tailscale

(★ 35,418)

The easiest, most secure way to use WireGuard and 2FA.

File Explorer

ZIP Download

Showing a partial file list — download the zip above to see everything.

- config.yaml
- - bug_report.yml
  - config.yml
  - feature_request.yml
- - check-cherry-picks.yml
  - checklocks.yml
  - cigocacher.yml
  - codeql-analysis.yml
  - docker-base.yml
  - docker-file-build.yml
  - flakehub-publish-tagged.yml
  - golangci-lint.yml
  - govulncheck.yml
  - installer.yml
  - kubemanifests.yaml
  - natlab-basic.yml
  - natlab-test.yml
  - pin-github-actions.yml
  - policybot-test.yml
  - request-dataplane-review.yml
  - request-k8s-review.yml
  - ssh-integrationtest.yml
  - test.yml
  - update-flake.yml
  - update-webclient-prebuilt.yml
  - vet.yml
  - webclient.yml
  - zizmor.yml
- CONTRIBUTING.md
- dependabot.yml
- licenses.tmpl
- - appctest.go
- appconnector.go
- appconnector_test.go
- conn25.go
- conn25_test.go
- observe.go
- observe_disabled.go
- atomicfile.go
- atomicfile_notwindows.go
- atomicfile_test.go
- atomicfile_windows.go
- atomicfile_windows_test.go
- mksyscall.go
- zsyscall_windows.go
- chirp.go
- chirp_test.go
- - freedesktop.go
  - freedesktop_test.go
- - cert.go
  - debugportmapper.go
  - local.go
  - local_test.go
  - pins.go
  - routecheck.go
  - serve.go
  - serviceclientprefs.go
  - syspolicy.go
  - tailnetlock.go
- - logo.go
  - startup-creator.go
  - systray.go
  - systray_linux_test.go
  - systray_test.go
  - tailscale-systray.desktop
  - tailscale-systray.service
  - tailscale.png
  - tailscale.svg
- - acl.go
  - cert.go
  - devices.go
  - dns.go
  - keys.go
  - localclient_aliases.go
  - required_version.go
  - routes.go
  - tailnet.go
  - tailscale.go
  - tailscale_test.go
- - assets.go
  - auth.go
  - index.html
  - package.json
  - qnap.go
  - styles.json
  - synology.go
  - tailwind.config.js
  - tsconfig.json
  - vite.config.ts
  - web.go
  - web_test.go
  - yarn.lock
- - distsign.go
  - distsign_test.go
  - roots.go
  - roots_test.go
  - url.go
- - tailscale-1.52.0.plg
  - tailscale-1.54.0.plg
  - tailscale-nover-path-mentioned.plg
  - tailscale-nover.plg
- clientupdate.go
- clientupdate_downloads.go
- clientupdate_gokrazy.go
- clientupdate_not_downloads.go
- clientupdate_notwindows.go
- clientupdate_test.go
- clientupdate_windows.go
- - main.go
- - build-webclient.go
- - checkmetrics.go
- - cigocacher.go
  - cigocacher_test.go
- - cloner.go
  - cloner_test.go
- - advertise-routes.go
  - aws.go
  - connector-gen.go
  - github.go
  - README.md
- - egressservices.go
  - egressservices_test.go
  - forwarding.go
  - ingressservices.go
  - ingressservices_test.go
  - kube.go
  - kube_test.go
  - main.go
  - main_test.go
  - serve.go
  - serve_test.go
  - settings.go
  - settings_test.go
  - tailscaled.go
  - test_tailscale.sh
  - test_tailscaled.sh
- - ace.go
  - bootstrap_dns.go
  - bootstrap_dns_test.go
  - cert.go
  - cert_test.go
  - depaware.txt
  - derper.go
  - derper_test.go
  - ipcert.go
  - ipcert_test.go
  - mesh.go
  - README.md
- - derpprobe.go
- - dist.go
- - distsign.go
- - fbstatus.go
  - fbstatus_other.go
  - tailscale.png
- - featuretags.go
- - .gitignore
  - main.go
- - .gitignore
  - cache.go
  - gitops-pusher.go
  - gitops-pusher_test.go
  - README.md
- - hello.go
- - format.go
  - format_test.go
  - jsonimports.go
- - main.go
  - main_test.go
- - api-server-proxy-pg.go
  - api-server-proxy-pg_test.go
  - api-server-proxy.go
  - connector.go
  - connector_test.go
  - depaware.txt
  - egress-eps.go
  - egress-eps_test.go
  - egress-pod-readiness.go
  - egress-pod-readiness_test.go
  - egress-services-readiness.go
  - egress-services-readiness_test.go
  - egress-services.go
  - egress-services_test.go
  - ingress-for-pg.go
  - ingress-for-pg_test.go
  - ingress.go
  - ingress_test.go
  - logger.go
  - metrics_resources.go
  - nodeport-service-ports.go
  - nodeport-services-ports_test.go
  - operator.go
  - operator_test.go
  - proxygroup.go
  - proxygroup_specs.go
  - proxygroup_test.go
  - sts.go
  - sts_test.go
  - svc-for-pg.go
  - svc-for-pg_test.go
  - svc.go
  - svc_test.go
  - testutils_test.go
  - tsclient.go
  - tsrecorder.go
  - tsrecorder_specs.go
  - tsrecorder_specs_test.go
  - tsrecorder_test.go
- - k8s-proxy.go
  - kube.go
  - kube_test.go
- - main.go
- - main.go
- - mkversion.go
- - nardump.go
  - README.md
- - natc.go
  - natc_test.go
- - main.go
- - .gitignore
  - mkdeb.sh
  - nginx-auth.go
  - README.md
  - tailscale.nginx-auth.service
  - tailscale.nginx-auth.socket
- - omitsize.go
- - pgproxy.go
  - README.md
- - printdep.go
- - proxy-test-server.go
- - proxy-to-grafana.go
  - proxy-to-grafana_test.go
- - .gitignore
  - handlers.go
  - handlers_test.go
  - server.go
  - server_test.go
  - sniproxy.go
  - sniproxy_test.go
- - speedtest.go
- - ssh-auth-none-demo.go
- - stunc.go
- - depaware.txt
  - stund.go
- - stunstamp.go
  - stunstamp_default.go
  - stunstamp_linux.go
- - main.go
- - README.md
  - systray.go
- - depaware.txt
  - deps_test.go
  - generate.go
  - manifest_windows_386.syso
