tailscale /

Tailscale

Live map
View repository
Snapshotmain · cfe32b8

The daemon combines coordination updates, local policy, network discovery, WireGuard, and peer-to-peer transport.

Click a building or route
Choose a path

Authenticate, receive a network map, and configure the local data plane.

System map8 components · 8 connections
130%
Tailscale: control state becomes an encrypted mesh architectureStart at tailscaled, follow control-plane state into LocalBackend and wgengine, then trace a packet through routing and magicsock.paths, store, and plat…node identity and pref…peers, keys, routes, D…network map and packet…local addresses, route…Control clienttailscaledLocalBackendNetwork mapPeers & DERPWireGuardenginemagicsockHost router
Connections
BuildingsEntryServiceComputeStorageRuntimeToolingExternal

Terms, in plain English

TailnetThe private network and policy domain shared by a set of Tailscale nodes.

How to study this repo

  1. 1
    Apply control state

    Trace a network-map update from the control client into wgengine.

  2. 2
    Program the host

    See how overlay addresses and subnet routes reach the OS router.

  3. 3
    Select a path

    Follow a peer packet through endpoint discovery and DERP fallback.