1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2026-07-15 12:57:07 +00:00
The easiest, most secure way to use WireGuard and 2FA. https://tailscale.com
Find a file
Brad Fitzpatrick bb4f458207 feature/captiveportal: move captive portal code out of ipnlocal, netcheck
Captive portal detection was half-migrated: it had a build tag and
buildfeatures constant, but its code still lived in build-tag-gated
files in ipn/ipnlocal and net/netcheck, with its per-backend state
(context, cancel func, signaling channel) as fields on LocalBackend.

Move it under feature/captiveportal. The health-driven detection loop
becomes an ipnext.Extension holding its own state: it starts and
stops the loop from the BackendStateChange hook and subscribes to
health.Change events on the eventbus itself, removing the captive
portal hooks and special cases from LocalBackend entirely. The DERP
map now comes from a new ipnext.NodeBackend.DERPMap method, and the
preferred DERP region from magicsock's last netcheck report (the
same underlying source as the previously used Hostinfo.NetInfo).

The netcheck probe hook is now exported with a signature free of
netcheck internals, and its implementation moves to the small
feature/captiveportal/netcheckhook package, which installs the hook
as an import side effect. That package stays free of tsd/wgengine
dependencies so the tailscale CLI can keep probing for captive
portals in "tailscale netcheck" without linking the daemon-side
extension. The net/captivedetection library itself is unchanged and
stays put; after this change it is only linked when something pulls
in netcheckhook or the feature extension.

tailscaled links the feature by default via condregister as before,
but tsnet no longer does (shrinking tsnet, k8s-operator, and tsidp);
tsnet users who want it can blank-import the feature package, and
tsnet's dep test now locks that in.