  - manifest_windows_amd64.syso
  - manifest_windows_arm64.syso
  - tailscale.go
  - tailscale.rc
  - tailscale_test.go
  - windows-manifest.xml
- - debug.go
  - debug_forcereflect.go
  - depaware-min.txt
  - depaware-minbox.txt
  - depaware.txt
  - deps_test.go
  - flag.go
  - generate.go
  - install_darwin.go
  - install_windows.go
  - manifest_windows_386.syso
  - manifest_windows_amd64.syso
  - manifest_windows_arm64.syso
  - netstack.go
  - proxy.go
  - required_version.go
  - sigpipe.go
  - ssh.go
  - syspolicy.go
  - tailscale-online.target
  - tailscale-wait-online.service
  - tailscaled.defaults
  - tailscaled.go
  - tailscaled.openrc
  - tailscaled.service
  - tailscaled_drive.go
  - tailscaled_notwindows.go
  - tailscaled_test.go
  - tailscaled_windows.go
  - webclient.go
  - windows-manifest.xml
  - with_cli.go
- - testcontrol.go
- - args.go
  - args_test.go
  - testwrapper.go
  - testwrapper_test.go
- - tl-longchain.go
- - .gitignore
  - build-pkg.go
  - build.go
  - common.go
  - dev-pkg.go
  - dev.go
  - index.html
  - package.json
  - package.json.tmpl
  - README.md
  - README.pkg.md
  - serve.go
  - tailwind.config.js
  - tsconfig.json
  - tsconnect.go
  - yarn.lock
- - depaware.txt
  - README.md
  - tsidp.go
  - tsidp_test.go
  - ui-edit.html
  - ui-header.html
  - ui-list.html
  - ui-style.css
  - ui.go
- - tsnet-proxy.go
- - tsp.go
- - tsshd.go
- - bypass_linux.go
  - bypass_other.go
  - fw_linux.go
  - ipassign_darwin.go
  - ipassign_other.go
  - restart_tailscaled_linux.go
  - tta.go
  - wgserver_linux.go
- - jsontags_allowlist
  - vet.go
- - viewer.go
  - viewer_test.go
- - run-krazy.sh
  - vnet-main.go
- - xdpderper.go
- - conn.go
  - conn_test.go
  - handshake.go
  - handshake_test.go
  - interop_test.go
  - messages.go
  - noiseexplorer_test.go
- - auto.go
  - auto_test.go
  - client.go
  - controlclient_test.go
  - direct.go
  - direct_test.go
  - errors.go
  - map.go
  - map_debug.go
  - map_test.go
  - sign.go
  - sign_supported.go
  - sign_supported_test.go
  - sign_unsupported.go
  - status.go
- - client.go
  - client_common.go
  - client_js.go
  - constants.go
  - http_test.go
- - controlknobs.go
  - controlknobs_test.go
- - client.go
  - client_test.go
  - conn.go
- - map.go
  - map_test.go
  - nodefile.go
  - nodefile_test.go
  - register.go
  - tsp.go
- - derpconst.go
- - derphttp_client.go
  - derphttp_test.go
  - export_test.go
  - mesh_client.go
  - websocket.go
  - websocket_stub.go
- - derpserver.go
  - derpserver_default.go
  - derpserver_linux.go
  - derpserver_test.go
  - fortest.go
  - handler.go
  - websocket.go
- - bpf_bpfeb.go
  - bpf_bpfeb.o
  - bpf_bpfel.go
  - bpf_bpfel.o
  - xdp.c
  - xdp.go
  - xdp_default.go
  - xdp_linux.go
  - xdp_linux_test.go
- client_test.go
- derp.go
- derp_client.go
- derp_test.go
- export_test.go
- README.md
- disco.go
- disco_fuzzer.go
- disco_test.go
- pcap.go
- - sample_bird.conf
  - tailscale_bird.conf
- - Makefile
  - operator-architecture.md
  - proxy.yaml
  - README.md
  - role.yaml
  - rolebinding.yaml
  - sa.yaml
  - sidecar.yaml
  - subnet.yaml
  - userspace-sidecar.yaml
- - tailscale.init
- - example.go
- cli.md
- commit-messages.md
- embed.go
- - ethtool.go
  - ethtool_linux.go
  - ethtool_other.go
- - permissions.go
  - permissions_bsd.go
  - permissions_linux.go
  - permissions_other.go
  - permissions_test.go
- - routetable.go
- doctor.go
- doctor_test.go
- - birthtiming.go
  - birthtiming_test.go
  - connlistener.go
  - connlistener_test.go
  - drive_test.go
  - fileserver.go
  - local_impl.go
  - normfs.go
  - remote_impl.go
  - unicode_test.go
- drive_clone.go
- drive_view.go
- local.go
- remote.go
- remote_nonunix.go
- remote_permissions.go
- remote_permissions_test.go
- remote_test.go
- remote_unix.go
- - featureknob.go
- envknob.go
- envknob_nottest.go
- envknob_testable.go
- - ace.go
- - acme.go
  - c2n.go
  - c2n_test.go
  - cert.go
  - cert_test.go
  - certstore.go
  - errors.go
  - refresh.go
- - appconnectors.go
- - awsparamstore.go
  - awsparamstore_test.go
- - bird.go
  - bird_test.go
- - buildfeatures.go
  - feature_ace_disabled.go
  - feature_ace_enabled.go
  - feature_acme_disabled.go
  - feature_acme_enabled.go
  - feature_advertiseexitnode_disabled.go
  - feature_advertiseexitnode_enabled.go
  - feature_advertiseroutes_disabled.go
  - feature_advertiseroutes_enabled.go
  - feature_appconnectors_disabled.go
  - feature_appconnectors_enabled.go
  - feature_aws_disabled.go
  - feature_aws_enabled.go
  - feature_bakedroots_disabled.go
  - feature_bakedroots_enabled.go
  - feature_bird_disabled.go
  - feature_bird_enabled.go
  - feature_c2n_disabled.go
  - feature_c2n_enabled.go
  - feature_cachenetmap_disabled.go
  - feature_cachenetmap_enabled.go
  - feature_captiveportal_disabled.go
  - feature_captiveportal_enabled.go
  - feature_capture_disabled.go
  - feature_capture_enabled.go
  - feature_cliconndiag_disabled.go
  - feature_cliconndiag_enabled.go
  - feature_clientmetrics_disabled.go
  - feature_clientmetrics_enabled.go
  - feature_clientupdate_disabled.go
