Tailscale 发布开源安全隧道工具 Tailcat

Tailscale 于 2026 年 8 月在 TailscaleUp 会议上正式发布了开源工具 Tailcat 1。该工具基于 Tailscale 的 magicsock、WireGuard 和 DERP 等数据平面构建，无需依赖控制平面即可建立点对点加密隧道，功能类似于 netcat 1。用户无需注册 Tailscale 账户，也无需 root 或管理员权限，即可通过命令行界面（CLI）或 Go 库建立端到端加密连接 1。此外，Tailcat 支持 TCP 端口转发、SSH、SOCKS 代理以及 exit node 等多种应用场景 1。

在技术实现上，Tailcat 的所有流量均通过 WireGuard 进行端到端加密 1。其初始连接通过 DERP 中继进行引导，随后尝试 NAT 穿透以升级为直连 UDP 连接 1。该项目是 Tailscale 开源组件的重新组合，起源于 2023 年 9 月，最初名为 derpcat 1。

Tailscale officially released Tailcat, an open-source tool for creating secure peer-to-peer tunnels, at the TailscaleUp conference in August 2026 1. Functioning similarly to netcat, the utility enables users to establish end-to-end encrypted connections through a command-line interface or a Go library without needing a Tailscale account or root or administrative privileges 1.

Built as a remix of Tailscale's open-source components, Tailcat operates on the company's data plane—utilizing magicsock, WireGuard, and DERP—without requiring a control plane 1. All traffic is end-to-end encrypted via WireGuard, with initial connections bootstrapped through DERP relays before attempting NAT traversal to upgrade to direct UDP connections 1. The tool supports multiple scenarios, including TCP port forwarding, SSH, SOCKS proxy, and exit node usage 1. The project originally started in September 2023 under the initial name derpcat 1.