基于WireGuard的VPN。免费支持最多20个节点。 https://tailscale.com/

Nick O'Neill 8bdfb95a75 VERSION.txt: this is v1.94.0 1 month ago
.bencher babd163aac bencher: add config to suppress failures on benchmark regressions. 4 years ago
.github 5aeee1d8a5 .github/workflows: double the timeout for golangci-lint (#18404) 1 month ago
appc 076d5c7214 appc,feature: add the start of new conn25 app connector 2 months ago
atomicfile c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
chirp c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
client 0fd1670a59 client/local: add method to set gauge metric to a value 2 months ago
clientupdate 6c67deff38 cmd/distsign: add CLI for verifying package signatures (#18239) 1 month ago
cmd e9d82767e5 cmd/containerboot: allow for automatic ID token generation 1 month ago
control 77dcdc223e cleanup: fix typos across multiple files 3 months ago
derp 5ee0c6bf1d derp/derpserver: add a unique sender cardinality estimate 3 months ago
disco 09bfee2e06 disco: add missing message types to MessageSummary (#17081) 5 months ago
docs 87e108e10c docs: add instructions on referencing pull requests in commit messages 1 month ago
doctor 5be6ff9b62 all: remove non-applicable "linux" deps on Android 10 months ago
drive c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
envknob 99b06eac49 syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging 3 months ago
feature 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
gokrazy e4847fa77b go.toolchain.rev: update to Go 1.25.5 (#18123) 2 months ago
health 1723cb83ed ipn/ipnlocal: use an in-memory TKA store if FS is unavailable 3 months ago
hostinfo d6fd865d41 hostinfo, ipnlocal: add optional os-specific callback for querying the hostname (#15647) 10 months ago
internal 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
ipn c3b7f24051 ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18173) 1 month ago
jsondb 71029cea2d all: update copyright and license headers 3 years ago
k8s-operator 42a5262016 cmd/k8s-operator: add multi replica support for recorders (#17864) 3 months ago
kube c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
licenses 6aac87a84c net/portmapper, go.mod: unfork our goupnp dependency 1 month ago
log c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
logpolicy c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
logtail 3e89068792 net/netmon, wgengine/userspace: purge ChangeDelta.Major and address TODOs (#17823) 2 months ago
maths 820bdb870a maths: add exponentially weighted moving average type 1 year ago
metrics 58042e2de3 metrics: add a NewSet and Set.NewLabelMap helpers 1 month ago
net 58042e2de3 metrics: add a NewSet and Set.NewLabelMap helpers 1 month ago
omit 1ea100e2e5 cmd/tailscaled, ipn/conffile: support ec2 user-data config file 1 year ago
packages c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
paths fbc6a9ec5a all: detect JetKVM and specialize a handful of things for it 7 months ago
portlist 6ace3995f0 portlist: skip tests on Linux 6.14.x with /proc/net/tcp bug (#18185) 2 months ago
posture d05e6dc09e util/syspolicy/policyclient: add policyclient.Client interface, start plumbing 6 months ago
prober c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
proxymap 99b06eac49 syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging 3 months ago
release c2f37c891c all: use Go 1.20's errors.Join instead of our multierr package 5 months ago
safesocket 2917ea8d0e ipn/ipnauth, safesocket: defer named pipe client's token retrieval until ipnserver needs it 2 months ago
safeweb 3177e50b14 safeweb: Set Cross-Origin-Opener-Policy for browser requests (#15936) 9 months ago
scripts b7081522e7 scripts/installer.sh: add ultramarine to supported OS list 1 month ago
sessionrecording 8996254647 sessionrecording: fix regression in recent http2 package change 4 months ago
ssh 39a61888b8 ssh/tailssh: send audit messages on SSH login (Linux) 1 month ago
syncs 74ed589042 syncs: add means of declare locking assumptions for debug mode validation 3 months ago
tailcfg ac0b15356d tailcfg, control/controlclient: start moving MapResponse.DefaultAutoUpdate to a nodeattr 3 months ago
tempfork 2e381557b8 feature/c2n: move answerC2N code + deps out of control/controlclient 5 months ago
tka 7d3097d3b5 tka: add some more tests for Bootstrap() 2 months ago
tool 22a815b6d2 tool: bump binaryen wasm optimiser version 111 -> 125 3 months ago
tsconsensus f4a4bab105 tsconsensus: skip integration tests in CI 3 months ago
tsconst 7418583e47 health: compare warnable codes to avoid errors on release branch (#17637) 4 months ago
tsd f4d34f38be cmd/tailscale,ipn: add Unix socket support for serve 3 months ago
