1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2026-09-14 17:25:02 +00:00
The easiest, most secure way to use WireGuard and 2FA. https://tailscale.com
Find a file
Brad Fitzpatrick ab4262680b ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription
Nothing reads ipn.Notify.NetMap anymore. The previous commit removed
its runtime (non-initial) emission, and every first-party client is
also off the initial one: the Win32 and WinUI GUIs and the Apple
bridge subscribe with InitialStatus or InitialState plus peer deltas,
Android no longer uses it, and the remaining in-tree subscribers that set
NotifyInitialNetMap (sniproxy and the kube helpers) only did so to get
the initial Notify.SelfChange and discarded the netmap that tailscaled
built, encoded, and shipped for them.

Delete the Notify.NetMap field and the NotifyInitialNetMap bit. The
bit value stays reserved under the name ObsoleteNotifyInitialNetMap and
ValidateNotifyWatchOpt rejects subscriptions that set it, like the
NotifyRateLimit bit removed in the previous commit. NotifyNoNetMap
remains accepted as a no-op because shipping GUIs still set it.

The blessed way to seed a watcher's view is NotifyInitialStatus, but
it unconditionally built O(peers) status entries, which is exactly the
waste this series is deleting for watchers that only care about the
self node. Size the initial status to the subscription instead:
Status.Peer is only populated when the watcher also set
NotifyPeerChanges or NotifyPeerPatches, since only peer-delta
subscribers need a peer baseline to apply deltas to. That matches its
existing first-party users (containerboot and the WinUI GUI both pair
InitialStatus with peer bits).

Migrate sniproxy and the kube helpers to NotifyInitialStatus: they
seed from InitialStatus.Self and react to the (ungated) runtime
Notify.SelfChange messages after that, so their initial message now
carries one PeerStatus instead of a full netmap.

Also drop doc comment references to LocalClient.NetMap, a method that
does not exist; on-demand fetches go through other LocalAPI methods
such as LocalClient.Status.