  - feature_clientupdate_enabled.go
  - feature_cloud_disabled.go
  - feature_cloud_enabled.go
  - feature_colorable_disabled.go
  - feature_colorable_enabled.go
  - feature_completion_disabled.go
  - feature_completion_enabled.go
  - feature_completion_scripts_disabled.go
  - feature_completion_scripts_enabled.go
  - feature_conn25_disabled.go
  - feature_conn25_enabled.go
  - feature_dbus_disabled.go
  - feature_dbus_enabled.go
  - feature_debug_disabled.go
  - feature_debug_enabled.go
  - feature_debugeventbus_disabled.go
  - feature_debugeventbus_enabled.go
  - feature_debugportmapper_disabled.go
  - feature_debugportmapper_enabled.go
  - feature_desktop_sessions_disabled.go
  - feature_desktop_sessions_enabled.go
  - feature_dns_disabled.go
  - feature_dns_enabled.go
  - feature_doctor_disabled.go
  - feature_doctor_enabled.go
  - feature_drive_disabled.go
  - feature_drive_enabled.go
  - feature_favorites_disabled.go
  - feature_favorites_enabled.go
  - feature_flashappliance_disabled.go
  - feature_flashappliance_enabled.go
  - feature_gro_disabled.go
  - feature_gro_enabled.go
  - feature_health_disabled.go
  - feature_health_enabled.go
  - feature_hujsonconf_disabled.go
  - feature_hujsonconf_enabled.go
  - feature_identityfederation_disabled.go
  - feature_identityfederation_enabled.go
  - feature_ipnbus_disabled.go
  - feature_ipnbus_enabled.go
  - feature_iptables_disabled.go
  - feature_iptables_enabled.go
  - feature_kube_disabled.go
  - feature_kube_enabled.go
  - feature_linkspeed_disabled.go
  - feature_linkspeed_enabled.go
  - feature_linuxdnsfight_disabled.go
  - feature_linuxdnsfight_enabled.go
  - feature_listenrawdisco_disabled.go
  - feature_listenrawdisco_enabled.go
  - feature_logtail_disabled.go
  - feature_logtail_enabled.go
  - feature_netlog_disabled.go
  - feature_netlog_enabled.go
  - feature_netstack_disabled.go
  - feature_netstack_enabled.go
  - feature_networkmanager_disabled.go
  - feature_networkmanager_enabled.go
  - feature_oauthkey_disabled.go
  - feature_oauthkey_enabled.go
  - feature_osrouter_disabled.go
  - feature_osrouter_enabled.go
  - feature_outboundproxy_disabled.go
  - feature_outboundproxy_enabled.go
  - feature_peerapiclient_disabled.go
  - feature_peerapiclient_enabled.go
  - feature_peerapiserver_disabled.go
  - feature_peerapiserver_enabled.go
  - feature_portlist_disabled.go
  - feature_portlist_enabled.go
  - feature_portmapper_disabled.go
  - feature_portmapper_enabled.go
  - feature_posture_disabled.go
  - feature_posture_enabled.go
  - feature_qrcodes_disabled.go
  - feature_qrcodes_enabled.go
  - feature_relayserver_disabled.go
  - feature_relayserver_enabled.go
  - feature_remoteconfig_disabled.go
  - feature_remoteconfig_enabled.go
  - feature_resolved_disabled.go
  - feature_resolved_enabled.go
  - feature_routecheck_disabled.go
  - feature_routecheck_enabled.go
  - feature_runtimemetrics_disabled.go
  - feature_runtimemetrics_enabled.go
  - feature_sdnotify_disabled.go
  - feature_sdnotify_enabled.go
  - feature_serve_disabled.go
  - feature_serve_enabled.go
  - feature_serviceclientprefs_disabled.go
  - feature_serviceclientprefs_enabled.go
  - feature_ssh_disabled.go
  - feature_ssh_enabled.go
  - feature_synology_disabled.go
  - feature_synology_enabled.go
  - feature_syslog_disabled.go
  - feature_syslog_enabled.go
  - feature_syspolicy_disabled.go
  - feature_syspolicy_enabled.go
  - feature_systray_disabled.go
  - feature_systray_enabled.go
  - feature_taildrop_disabled.go
  - feature_taildrop_enabled.go
  - feature_tailnetlock_disabled.go
  - feature_tailnetlock_enabled.go
  - feature_tap_disabled.go
  - feature_tap_enabled.go
  - feature_tpm_disabled.go
  - feature_tpm_enabled.go
  - feature_tundevstats_disabled.go
  - feature_tundevstats_enabled.go
  - feature_unixsocketidentity_disabled.go
  - feature_unixsocketidentity_enabled.go
  - feature_useexitnode_disabled.go
  - feature_useexitnode_enabled.go
  - feature_useproxy_disabled.go
  - feature_useproxy_enabled.go
  - feature_usermetrics_disabled.go
  - feature_usermetrics_enabled.go
  - feature_useroutes_disabled.go
  - feature_useroutes_enabled.go
  - feature_wakeonlan_disabled.go
  - feature_wakeonlan_enabled.go
  - feature_webbrowser_disabled.go
  - feature_webbrowser_enabled.go
  - feature_webclient_disabled.go
  - feature_webclient_enabled.go
  - gen.go
- - c2n.go
- - captiveportal.go
- - capture.go
- - clientupdate.go
- - condregister.go
  - maybe_ace.go
  - maybe_acme.go
  - maybe_appconnectors.go
  - maybe_bird.go
  - maybe_c2n.go
  - maybe_captiveportal.go
  - maybe_capture.go
  - maybe_clientupdate.go
  - maybe_conn25.go
  - maybe_debugportmapper.go
  - maybe_desktop_sessions.go
  - maybe_doctor.go
  - maybe_drive.go
  - maybe_favorites.go
  - maybe_linkspeed.go
  - maybe_linuxdnsfight.go
  - maybe_netlog.go
  - maybe_osrouter.go
  - maybe_portlist.go
  - maybe_posture.go
  - maybe_relayserver.go
  - maybe_remoteconfig.go
  - maybe_routecheck.go
  - maybe_runtimemetrics.go
  - maybe_sdnotify.go
  - maybe_serviceclientprefs.go
