tailscale/tailcat

like netcat, but over Tailscale's data plane, without Tailscale's control plane

Open original source ↗

From the publisher

README & documentation

Source preview

Read the project’s overview, installation instructions and usage examples. The original README is the source of truth.

"Tailscale without Tailscale, by Tailscale" Tailcat is a remix of Tailscale open source pieces to act like netcat, but over Tailscale's data plane, without Tailscale's control plane. Tailscale's data plane (magicsock, internally) gives you point-to-point WireGuard®-encrypted tunnels between two machines with DERP as the NAT-hole-punching communication side channel and the ultimate relay-of-last-resort if NAT traversal fails. Instead of using the Tailscale control plane, all tailcat connection metadata is exchanged out of band, however you want. The tailcat CLI (in cmd/tailcat) is built on the tailcat Go library (importable as github.com/tailscale/tailcat). Whether you use tailcat as a CLI tool or library, one side runs a tailcat server (listener) and gets back a short tailcat address. The other side passes that tailcat address to tailcat's client side to connect. All traffic between the two is encrypted end-to-end with WireGuard. The initial connection bootstraps through a DERP server (see below), and then magicsock…

tailscale/tailcat on GitHub A short preview, not the full document.

Read the full README ↗ · Preview checked 2026-11-13T13:26:29.572Z

Inside the original README — Document outline
  1. Tailcat
  2. Install
  3. Usage
  4. Pipe stdin/stdout between two machines
  5. Expose local ports through the tunnel
  6. Forward local ports to a tailcat server
  7. Open a browser to a tailcat server
  8. Public-key-authenticated SSH server
  9. Auth-free SSH server
  10. Run a command per connection
  11. Send and receive files
  12. Measure throughput and latency

Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.

Links from the README

References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.

Documentation belongs to its respective authors. Reported project/model license: BSD-3-Clause. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.

What this repository does

like netcat, but over Tailscale's data plane, without Tailscale's control plane

Repository facts

Owner
tailscale
Primary language
Go
Stars
9,687
Forks
443
Open issues + pull requests
41
License
BSD-3-Clause
Archived
No
Default branch
main
Created
2024-10-29T17:21:12.000Z
Last push
2026-11-05T15:10:23.000Z

Topics and intended use

No topics were included in the latest source metadata.

Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.

Evaluate before installing

Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.

README and project files

Issues and maintenance discussion

Releases and changelog

Source and freshness

Source: GitHub. Metadata observed 2026-11-14T12:21:54.654Z. Daily imports are snapshots, not real-time monitoring.

Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.

Open original source

Related repositories

avelino/awesome-go

ollama/ollama

golang/go

kubernetes/kubernetes

JuliusBrussee/caveman

netdata/netdata