cmd/
directory v1.92.3
Go to latest Published: Dec 16, 2025 License:BSD-3-Clause
Opens a new window with list of versions in this module.
Latest Latest
This package is not in the latest version of its module.
Opens a new window with license information.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
- Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
- Tagged version
Modules with tagged versions give importers more predictable builds.
- Stable version
When a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Open Source Insights
Directories¶
| Path | Synopsis |
|---|---|
Program addlicense adds a license header to a file. | Program addlicense adds a license header to a file. |
The build-webclient tool generates the static resources needed for the web client (code at client/web). | The build-webclient tool generates the static resources needed for the web client (code at client/web). |
checkmetrics validates that all metrics in the tailscale client-metrics are documented in a given path or URL. | checkmetrics validates that all metrics in the tailscale client-metrics are documented in a given path or URL. |
cigocacher is an opinionated-to-Tailscale client for gocached. | cigocacher is an opinionated-to-Tailscale client for gocached. |
Cloner is a tool to automate the creation of a Clone method. | Cloner is a tool to automate the creation of a Clone method. |
clonerex Package clonerex is an example package for the cloner tool. | Package clonerex is an example package for the cloner tool. |
connector-gen is a tool to generate app connector configuration and flags from service provider address data. | connector-gen is a tool to generate app connector configuration and flags from service provider address data. |
The containerboot binary is a wrapper for starting tailscaled in a container. | The containerboot binary is a wrapper for starting tailscaled in a container. |
The derper binary is a simple DERP server. | The derper binary is a simple DERP server. |
The derpprobe binary probes derpers. | The derpprobe binary probes derpers. |
The dist command builds Tailscale release packages for distribution. | The dist command builds Tailscale release packages for distribution. |
The featuretags command helps other build tools select Tailscale's Go build tags to use. | The featuretags command helps other build tools select Tailscale's Go build tags to use. |
get-authkey allocates an authkey using an OAuth API client https://tailscale.com/s/oauth-clients and prints it to stdout for scripts to capture and use. | get-authkey allocates an authkey using an OAuth API client https://tailscale.com/s/oauth-clients and prints it to stdout for scripts to capture and use. |
Command gitops-pusher allows users to use a GitOps flow for managing Tailscale ACLs. | Command gitops-pusher allows users to use a GitOps flow for managing Tailscale ACLs. |
The hello binary runs hello.ts.net. | The hello binary runs hello.ts.net. |
The jsonimports tool formats all Go source files in the repository to enforce that "json" imports are consistent. | The jsonimports tool formats all Go source files in the repository to enforce that "json" imports are consistent. |
k8s-nameserver is a simple nameserver implementation meant to be used with k8s-operator to allow to resolve magicDNS names associated with tailnet proxies in cluster. | k8s-nameserver is a simple nameserver implementation meant to be used with k8s-operator to allow to resolve magicDNS names associated with tailnet proxies in cluster. |
tailscale-operator provides a way to expose services running in a Kubernetes cluster to your Tailnet. | tailscale-operator provides a way to expose services running in a Kubernetes cluster to your Tailnet. |
generatecommand The generate command creates tailscale.com CRDs. | The generate command creates tailscale.com CRDs. |
k8s-proxy proxies between tailnet and Kubernetes cluster traffic. | k8s-proxy proxies between tailnet and Kubernetes cluster traffic. |
internal/config Package config provides watchers for the various supported ways to load a config file for k8s-proxy; currently file or Kubernetes Secret. | Package config provides watchers for the various supported ways to load a config file for k8s-proxy; currently file or Kubernetes Secret. |
The mkmanifest command is a simple helper utility to create a '.syso' file that contains a Windows manifest file. | The mkmanifest command is a simple helper utility to create a '.syso' file that contains a Windows manifest file. |
mkpkg builds the Tailscale rpm and deb packages. | mkpkg builds the Tailscale rpm and deb packages. |
mkversion gets version info from git and outputs a bunch of shell variables that get used elsewhere in the build system to embed version numbers into binaries. | mkversion gets version info from git and outputs a bunch of shell variables that get used elsewhere in the build system to embed version numbers into binaries. |
nardump is like nix-store --dump, but in Go, writing a NAR file (tar-like, but focused on being reproducible) to stdout or to a hash with the --sri flag. | nardump is like nix-store --dump, but in Go, writing a NAR file (tar-like, but focused on being reproducible) to stdout or to a hash with the --sri flag. |
The natc command is a work-in-progress implementation of a NAT based connector for Tailscale. | The natc command is a work-in-progress implementation of a NAT based connector for Tailscale. |
ippool ippool implements IP address storage, creation, and retrieval for cmd/natc | ippool implements IP address storage, creation, and retrieval for cmd/natc |
netlogfmt parses a stream of JSON log messages from stdin and formats the network traffic logs produced by "tailscale.com/wgengine/netlog" according to the schema in "tailscale.com/types/netlogtype.Message" in a more humanly readable format. | netlogfmt parses a stream of JSON log messages from stdin and formats the network traffic logs produced by "tailscale.com/wgengine/netlog" according to the schema in "tailscale.com/types/netlogtype.Message" in a more humanly readable format. |
Command nginx-auth is a tool that allows users to use Tailscale Whois authentication with NGINX as a reverse proxy. | Command nginx-auth is a tool that allows users to use Tailscale Whois authentication with NGINX as a reverse proxy. |
The omitsize tool prints out how large the Tailscale binaries are with different build tags. | The omitsize tool prints out how large the Tailscale binaries are with different build tags. |