  - maybe_store_aws.go
  - maybe_store_kube.go
  - maybe_syslog.go
  - maybe_syspolicy.go
  - maybe_taildrop.go
  - maybe_tailnetlock.go
  - maybe_tap.go
  - maybe_tpm.go
  - maybe_tundevstats.go
  - maybe_wakeonlan.go
- - addrAssignments.go
  - addrAssignments_test.go
  - api.go
  - api_test.go
  - conn25.go
  - conn25_test.go
  - datapath.go
  - datapath_test.go
  - flowtable.go
  - flowtable_test.go
  - ippool.go
  - ippool_test.go
- - debugportmapper.go
- - doctor.go
- - drive.go
- - favorites.go
  - favorites_test.go
  - local_api.go
  - pins.go
  - pins_test.go
- - featuretags.go
  - featuretags_test.go
- - identityfederation.go
  - identityfederation_test.go
- - doc.go
  - linkspeed_linux.go
- - linuxdnsfight.go
  - linuxdnsfight_test.go
- - netlog.go
- - oauthkey.go
  - oauthkey_test.go
- - portlist.go
- - portmapper.go
- - posture.go
- - relayserver.go
  - relayserver_test.go
- - integration_test.go
  - remoteconfig.go
- - ipn.go
  - localapi.go
  - routecheck.go
  - routertracker.go
  - routertracker_test.go
- - runtimemetrics.go
  - runtimemetrics_test.go
- - sdnotify.go
  - sdnotify_linux.go
- - local_api.go
  - service_client.go
  - service_client_test.go
  - serviceclientprefs.go
  - serviceclientprefs_test.go
- - ssh.go
- - syslog.go
- - syspolicy.go
- - delete.go
  - delete_test.go
  - doc.go
  - ext.go
  - fileops.go
  - fileops_fs.go
  - integration_test.go
  - localapi.go
  - paths.go
  - peerapi.go
  - peerapi_test.go
  - resume.go
  - resume_test.go
  - retrieve.go
  - send.go
  - send_test.go
  - taildrop.go
  - taildrop_test.go
  - target_test.go
- - tailnetlock.go
  - tailnetlock_test.go
- - tap_linux.go
- - attestation.go
  - attestation_test.go
  - tpm.go
  - tpm_linux.go
  - tpm_other.go
  - tpm_test.go
  - tpm_windows.go
- - tundevstats_linux.go
  - tundevstats_linux_test.go
- - useproxy.go
- - wakeonlan.go
- feature.go
- hooks.go
- README.md
- sdnotify.go
- - build.go
  - build_test.go
- - gafpush.go
- - mkfs.go
  - mkfs_test.go
- - config.json
  - gokrazydeps.go
  - README.md
  - usr-dir.tar
- - config.json
  - gokrazydeps.go
  - README.md
  - usr-dir.tar
- - config.json
  - gokrazydeps.go
  - README.md
  - usr-dir.tar
- - config.json
  - gokrazydeps.go
  - README.md
  - usr-dir.tar
- - config.json
  - gokrazydeps.go
  - README.md
  - usr-dir.tar
- .gitignore
- build.go
- gokrazy_test.go
- Makefile
- monogok
- README.md
- tidy-deps.go
- UTM.md
- - healthmsg.go
- args.go
- health.go
- health_test.go
- state.go
- usermetrics.go
- usermetrics_omit.go
- warnings.go
- hostinfo.go
- hostinfo_container_linux_test.go
- hostinfo_darwin.go
- hostinfo_freebsd.go
- hostinfo_linux.go
- hostinfo_linux_test.go
- hostinfo_plan9.go
- hostinfo_test.go
- hostinfo_uname.go
- hostinfo_windows.go
- packagetype_appliance.go
- packagetype_container.go
- - tooldeps.go
- - auditlog.go
  - auditlog_test.go
  - extension.go
  - store.go
- - cloudconf.go
  - conffile.go
  - conffile_hujson.go
  - conffile_test.go
  - serveconf.go
  - serveconf_test.go
- - doc.go
  - extension.go
  - extension_test.go
  - mksyscall.go
  - session.go
  - sessions.go
  - sessions_notwindows.go
  - sessions_windows.go
  - zsyscall_windows.go
- - access.go
  - actor.go
  - actor_windows.go
  - ipnauth.go
  - ipnauth_omit_unixsocketidentity.go
  - ipnauth_unix_creds.go
  - ipnauth_windows.go
  - policy.go
  - self.go
  - test_actor.go
- - ipnext.go
- - breaktcp_darwin.go
  - breaktcp_linux.go
  - bus.go
  - bus_test.go
  - c2n.go
  - c2n_pprof.go
  - c2n_test.go
  - cert.go
  - diskcache.go
  - diskcache_test.go
  - dnsconfig_test.go
  - drive.go
  - drive_test.go
  - drive_tomove.go
  - expiry.go
  - expiry_test.go
  - extension_host.go
  - extension_host_test.go
  - fortest.go
  - hwattest.go
  - local.go
  - local_test.go
  - loglines_test.go
  - netstack.go
  - node_backend.go
  - node_backend_test.go
  - peerapi.go
  - peerapi_drive.go
  - peerapi_macios_ext.go
  - peerapi_test.go
  - prefs_metrics.go
  - profiles.go
  - profiles_notwindows.go
  - profiles_test.go
  - profiles_windows.go
  - resolve.go
  - resolve_test.go
  - routecheck_disabled.go
  - routecheck_enabled.go
  - serve.go
  - serve_disabled.go
  - serve_metrics_test.go
  - serve_test.go
  - serve_unix_test.go
  - shutdown_test.go
  - state_test.go
  - tailnet-lock.go
  - tailnet-lock_test.go
  - tailnetlock_disabled.go
  - via.go
  - via_test.go
  - watchdog.go
  - watchdog_test.go
  - web_client.go
  - web_client_stub.go
- - actor.go
  - proxyconnect.go
  - proxyconnect_js.go
  - server.go
  - server_fortest.go
  - server_test.go
  - waiterset_test.go
- - ipnstate.go
  - ipnstate_clone.go
  - ipnstate_test.go
- - backend.go
  - client.go
  - example_test.go
  - opts.go
  - server.go
- - cert.go
  - debug.go
  - debugderp.go
  - disabled_stubs.go
  - localapi.go
  - localapi_drive.go
  - localapi_test.go
  - pprof.go
  - serve.go
  - syspolicy_api.go
  - tailnetlock.go
- - policy.go
- - stores.go
  - stores_test.go
- backend.go
- backend_test.go
- conf.go
- conf_test.go
- doc.go
- ipn_clone.go
- ipn_test.go
- ipn_view.go