tsnet 02af7c963c tsnet: allow for automatic ID token generation 1 month ago
tstest 6aac87a84c net/portmapper, go.mod: unfork our goupnp dependency 1 month ago
tstime aff8f1b358 tstime: add GoDuration which JSON serializes with time.Duration.String (#15726) 10 months ago
tsweb 3ef9787379 tsweb: add Unwrap to loggingResponseWriter for ResponseController (#18195) 2 months ago
types c3b7f24051 ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18173) 1 month ago
util 3e45e5b420 feature/featuretags: make QR codes modular (#18358) 1 month ago
version 7c49cab1a6 clientupdate, util/osshare, util/winutil, version: improve Windows GUI filename resolution and WinUI build awareness 4 months ago
wf c2e474e729 all: rename variables with lowercase-l/uppercase-I 3 months ago
wgengine c3b7f24051 ipn,ipn/local: always accept routes for Tailscale Services (cgnat range) (#18173) 1 month ago
wif 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
words f174ecb6fd words: 33 tails and 26 scales (#18213) 2 months ago
.gitattributes 1813c2a162 .: add .gitattributes entry to use Go hunk-header driver 4 years ago
.gitignore b75fe9eeca cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364) 8 months ago
.golangci.yml d8e3bce0b4 .github: Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#15476) 10 months ago
ALPINE.txt bb38bf7414 docker: bump alpine v3.19 -> 3.22 (#17155) 5 months ago
AUTHORS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
CODEOWNERS 0913ec023b CODEOWNERS: add the start of an owners file 2 years ago
CODE_OF_CONDUCT.md 0a5ba8280f CODE_OF_CONDUCT.md: update code of conduct 4 months ago
Dockerfile cb5fa35f57 .github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180) 2 months ago
Dockerfile.base cb5fa35f57 .github/workfkows,Dockerfile,Dockerfile.base: add a test for base image (#18180) 2 months ago
LICENSE 947c14793a all: update tools that manage copyright headers 3 years ago
Makefile 801aac59db Makefile, cmd/*/depaware.txt: split out vendor packages explicitly 5 months ago
PATENTS a8d8b8719a Move Linux client & common packages into a public repo. 6 years ago
README.md 1aaa1648c4 README: update the version of Go in the README 5 months ago
SECURITY.md e59605595e Add a SECURITY.md for vulnerability reports. 6 years ago
VERSION.txt 82077075c7 VERSION.txt: this is v1.94.0 1 month ago
api.md 124ff3b034 {api.md,publicapi}: remove old API docs (#13468) 1 year ago
assert_ts_toolchain_match.go 1005cbc1e4 tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 1 year ago
build_dist.sh 10cb59fa87 build_dist.sh: keep --extra-small making a usable build, add --min 4 months ago
build_docker.sh 16e0abe031 build_docker.sh: support including extra files (#17405) 5 months ago
flake.lock e4031daa08 .github/Makefile/flake: update nix flake support (#16636) 6 months ago
flake.nix 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
go.mod 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
go.mod.sri 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
go.sum 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
go.toolchain.branch c5429cd49c go.toolchain.branch: bump to go1.25 (#16954) 6 months ago
go.toolchain.rev 7bc25f77f4 go.toolchain.rev: update to Go 1.25.5 (#18123) 3 months ago
go.toolchain.rev.sri 7bc25f77f4 go.toolchain.rev: update to Go 1.25.5 (#18123) 3 months ago
go.toolchain.version 7bc25f77f4 go.toolchain.rev: update to Go 1.25.5 (#18123) 3 months ago
gomod_test.go aae1a28a2b go.mod: add test that replace directives aren't added in oss 2 years ago
header.txt 1a08ea5990 cmd/k8s-operator: operator can create subnetrouter (#9505) 2 years ago
license_test.go 39e35379d4 wgengine/router{,/osrouter}: split OS router implementations into subpackage 5 months ago
pkgdoc_test.go 6bbf98bef4 all: skip looking for package comments in .git/ repository (#15384) 11 months ago
pull-toolchain.sh 7edb5b7d43 flake.nix: update Nix to use tailscale/go 1.25.2 (#17500) 4 months ago
shell.nix 6a6aa805d6 cmd,feature: add identity token auto generation for workload identity (#18373) 1 month ago
staticcheck.conf 2716250ee8 all: cleanup unused code, part 2 (#10670) 2 years ago
update-flake.sh 7edb5b7d43 flake.nix: update Nix to use tailscale/go 1.25.2 (#17500) 4 months ago
version-embed.go 36ea792f06 Fix various linting, vet & static check issues 1 year ago
version_tailscale_test.go 1005cbc1e4 tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 1 year ago
version_test.go d7770d2b81 .github/workflows: test that ./go/tool version matches go mod version 8 months ago

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.25. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.