CheckTag validates tag for use as an ACL tag.

Clone duplicates src into dst and reports whether it succeeded.

CapabilityDebugPeer grants the ability for a peer to read this node's goroutines, metrics, magicsock internal state, etc.

CapabilityFileSharingSend grants the ability to receive files from a node that's owned by a different user.

CapabilityFileSharingTarget grants the current node the ability to send files to the peer which has this capability.

feature enabled/available.

some SSH rule reach this node.

CapabilityWakeOnLAN grants the ability to send a Wake-On-LAN packet.

CurrentCapabilityVersion is the current capability version of the codebase.

DerpMagicIP is a fake WireGuard endpoint IP address that means to use DERP.

hard NAT: STUN'ed IPv4 address + local fixed port.

server has approved.

server has explicitly rejected this machine key.

server has yet to approve.

PingDisco performs a ping, without involving IP at either end.

PingICMP performs a ping between two tailscale nodes using ICMP that is received by the target systems IP stack.

PingPeerAPI performs a ping between two tailscale nodes using ICMP that is received by the target systems IP stack.

PingTSMP performs a ping, using the IP layer, but avoiding the OS IP stack.

SignatureNone indicates that there is no signature, no Timestamp is required (but may be specified if desired), and both DeviceCert and Signature should be empty.

SignatureUnknown represents an unknown signature scheme, which should be considered an error if seen.

SignatureV1 is computed as RSA-PSS-Sign(privateKeyForDeviceCert, SHA256(Timestamp || ServerIdentity || DeviceCert || ServerShortPubKey || MachineShortPubKey)).

SignatureV2 is computed as RSA-PSS-Sign(privateKeyForDeviceCert, SHA256(Timestamp || ServerIdentity || DeviceCert || ServerPubKey || MachinePubKey)).

CapGrant grants capabilities in a FilterRule.

Debug are instructions from the control server to the client to adjust debug settings.

DERPMap describes the set of DERP packet relay servers that are available.

DERPMapView provides a read-only view over DERPMap.

DERPNode describes a DERP packet relay node running within a DERPRegion.

DERPNodeView provides a read-only view over DERPNode.

DERPRegion is a geographic region running DERP relay node(s).

DERPRegionView provides a read-only view over DERPRegion.

DNSConfig is the DNS configuration.

DNSConfigView provides a read-only view over DNSConfig.

DNSRecord is an extra DNS record to add to MagicDNS.

Endpoint is an endpoint IPPort and an associated type.

FilterRule represents one rule in a packet filter.

Hostinfo contains a summary of a Tailscale host.

HostinfoView provides a read-only view over Hostinfo.

LoginView provides a read-only view over Login.

MapRequest is sent by a client to start a long-poll network map updates.

NetInfo contains information about the host's network state.

NetInfoView provides a read-only view over NetInfo.

NetPortRange represents a range of ports that's allowed for one or more IPs.

NodeView provides a read-only view over Node.

Oauth2Token is a copy of golang.org/x/oauth2.Token, to avoid the go.mod dependency on App Engine and grpc, which was causing problems.

OverTLSPublicKeyResponse is the JSON response to /key?v=<n> over HTTPS (regular TLS) to the Tailscale control plane server, where the 'v' argument is the client's current capability version (previously known as the "MapRequest version").

PeerChange is an update to a node.

PingRequest with no IP and Types is a request to send an HTTP request to prove the long-polling client is still connected.

PingResponse provides result information for a TSMP or Disco PingRequest.

PortRange represents a range of UDP or TCP port numbers.

RegisterRequest is sent by a client to register the key for a node.

RegisterResponse is returned by the server in response to a RegisterRequest.

RegisterResponseView provides a read-only view over RegisterResponse.

Service represents a service running on a node.

SetDNSRequest is a request to add a DNS record.

SetDNSResponse is the response to a SetDNSRequest.

SSHAction is how to handle an incoming connection.

SSHPolicy is the policy for how to handle incoming SSH connections over Tailscale.

SSHPrincipal is either a particular node or a user on any node.

SSHPrincipalView provides a read-only view over SSHPrincipal.

An SSH rule is a match predicate and associated action for an incoming SSH connection.

SSHRuleView provides a read-only view over SSHRule.

TokenRequest is a request to get an OIDC ID token for an audience.

TokenResponse is the response to a TokenRequest.

User is an IPN user.

A UserProfile is display-friendly data for a user.

UserView provides a read-only view over User.

CapabilityVersion represents the client's capability level.

EndpointType distinguishes different sources of MapRequest.Endpoint values.

PingType is a string representing the kind of ping to perform.

ServiceProto is a service type.

SignatureType specifies a scheme for signing RegisterRequest messages.