- prefs.go
- prefs_test.go
- serve.go
- serve_expand_test.go
- serve_test.go
- store.go
- store_test.go
- db.go
- db_test.go
- - doc.go
  - proxy.go
  - proxy_events_test.go
  - proxy_test.go
- - doc.go
- - reconciler.go
  - reconciler_test.go
- - hijacker.go
  - hijacker_test.go
- - client.go
  - provider.go
- api-docs-config.yaml
- api.md
- conditions.go
- conditions_test.go
- utils.go
- utils_test.go
- - authkey.go
  - authkey_test.go
- - certs.go
  - certs_test.go
- - egressservices.go
  - egressservices_test.go
- - healthz.go
- - ingressservices.go
- - api.go
- - client.go
  - client_test.go
  - fake_client.go
- - grants.go
  - types.go
  - types_test.go
- - fake-client.go
  - local-client.go
- - metrics.go
- - services.go
- - state.go
  - state_test.go
- android.md
- apple.md
- licenses.go
- README.md
- tailscale.md
- windows.md
- - log.go
  - log_test.go
- - logger.go
  - logger_test.go
- logpolicy.go
- logpolicy_test.go
- - filch.go
  - filch_omit.go
  - filch_stub.go
  - filch_test.go
  - filch_unix.go
  - filch_windows.go
- .gitignore
- api.md
- buffer.go
- config.go
- logtail.go
- logtail_omit.go
- logtail_test.go
- README.md
- fds_linux.go
- fds_notlinux.go
- metrics.go
- metrics_test.go
- multilabelmap.go
- multilabelmap_test.go
- - genreadme.go
- - git-hook.go
  - README.md
- add-git-hooks.go
- - ace.go
- - art_test.go
  - stride_table.go
  - stride_table_test.go
  - table.go
  - table_test.go
- - bakedroots.go
  - bakedroots_test.go
- - conn.go
  - conn_default.go
  - conn_linux.go
  - conn_linux_test.go
- - captivedetection.go
  - captivedetection_test.go
  - endpoints.go
  - rawconn.go
  - rawconn_apple.go
- - connectproxy.go
- - config.go
  - dbus.go
  - debian_resolvconf.go
  - direct.go
  - direct_linux_test.go
  - direct_test.go
  - direct_unix_test.go
  - dns_clone.go
  - dns_view.go
  - flush_default.go
  - flush_windows.go
  - ini.go
  - ini_test.go
  - manager.go
  - manager_darwin.go
  - manager_darwin_test.go
  - manager_default.go
  - manager_freebsd.go
  - manager_linux.go
  - manager_linux_test.go
  - manager_openbsd.go
  - manager_plan9.go
  - manager_plan9_test.go
  - manager_solaris.go
  - manager_tcp_test.go
  - manager_test.go
  - manager_windows.go
  - manager_windows_test.go
  - nm.go
  - noop.go
  - nrpt_windows.go
  - openresolv.go
  - osconfig.go
  - osconfig_test.go
  - resolvconf-workaround.sh
  - resolvconf.go
  - resolvconfpath_default.go
  - resolvconfpath_gokrazy.go
  - resolvd.go
  - resolved.go
  - utf.go
  - utf_test.go
  - wsl_windows.go
- - dnscache.go
  - dnscache_test.go
  - messagecache.go
  - messagecache_test.go
- - dns-fallback-servers.json
  - dnsfallback.go
  - dnsfallback_test.go
  - update-dns-fallbacks.go
- - flowtrack.go
  - flowtrack_test.go
- - ipset.go
  - ipset_test.go
- - ktimeout.go
  - ktimeout_default.go
  - ktimeout_linux.go
  - ktimeout_linux_test.go
  - ktimeout_test.go
- - conn.go
  - conn_test.go
  - listener.go
  - listener_test.go
  - memnet.go
  - memnet_test.go
  - pipe.go
  - pipe_test.go
- - netaddr.go
- - netcheck.go
  - netcheck_test.go
  - standalone.go
- - neterror.go
  - neterror_js.go
  - neterror_linux.go
  - neterror_linux_test.go
  - neterror_plan9.go
  - neterror_posix.go
  - neterror_windows.go
- - netkernelconf.go
  - netkernelconf_default.go
  - netkernelconf_linux.go
- - netknob.go
- - defaultroute_bsd.go
  - defaultroute_darwin.go
  - interfaces.go
  - interfaces_android.go
  - interfaces_bsd.go
  - interfaces_bsdroute.go
  - interfaces_darwin.go
  - interfaces_darwin_test.go
  - interfaces_default_route_test.go
  - interfaces_defaultrouteif_todo.go
  - interfaces_linux.go
  - interfaces_linux_test.go
  - interfaces_test.go
  - interfaces_windows.go
  - interfaces_windows_test.go
  - loghelper.go
  - loghelper_test.go
  - netmon.go
  - netmon_darwin.go
  - netmon_darwin_test.go
  - netmon_freebsd.go
  - netmon_linux.go
  - netmon_linux_test.go
  - netmon_polling.go
  - netmon_test.go
  - netmon_windows.go
  - polling.go
  - state.go
- - mksyscall.go
  - netns.go
  - netns_android.go
  - netns_darwin.go
  - netns_darwin_test.go
  - netns_default.go
  - netns_dw.go
  - netns_linux.go
  - netns_linux_test.go
  - netns_openbsd.go
  - netns_test.go
  - netns_windows.go
  - netns_windows_test.go
  - socks.go
  - zsyscall_windows.go
- - netstat.go
  - netstat_noimpl.go
  - netstat_test.go
  - netstat_windows.go
- - default_interface_portable.go
  - default_interface_portable_test.go
  - ip_forward.go
  - netutil.go
  - netutil_test.go
  - routes.go
- - netx.go
  - racedial.go
  - racedial_test.go
- - capture.go
  - doc.go
  - geneve.go
  - geneve_test.go
  - header.go
  - icmp.go
  - icmp4.go
  - icmp6.go
  - icmp6_test.go
  - icmp_test.go
  - ip4.go
  - ip6.go
  - packet.go
  - packet_test.go
  - tsmp.go
  - tsmp_test.go
  - udp4.go
  - udp6.go
- - ping.go
  - ping_test.go
- - disabled_stubs.go
  - igd_test.go
  - legacy_upnp.go
  - pcp.go
  - pcp_test.go
  - pcpresultcode_string.go
  - pmpresultcode_string.go
  - portmapper.go
  - portmapper_test.go
  - select_test.go
