You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Adrian Dewhurst af32d1c120 ipn/ipnlocal: better enforce system policies Previously, policies affected the default prefs for a new profile, but that does not affect existing profiles. This change ensures that policies are applied whenever preferences are loaded or changed, so a CLI or GUI client that does not respect the policies will still be overridden. Exit node IP is dropped from this PR as it was implemented elsewhere in #10172. Fixes tailscale/corp#15585 Change-Id: Ide4c3a4b00a64e43f506fa1fab70ef591407663f Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>		12 months ago
.bencher	…
.github	.github/workflows: add webclient workflow	12 months ago
appc	…
atomicfile	…
chirp	…
client	client/web: add licenses and policies links	12 months ago
clientupdate	client/web: show features based on platform support	1 year ago
cmd	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	12 months ago
control	linuxfw,wgengine/route,ipn: add c2n and nodeattrs to control linux netfilter	12 months ago
derp	…
disco	…
docs	…
doctor	…
envknob	client/web: show features based on platform support	1 year ago
health	…
hostinfo	…
internal/tooldeps	…
ipn	ipn/ipnlocal: better enforce system policies	12 months ago
jsondb	all: update copyright and license headers	2 years ago
kube	…
licenses	licenses: update win/apple licenses	12 months ago
log	…
logpolicy	…
logtail	…
metrics	…
net	net/portmap: add test of Mikrotik Root Desc XML.	12 months ago
packages/deb	…
paths	…
portlist	all: fix nilness issues	12 months ago
posture	all: fix nilness issues	12 months ago
prober	…
proxymap	…
release	…
safesocket	…
scripts	util/winutil: add support for restarting Windows processes in specific sessions	1 year ago
smallzstd	…
ssh/tailssh	…
syncs	…
tailcfg	tailcfg: bump CapabilityVersion for Linux netfilter NodeAttrs and c2n endpoint	12 months ago
taildrop	…
tempfork	…
tka	tka: clarify field comment	1 year ago
tool	…
tsconst	…
tsd	…
tsnet	tsnet: add CapturePcap method for debugging	1 year ago
tstest	…
tstime	…
tsweb	tsweb: propagate RequestID via context and entire request	1 year ago
types	…
util	ipn/ipnlocal: better enforce system policies	12 months ago
version	…
wf	…
wgengine	util/linuxfw, wgengine: allow ingress to magicsock UDP port on Linux (#10370 )	12 months ago
words	…
.gitattributes	…
.gitignore	…
.golangci.yml	…
ALPINE.txt	…
AUTHORS	…
CODEOWNERS	…
CODE_OF_CONDUCT.md	…
Dockerfile	…
Dockerfile.base	…
LICENSE	…
Makefile	…
PATENTS	…
README.md	…
SECURITY.md	…
VERSION.txt	…
api.md	…
build_dist.sh	…
build_docker.sh	…
flake.lock	…
flake.nix	go.mod.sri: update SRI hash for go.mod changes	1 year ago
go.mod	cmd/k8s-operator: generate static kube manifests from the Helm chart. (#10436 )	12 months ago
go.mod.sri	go.mod.sri: update SRI hash for go.mod changes	1 year ago
go.sum	go.mod: update certstore	1 year ago
go.toolchain.branch	…
go.toolchain.rev	go.toolchain.rev: bump to 1.21.5 (#10475 )	12 months ago
gomod_test.go	…
pull-toolchain.sh	…
shell.nix	go.mod.sri: update SRI hash for go.mod changes	1 year ago
staticcheck.conf	…
update-flake.sh	…
version-embed.go	…
version_test.go	…

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

the Android app is at https://github.com/tailscale/tailscale-android
the Synology package is at https://github.com/tailscale/tailscale-synology
the QNAP package is at https://github.com/tailscale/tailscale-qpkg
the Chocolatey packaging is at https://github.com/tailscale/tailscale-chocolatey

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.21. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.