The pgproxy server is a proxy for the Postgres wire protocol. | The pgproxy server is a proxy for the Postgres wire protocol. |
The printdep command is a build system tool for printing out information about dependencies. | The printdep command is a build system tool for printing out information about dependencies. |
The proxy-test-server command is a simple HTTP proxy server for testing Tailscale's client proxy functionality. | The proxy-test-server command is a simple HTTP proxy server for testing Tailscale's client proxy functionality. |
proxy-to-grafana is a reverse proxy which identifies users based on their originating Tailscale identity and maps them to corresponding Grafana users, creating them if needed. | proxy-to-grafana is a reverse proxy which identifies users based on their originating Tailscale identity and maps them to corresponding Grafana users, creating them if needed. |
The sniproxy is an outbound SNI proxy. | The sniproxy is an outbound SNI proxy. |
Example usage for client command: go run cmd/speedtest -host 127.0.0.1:20333 -t 5s This will connect to the server on 127.0.0.1:20333 and start a 5 second download speedtest. | Example usage for client command: go run cmd/speedtest -host 127.0.0.1:20333 -t 5s This will connect to the server on 127.0.0.1:20333 and start a 5 second download speedtest. |
ssh-auth-none-demo is a demo SSH server that's meant to run on the public internet (at 188.166.70.128 port 2222) and highlight the unique parts of the Tailscale SSH server so SSH client authors can hit it easily and fix their SSH clients without needing to set up Tailscale and Tailscale SSH. | ssh-auth-none-demo is a demo SSH server that's meant to run on the public internet (at 188.166.70.128 port 2222) and highlight the unique parts of the Tailscale SSH server so SSH client authors can hit it easily and fix their SSH clients without needing to set up Tailscale and Tailscale SSH. |
Command stunc makes a STUN request to a STUN server and prints the result. | Command stunc makes a STUN request to a STUN server and prints the result. |
The stund binary is a standalone STUN server. | The stund binary is a standalone STUN server. |
The stunstamp binary measures round-trip latency with DERPs. | The stunstamp binary measures round-trip latency with DERPs. |
The sync-containers command synchronizes container image tags from one registry to another. | The sync-containers command synchronizes container image tags from one registry to another. |
systray is a minimal Tailscale systray application. | systray is a minimal Tailscale systray application. |
The tailscale command is the Tailscale command-line client. | The tailscale command is the Tailscale command-line client. |
cli Package cli contains the cmd/tailscale CLI code in a package that can be included in other wrapper binaries such as the Mac and Windows clients. | Package cli contains the cmd/tailscale CLI code in a package that can be included in other wrapper binaries such as the Mac and Windows clients. |
cli/ffcomplete Package ffcomplete provides shell tab-completion of subcommands, flags and arguments for Go programs written with ffcli. | Package ffcomplete provides shell tab-completion of subcommands, flags and arguments for Go programs written with ffcli. |
cli/ffcomplete/internal Package internal contains internal code for the ffcomplete package. | Package internal contains internal code for the ffcomplete package. |
cli/jsonoutput Package jsonoutput provides stable and versioned JSON serialisation for CLI output. | Package jsonoutput provides stable and versioned JSON serialisation for CLI output. |
The tailscaled program is the Tailscale client daemon. | The tailscaled program is the Tailscale client daemon. |
childproc Package childproc allows other packages to register "tailscaled be-child" child process hook code. | Package childproc allows other packages to register "tailscaled be-child" child process hook code. |
tailscaledhooks Package tailscaledhooks provides hooks for optional features to add to during init that tailscaled calls at runtime. | Package tailscaledhooks provides hooks for optional features to add to during init that tailscaled calls at runtime. |
Program testcontrol runs a simple test control server. | Program testcontrol runs a simple test control server. |
testwrapper is a wrapper for retrying flaky tests. | testwrapper is a wrapper for retrying flaky tests. |
flakytest Package flakytest contains test helpers for marking a test as flaky. | Package flakytest contains test helpers for marking a test as flaky. |
Program tl-longchain prints commands to re-sign Tailscale nodes that have long rotation signature chains. | Program tl-longchain prints commands to re-sign Tailscale nodes that have long rotation signature chains. |
The tsconnect command builds and serves the static site that is generated for the Tailscale Connect JS/WASM client. | The tsconnect command builds and serves the static site that is generated for the Tailscale Connect JS/WASM client. |
wasmcommand The wasm package builds a WebAssembly module that provides a subset of Tailscale APIs to JavaScript. | The wasm package builds a WebAssembly module that provides a subset of Tailscale APIs to JavaScript. |
The tsidp command is an OpenID Connect Identity Provider server. | The tsidp command is an OpenID Connect Identity Provider server. |
The tta server is the Tailscale Test Agent. | The tta server is the Tailscale Test Agent. |
Package vet is a tool to statically check Go source code. | Package vet is a tool to statically check Go source code. |
jsontags Package jsontags checks for incompatible usage of JSON struct tags. | Package jsontags checks for incompatible usage of JSON struct tags. |
Viewer is a tool to automate the creation of "view" wrapper types that provide read-only accessor methods to underlying fields. | Viewer is a tool to automate the creation of "view" wrapper types that provide read-only accessor methods to underlying fields. |
tests Package tests serves a list of tests for tailscale.com/cmd/viewer. | Package tests serves a list of tests for tailscale.com/cmd/viewer. |
The vnet binary runs a virtual network stack in userspace for qemu instances to connect to and simulate various network conditions. | The vnet binary runs a virtual network stack in userspace for qemu instances to connect to and simulate various network conditions. |
Command xdpderper runs the XDP STUN server. | Command xdpderper runs the XDP STUN server. |
Click to show internal directories.
Click to hide internal directories.