  - upnp.go
  - upnp_test.go
- - porttrack.go
  - porttrack_test.go
- - mux.go
  - mux_test.go
- - log.go
  - probe.go
  - report.go
  - routecheck.go
  - routecheck_test.go
  - routes.go
- - fortest.go
  - routemanager.go
  - routemanager_test.go
- - routetable.go
  - routetable_bsd.go
  - routetable_bsd_test.go
  - routetable_bsdconst.go
  - routetable_darwin.go
  - routetable_linux.go
  - routetable_linux_test.go
  - routetable_other.go
- - sockopts.go
  - sockopts_default.go
  - sockopts_linux.go
  - sockopts_notwindows.go
  - sockopts_unix_test.go
  - sockopts_windows.go
- - socks5.go
  - socks5_test.go
- - label_string.go
  - sockstats.go
  - sockstats_noop.go
  - sockstats_tsgo.go
  - sockstats_tsgo_darwin.go
  - sockstats_tsgo_test.go
- - speedtest.go
  - speedtest_client.go
  - speedtest_server.go
  - speedtest_test.go
- - stun.go
  - stun_fuzzer.go
  - stun_test.go
- - stunserver.go
  - stunserver_test.go
- - tcpinfo.go
  - tcpinfo_darwin.go
  - tcpinfo_linux.go
  - tcpinfo_other.go
  - tcpinfo_test.go
- - deps_test.go
  - tlsdial.go
  - tlsdial_test.go
- - traffic.go
  - traffic_test.go
- - tsaddr.go
  - tsaddr_test.go
- - dnsmap.go
  - dohclient.go
  - dohclient_test.go
  - peerapi_macios_ext.go
  - tsdial.go
  - tsdial_test.go
- - mksyscall.go
  - tshttpproxy.go
  - tshttpproxy_linux.go
  - tshttpproxy_synology.go
  - tshttpproxy_synology_test.go
  - tshttpproxy_test.go
  - tshttpproxy_windows.go
  - zsyscall_windows.go
- - fake.go
  - ifstatus_noop.go
  - ifstatus_windows.go
  - mtu.go
  - mtu_test.go
  - netstack_disabled.go
  - netstack_enabled.go
  - tstun_stub.go
  - tun.go
  - tun_linux.go
  - tun_macos.go
  - tun_notwindows.go
  - tun_windows.go
  - wrap.go
  - wrap_linux.go
  - wrap_noop.go
  - wrap_test.go
- - metrics.go
  - metrics_test.go
  - server.go
  - server_linux.go
  - server_notlinux.go
  - server_test.go
- - wsconn.go
- aws_def.go
- aws_omit.go
- omit.go
- - deb.go
  - deb_test.go
- migrate.go
- paths.go
- paths_unix.go
- paths_windows.go
- clean.go
- clean_test.go
- netstat.go
- netstat_test.go
- poller.go
- portlist.go
- portlist_linux.go
- portlist_linux_test.go
- portlist_macos.go
- portlist_plan9.go
- portlist_test.go
- portlist_windows.go
- doc.go
- hwaddr.go
- serialnumber_macos.go
- serialnumber_macos_test.go
- serialnumber_notmacos.go
- serialnumber_notmacos_test.go
- serialnumber_stub.go
- serialnumber_syspolicy.go
- serialnumber_test.go
- derp.go
- derp_test.go
- dns.go
- dns_example_test.go
- dns_test.go
- histogram.go
- histogram_test.go
- http.go
- http_test.go
- prober.go
- prober_test.go
- status.go
- status.html
- tcp.go
- tls.go
- tls_test.go
- tun_darwin.go
- tun_default.go
- tun_linux.go
- proxymap.go
- - debian.postinst.sh
  - debian.postrm.sh
  - debian.prerm.sh
- - dist.go
  - memoize.go
- - rpm.postinst.sh
  - rpm.postrm.sh
  - rpm.prerm.sh
- release.go
- basic_test.go
- pipe_windows.go
- pipe_windows_test.go
- safesocket.go
- safesocket_darwin.go
- safesocket_darwin_test.go
- safesocket_js.go
- safesocket_plan9.go
- safesocket_ps.go
- safesocket_test.go
- unixsocket.go
- zsyscall_windows.go
- http.go
- http_test.go
- installer.sh
- kube-deepcopy.sh
- connect.go
- connect_test.go
- event.go
- header.go
- - accept_env.go
  - accept_env_test.go
  - auditd_linux.go
  - auditd_linux_test.go
  - c2n.go
  - hostkeys.go
  - hostkeys_test.go
  - incubator.go
  - incubator_linux.go
  - incubator_plan9.go
  - incubator_test.go
  - listen.go
  - localstate_test.go
  - privs_test.go
  - session.go
  - tailssh.go
  - tailssh_exitcodes_test.go
  - tailssh_frameorder_test.go
  - tailssh_integration_exitcodes_test.go
  - tailssh_integration_test.go
  - tailssh_test.go
  - user.go
- locked.go
- locked_test.go
- mutex.go
- mutex_debug.go
- pool.go
- pool_test.go
- shardedint.go
- shardedint_test.go
- shardedmap.go
- shardedmap_test.go
- shardvalue.go
- shardvalue_go.go
- shardvalue_tailscale.go
- shardvalue_test.go
- syncs.go
- syncs_test.go
- - nodecap.go
- - peercap.go
- c2ntypes.go
- derpmap.go
- proto_port_range.go
- proto_port_range_test.go
- tailcfg.go
- tailcfg_clone.go
- tailcfg_test.go
- tailcfg_view.go
- tka.go
- - acme.go
  - acme_test.go
  - http.go
  - http_test.go
  - jws.go
  - jws_test.go
  - README.md
  - rfc8555.go
  - rfc8555_test.go
  - sync_to_upstream_test.go
  - types.go
  - types_test.go
- - heap.go
  - heap_test.go
- - httprec.go
- - pkgdoc.go
- - README.md
- aum.go
- aum_test.go
- builder.go
- builder_test.go
- chaintest_test.go
- deeplink.go
- deeplink_test.go
- disabled_stub.go
- key.go
- key_test.go
- limits.go
- scenario_test.go
- sig.go
- sig_test.go
- state.go
- state_test.go
- sync.go
- sync_test.go
- tailchonk.go
- tailchonk_test.go
- tka.go
- tka_clone.go
- tka_test.go
- verify.go
- verify_disabled.go
- - autoflags.go
  - autoflags_test.go
  - env.go
  - env_test.go
  - exec_other.go
  - exec_unix.go
  - gocross-wrapper.ps1
  - gocross-wrapper.sh
  - gocross.go
  - gocross_test.go
  - gocross_wrapper_test.go
  - gocross_wrapper_windows_test.go
  - goroot.go
  - toolchain.go
- - .gitignore
