The easiest, most secure way to use WireGuard and 2FA. https://tailscale.com
  • Go 96.1%
  • C 1.4%
  • TypeScript 0.9%
  • Shell 0.5%
  • Swift 0.3%
  • Other 0.5%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Mike Jensen bb94defdd0
fuzz: improve fuzz testing and seed corups (#21340)
This change improves the initial fuzz seeds to get better coverage. It also includes a fix to the geo fuzzing to avoid a harness induced failure when a NaN input is provided.

No actual code logic changes, test only.

Updates tailscale/corp#46608

Change-Id: I0985b6d3a75603927451eea0a25f4cd72c039795

Signed-off-by: Mike Jensen <mikej@tailscale.com>
2026-09-21 09:23:51 -06:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github gokrazy, .github/workflows: build the natlab image with tool/go 2026-09-19 10:45:55 -07:00
appc appc: detect cycles in CNAME chain 2026-09-16 10:08:11 -04:00
atomicfile all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
chirp all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
client tsweb/compserve, client/web: add zstd, remove brotli for precompressed assets 2026-09-17 15:23:49 -07:00
clientupdate cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance 2026-07-07 13:12:13 -07:00
cmd cmd/k8s-operator: recover missing egress EndpointSlices (#21174) 2026-09-21 11:21:57 +01:00
control tailcfg: add Node.StableTailnetID and bump capver (#21314) 2026-09-16 14:28:46 -04:00
derp derp/derpserver: drop per-client writer goroutine, start on demand 2026-09-18 19:19:44 -07:00
disco fuzz: wire fuzzing to a standalone oss-fuzz script (#20862) 2026-08-31 11:59:06 -06:00
docs Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
doctor all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
drive drive/driveimpl: handle Unicode normalization mismatches in filenames 2026-07-27 06:35:54 -07:00
envknob envknob: add SetenvForTest helper for safe environment variable handling 2026-08-19 12:22:26 +01:00
feature feature/clientupdate: require write access for update/install localapi (#21360) 2026-09-17 14:30:40 -07:00
fuzz fuzz: improve fuzz testing and seed corups (#21340) 2026-09-21 09:23:51 -06:00
gokrazy gokrazy, .github/workflows: build the natlab image with tool/go 2026-09-19 10:45:55 -07:00
health tailcfg: replace int with DERPRegionID for additional type safety (#20646) 2026-08-19 16:25:50 -07:00
hostinfo hostinfo: improve detection of linux desktops (#20848) 2026-08-14 15:12:45 -04:00
internal go.mod: update golangci-lint to v2 2026-09-17 16:55:23 -07:00
ipn net/netmon, ipn/ipnlocal, wgengine: don't lose a network change during startup 2026-09-19 10:46:50 -07:00
jsondb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
k8s-operator go.mod: bump all direct deps to latest 2026-09-16 16:01:50 -07:00
kube ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription 2026-09-14 09:37:30 -07:00
licenses licenses: update license notices 2026-09-03 15:37:10 -07:00
log cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
logpolicy feature/syslog, cmd/tailscaled, logpolicy: add optional --syslog flag 2026-07-17 13:55:23 -07:00
logtail go.mod: bump all direct deps to latest 2026-09-16 16:01:50 -07:00
metrics metrics: use Linux 6.2+ stat fast path for CurrentFDs 2026-09-08 18:01:59 -07:00
misc misc/bumpdeps: add tool to bump all go.mod deps to latest 2026-09-16 11:30:55 -07:00
net fuzz: improve fuzz testing and seed corups (#21340) 2026-09-21 09:23:51 -06:00
omit all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
packages/deb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
paths paths: return an absolute default socket path on Android 2026-09-08 18:40:37 -07:00
portlist portlist: exercise Linux discovery backends with real sockets 2026-09-14 19:16:36 -07:00
posture posture: add HealthTracker for serial number retrieval (#19181) 2026-04-25 15:42:47 -03:00
prober prober: cache CRLs across TLS probes (#21286) 2026-09-16 00:08:19 -04:00
proxymap all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
release go.mod: bump all direct deps to latest 2026-09-16 16:01:50 -07:00
safesocket all: apply go fix 2026-07-10 17:39:16 -07:00
safeweb all: don't repeat the the word "the" unnecessarily 2026-06-18 16:32:08 +01:00
scripts scripts/installer.sh: remove an unused PACKAGE_NAME variable 2026-07-17 20:12:50 +01:00
sessionrecording sessionrecording: close idle connections after upload 2026-06-19 13:42:14 +01:00
ssh/tailssh ssh/tailssh: split the OS-specific parts of the server into their own files 2026-09-15 19:32:40 -07:00
syncs cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
tailcfg tailcfg: add nodecap conn25-connector-apps 2026-09-18 09:13:46 -07:00
tempfork go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
tka fuzz: improve fuzz testing and seed corups (#21340) 2026-09-21 09:23:51 -06:00
