基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

Irbe Krumina a95ea31a4e kube,tailcfg: store parsed recorder tags in a separate field (#12429) 1 year ago
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. 4 years ago
.github 13e1355546 scripts/installer.sh: remove unnecessary escaping in grep (#11950) 1 year ago
appc ba46495e11 appc: log how many routes are being written 1 year ago
atomicfile 280255acae various: add golangci-lint, fix issues (#7905) 2 years ago
chirp 71029cea2d all: update copyright and license headers 3 years ago
client bc53ebd4a0 ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot: optionally enable UDP GRO forwarding for containers (#12410) 1 year ago
clientupdate 7a7e314096 ipn/ipnlocal,clientupdate: allow auto-updates in contaienrs (#12391) 1 year ago
cmd 3511d1f8a2 cmd/tailscaled, net/dns, wgengine/router: start Windows child processes with DETACHED_PROCESS when I/O is being piped 1 year ago
control b65221999c tailcfg,net/dns: add controlknob to disable battery split DNS on iOS (#12346) 1 year ago
derp 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
disco 706e30d49e disco: correct noun for nacl box type in disco docs 2 years ago
docs 1ec0273473 docs/k8s: fix subnet router manifests (#12305) 1 year ago
doctor b9adbe2002 net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 1 year ago
drive 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
envknob da7c3d1753 envknob: ensure f is not nil before using it 2 years ago
gokrazy 6d3c10579e gokrazy: update breakglass with now-upstreamed ec2 change 1 year ago
health 96712e10a7 health, ipn/ipnlocal: move more health warning code into health.Tracker 1 year ago
hostinfo 7132b782d4 hostinfo: use Distro field for distinguishing Windows Server builds 1 year ago
internal 280255acae various: add golangci-lint, fix issues (#7905) 2 years ago
ipn bc53ebd4a0 ipn/{ipnlocal,localapi},net/netkernelconf,client/tailscale,cmd/containerboot: optionally enable UDP GRO forwarding for containers (#12410) 1 year ago
jsondb 71029cea2d all: update copyright and license headers 3 years ago
k8s-operator 807934f00c cmd/k8s-operator,k8s-operator: allow proxies accept advertized routes. (#12388) 1 year ago
kube a95ea31a4e kube,tailcfg: store parsed recorder tags in a separate field (#12429) 1 year ago
licenses 1fad06429e licenses: update license notices 1 year ago
log 3672f29a4e net/netns, net/dns/resolver, etc: make netmon required in most places 1 year ago
logpolicy 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
logtail 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
metrics 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
net 3511d1f8a2 cmd/tailscaled, net/dns, wgengine/router: start Windows child processes with DETACHED_PROCESS when I/O is being piped 1 year ago
omit 1ea100e2e5 cmd/tailscaled, ipn/conffile: support ec2 user-data config file 1 year ago
packages eb6883bb5a go.mod: upgrade nfpm to v2 (#8786) 2 years ago
paths 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
portlist 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
posture a1abd12f35 cmd/tailscaled, net/tstun: build for aix/ppc64 1 year ago
prober 8a11a43c28 cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI 1 year ago
proxymap 3d37328af6 wgengine, proxymap: split out port mapping from Engine to new type 2 years ago
publicapi 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
release 18765cd4f9 release/dist/qnap: omit .qpkg.codesigning files 1 year ago
safesocket 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
safeweb 7349b274bd safeweb: handle mux pattern collisions more generally (#11801) 1 year ago
scripts 13e1355546 scripts/installer.sh: remove unnecessary escaping in grep (#11950) 1 year ago
smallzstd 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
ssh 08a9551a73 ssh/tailssh: fall back to using su when no TTY available on Linux 1 year ago
syncs 5db80cf2d8 syncs: fix AtomicValue for interface kinds (#11943) 1 year ago
tailcfg a95ea31a4e kube,tailcfg: store parsed recorder tags in a separate field (#12429) 1 year ago
taildrop 2e404b769d all: use new AppendEncode methods available in Go 1.22 (#11079) 2 years ago
tempfork 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
tka 01847e0123 ipn/ipnlocal: discard node keys that have been rotated out 1 year ago
tool 538c2e8f7c tool/gocross: add debug data to CGO builds 1 year ago
tsconst 71029cea2d all: update copyright and license headers 3 years ago
tsd 745931415c health, all: remove health.Global, finish plumbing health.Tracker 1 year ago
tsnet 9cdb33e2a4 tsnet: add a new error when HTTPS enabled but MagicDNC Disabled (#12364) 1 year ago
tstest 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
tstime 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
tsweb 95f266f1ce tsweb: add optional on completion callback func 1 year ago
types 964282d34f ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 1 year ago
util 93cd2ab224 util/singleflight: add DoChanContext 1 year ago
version 8feb4ff5d2 version: add GitCommitTime to Meta 1 year ago
wf 61a1644c2a go.mod, all: move away from inet.af domain seized by Taliban 2 years ago
wgengine 3511d1f8a2 cmd/tailscaled, net/dns, wgengine/router: start Windows child processes with DETACHED_PROCESS when I/O is being piped 1 year ago
words 7b3e30f391 words: add some fruit with scales (#8460) 1 year ago
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore 843afe7c53 ssh/tailssh: add integration test 1 year ago
.golangci.yml 3f576fc4ca ci: run 'go vet' in golangci-lint; fix errors in tests 2 years ago
ALPINE.txt 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file 2 years ago
CODE_OF_CONDUCT.md 452b81d56b Add a code of conduct. 6 years ago
Dockerfile 5ea071186e Dockerfile: use Go 1.22 2 years ago
Dockerfile.base 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
LICENSE 947c14793a all: update tools that manage copyright headers 3 years ago
Makefile 08a9551a73 ssh/tailssh: fall back to using su when no TTY available on Linux 1 year ago
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
README.md b6153efb7d go.mod, README.md: use Go 1.22 2 years ago
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt 7901925ad3 VERSION.txt: this is v1.67.0 (#12063) 1 year ago
api.md 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
build_dist.sh 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
build_docker.sh 44aa809cb0 cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919) 1 year ago
flake.lock 58b8f78e7e flake.nix: build tailscale with go 1.22 2 years ago
flake.nix 65f215115f go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.mod 3a6d3f1a5b cmd/k8s-operator,k8s-operator,go.{mod,sum}: make individual proxy images/image pull policies configurable (#11928) 1 year ago
go.mod.sri 65f215115f go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.sum 3a6d3f1a5b cmd/k8s-operator,k8s-operator,go.{mod,sum}: make individual proxy images/image pull policies configurable (#11928) 1 year ago
go.toolchain.branch db3776d5bf go.toolchain.rev: bump to Go 1.22.0 (#11055) 2 years ago
go.toolchain.rev b8cf852881 go.toolchain.rev: update to go 1.22.4 (#12365) 1 year ago
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss 2 years ago
header.txt 1a08ea5990 cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
pull-toolchain.sh 0e4f2bdd0c pull-toolchain.sh: don't run update-flake.sh 3 years ago
shell.nix 65f215115f go.mod.sri: update SRI hash for go.mod changes 1 year ago
staticcheck.conf 2716250ee8 all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh 50a570a83f Code Improvements (#11311) 2 years ago
version-embed.go da75e49223 version: return correct Meta.MajorMinorPatch in non-dev builds 3 years ago
version_test.go 7e3bcd297e go.mod,wgengine/netstack: bump gvisor 2 years ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.