  - Cargo.lock
  - Cargo.toml
  - Makefile
- - listpkgs.go
- - updateflakes.go
- binaryen.rev
- go
- go.exe
- go.exe.README.txt
- helm
- helm.rev
- node
- node.rev
- wasm-opt
- yarn
- yarn.rev
- authorization.go
- authorization_test.go
- bolt_store.go
- bolt_store_no_bolt.go
- http.go
- monitor.go
- tsconsensus.go
- tsconsensus_test.go
- - wintun.go
- health.go
- linuxfw.go
- ping.go
- tsconst.go
- webclient.go
- tsd.go
- depaware.txt
- dns_split_test.go
- example_tshello_test.go
- example_tsnet_listen_service_multiple_ports_test.go
- example_tsnet_test.go
- listenssh_test.go
- maybe_acme.go
- packet_filter_test.go
- README.md
- tailnetlock_test.go
- tsnet.go
- tsnet_test.go
- - archtest_test.go
  - qemu_test.go
- - chonktest.go
  - tailchonk_test.go
- - deptest.go
  - deptest_test.go
- - capmap_test.go
  - exec_notwindows.go
  - exec_windows.go
  - gen_deps.go
  - integration.go
  - integration_linkat_linux.go
  - integration_linkat_linux_test.go
  - integration_linkat_other.go
  - integration_test.go
  - service_notwindows.go
  - service_windows.go
  - tailscaled_deps_test_darwin.go
  - tailscaled_deps_test_freebsd.go
  - tailscaled_deps_test_linux.go
  - tailscaled_deps_test_openbsd.go
  - tailscaled_deps_test_windows.go
  - whois_test.go
- - iosdeps.go
  - iosdeps_test.go
- - jsdeps.go
  - jsdeps_test.go
- - delta_test.go
  - largetailnet.go
  - largetailnet_test.go
- - membudget_test.go
- - mts.go
- - firewall.go
  - nat.go
  - natlab.go
  - natlab_test.go
- - nettest.go
- - Host.entitlements
  - Makefile
  - README.md
  - TailMac.entitlements
- - tkatest.go
- - tlstest.go
  - tlstest_test.go
- - tools.go
- - typewalk.go
- allocs.go
- clock.go
- clock_test.go
- kernel_linux.go
- kernel_linux_test.go
- kernel_other.go
- log.go
- log_test.go
- privileges_notwindows.go
- privileges_windows.go
- reflect.go
- resource.go
- resource_test.go
- test-wishlist.md
- tstest.go
- tstest_test.go
- - mono.go
  - mono_test.go
- - rate.go
  - rate_test.go
  - value.go
  - value_test.go
- format.go
- jitter.go
- jitter_test.go
- tstime.go
- tstime_test.go
- - promvarz.go
  - promvarz_test.go
- - varz.go
  - varz_test.go
- debug.go
- debug_test.go
- log.go
- pprof_default.go
- pprof_js.go
- request_id.go
- tsweb.go
- tsweb_test.go
- - appconnector.go
  - appconnector_test.go
- - bools.go
  - bools_test.go
- - dnstype.go
  - dnstype_clone.go
  - dnstype_test.go
  - dnstype_view.go
- - message.go
- - disco_update.go
- - flagtype.go
- - doc.go
  - point.go
  - point_test.go
  - quantize.go
  - quantize_test.go
  - units.go
  - units_test.go
- - io.go
  - io_test.go
- - ipproto.go
  - ipproto_test.go
- - arshal_time.go
  - containers.go
  - doc.go
  - duration.go
  - jsonformat_test.go
  - time.go
- - json.go
  - json_test.go
- - chal.go
  - control.go
  - control_test.go
  - derp.go
  - derp_test.go
  - disco.go
  - disco_test.go
  - doc.go
  - hardware_attestation.go
  - machine.go
  - machine_test.go
  - nl.go
  - nl_test.go
  - node.go
  - node_test.go
  - util.go
  - util_test.go
- - deferred.go
  - deferred_test.go
  - lazy.go
  - map.go
  - map_test.go
  - sync_test.go
  - unsync.go
  - unsync_test.go
- - logger.go
  - logger_test.go
  - tokenbucket.go
- - id.go
  - id_test.go
- - ordered.go
  - ordered_test.go
  - repopulate.go
  - repopulate_test.go
- - netlogfunc.go
- - netlogtype.go
  - netlogtype_test.go
- - netmap.go
  - netmap_test.go
  - nodemut.go
  - nodemut_test.go
- - nettype.go
- - bool.go
  - bool_test.go
  - value.go
  - value_test.go
- - persist.go
  - persist_clone.go
  - persist_test.go
  - persist_view.go
- - item.go
  - list.go
  - map.go
  - options.go
  - prefs.go
  - prefs_clone_test.go
  - prefs_test.go
  - prefs_view_test.go
  - struct_list.go
  - struct_map.go
- - netfiltermode.go
- - ptr.go
- - result.go
- - structs.go
- - tkatype.go
  - tkatype_test.go
- - views.go
  - views_test.go
- - backoff.go
- - bufiox.go
  - bufiox_test.go
- - checkchange.go
- - cibuild.go
- - clientmetric.go
  - clientmetric_test.go
  - omit.go
- - cloudenv.go
  - cloudenv_test.go
- - cloudinfo.go
  - cloudinfo_nocloud.go
  - cloudinfo_test.go
- - version.go
  - version_test.go
- - cobs.go
  - cobs_test.go
  - example_test.go
- - codegen.go
  - codegen_test.go
- - key.go
  - key_test.go
- - debug.go
  - deephash.go
  - deephash_test.go
  - pointer.go
  - pointer_norace.go
  - pointer_race.go
  - tailscale_types_test.go
  - types.go
  - types_test.go
- - def.go
  - def_test.go
- - dirwalk.go
  - dirwalk_linux.go
  - dirwalk_test.go
.gitattributes
.gitignore
.golangci.yml
.policy-tests.yml
.policy.yml
.stignore
ALPINE.txt
api.md
assert_ts_toolchain_match.go
build_dist.sh
build_docker.sh
cache_key_test.go
CODE_OF_CONDUCT.md
CODEOWNERS
Dockerfile
Dockerfile.base
flake.lock
flake.nix
flakehashes.json
go.mod
go.sum
go.toolchain.branch
go.toolchain.next.branch
go.toolchain.next.rev
go.toolchain.rev
go.toolchain.version
gomod_test.go
header.txt
LICENSE
license_test.go
Makefile
PATENTS
pkgdoc_test.go
pull-toolchain.sh
README.md
SECURITY.md
shell.nix
staticcheck.conf
VERSION.txt