tool tool/gocross, cmd/tsconnect: remove build tags that no longer do anything 2026-09-14 08:34:09 -07:00
tsconsensus all: migrate code off Notify.NetMap to Notify.SelfChange 2026-05-01 06:51:40 -07:00
tsconst tstest/integration: run a smoke test against a Windows tailscaled service (#20382) 2026-07-17 12:29:12 -07:00
tsd ipn/ipnlocal,tsd: add NoiseRoundTripper to tsd.Sys 2026-05-13 14:56:28 -07:00
tsnet tsweb/varz: read memstats via runtime/metrics, export fork metrics 2026-09-19 18:19:20 -07:00
tstest tstest/natlab/{vmtest,vnet}: bound "tailscale up", dump tailscaled logs on failure 2026-09-20 11:02:04 -07:00
tstime cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
tsweb tsweb/varz: read memstats via runtime/metrics, export fork metrics 2026-09-19 18:19:20 -07:00
types fuzz: improve fuzz testing and seed corups (#21340) 2026-09-21 09:23:51 -06:00
util fuzz: improve fuzz testing and seed corups (#21340) 2026-09-21 09:23:51 -06:00
version Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
wf wf: allow limited broadcast to/from permitted interfaces when using an exit node on Windows 2026-01-23 18:30:38 -06:00
wgengine net/netmon, ipn/ipnlocal, wgengine: don't lose a network change during startup 2026-09-19 10:46:50 -07:00
wif wif: add AWS ecs for autogenerated OIDC tokens 2026-03-25 14:41:41 -06:00
words words: redress historical wrongs against the tuatara 2026-07-18 15:34:33 -07:00
.gitattributes .gitattributes: explicitly mark text files as such with eol 2026-06-23 13:04:07 -07:00
.gitignore cmd/fbstatus: add framebuffer status display for the Tailscale appliance 2026-07-02 09:24:01 -07:00
.golangci.yml .golangci.yml: enforce gliderssh import alias via importas linter 2026-04-07 11:59:38 +01:00
.policy-tests.yml .github,.policy-tests.yml: test .policy.yml in CI 2026-06-26 15:55:15 -07:00
.policy.yml .policy.yml: tweak policy after testing 2026-06-26 12:28:02 -07:00
.stignore Add .stignore for syncthing (#18540) 2026-01-27 16:15:17 -08:00
ALPINE.txt docker: bump alpine v3.19 -> 3.22 (#17155) 2025-09-17 20:22:24 +01:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go .: permit running binary built with TS_GO_NEXT=1 2026-02-23 09:37:04 -08:00
build_dist.sh Add --strip option to build_dist 2026-06-02 10:59:29 -07:00
build_docker.sh docker: add riscv64 to container image architectures 2026-03-29 07:47:39 -07:00
cache_key_test.go util/cibuild, cache_key_test: skip TestTsgoRevInCacheKey outside Tailscale CI 2026-05-14 15:55:05 -07:00
CODE_OF_CONDUCT.md CODE_OF_CONDUCT.md: update code of conduct 2025-10-28 08:58:00 -07:00
CODEOWNERS CODEOWNERS,.policy.yml: replace CODEOWNERS with a policy-bot policy 2026-06-26 10:30:59 -07:00
Dockerfile Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
Dockerfile.base all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
flake.lock flake.nix: update for go 1.27 2026-08-28 12:47:04 -07:00
flake.nix go.mod: bump github.com/bradfitz/go-tool-cache 2026-09-19 12:16:27 -07:00
flakehashes.json go.toolchain.rev: bump Go toolchain 2026-09-19 16:52:15 -07:00
go.mod go.mod: bump github.com/bradfitz/go-tool-cache 2026-09-19 12:16:27 -07:00
go.sum go.mod: bump github.com/bradfitz/go-tool-cache 2026-09-19 12:16:27 -07:00
go.toolchain.branch go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
go.toolchain.next.branch go.toolchain.next.{branch,rev}: start testing Go 1.27 (go1.27rc2) 2026-07-31 07:38:38 -07:00
go.toolchain.next.rev go.toolchain.rev: bump Go toolchain 2026-09-19 16:52:15 -07:00
go.toolchain.rev go.toolchain.rev: bump Go toolchain 2026-09-19 16:52:15 -07:00
go.toolchain.version go.toolchain.rev: bump to Go 1.27.1 2026-09-01 15:47:33 -07:00
gomod_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
header.txt all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
LICENSE all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
license_test.go root: make TestLicenseHeaders skip files unknown to git 2026-08-04 10:47:35 +01:00
Makefile go.mod: update golangci-lint to v2 2026-09-17 16:55:23 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go cmd/vet/lowerell, drive/driveimpl: forbid variables named "l" or "I" 2026-05-04 14:03:28 -07:00
pull-toolchain.sh tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool 2026-04-28 10:18:32 -07:00
README.md go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix go.mod: bump github.com/bradfitz/go-tool-cache 2026-09-19 12:16:27 -07:00
staticcheck.conf staticcheck.conf: enable ST1000 to check package docs (#20787) 2026-08-08 13:02:06 -07:00
version-embed.go cmd/printdep: add --next flag to use rc Go build hash instead 2026-01-27 14:49:56 -08:00
VERSION.txt VERSION.txt: this is v1.103.0 (#20583) 2026-07-23 12:06:08 -07:00
version_tailscale_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
version_test.go Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.27. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.