The easiest, most secure way to use WireGuard and 2FA.
Go to file
Nick Khyl 0cfd643d95 ipn/ipnlocal: update profileManager to use SwitchToProfile when switching to the initial profile
This further minimizes the number of places where the profile manager updates the current profile and prefs.

We also document a scenario where an implicit profile switch can occur.
We should be able to address it after (partially?) inverting the dependency between
LocalBackend and profileManager, so that profileManager notifies LocalBackend
of profile changes instead of the other way around.

Updates tailscale/corp#28014
Updates #12614

Signed-off-by: Nick Khyl <nickk@tailscale.com>
2025-04-25 16:32:09 -05:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github: Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#15476) 2025-04-14 16:04:36 -06:00
appc appc: fix a deadlock in route advertisements (#15031) 2025-02-18 11:31:14 -08:00
atomicfile atomicfile: use ReplaceFile on Windows so that attributes and ACLs are preserved 2025-01-15 13:57:37 -05:00
chirp all: update copyright and license headers 2023-01-27 15:36:29 -08:00
client client/tailscale: add godoc links in Deprecated comments 2025-04-22 10:24:28 -07:00
clientupdate clientupdate: fix MSI exit code handling, preserve MSI and updater logs on Windows 2025-04-09 15:25:42 -05:00
cmd types/mapx, ipn/ipnext: add ordered map, akin to set.Slice 2025-04-25 10:03:18 -07:00
control derp/derphttp: remove ban on websockets dependency 2025-04-16 10:10:45 -07:00
derp derp/derphttp: remove ban on websockets dependency 2025-04-16 10:10:45 -07:00
disco disco: implement CallMeMaybeVia serialization (#15779) 2025-04-25 13:00:00 -07:00
docs docs/commit-messages.md: merge two 'commit messages' sections (#15668) 2025-04-14 15:20:50 +01:00
doctor net/{interfaces,netmon}, all: merge net/interfaces package into net/netmon 2024-04-28 07:34:52 -07:00
drive drive: fix index out of bounds when parsing request local paths (#15517) 2025-04-09 14:12:23 -07:00
envknob ssh/tailssh: add Plan 9 support for Tailscale SSH 2025-04-02 07:36:04 -07:00
feature ipn/ipnext: remove some interface indirection to add hooks 2025-04-25 09:03:39 -07:00
gokrazy gokrazy/natlab: update gokrazy, wire up natlab tests to GitHub CI 2025-03-04 18:57:29 -08:00
health health: relax no-derp-home warnable to not fire if not in map poll 2025-01-27 20:39:37 +00:00
hostinfo hostinfo, ipnlocal: add optional os-specific callback for querying the hostname (#15647) 2025-04-14 15:02:32 -04:00
internal cmd/k8s-operator,internal/client/tailscale: use VIPService annotations for ownership tracking (#15356) 2025-03-21 09:08:39 +00:00
ipn ipn/ipnlocal: update profileManager to use SwitchToProfile when switching to the initial profile 2025-04-25 16:32:09 -05:00
jsondb all: update copyright and license headers 2023-01-27 15:36:29 -08:00
k8s-operator k8s-operator: add age column to all custom resources (#15663) 2025-04-15 20:13:56 +01:00
kube ipn/store/kubestore,kube,envknob,cmd/tailscaled/depaware.txt: allow kubestore read/write custom TLS secrets (#15307) 2025-03-18 15:09:22 +00:00
licenses licenses: update license notices 2025-04-07 12:09:43 -07:00
log log/sockstatlog: don't block for more than 5s on shutdown 2024-07-12 17:50:11 +01:00
logpolicy logpolicy: fix log target override with a custom HTTP client 2025-04-09 22:04:23 +01:00
logtail logpolicy: expose MaxBufferSize and MaxUploadSize options (#14903) 2025-02-04 12:51:27 -08:00
maths maths: add exponentially weighted moving average type 2025-02-25 11:59:19 -08:00
metrics metrics,syncs: add ShardedInt support to metrics.LabelMap 2024-12-23 13:10:18 -08:00
net net/udprelay: change Server.AllocateEndpoint existing alloc strategy (#15792) 2025-04-25 13:09:09 -07:00
omit cmd/tailscaled, ipn/conffile: support ec2 user-data config file 2024-05-30 09:49:18 -07:00
packages/deb go.mod: upgrade nfpm to v2 (#8786) 2023-08-03 13:00:45 -07:00
paths all: illumos/solaris userspace only support 2025-01-09 14:46:23 -08:00
portlist portlist: add Plan 9 support 2025-04-02 07:36:04 -07:00
posture control/controlclient,posture,util/syspolicy: use predefined syspolicy keys instead of string literals 2024-09-04 15:25:19 -05:00
prober prober: add address family label for udp metrics (#15413) 2025-03-25 12:49:54 -04:00
proxymap ipnlocal,proxymap,wgengine/netstack: add optional WhoIs/proxymap debug 2024-09-10 14:23:33 -07:00
release cmd/dist,release/dist: sign QNAP builds with a Google Cloud hosted key 2025-04-17 08:39:31 -05:00
safesocket safesocket: fix Plan 9 implementation 2025-04-02 07:36:04 -07:00
safeweb go.mod: bump gorilla/csrf for security fix (#14822) 2025-01-29 12:44:01 -08:00
scripts scripts/installer.sh: add Miracle Linux as a RHEL derivative (#15671) 2025-04-14 16:54:51 +01:00
