基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

James Tucker b565a9faa7 cmd/xdpderper: add autodetection for default interface name 1 year ago
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. 4 years ago
.github 0323dd01b2 ci: enable checklocks workflow for specific packages 1 year ago
appc 7eb8a77ac8 appc: don't schedule advertisement of 0 routes 1 year ago
atomicfile 280255acae various: add golangci-lint, fix issues (#7905) 2 years ago
chirp 71029cea2d all: update copyright and license headers 3 years ago
client 45d2f4301f proxymap, various: distinguish between different protocols 1 year ago
clientupdate be54dde0eb clientupdate: allow switching from unstable to stable tracks (#12477) 1 year ago
cmd b565a9faa7 cmd/xdpderper: add autodetection for default interface name 1 year ago
control 4651827f20 tka: test SigCredential signatures and netmap filtering 1 year ago
derp 210264f942 cmd/derper: clarify that derper and tailscaled need to be in sync 1 year ago
disco 706e30d49e disco: correct noun for nacl box type in disco docs 2 years ago
docs 1ec0273473 docs/k8s: fix subnet router manifests (#12305) 1 year ago
doctor b9adbe2002 net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 1 year ago
drive 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
envknob 0323dd01b2 ci: enable checklocks workflow for specific packages 1 year ago
gokrazy 6d3c10579e gokrazy: update breakglass with now-upstreamed ec2 change 1 year ago
health 2064dc20d4 health,ipn/ipnlocal: hide update warning when auto-updates are enabled (#12631) 1 year ago
hostinfo 2cb408f9b1 hostinfo: update Windows hostinfo to include MSIDist registry value 1 year ago
internal 24976b5bfd cmd/tailscale/cli: actually perform Noise request in 'debug ts2021' 1 year ago
ipn 781f79408d ipn/ipnlocal: allow multiple signature chains from the same SigCredential 1 year ago
jsondb 71029cea2d all: update copyright and license headers 3 years ago
k8s-operator 3099323976 cmd/k8s-operator,k8s-operator,go.{mod,sum}: publish proxy status condition for annotated services (#12463) 1 year ago
kube f5936d132a kube: fix typo (#12437) 1 year ago
licenses 591979b95f licenses: update license notices (#12414) 1 year ago
log 3672f29a4e net/netns, net/dns/resolver, etc: make netmon required in most places 1 year ago
logpolicy 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
logtail 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
metrics 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
net b565a9faa7 cmd/xdpderper: add autodetection for default interface name 1 year ago
omit 1ea100e2e5 cmd/tailscaled, ipn/conffile: support ec2 user-data config file 1 year ago
packages eb6883bb5a go.mod: upgrade nfpm to v2 (#8786) 2 years ago
paths 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
portlist 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
posture e8ca30a5c7 xcode/iOS: support serial number collection via MDM on iOS (#11429) 1 year ago
prober 8a11a43c28 cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI 1 year ago
proxymap 0323dd01b2 ci: enable checklocks workflow for specific packages 1 year ago
publicapi 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
release 18765cd4f9 release/dist/qnap: omit .qpkg.codesigning files 1 year ago
safesocket 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
safeweb 7349b274bd safeweb: handle mux pattern collisions more generally (#11801) 1 year ago
scripts 65888d95c9 derp/xdp,cmd/xdpderper: initial skeleton (#12390) 1 year ago
smallzstd 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
ssh 07063bc5c7 ssh/tailssh: fix integration test (#12562) 1 year ago
syncs 5db80cf2d8 syncs: fix AtomicValue for interface kinds (#11943) 1 year ago
tailcfg 5ec01bf3ce wgengine/filter: support FilterRules matching on srcIP node caps [capver 100] 1 year ago
taildrop 2e404b769d all: use new AppendEncode methods available in Go 1.22 (#11079) 2 years ago
tempfork 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
tka 781f79408d ipn/ipnlocal: allow multiple signature chains from the same SigCredential 1 year ago
tool 538c2e8f7c tool/gocross: add debug data to CGO builds 1 year ago
tsconst 71029cea2d all: update copyright and license headers 3 years ago
tsd 745931415c health, all: remove health.Global, finish plumbing health.Tracker 1 year ago
tsnet 23c5870bd3 tsnet: do not log an error on shutdown 1 year ago
tstest 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
tstime 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
tsweb 787ead835f tsweb: accept a function to call before request handling 1 year ago
types 200d92121f types/lazy: add Peek method to SyncValue 1 year ago
util b292f7f9ac util/winutil/s4u: fix incorrect token type specified in s4u Login 1 year ago
version 8feb4ff5d2 version: add GitCommitTime to Meta 1 year ago
wf 61a1644c2a go.mod, all: move away from inet.af domain seized by Taliban 2 years ago
wgengine 8487fd2ec2 wgengine/magicsock: add more DERP home clientmetrics 1 year ago
words 7b3e30f391 words: add some fruit with scales (#8460) 1 year ago
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore 843afe7c53 ssh/tailssh: add integration test 1 year ago
.golangci.yml 3f576fc4ca ci: run 'go vet' in golangci-lint; fix errors in tests 2 years ago
ALPINE.txt 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file 2 years ago
CODE_OF_CONDUCT.md 452b81d56b Add a code of conduct. 6 years ago
Dockerfile 5ea071186e Dockerfile: use Go 1.22 2 years ago
Dockerfile.base 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
LICENSE 947c14793a all: update tools that manage copyright headers 3 years ago
Makefile 730f0368d0 ssh/tailssh: replace incubator process with su instead of running su as child 1 year ago
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
README.md b6153efb7d go.mod, README.md: use Go 1.22 2 years ago
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt 5f121396e9 VERSION.txt: this is v1.69.0 (#12441) 1 year ago
api.md 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
build_dist.sh 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
build_docker.sh 44aa809cb0 cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919) 1 year ago
flake.lock 58b8f78e7e flake.nix: build tailscale with go 1.22 2 years ago
flake.nix b3f91845dc go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.mod 0bb82561ba go.mod: update wireguard-go (#12645) 1 year ago
go.mod.sri b3f91845dc go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.sum 0bb82561ba go.mod: update wireguard-go (#12645) 1 year ago
go.toolchain.branch db3776d5bf go.toolchain.rev: bump to Go 1.22.0 (#11055) 2 years ago
go.toolchain.rev b8cf852881 go.toolchain.rev: update to go 1.22.4 (#12365) 1 year ago
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss 2 years ago
header.txt 1a08ea5990 cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
pull-toolchain.sh 0e4f2bdd0c pull-toolchain.sh: don't run update-flake.sh 3 years ago
shell.nix b3f91845dc go.mod.sri: update SRI hash for go.mod changes 1 year ago
staticcheck.conf 2716250ee8 all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh 50a570a83f Code Improvements (#11311) 2 years ago
version-embed.go da75e49223 version: return correct Meta.MajorMinorPatch in non-dev builds 3 years ago
version_test.go 7e3bcd297e go.mod,wgengine/netstack: bump gvisor 2 years ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.