tailscale/tailscale

Features

• Traffic Management - Proxies language model requests through a centralized gateway to manage keys and audit interactions.
• Network Connection Managers - Provides command-line tools to manage secure network tunnels and routing preferences.
• Overlay Networks - Uses a high-performance VPN protocol to establish encrypted peer-to-peer tunnels between devices.
• Access Control Policies - Enables granular network and application permissions through centralized access control lists.
• Identity Authentication - Delegates user verification to external identity services to bind network access to organizational accounts.
• Identity Provider Integrations - Authenticates users by connecting with identity providers like Google, Microsoft, or GitHub to manage access to private networks.
• Posture-Based Access Control - Restricts access to sensitive resources by requiring devices to meet specific security compliance criteria.
• Zero Trust Access - Connects remote users and devices to private resources securely without public internet exposure.
• Mesh Networking - Connects distributed devices and services into a private, encrypted mesh network.
• Traffic Proxying - Routes local traffic to a private network service from devices outside the network.
• System Services - Runs an open-source command-line networking daemon to manage connections via the kernel interface.
• Application Access Controls - Manages and monitors user access to web applications across your network using connectors that require no end-user configuration.
• Device Posture Validation - Validates security and compliance requirements before granting access to protected resources.
• Distributed Key Authorities - Manages cryptographic identity and node authorization through a decentralized signing model that ensures only verified devices join the network.
• Identity-Based Access Control - Manages network permissions by verifying user identity and device posture.
• Identity-Based SSH Access - Manages secure shell connections using existing identity providers to eliminate manual key distribution.
• Network Access Grants - Allows creation of flexible access control rules to manage device communication and resource permissions.
• Network Security Hardening - Requires cryptographic signatures from trusted nodes before allowing new devices to join or communicate.
• Secure SSH Access - Authenticates and authorizes secure shell connections using existing identity credentials.
• Control Planes - Maintains a global state of network nodes and access policies to coordinate secure connectivity.
• Access Controls - Configures access grants to limit which specific artificial intelligence models users can interact with.
• Provider Configurations - Allows entering API keys and model details to route requests to specific artificial intelligence services.
• Usage Quotas - Enforces organizational budgets and individual user spending limits to control infrastructure costs.
• Connectivity Fabrics - Bridges cloud environments and on-premises data centers into a single private network.
• Kubernetes Network Operators - Deploys a network operator within a cluster to automatically expose services and pods to a private network.
• Network Overlays - Automates the deployment of secure network overlays across cloud and on-premises environments.
• Gateway Configuration - Configures devices as gateways for local networks by enabling IP forwarding and route advertisement.
• Service Exposure - Enables secure access to local services over a private network with automated HTTPS certificate management.
• Subnet Gateways - Extends private network reach by routing traffic between the overlay mesh and isolated local network segments via designated bridge nodes.
• VPC Bridging - Deploys a subnet router on a cloud instance to provide secure and private network access to all resources within a virtual private cloud.
• Kernel Networking - Implements network protocol handling in user space to enable cross-platform compatibility.
• Awesome List - A community-curated directory that catalogs and links out to other open-source projects, rather than a standalone tool you run yourself.
• Just-in-Time Access - Provides temporary access to network resources by automating time-limited permission updates.
• Multifactor Authentication Policies - Extends identity provider security policies to network access by requiring multifactor authentication.
• Network Access Lists - Provides rule-based security policies to control traffic flow between devices and users.
• Pre-Authentication Keys - Supports automated node registration in containerized and infrastructure deployment workflows.
• Software-Defined Perimeters - Hides network resources from the public internet and grants access only to authenticated users.
• AI Request Routing - Secures, monitors, and routes language model requests using identity-based authentication and centralized telemetry.
• AI Security Gateways - Centralizes and audits access to language models to enforce security policies and track usage.
• Gateway Management - Manages proxy settings, providers, and quotas to control how artificial intelligence requests are routed.
