cmd/

Program addlicense adds a license header to a file.

Cloner is a tool to automate the creation of a Clone method.

The containerboot binary is a wrapper for starting tailscaled in a container.

The derper binary is a simple DERP server.

The derpprobe binary probes derpers.

get-authkey allocates an authkey using an OAuth API client https://tailscale.com/kb/1215/oauth-clients/ and prints it to stdout for scripts to capture and use.

Command gitops-pusher allows users to use a GitOps flow for managing Tailscale ACLs.

The hello binary runs hello.ts.net.

tailscale-operator provides a way to expose services running in a Kubernetes cluster to your Tailnet.

The mkmanifest command is a simple helper utility to create a '.syso' file that contains a Windows manifest file.

mkpkg builds the Tailscale rpm and deb packages.

nardump is like nix-store --dump, but in Go, writing a NAR file (tar-like, but focused on being reproducible) to stdout or to a hash with the --sri flag.

netlogfmt parses a stream of JSON log messages from stdin and formats the network traffic logs produced by "tailscale.com/wgengine/netlog" according to the schema in "tailscale.com/types/netlogtype.Message" in a more humanly readable format.

Command nginx-auth is a tool that allows users to use Tailscale Whois authentication with NGINX as a reverse proxy.

The pgproxy server is a proxy for the Postgres wire protocol.

The printdep command is a build system tool for printing out information about dependencies.

proxy-to-grafana is a reverse proxy which identifies users based on their originating Tailscale identity and maps them to corresponding Grafana users, creating them if needed.

Example usage for client command: go run cmd/speedtest -host 127.0.0.1:20333 -t 5s This will connect to the server on 127.0.0.1:20333 and start a 5 second download speedtest.

ssh-auth-none-demo is a demo SSH server that's meant to run on the public internet (at 188.166.70.128 port 2222) and highlight the unique parts of the Tailscale SSH server so SSH client authors can hit it easily and fix their SSH clients without needing to set up Tailscale and Tailscale SSH.

Command stunc makes a STUN request to a STUN server and prints the result.

The sync-containers command synchronizes container image tags from one registry to another.

The tailscale command is the Tailscale command-line client.

The tailscaled program is the Tailscale client daemon.

Program testcontrol runs a simple test control server.

testwrapper is a wrapper for retrying flaky tests, using the -exec flag of 'go test'.

The tsconnect command builds and serves the static site that is generated for the Tailscale Connect JS/WASM client.

Viewer is a tool to automate the creation of "view" wrapper types that provide read-only accessor methods to underlying fields.