基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

Adrian Dewhurst 5347e6a292 control/controlclient: support certstore without cgo vor 2 Jahren
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. vor 4 Jahren
.github afb72ecd73 .github/workflows: update golangci-lint vor 2 Jahren
appc 7e933a8816 appctype: move to types/appctype vor 2 Jahren
atomicfile 280255acae various: add golangci-lint, fix issues (#7905) vor 2 Jahren
chirp 71029cea2d all: update copyright and license headers vor 3 Jahren
client 68da15516f ipn/localapi,client/web: clean up auth error handling vor 2 Jahren
clientupdate 70f9c8a6ed clientupdate: change Mac App Store support (#9891) vor 2 Jahren
cmd 5347e6a292 control/controlclient: support certstore without cgo vor 2 Jahren
control 5347e6a292 control/controlclient: support certstore without cgo vor 2 Jahren
derp 8b492b4121 net/wsconn: accept a remote addr string and plumb it through vor 2 Jahren
disco 893bdd729c disco,net/tstun,wgengine/magicsock: probe peer MTU vor 2 Jahren
docs f53c3be07c cmd/k8s-operator: use our own container image instead of busybox vor 2 Jahren
doctor c98652c333 doctor/permissions: add new check to print process permissions vor 2 Jahren
envknob a61caea911 tailcfg: define a type for NodeCapability vor 2 Jahren
health dc7aa98b76 all: use set.Set consistently instead of map[T]struct{} vor 2 Jahren
hostinfo b4816e19b6 hostinfo, ipnlocal: flesh out Wake-on-LAN support, send MACs, add c2n sender vor 2 Jahren
internal 280255acae various: add golangci-lint, fix issues (#7905) vor 2 Jahren
ipn 68da15516f ipn/localapi,client/web: clean up auth error handling vor 2 Jahren
jsondb 71029cea2d all: update copyright and license headers vor 3 Jahren
kube c919ff540f cmd/k8s-operator,ipn/store/kubestore: patch secrets instead of updating vor 2 Jahren
licenses 756a4c43b6 licenses: update win/apple licenses vor 2 Jahren
log 239ad57446 tailcfg: move LogHeapPprof from Debug to c2n [capver 69] vor 2 Jahren
logpolicy e3d6236606 winutil: refactor methods to get values from registry to also return (#9536) vor 2 Jahren
logtail d61494db68 adjust build tags for tamago vor 2 Jahren
metrics 18b2638b07 metrics: add missing comma in histogram JSON export vor 2 Jahren
net 95faefd1f6 net/dnsfallback: disable recursive resolver for now vor 2 Jahren
packages eb6883bb5a go.mod: upgrade nfpm to v2 (#8786) vor 2 Jahren
paths 6fd1961cd7 safesocket, paths: add Plan 9 support vor 2 Jahren
portlist 52e4f24c58 portlist: populate Pid field on Linux vor 2 Jahren
posture d0b8bdf8f7 posture: add get serial support for macOS vor 2 Jahren
prober f314fa4a4a prober: fix data race when altering derpmap (#8397) vor 2 Jahren
proxymap 3d37328af6 wgengine, proxymap: split out port mapping from Engine to new type vor 2 Jahren
release e499a6bae8 release/dist/unixpkgs: revert iptables move to Recommends, make it Depends vor 2 Jahren
safesocket 6fd1961cd7 safesocket, paths: add Plan 9 support vor 2 Jahren
scripts 535db01b3f scripts/installer: add Kaisen, Garuda, Fedora-Asahi. vor 2 Jahren
smallzstd 71029cea2d all: update copyright and license headers vor 3 Jahren
ssh b775a3799e util/httpm, all: add a test to make sure httpm is used consistently vor 2 Jahren
syncs 674beabc73 syncs: add Map.LoadFunc (#9869) vor 2 Jahren
tailcfg b4247fabec tailcfg: add ID field to WebClientAuthResponse vor 2 Jahren
taildrop 6ada33db77 taildrop: fix theoretical race condition in fileDeleter.Init (#9876) vor 2 Jahren
tempfork e8551d6b40 all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} vor 2 Jahren
tka dc7aa98b76 all: use set.Set consistently instead of map[T]struct{} vor 2 Jahren
