You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

David Bond cf0460b9da cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521 ) This commit modifies the operator to detect the usage of k8s-apiserver type proxy groups that wish to use the letsencrypt staging directory and apply the appropriate environment variable to the statefulset it produces. Updates #13358 Signed-off-by: David Bond <davidsbond93@gmail.com>		7 months ago
.bencher	…
.github	.github: Bump github/codeql-action from 3.29.0 to 3.29.1 (#16423 )	7 months ago
appc	…
atomicfile	ipn/store: automatically migrate between plaintext and encrypted state (#16318 )	7 months ago
chirp	…
client	client/systray: replace counter metric with gauge	7 months ago
clientupdate	…
cmd	cmd/k8s-operator: allow letsencrypt staging on k8s proxies (#16521 )	7 months ago
control	tstest/tlstest: simplify, don't even bake in any keys	7 months ago
derp	derp/derphttp: fix DERP TLS client server name inclusion in URL form	7 months ago
disco	disco,net/udprelay,wgengine/magicsock: support relay re-binding (#16388 )	7 months ago
docs	ipn/store: automatically migrate between plaintext and encrypted state (#16318 )	7 months ago
doctor	…
drive	drive,ipn/ipnlocal: calculate peer taildrive URLs on-demand	7 months ago
envknob	envknob/featureknob: restore SSH and exit-node capability for Home Assistant (#16263 )	7 months ago
feature	tailcfg, feature/relayserver, wgengine/magicsock: invert UDP relay server nodeAttrs (#16444 )	7 months ago
gokrazy	…
health	…
hostinfo	…
internal	…
ipn	ipn/localapi: do not break client on event marshalling errors (#16503 )	7 months ago
jsondb	…
k8s-operator	cmd/k8s-operator: don't require generation for Available condition (#16497 )	7 months ago
kube	cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266 )	7 months ago
licenses	…
log	…
logpolicy	net/tlsdial: fix TLS cert validation of HTTPS proxies	7 months ago
logtail	…
maths	…
metrics	…
net	net/udprelay: fix relaying between mixed address family sockets (#16485 )	7 months ago
omit	…
packages/deb	…
paths	…
portlist	…
posture	…
prober	…
proxymap	…
release	release/dist/qnap: upgrade to Ubuntu 24.04 Docker image	7 months ago
safesocket	…
safeweb	…
scripts	…
sessionrecording	…
smallzstd	…
ssh/tailssh	…
syncs	…
tailcfg	tailcfg, wgengine/magicsock: disable all UDP relay usage if disable-relay-client is set (#16492 )	7 months ago
tempfork	…
tka	…
tool	tool/gocross: remove GOROOT to ensure correct toolchain use	7 months ago
tsconsensus	tsconsensus: skipping slow non-applicable tests on Windows for now	7 months ago
tsconst	…
tsd	…
tsnet	…
tstest	ipn/store: automatically migrate between plaintext and encrypted state (#16318 )	7 months ago
tstime	…
tsweb	…
types	Revert "types/netmap,wgengine/magicsock: propagate CapVer to magicsock.endpoint (#16244 )" (#16322 )	7 months ago
util	ipn/ipnlocal,util/syspolicy: add support for ExitNode.AllowOverride policy setting	7 months ago
version	…
wf	…
wgengine	wgengine/magicsock: don't peer relay if NodeAttrOnlyTCP443 is set (#16517 )	7 months ago
words	…
.gitattributes	…
.gitignore	cmd/k8s-operator: Add NOTES.txt to Helm chart (#16364 )	7 months ago
.golangci.yml	…
ALPINE.txt	…
AUTHORS	…
CODEOWNERS	…
CODE_OF_CONDUCT.md	…
Dockerfile	Dockerfile,build_docker.sh: add a note on how to build local images (#16471 )	7 months ago
Dockerfile.base	…
LICENSE	…
Makefile	cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266 )	7 months ago
PATENTS	…
README.md	…
SECURITY.md	…
VERSION.txt	…
api.md	…
assert_ts_toolchain_match.go	…
build_dist.sh	…
build_docker.sh	cmd/{k8s-operator,k8s-proxy}: add kube-apiserver ProxyGroup type (#16266 )	7 months ago
flake.lock	…
flake.nix	…
go.mod	go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486 )	7 months ago
go.mod.sri	…
go.sum	go.mod,wgengine/magicsock: implement conn.InitiationAwareEndpoint (#16486 )	7 months ago
go.toolchain.branch	…
go.toolchain.rev	…
gomod_test.go	…
header.txt	…
license_test.go	…
pkgdoc_test.go	…
pull-toolchain.sh	…
shell.nix	…
staticcheck.conf	…
update-flake.sh	…
version-embed.go	…
version_tailscale_test.go	…
version_test.go	…

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

the Android app is at https://github.com/tailscale/tailscale-android
the Synology package is at https://github.com/tailscale/tailscale-synology
the QNAP package is at https://github.com/tailscale/tailscale-qpkg
the Chocolatey packaging is at https://github.com/tailscale/tailscale-chocolatey

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.23. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.