基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

Brad Fitzpatrick fd3efd9bad control/controlclient: add more Screen Time blocking detection 1 year ago
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. 4 years ago
.github 730f0368d0 ssh/tailssh: replace incubator process with su instead of running su as child 1 year ago
appc ba46495e11 appc: log how many routes are being written 1 year ago
atomicfile 280255acae various: add golangci-lint, fix issues (#7905) 2 years ago
chirp 71029cea2d all: update copyright and license headers 3 years ago
client 45d2f4301f proxymap, various: distinguish between different protocols 1 year ago
clientupdate be54dde0eb clientupdate: allow switching from unstable to stable tracks (#12477) 1 year ago
cmd 24976b5bfd cmd/tailscale/cli: actually perform Noise request in 'debug ts2021' 1 year ago
control fd3efd9bad control/controlclient: add more Screen Time blocking detection 1 year ago
derp 25eeafde23 derp: don't verify mesh peers when --verify-clients is set 1 year ago
disco 706e30d49e disco: correct noun for nacl box type in disco docs 2 years ago
docs 1ec0273473 docs/k8s: fix subnet router manifests (#12305) 1 year ago
doctor b9adbe2002 net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 1 year ago
drive 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
envknob da7c3d1753 envknob: ensure f is not nil before using it 2 years ago
gokrazy 6d3c10579e gokrazy: update breakglass with now-upstreamed ec2 change 1 year ago
health d7619d273b health: fix nil DERPMap dereference panic 1 year ago
hostinfo 2cb408f9b1 hostinfo: update Windows hostinfo to include MSIDist registry value 1 year ago
internal 24976b5bfd cmd/tailscale/cli: actually perform Noise request in 'debug ts2021' 1 year ago
ipn d6a8fb20e7 health: include DERP region name in bad derp notifications (#12530) 1 year ago
jsondb 71029cea2d all: update copyright and license headers 3 years ago
k8s-operator 3099323976 cmd/k8s-operator,k8s-operator,go.{mod,sum}: publish proxy status condition for annotated services (#12463) 1 year ago
kube f5936d132a kube: fix typo (#12437) 1 year ago
licenses 1fad06429e licenses: update license notices 1 year ago
log 3672f29a4e net/netns, net/dns/resolver, etc: make netmon required in most places 1 year ago
logpolicy 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
logtail 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
metrics 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
net 162d593514 net/flowtrack: fix, test String method 1 year ago
omit 1ea100e2e5 cmd/tailscaled, ipn/conffile: support ec2 user-data config file 1 year ago
packages eb6883bb5a go.mod: upgrade nfpm to v2 (#8786) 2 years ago
paths 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
portlist 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
posture e8ca30a5c7 xcode/iOS: support serial number collection via MDM on iOS (#11429) 1 year ago
prober 8a11a43c28 cmd/derpprobe: support 'local' derpmap to get derp map via LocalAPI 1 year ago
proxymap 45d2f4301f proxymap, various: distinguish between different protocols 1 year ago
publicapi 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
release 18765cd4f9 release/dist/qnap: omit .qpkg.codesigning files 1 year ago
safesocket 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
safeweb 7349b274bd safeweb: handle mux pattern collisions more generally (#11801) 1 year ago
scripts 65888d95c9 derp/xdp,cmd/xdpderper: initial skeleton (#12390) 1 year ago
smallzstd 7c1d6e35a5 all: use Go 1.22 range-over-int 1 year ago
ssh 730f0368d0 ssh/tailssh: replace incubator process with su instead of running su as child 1 year ago
syncs 5db80cf2d8 syncs: fix AtomicValue for interface kinds (#11943) 1 year ago
tailcfg 21460a5b14 tailcfg, wgengine/filter: remove most FilterRule.SrcBits code 1 year ago