tool 56c0a75ea9 tool/gocross: handle VERSION file not found vor 2 Jahren
tsconst 71029cea2d all: update copyright and license headers vor 3 Jahren
tsd 18bd98d35b cmd/tailscaled,*: add start of configuration file support vor 2 Jahren
tsnet e89927de2b tsnet: fix data race in TestFallbackTCPHandler vor 2 Jahren
tstest 1fc3573446 ipn/{conffile,ipnlocal}: start booting tailscaled from a config file w/ auth key vor 2 Jahren
tstime 1a78f240b5 tstime: add DefaultClock (#9691) vor 2 Jahren
tsweb 5ee349e075 tsweb/varz: fix exporting histograms vor 2 Jahren
types 7e933a8816 appctype: move to types/appctype vor 2 Jahren
util c3a8e63100 util/linuxfw: add additional nftable detection logic vor 2 Jahren
version 70f9c8a6ed clientupdate: change Mac App Store support (#9891) vor 2 Jahren
wf 71029cea2d all: update copyright and license headers vor 3 Jahren
wgengine 891d964bd4 wgengine/magicsock: simplify tryEnableUDPOffload() (#9872) vor 2 Jahren
words d62af8e643 words: flappy birds, but real life vor 2 Jahren
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver vor 4 Jahren
.gitignore d74c771fda client/web: always use new web client; remove old client vor 2 Jahren
.golangci.yml f85dc6f97c ci: add more lints (#7909) vor 2 Jahren
ALPINE.txt 88133c361e Docker: add ALPINE.txt to manage alpine versions vor 3 Jahren
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. vor 6 Jahren
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file vor 2 Jahren
CODE_OF_CONDUCT.md 452b81d56b Add a code of conduct. vor 6 Jahren
Dockerfile 66f27c4beb all: require Go 1.21 vor 2 Jahren
Dockerfile.base 1302295299 Dockerfile.base: install iputils vor 2 Jahren
LICENSE 947c14793a all: update tools that manage copyright headers vor 3 Jahren
Makefile 35ad2aafe3 Makefile: make it possibe to pass a custom tag when building dev images (#9461) vor 2 Jahren
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. vor 6 Jahren
README.md 652f77d236 client/web: switch to using prebuilt web client assets vor 2 Jahren
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. vor 6 Jahren
VERSION.txt 098d110746 VERSION.txt: this is v1.51.0 vor 2 Jahren
api.md b7988b3825 api.md: remove clientConnectivity.derp field vor 2 Jahren
build_dist.sh 652f77d236 client/web: switch to using prebuilt web client assets vor 2 Jahren
build_docker.sh f9667e4946 Dockerfile: fix docker build vor 3 Jahren
flake.lock fe91160775 flake.nix: use Go 1.21 to build tailscale flake vor 2 Jahren
flake.nix 51078b6486 go.mod.sri: update SRI hash for go.mod changes vor 2 Jahren
go.mod 5347e6a292 control/controlclient: support certstore without cgo vor 2 Jahren
go.mod.sri 51078b6486 go.mod.sri: update SRI hash for go.mod changes vor 2 Jahren
go.sum 5347e6a292 control/controlclient: support certstore without cgo vor 2 Jahren
go.toolchain.branch fbacc0bd39 go.toolchain: switch to tailscale.go1.21 (#8415) vor 2 Jahren
go.toolchain.rev 3749a3bbbb go.toolchain.rev: bump for CVE-2023-39325 vor 2 Jahren
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss vor 2 Jahren
pull-toolchain.sh 0e4f2bdd0c pull-toolchain.sh: don't run update-flake.sh vor 3 Jahren
shell.nix 51078b6486 go.mod.sri: update SRI hash for go.mod changes vor 2 Jahren
staticcheck.conf ece138ffc3 staticcheck.conf: remove unnecessary warning vor 4 Jahren
update-flake.sh f145c2b65b .github/workflows: add workflow to update go.mod Nix SRI hash vor 3 Jahren
version-embed.go da75e49223 version: return correct Meta.MajorMinorPatch in non-dev builds vor 3 Jahren
version_test.go 71029cea2d all: update copyright and license headers vor 3 Jahren

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.21. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.