024-01-19 18:23:53 -08:00
version-embed.go Fix various linting, vet & static check issues 2025-01-04 15:11:10 -08:00
VERSION.txt VERSION.txt: this is v1.81.0 (#14838) 2025-01-30 13:04:29 -08:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.23. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.