• Networking And Proxies - WireGuard-based mesh VPN solution.
• Overlay Networks - WireGuard-based mesh networking for secure device connectivity.
• Cloud Application Connectivity - Connects cloud-hosted application services to a private network to enable secure communication between distributed nodes.
• Exit Node Traffic Routing - Routes all internet traffic from a device through a designated node to secure connections and provide geographical flexibility.
• High Availability Networking - Deploys redundant subnet routers to ensure continuous network connectivity and automatic failover.
• Virtual Machine Connectivity - Establishes private and secure tunnels to virtual machine instances in public clouds to manage remote resources.
• Automated Node Provisioning - Facilitates automated device registration using authentication keys to bypass interactive login steps.
• Identity and Access Management - Controls user access by configuring approval workflows, administrative roles, and session management.
• Network Microsegmentation - Supports dividing networks into isolated logical segments to limit security incident impact.
• Resource Access Policies - Enables access control rules by specifying allowed source and destination addresses and hostnames.
• SSH Authentication - Authorizes SSH connections using network node keys and access policies.
• AI Guardrails - Inspects and blocks incoming language model requests to enforce security and usage policies.
• Usage Analytics - Tracks artificial intelligence usage patterns and tool adoption metrics through a centralized dashboard.
• Database Connectivity - Routes database traffic through a secure network overlay to access cloud-hosted storage instances privately.
• Managed Database Connectivity - Routes database traffic through a secure network overlay to access managed cloud database instances privately.
• CLI Gateways - Interacts with the gateway using command-line tools to discover resources and execute agents.
• CI/CD Authentication Helpers - Enables secure access to private resources during automated build and deployment processes.
• Local Resource Exposure - Makes local services or files accessible to the public internet by generating a unique, encrypted URL that routes traffic directly to the resource.
• Network Addressing - Assigns domain names and virtual IP addresses to backend hosts for secure network resource access.
• Subnet Routing - Provides access to non-networked devices on a local network from within a private network.
• Credential Lifecycle Management - Enforces security standards by configuring expiration policies for authentication keys.
• Device Identity Management - Allows assigning tags to devices to manage identity and access control permissions.
• External Resource Sharing - Grants external users access to specific machines by sending invitations for secure connectivity.
• Key Revocation Protocols - Removes compromised signing keys through a multi-step, co-signed process.
• Network Firewall Integrations - Connects security appliances to the mesh network to protect communication between devices and manage traffic flow.
• SSH Encryption - Encrypts SSH traffic end-to-end using the underlying network protocol.
• SSH Key Management - Distributes SSH host keys automatically to enable seamless host recognition.
• Tagged Device Policies - Ensures consistent access management for infrastructure endpoints through tagged device expiration policies.
• AI Access Control - Performs fine-grained access control decisions on model usage and tool execution.
• Compatibility Layers - Updates base URL and authentication settings in tools to route requests through a secure proxy.
• Observability Pipelines - Routes artificial intelligence usage and event data to external observability platforms for processing.
• Container Networking Tools - Facilitates secure communication between containers by running networking clients as sidecars.
• Infrastructure-as-Code Providers - Automates network resource configuration and lifecycle management using code.
• Network Control APIs - Allows programmatic management of network status and device configurations via web APIs.
• Cryptographic Authorization - Authorizes specific nodes to sign and approve new devices joining the network.
• Device Approval Workflows - Ensures only verified hardware gains network access through an administrative review process.
• Firewall VPN Deployments - Sets up a secure virtual private network on firewall appliances to enable encrypted communication across devices.
• Identity Propagation - Injects authenticated user identity information into HTTP headers for downstream services.
• Key Expiry Management - Enables control over authentication lifecycles by managing periodic key expiration.
• Network Isolation - Restricts shared machines to incoming connections only to prevent unauthorized outbound traffic.
• Passkey Authentication - Enables passkey authentication for users joining the network as a secure alternative to traditional passwords.
• Network Flow Log Streaming - Monitors traffic patterns by streaming connection flow data to external security information and event management systems.

Star history