Updates #12614

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Change-Id: I3f1d09f9dc03e18f9a648ab5e42d16fa540b3fa9
2026-07-14 20:22:23 -04:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows: fix natlab test discovery with fully-excluded files 2026-07-13 13:35:13 -07:00
appc appc,feature/conn25: use custom scheme resolvers for conn25 2026-05-29 12:23:47 -07:00
atomicfile all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
chirp all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
client all: apply go fix 2026-07-10 17:39:16 -07:00
clientupdate cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance 2026-07-07 13:12:13 -07:00
cmd feature/captiveportal: move captive portal code out of ipnlocal, netcheck 2026-07-14 20:22:23 -04:00
control ipn/ipnlocal,wgengine: move disco-key change detection to nodeBackend 2026-07-14 06:32:35 -07:00
derp all: apply go fix 2026-07-10 17:39:16 -07:00
disco disco: remove experimental label from BindUDPRelayHandshakeState 2026-03-24 11:04:11 -07:00
docs docs: add CLI evolution guidelines 2026-07-10 14:55:33 -07:00
doctor all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
drive all: apply go fix 2026-07-10 17:39:16 -07:00
envknob envknob/logknob: remove unused package (#19515) 2026-04-24 15:48:06 -07:00
feature feature/captiveportal: move captive portal code out of ipnlocal, netcheck 2026-07-14 20:22:23 -04:00
gokrazy gokrazy: add --json output, --region pinning, git-derived AMI names 2026-07-14 14:51:20 +02:00
health all: don't repeat the the word "the" unnecessarily 2026-06-18 16:32:08 +01:00
hostinfo clientupdate, cmd/tailscale: verify signed GAFs, wire up tailscale update for Gokrazy 2026-06-30 07:09:25 -07:00
internal .github,.policy-tests.yml: test .policy.yml in CI 2026-06-26 15:55:15 -07:00
ipn feature/captiveportal: move captive portal code out of ipnlocal, netcheck 2026-07-14 20:22:23 -04:00
jsondb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
k8s-operator all: apply go fix 2026-07-10 17:39:16 -07:00
kube cmd/{k8s-operator,containerboot,kube}: support IPv6 in egress ProxyGroup (#19898) 2026-07-14 13:26:40 +01:00
licenses licenses: update license notices 2026-07-08 11:14:50 -07:00
log cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
logpolicy logpolicy,tsnet: remove syspolicy dependency 2026-06-05 16:21:27 -05:00
logtail all: don't repeat the the word "the" unnecessarily 2026-06-18 16:32:08 +01:00
metrics cmd/vet/lowerell, drive/driveimpl: forbid variables named "l" or "I" 2026-05-04 14:03:28 -07:00
misc all: apply go fix 2026-07-10 17:39:16 -07:00
net feature/captiveportal: move captive portal code out of ipnlocal, netcheck 2026-07-14 20:22:23 -04:00
omit all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
packages/deb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
paths all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
portlist all: apply go fix 2026-07-10 17:39:16 -07:00
posture posture: add HealthTracker for serial number retrieval (#19181) 2026-04-25 15:42:47 -03:00
prober prober: deflake TestHTTPBandwidth 2026-06-23 08:35:57 -07:00
proxymap all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
release release/dist/synology: add GOARM=7,softfloat mode for hi3535 2026-05-27 10:54:15 -07:00
safesocket all: apply go fix 2026-07-10 17:39:16 -07:00
safeweb all: don't repeat the the word "the" unnecessarily 2026-06-18 16:32:08 +01:00
scripts scripts/installer.sh: update KDE Linux link (#19857) 2026-05-24 21:40:42 +01:00
sessionrecording sessionrecording: close idle connections after upload 2026-06-19 13:42:14 +01:00
ssh/tailssh ssh/tailssh: dissallow purely numeric usernames for SSH 2026-06-11 17:52:51 -06:00
syncs cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
tailcfg all: apply go fix 2026-07-10 17:39:16 -07:00
tempfork misc/genreadme,tempfork/pkgdoc,tsnet: generate README.md files from godoc 2026-04-22 15:13:09 -07:00
tka tka: use a named constant to tidy up sig_test.go 2026-06-11 10:37:48 +01:00
tool all: fix more typos caused by unnecessary repetition 2026-07-06 10:36:17 +01:00
tsconsensus all: migrate code off Notify.NetMap to Notify.SelfChange 2026-05-01 06:51:40 -07:00
tsconst ipn/ipnlocal, cmd/tailscale/cli: auto-renew TLS certs and warn while pending 2026-06-01 16:31:54 -07:00
tsd ipn/ipnlocal,tsd: add NoiseRoundTripper to tsd.Sys 2026-05-13 14:56:28 -07:00
tsnet feature/captiveportal: move captive portal code out of ipnlocal, netcheck 2026-07-14 20:22:23 -04:00
tstest tstest/natlab/vmtest: test jailed and masqueraded peers end-to-end 2026-07-14 11:39:56 -07:00
tstime cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
tsweb all: apply go fix 2026-07-10 17:39:16 -07:00
types all: apply go fix 2026-07-10 17:39:16 -07:00
util wgengine/wgcfg,wgengine,ipn/ipnlocal: remove Peers from wgcfg.Config 2026-07-14 19:57:59 -04:00
version all: fix more typos caused by unnecessary repetition 2026-07-06 10:36:17 +01:00
wf wf: allow limited broadcast to/from permitted interfaces when using an exit node on Windows 2026-01-23 18:30:38 -06:00
wgengine wgengine/wgcfg,wgengine,ipn/ipnlocal: remove Peers from wgcfg.Config 2026-07-14 19:57:59 -04:00
wif wif: add AWS ecs for autogenerated OIDC tokens 2026-03-25 14:41:41 -06:00
words words: add "cat" to scales.txt (#20106) 2026-06-12 12:48:53 +01:00
.gitattributes .gitattributes: explicitly mark text files as such with eol 2026-06-23 13:04:07 -07:00
.gitignore cmd/fbstatus: add framebuffer status display for the Tailscale appliance 2026-07-02 09:24:01 -07:00
.golangci.yml .golangci.yml: enforce gliderssh import alias via importas linter 2026-04-07 11:59:38 +01:00
.policy-tests.yml .github,.policy-tests.yml: test .policy.yml in CI 2026-06-26 15:55:15 -07:00
.policy.yml .policy.yml: tweak policy after testing 2026-06-26 12:28:02 -07:00
.stignore Add .stignore for syncthing (#18540) 2026-01-27 16:15:17 -08:00
ALPINE.txt docker: bump alpine v3.19 -> 3.22 (#17155) 2025-09-17 20:22:24 +01:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go .: permit running binary built with TS_GO_NEXT=1 2026-02-23 09:37:04 -08:00
build_dist.sh Add --strip option to build_dist 2026-06-02 10:59:29 -07:00
build_docker.sh docker: add riscv64 to container image architectures 2026-03-29 07:47:39 -07:00
cache_key_test.go util/cibuild, cache_key_test: skip TestTsgoRevInCacheKey outside Tailscale CI 2026-05-14 15:55:05 -07:00
CODE_OF_CONDUCT.md CODE_OF_CONDUCT.md: update code of conduct 2025-10-28 08:58:00 -07:00
CODEOWNERS CODEOWNERS,.policy.yml: replace CODEOWNERS with a policy-bot policy 2026-06-26 10:30:59 -07:00
Dockerfile go.toolchain.branch: switch to Go 1.26 2026-03-04 21:57:05 -08:00
Dockerfile.base all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
flake.lock nix: update flakes to get a nixpkgs version with go 1.26 2026-03-06 04:06:57 -08:00
flake.nix go.mod: revert update vulnerable dependencies (#20435) (#20456) 2026-07-14 10:26:32 -06:00
flakehashes.json go.mod: revert update vulnerable dependencies (#20435) (#20456) 2026-07-14 10:26:32 -06:00
go.mod go.mod: revert update vulnerable dependencies (#20435) (#20456) 2026-07-14 10:26:32 -06:00
go.sum go.mod: revert update vulnerable dependencies (#20435) (#20456) 2026-07-14 10:26:32 -06:00
go.toolchain.branch go.toolchain.branch: switch to Go 1.26 2026-03-04 21:57:05 -08:00
go.toolchain.next.branch tool/gocross, pull-toolchain.sh: support a "next" Go toolchain 2026-01-27 14:07:35 -08:00
go.toolchain.next.rev go.mod: bump Go to 1.26.5 2026-07-08 17:15:35 -07:00
go.toolchain.rev go.mod: bump Go to 1.26.5 2026-07-08 17:15:35 -07:00
go.toolchain.version go.mod: bump Go to 1.26.5 2026-07-08 17:15:35 -07:00
gomod_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
header.txt all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
LICENSE all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
license_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
Makefile gokrazy, Makefile: improve appliance build tooling 2026-07-02 09:24:01 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pkgdoc_test.go cmd/vet/lowerell, drive/driveimpl: forbid variables named "l" or "I" 2026-05-04 14:03:28 -07:00
pull-toolchain.sh tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool 2026-04-28 10:18:32 -07:00
README.md README: update the version of Go in the README (#19168) 2026-03-28 22:21:41 -03:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix go.mod: revert update vulnerable dependencies (#20435) (#20456) 2026-07-14 10:26:32 -06:00
staticcheck.conf all: cleanup unused code, part 2 (#10670) 2023-12-21 17:40:03 -08:00
version-embed.go cmd/printdep: add --next flag to use rc Go build hash instead 2026-01-27 14:49:56 -08:00
VERSION.txt VERSION.txt: this is v1.101.0 (#19992) 2026-06-03 15:40:23 -04:00
version_tailscale_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
version_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.26. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.