sessionrecording net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 2025-04-08 10:07:47 -07:00
smallzstd all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
ssh/tailssh net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
syncs syncs: add ShardedInt expvar.Var type 2024-12-19 14:58:28 -08:00
tailcfg cmd/tsidp: add groups claim to tsidp (#15127) 2025-04-17 17:31:40 -07:00
taildrop feature/taildrop: start moving Taildrop out of LocalBackend 2025-04-16 15:57:59 -07:00
tempfork tempfork/acme: update to latest version (#15543) 2025-04-04 16:32:12 -07:00
tka tka: truncate long rotation signature chains 2024-09-04 22:17:21 +01:00
tool node.rev: bump to latest 22.x LTS release (#15652) 2025-04-15 16:51:21 -06:00
tsconsensus tsconsensus: mark 2 tests that were flaky in CI 2025-04-11 07:59:10 -07:00
tsconst cmd/tailscale/cli: support passing network lock keys via files 2024-08-14 09:18:34 -07:00
tsd all: update the tsd.System constructor name (#15372) 2025-04-16 10:10:45 -07:00
tsnet net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
tstest net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
tstime tstime: add GoDuration which JSON serializes with time.Duration.String (#15726) 2025-04-17 15:51:41 -07:00
tsweb tsd: wire up the event bus to tailscaled 2025-04-16 10:10:45 -07:00
types types/mapx, ipn/ipnext: add ordered map, akin to set.Slice 2025-04-25 10:03:18 -07:00
util util/mak: delete long-deprecated, unused, pre-generics NonNil func 2025-04-25 14:19:10 -07:00
version safesocket, version: fix safesocket_darwin behavior for cmd/tailscale (#15275) 2025-03-11 13:24:11 -04:00
wf wf/firewall: allow link-local multicast for permitted local routes when the killswitch is on on Windows 2024-10-02 18:36:01 -05:00
wgengine wgengine/magicsock: subscribe to portmapper updates 2025-04-16 10:10:45 -07:00
words words: C what I did there? 2025-04-08 09:18:38 -07:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore tstest/tailmac: add customized macOS virtualization tooling (#13146) 2024-08-19 15:01:19 -04:00
.golangci.yml .github: Bump golangci/golangci-lint-action from 6.5.0 to 7.0.0 (#15476) 2025-04-14 16:04:36 -06:00
ALPINE.txt Bump Alpine, link iptables back to legacy (#15428) 2025-03-26 01:48:01 +00:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh feature/taildrop: start moving Taildrop out of LocalBackend 2025-04-16 15:57:59 -07:00
build_docker.sh build_docker.sh: bump default base image (#15432) 2025-03-26 11:58:26 +00:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
CODEOWNERS CODEOWNERS: add the start of an owners file 2023-08-16 15:57:29 -07:00
Dockerfile Bump Alpine, link iptables back to legacy (#15428) 2025-03-26 01:48:01 +00:00
Dockerfile.base Bump Alpine, link iptables back to legacy (#15428) 2025-03-26 01:48:01 +00:00
flake.lock nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
flake.nix nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
go.mod go.mod: bump gorilla/csrf@v1.7.3 (#15775) 2025-04-23 13:59:03 -07:00
go.mod.sri nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
go.sum go.mod: bump gorilla/csrf@v1.7.3 (#15775) 2025-04-23 13:59:03 -07:00
go.toolchain.branch go.toolchain.branch: update to Go 1.24 (#15016) 2025-02-19 10:55:49 -08:00
go.toolchain.rev go.toolchain.rev: bump go 1.24 for Android pidfd changes (#15613) 2025-04-10 09:14:26 -07:00
gomod_test.go go.mod: add test that replace directives aren't added in oss 2023-09-29 12:31:52 -07:00
header.txt cmd/k8s-operator: operator can create subnetrouter (#9505) 2023-12-14 13:51:59 +00:00
LICENSE all: update tools that manage copyright headers 2023-01-27 15:36:29 -08:00
Makefile go.mod: bump depaware, add --internal flag to stop hiding internal packages 2025-01-26 21:12:34 +00:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go all: skip looking for package comments in .git/ repository (#15384) 2025-03-21 14:46:02 -07:00
pull-toolchain.sh pull-toolchain.sh: don't run update-flake.sh 2023-02-09 15:04:01 -08:00
README.md commit-messages.md: make our git commit message style guide public 2025-04-08 11:41:47 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix nix: update nix and use go 1.24 (#15578) 2025-04-08 09:38:48 -07:00
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
update-flake.sh Code Improvements (#11311) 2024-03-08 15:24:36 -08:00
version_tailscale_test.go tailscaleroot: panic if tailscale_go build tag but Go toolchain mismatch 2024-10-06 15:22:04 -07:00
version_test.go go.mod,wgengine/netstack: bump gvisor 2024-01-19 18:23:53 -08:00
version-embed.go Fix various linting, vet & static check issues 2025-01-04 15:11:10 -08:00
VERSION.txt VERSION.txt: this is v1.83.0 (#15443) 2025-03-26 14:22:21 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.23. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.