基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

License Updater 0e27ec2cd9 licenses: update android licenses 2 rokov pred
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. 4 rokov pred
.github 33147c4591 .github: build gocross using regular GOPROXY settings 2 rokov pred
appc 245ddb157b appc: fix DomainRoutes copy 2 rokov pred
atomicfile 280255acae various: add golangci-lint, fix issues (#7905) 2 rokov pred
chirp 71029cea2d all: update copyright and license headers 3 rokov pred
client f880c77df0 client/web: split login from nodeUpdate 2 rokov pred
clientupdate c3f1bd4c0a clientupdate: fix auto-update on Windows over RDP (#10242) 2 rokov pred
cmd 28684b0538 cmd/tailscale/cli: correct app connector help text in set 2 rokov pred
control fb829ea7f1 control/controlclient: support incremental packet filter updates [capver 81] 2 rokov pred
derp ef6a6e94f1 derp/derphttp: use a getter method to read server key 2 rokov pred
disco 893bdd729c disco,net/tstun,wgengine/magicsock: probe peer MTU 2 rokov pred
docs f53c3be07c cmd/k8s-operator: use our own container image instead of busybox 2 rokov pred
doctor c98652c333 doctor/permissions: add new check to print process permissions 2 rokov pred
envknob a61caea911 tailcfg: define a type for NodeCapability 2 rokov pred
health 4d196c12d9 health: don't report a warning in DERP homeless mode 2 rokov pred
hostinfo 01604c06d2 hostinfo: fix a couple of logic simplification lints 2 rokov pred
internal 280255acae various: add golangci-lint, fix issues (#7905) 2 rokov pred
ipn 719ee4415e ssh/tailssh: use control server time instead of local time 2 rokov pred
jsondb 71029cea2d all: update copyright and license headers 3 rokov pred
kube c919ff540f cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating 2 rokov pred
licenses 0e27ec2cd9 licenses: update android licenses 2 rokov pred
log 239ad57446 tailcfg: move LogHeapPprof from Debug to c2n [capver 69] 2 rokov pred
logpolicy e3d6236606 winutil: refactor methods to get values from registry to also return (#9536) 2 rokov pred
logtail d852c616c6 logtail: fix Logger.Write return result 2 rokov pred
metrics 18b2638b07 metrics: add missing comma in histogram JSON export 2 rokov pred
net e33bc64cff net/dnsfallback: add singleflight to recursive resolver 2 rokov pred
packages eb6883bb5a go.mod: upgrade nfpm to v2 (#8786) 2 rokov pred
paths 6fd1961cd7 safesocket, paths: add Plan 9 support 2 rokov pred
portlist 52e4f24c58 portlist: populate Pid field on Linux 2 rokov pred
posture 05d4210dbe adjust build tags for tamago 2 rokov pred
prober 96a80fcce3 Add support for custom DERP port in TLS prober 2 rokov pred
proxymap 3d37328af6 wgengine, proxymap: split out port mapping from Engine to new type 2 rokov pred
release e499a6bae8 release/dist/unixpkgs: revert iptables move to Recommends, make it Depends 2 rokov pred
safesocket b4be4f089f safesocket: make clear which net.Conns are winio types 2 rokov pred
scripts 535db01b3f scripts/installer: add Kaisen, Garuda, Fedora-Asahi. 2 rokov pred
smallzstd 71029cea2d all: update copyright and license headers 3 rokov pred
ssh 719ee4415e ssh/tailssh: use control server time instead of local time 2 rokov pred
syncs 674beabc73 syncs: add Map.LoadFunc (#9869) 2 rokov pred
tailcfg fb829ea7f1 control/controlclient: support incremental packet filter updates [capver 81] 2 rokov pred
taildrop 975c5f7684 taildrop: lazily perform full deletion scan after first taildrop use (#10137) 2 rokov pred
tempfork e8551d6b40 all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} 2 rokov pred
tka dc7aa98b76 all: use set.Set consistently instead of map[T]struct{} 2 rokov pred