taildrop 2e404b769d all: use new AppendEncode methods available in Go 1.22 (#11079) 2 years ago
tempfork 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
tka 01847e0123 ipn/ipnlocal: discard node keys that have been rotated out 1 year ago
tool 538c2e8f7c tool/gocross: add debug data to CGO builds 1 year ago
tsconst 71029cea2d all: update copyright and license headers 3 years ago
tsd 745931415c health, all: remove health.Global, finish plumbing health.Tracker 1 year ago
tsnet 9cdb33e2a4 tsnet: add a new error when HTTPS enabled but MagicDNC Disabled (#12364) 1 year ago
tstest 4b6a0c42c8 safesocket: add ConnectContext 1 year ago
tstime 4a8cb1d9f3 all: use math/rand/v2 more 1 year ago
tsweb 65888d95c9 derp/xdp,cmd/xdpderper: initial skeleton (#12390) 1 year ago
types 2db2d04a37 types/logid: add Add method (#12478) 1 year ago
util 1023b2a82c util/deephash: fix test regression on 32-bit 1 year ago
version 8feb4ff5d2 version: add GitCommitTime to Meta 1 year ago
wf 61a1644c2a go.mod, all: move away from inet.af domain seized by Taliban 2 years ago
wgengine bd50a3457d wgengine/filter: add "Accept" TCP log lines to verbose logging (#12525) 1 year ago
words 7b3e30f391 words: add some fruit with scales (#8460) 1 year ago
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore 843afe7c53 ssh/tailssh: add integration test 1 year ago
.golangci.yml 3f576fc4ca ci: run 'go vet' in golangci-lint; fix errors in tests 2 years ago
ALPINE.txt 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file 2 years ago
CODE_OF_CONDUCT.md 452b81d56b Add a code of conduct. 6 years ago
Dockerfile 5ea071186e Dockerfile: use Go 1.22 2 years ago
Dockerfile.base 1b1b6bb634 ALPINE.txt,Dockerfile{.base},build_docker.sh: bump alpine (#10543) 2 years ago
LICENSE 947c14793a all: update tools that manage copyright headers 3 years ago
Makefile 730f0368d0 ssh/tailssh: replace incubator process with su instead of running su as child 1 year ago
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
README.md b6153efb7d go.mod, README.md: use Go 1.22 2 years ago
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt 5f121396e9 VERSION.txt: this is v1.69.0 (#12441) 1 year ago
api.md 4f4f317174 api.md: direct TOC links to new publicapi docs location 1 year ago
build_dist.sh 82394debb7 cmd/tailscale: add shell tab-completion 1 year ago
build_docker.sh 44aa809cb0 cmd/{k8s-nameserver,k8s-operator},k8s-operator: add a kube nameserver, make operator deploy it (#11919) 1 year ago
flake.lock 58b8f78e7e flake.nix: build tailscale with go 1.22 2 years ago
flake.nix bfb775ce62 go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.mod 3099323976 cmd/k8s-operator,k8s-operator,go.{mod,sum}: publish proxy status condition for annotated services (#12463) 1 year ago
go.mod.sri bfb775ce62 go.mod.sri: update SRI hash for go.mod changes 1 year ago
go.sum 3099323976 cmd/k8s-operator,k8s-operator,go.{mod,sum}: publish proxy status condition for annotated services (#12463) 1 year ago
go.toolchain.branch db3776d5bf go.toolchain.rev: bump to Go 1.22.0 (#11055) 2 years ago
go.toolchain.rev b8cf852881 go.toolchain.rev: update to go 1.22.4 (#12365) 1 year ago
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss 2 years ago
header.txt 1a08ea5990 cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
pull-toolchain.sh 0e4f2bdd0c pull-toolchain.sh: don't run update-flake.sh 3 years ago
shell.nix bfb775ce62 go.mod.sri: update SRI hash for go.mod changes 1 year ago
staticcheck.conf 2716250ee8 all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh 50a570a83f Code Improvements (#11311) 2 years ago
version-embed.go da75e49223 version: return correct Meta.MajorMinorPatch in non-dev builds 3 years ago
version_test.go 7e3bcd297e go.mod,wgengine/netstack: bump gvisor 2 years ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.22. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.