Updates #12542

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Change-Id: I242992a744c0ffd0be6f27e8c735aa69d5b23b5e
2026-09-14 09:37:30 -07:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github .github/workflows: clarify tailcat breakage check is only a heads-up 2026-09-04 09:28:17 -07:00
appc appc,feature/conn25: move functions to where they are used 2026-08-26 15:10:24 -07:00
atomicfile all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
chirp all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
client net/{connreject,tstun},feature/connreject,wgengine,client/local: add connection-rejection diagnostics 2026-09-08 16:22:43 -07:00
clientupdate cmd/tailscale: add 'configure pve-appliance' to make Proxmox VM of appliance 2026-07-07 13:12:13 -07:00
cmd ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription 2026-09-14 09:37:30 -07:00
control fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
derp fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
disco fuzz: wire fuzzing to a standalone oss-fuzz script (#20862) 2026-08-31 11:59:06 -06:00
docs Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
doctor all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
drive drive/driveimpl: handle Unicode normalization mismatches in filenames 2026-07-27 06:35:54 -07:00
envknob envknob: add SetenvForTest helper for safe environment variable handling 2026-08-19 12:22:26 +01:00
feature net/dnscache, feature/dnsresolvecache: only persist DNS resolutions after TLS verification 2026-09-10 12:49:19 -07:00
fuzz fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
gokrazy gokrazy/tsapp: revert breakglass access lockdown 2026-07-22 16:39:24 +02:00
health tailcfg: replace int with DERPRegionID for additional type safety (#20646) 2026-08-19 16:25:50 -07:00
hostinfo hostinfo: improve detection of linux desktops (#20848) 2026-08-14 15:12:45 -04:00
internal various: change OAuth and WIF auth key resolvers to take struct args 2026-07-21 15:44:45 -06:00
ipn ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription 2026-09-14 09:37:30 -07:00
jsondb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
k8s-operator cmd/k8s-operator,k8s-operator: make PeerRelay port and endpoints configurable (#20991) 2026-09-08 14:10:13 +01:00
kube ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription 2026-09-14 09:37:30 -07:00
licenses licenses: update license notices 2026-09-03 15:37:10 -07:00
log cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
logpolicy feature/syslog, cmd/tailscaled, logpolicy: add optional --syslog flag 2026-07-17 13:55:23 -07:00
logtail envknob: add SetenvForTest helper for safe environment variable handling 2026-08-19 12:22:26 +01:00
metrics metrics: use Linux 6.2+ stat fast path for CurrentFDs 2026-09-08 18:01:59 -07:00
misc misc/git_hook/githook: don't flag large blobs already on the remote 2026-08-10 12:00:07 +02:00
net fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
omit all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
packages/deb all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
paths paths: return an absolute default socket path on Android 2026-09-08 18:40:37 -07:00
portlist staticcheck.conf: enable ST1000 to check package docs (#20787) 2026-08-08 13:02:06 -07:00
posture posture: add HealthTracker for serial number retrieval (#19181) 2026-04-25 15:42:47 -03:00
prober all: use ~128KiB packet buf for batched i/o 2026-09-04 09:32:55 -07:00
proxymap all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
release release/dist/synology: add GOARM=7,softfloat mode for hi3535 2026-05-27 10:54:15 -07:00
safesocket all: apply go fix 2026-07-10 17:39:16 -07:00
safeweb all: don't repeat the the word "the" unnecessarily 2026-06-18 16:32:08 +01:00
scripts scripts/installer.sh: remove an unused PACKAGE_NAME variable 2026-07-17 20:12:50 +01:00
sessionrecording sessionrecording: close idle connections after upload 2026-06-19 13:42:14 +01:00
ssh/tailssh tailcfg,tailcfg/{nodecap,selfcap}: split capability constants to their own packages (#20639) 2026-08-07 16:30:35 -07:00
syncs cmd/vet: add subtestnames analyzer; fix all existing violations 2026-04-05 15:52:51 -07:00
tailcfg control/controlclient: add support for retry-after in map sessions (#21188) 2026-09-11 16:31:55 -03:00
tempfork go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
tka fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
tool tool/gocross, cmd/tsconnect: remove build tags that no longer do anything 2026-09-14 08:34:09 -07:00
tsconsensus all: migrate code off Notify.NetMap to Notify.SelfChange 2026-05-01 06:51:40 -07:00
tsconst tstest/integration: run a smoke test against a Windows tailscaled service (#20382) 2026-07-17 12:29:12 -07:00
tsd ipn/ipnlocal,tsd: add NoiseRoundTripper to tsd.Sys 2026-05-13 14:56:28 -07:00