tool 452f900589 tool: download helm CLI (#9981) 2 rokov pred
tsconst 71029cea2d all: update copyright and license headers 3 rokov pred
tsd 18bd98d35b cmd/tailscaled,*: add start of configuration file support 2 rokov pred
tsnet 5aa22ff3eb tsnet: add option to run integrated web client 2 rokov pred
tstest e9de59a315 tstest/deptest: fix minor escaping error in regex 2 rokov pred
tstime 1a78f240b5 tstime: add DefaultClock (#9691) 2 rokov pred
tsweb 5ee349e075 tsweb/varz: fix exporting histograms 2 rokov pred
types fb829ea7f1 control/controlclient: support incremental packet filter updates [capver 81] 2 rokov pred
util b8a2aedccd util/syspolicy: add caching handler (#10288) 2 rokov pred
version d3bc575f35 cmd/tailscale/cli: set Sparkle auto-update on macsys (#9952) 2 rokov pred
wf 71029cea2d all: update copyright and license headers 3 rokov pred
wgengine 4d196c12d9 health: don't report a warning in DERP homeless mode 2 rokov pred
words d62af8e643 words: flappy birds, but real life 2 rokov pred
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver 4 rokov pred
.gitignore d74c771fda client/web: always use new web client; remove old client 2 rokov pred
.golangci.yml f85dc6f97c ci: add more lints (#7909) 2 rokov pred
ALPINE.txt 88133c361e Docker: add ALPINE.txt to manage alpine versions 3 rokov pred
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. 6 rokov pred
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file 2 rokov pred
CODE_OF_CONDUCT.md 452b81d56b Add a code of conduct. 6 rokov pred
Dockerfile 66f27c4beb all: require Go 1.21 2 rokov pred
Dockerfile.base 1302295299 Dockerfile.base: install iputils 2 rokov pred
LICENSE 947c14793a all: update tools that manage copyright headers 3 rokov pred
Makefile 35ad2aafe3 Makefile: make it possibe to pass a custom tag when building dev images (#9461) 2 rokov pred
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. 6 rokov pred
README.md 652f77d236 client/web: switch to using prebuilt web client assets 2 rokov pred
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. 6 rokov pred
VERSION.txt a40e918d63 VERSION.txt: this is v1.55.0 2 rokov pred
api.md b7988b3825 api.md: remove clientConnectivity.derp field 2 rokov pred
build_dist.sh 652f77d236 client/web: switch to using prebuilt web client assets 2 rokov pred
build_docker.sh f9667e4946 Dockerfile: fix docker build 3 rokov pred
flake.lock fe91160775 flake.nix: use Go 1.21 to build tailscale flake 2 rokov pred
flake.nix a3c11b87c6 go.mod.sri: update SRI hash for go.mod changes 2 rokov pred
go.mod 146c4bacde go.mod: update web-client-prebuilt module 2 rokov pred
go.mod.sri a3c11b87c6 go.mod.sri: update SRI hash for go.mod changes 2 rokov pred
go.sum 146c4bacde go.mod: update web-client-prebuilt module 2 rokov pred
go.toolchain.branch fbacc0bd39 go.toolchain: switch to tailscale.go1.21 (#8415) 2 rokov pred
go.toolchain.rev 6cce5fe001 go.toolchain.rev: bump to Go 1.21.4 (#10189) 2 rokov pred
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss 2 rokov pred
pull-toolchain.sh 0e4f2bdd0c pull-toolchain.sh: don't run update-flake.sh 3 rokov pred
shell.nix a3c11b87c6 go.mod.sri: update SRI hash for go.mod changes 2 rokov pred
staticcheck.conf ece138ffc3 staticcheck.conf: remove unnecessary warning 4 rokov pred
update-flake.sh f145c2b65b .github/workflows: add workflow to update go.mod Nix SRI hash 3 rokov pred
version-embed.go da75e49223 version: return correct Meta.MajorMinorPatch in non-dev builds 3 rokov pred
version_test.go 71029cea2d all: update copyright and license headers 3 rokov pred

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.21. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.