# Installation Guide

Prerequisites

Go 1.26

Setup Steps

go install tailscale.com/cmd/tailscale{,d}

Install Tailscale CLI and tailscaled daemon.

./build_dist.sh tailscale.com/cmd/tailscale

Build tailscale with embedded commit ID and version info.

./build_dist.sh tailscale.com/cmd/tailscaled

Build tailscaled with embedded commit ID and version info.

Key Commands

go install tailscale.com/cmd/tailscale{,d}

Directly install tailscale and tailscaled binaries using Go.

./build_dist.sh tailscale.com/cmd/tailscale

Build binaries for distribution with embedded version information.

When packaging for distribution, use build_dist.sh instead of go install to include commit and version metadata.

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Showing a partial file list.

Link

Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

`git log`

View Details ▼

Show a history of commits.

git log

Show the sequence of commits starting from the current one, in reverse chronological order of the Git repository in the current working directory:

git log {{[-p|--patch]}} {{path/to/file_or_directory}}

Show the history of a particular file or directory, including differences:

git log --stat

Show an overview of which file(s) changed in each commit:

🔍

`go install`

View Details ▼

Compile and install packages named by the import paths.

go install

Compile and install the current package:

go install {{path/to/package}}

Compile and install a specific local package:

go install {{golang.org/x/tools/gopls}}@{{latest}}

Install the latest version of a program, ignoring `go.mod` in the current directory:

🔍

`tailscale`

View Details ▼

A private WireGuard network service.
Some subcommands such as `up` have their own usage documentation.

sudo tailscale set --operator $USER

Allow the current user to operate on the Tailscale daemon:

tailscale {{up|down|status}}

Handle connection to Tailscale (connect, disconnect, check status):

tailscale set --advertise-exit-node

Offer the current machine to be an exit node for internet traffic:

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

tailscale

Owner Repos

File Explorer

# Installation Guide

Setup Steps

Key Commands

# Use via CDN

Command Glossary

`git log`

`go install`

`tailscale`

Was this content helpful?

Recent Feedback

tailscale

Owner Repos

File Explorer

# Installation Guide

Setup Steps

Key Commands

# Use via CDN

Command Glossary

git log

go install

tailscale

Was this content helpful?

Recent Feedback

Download README

`git log`

`go install`

`tailscale`