tsnet ipn, ipn/ipnlocal: remove Notify.NetMap, size initial status to subscription 2026-09-14 09:37:30 -07:00
tstest control/controlclient: add support for retry-after in map sessions (#21188) 2026-09-11 16:31:55 -03:00
tstime cmd/tailscale/cli: fix time in tailscale routecheck (#19956) 2026-06-01 16:12:08 -07:00
tsweb tsweb/varz: add goamd64_capable and goamd64_compiled default metrics 2026-08-25 07:23:04 -07:00
types fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
util fuzz: expand fuzzing test coverage (#21123) 2026-09-14 09:07:29 -06:00
version Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
wf wf: allow limited broadcast to/from permitted interfaces when using an exit node on Windows 2026-01-23 18:30:38 -06:00
wgengine wgengine/wgcfg: size crypto & per-peer queues by CPU factor 2026-09-09 15:35:16 -07:00
wif wif: add AWS ecs for autogenerated OIDC tokens 2026-03-25 14:41:41 -06:00
words words: redress historical wrongs against the tuatara 2026-07-18 15:34:33 -07:00
.gitattributes .gitattributes: explicitly mark text files as such with eol 2026-06-23 13:04:07 -07:00
.gitignore cmd/fbstatus: add framebuffer status display for the Tailscale appliance 2026-07-02 09:24:01 -07:00
.golangci.yml .golangci.yml: enforce gliderssh import alias via importas linter 2026-04-07 11:59:38 +01:00
.policy-tests.yml .github,.policy-tests.yml: test .policy.yml in CI 2026-06-26 15:55:15 -07:00
.policy.yml .policy.yml: tweak policy after testing 2026-06-26 12:28:02 -07:00
.stignore Add .stignore for syncthing (#18540) 2026-01-27 16:15:17 -08:00
ALPINE.txt docker: bump alpine v3.19 -> 3.22 (#17155) 2025-09-17 20:22:24 +01:00
api.md {api.md,publicapi}: remove old API docs (#13468) 2024-09-13 14:10:33 -06:00
assert_ts_toolchain_match.go .: permit running binary built with TS_GO_NEXT=1 2026-02-23 09:37:04 -08:00
build_dist.sh Add --strip option to build_dist 2026-06-02 10:59:29 -07:00
build_docker.sh docker: add riscv64 to container image architectures 2026-03-29 07:47:39 -07:00
cache_key_test.go util/cibuild, cache_key_test: skip TestTsgoRevInCacheKey outside Tailscale CI 2026-05-14 15:55:05 -07:00
CODE_OF_CONDUCT.md CODE_OF_CONDUCT.md: update code of conduct 2025-10-28 08:58:00 -07:00
CODEOWNERS CODEOWNERS,.policy.yml: replace CODEOWNERS with a policy-bot policy 2026-06-26 10:30:59 -07:00
Dockerfile Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00
Dockerfile.base all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
flake.lock flake.nix: update for go 1.27 2026-08-28 12:47:04 -07:00
flake.nix go.mod: bump wireguard-go dep for small packet bufs pool 2026-09-11 13:37:48 -07:00
flakehashes.json go.toolchain.rev: bump for stack debugging API 2026-09-11 13:39:17 -07:00
go.mod go.mod: bump wireguard-go dep for small packet bufs pool 2026-09-11 13:37:48 -07:00
go.sum go.mod: bump wireguard-go dep for small packet bufs pool 2026-09-11 13:37:48 -07:00
go.toolchain.branch go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
go.toolchain.next.branch go.toolchain.next.{branch,rev}: start testing Go 1.27 (go1.27rc2) 2026-07-31 07:38:38 -07:00
go.toolchain.next.rev go.toolchain.rev: bump for stack debugging API 2026-09-11 13:39:17 -07:00
go.toolchain.rev go.toolchain.rev: bump for stack debugging API 2026-09-11 13:39:17 -07:00
go.toolchain.version go.toolchain.rev: bump to Go 1.27.1 2026-09-01 15:47:33 -07:00
gomod_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
header.txt all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
LICENSE all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
license_test.go root: make TestLicenseHeaders skip files unknown to git 2026-08-04 10:47:35 +01:00
Makefile gokrazy, Makefile: improve appliance build tooling 2026-07-02 09:24:01 -07:00
PATENTS
pkgdoc_test.go cmd/vet/lowerell, drive/driveimpl: forbid variables named "l" or "I" 2026-05-04 14:03:28 -07:00
pull-toolchain.sh tool/updateflakes, cmd/nardump: replace update-flake.sh with Go tool 2026-04-28 10:18:32 -07:00
README.md go.toolchain.branch: switch to Go 1.27 2026-08-27 09:52:15 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix go.mod: bump wireguard-go dep for small packet bufs pool 2026-09-11 13:37:48 -07:00
staticcheck.conf staticcheck.conf: enable ST1000 to check package docs (#20787) 2026-08-08 13:02:06 -07:00
version-embed.go cmd/printdep: add --next flag to use rc Go build hash instead 2026-01-27 14:49:56 -08:00
VERSION.txt VERSION.txt: this is v1.103.0 (#20583) 2026-07-23 12:06:08 -07:00
version_tailscale_test.go all: remove AUTHORS file and references to it 2026-01-23 15:49:45 -08:00
version_test.go Dockerfile: use our own Go toolchain, not the golang Docker image 2026-09-01 15:47:33 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.27. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See commit-messages.md (or skim git log) for our commit message style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.