tailcat: baixar versions anteriors

tailcat changelog

v0.7.0 (2026-09-19)
- --serve=exit-node servers now forward UDP flows; previously only
TCP was forwarded, so DNS, QUIC, and other UDP traffic through an
exit node went nowhere.
- Serving local ports works from Windows: the server resolves
localhost itself instead of using the hosts file, which Windows
ships without localhost entries, so the name no longer escapes to
real DNS servers. It also dials both 127.0.0.1 and ::1, reaching
services bound to only one loopback address. Official binaries also
no longer build with the netgo tag that forced Go's pure resolver
on Windows and macOS; they now use the operating system's resolver
there, like a default go build does.
(#108, reported
by @Sammy-T)
- tailcat cp now works with OpenSSH 8.7 through 8.9 clients, such
as Ubuntu 22.04's. Those versions still speak the legacy SCP
protocol unless scp -s asks for SFTP, which is all tailcat file
services accept, so copies failed. tailcat now checks whether the
installed scp understands -s and passes it when it does; older
clients without the flag are unchanged.
(#114, fixed in
#123 by
@BreezeDelegate)
- Go library: Server.Status() now includes a Peer entry per
connected client, with CurAddr and Relay to tell a direct path
from a DERP-relayed one.
(#116, reported
by @Mo3he)
- Go library: the new Server.Listen(ctx, network, address) serves
TCP and UDP ports in the standard net.Listener shape, as an
alternative to the OnTCP and OnUDP hooks; for UDP, each Accept
returns one client flow as a net.Conn. Listeners claim their
specific ports ahead of the wildcard hooks, and Listen starts the
server if it isn't running yet.
- tailcat forward takes an --open-browser flag that opens a web
browser to the forwarded local port; tailcat browse <tc-addr> is
an alias for tailcat forward --open-browser <tc-addr> 0:80.
- exec service: tailcat serve exec -- <command> runs the command
for each incoming connection with the connection as its stdin and
stdout, like inetd. With the ssh or no-auth-ssh service, the
command after -- instead replaces the shell for every session,
like OpenSSH's ForceCommand, with no shell, client-chosen command,
or SFTP offered.
- tailcat ssh to a DNS-named destination first probes the server the
way a stranger would, with no credentials, and refuses to connect if
the server hands out a shell to anyone, since an address published
in DNS is public; --skip-dns-safety-check opts out. The README,
the root help's DNS section, and serve no-auth-ssh startup now all
warn that DNS-published addresses need --allow or
--ssh-authorized-keys.
(#100)
- Fixed argument parsing under Termux on Android, whose loader inserts
the executable's path as an extra argument.
(#92, @shaunlee)
- The linux binaries now work when run directly on Android, under
Termux, adb shell, or a rooted shell. Android has no
/etc/resolv.conf, so a plain Go binary there could not resolve any
name and failed at startup fetching the DERP map; it also found no
CA roots and could not enumerate network interfaces. tailcat now
links tailscale.com's androiddns and androidbin features, which
detect Android at runtime, resolve names through Android's DNS
resolver daemon, use the system certificate store, and fall back to
a synthetic single interface. On regular Linux they do nothing.
(#117, reported
by @risharde)
- Updated the tailscale.com dependency to its 2026-09-16 main branch,
which brings data path performance work from wireguard-go and
gVisor. wireguard-go now moves each batch of packets through one
buffer of about 128 KiB instead of a separate buffer per packet,
which in upstream's iperf3 benchmarks between two Linux machines
raised throughput by 7% to 35% depending on the workload and cut
peak memory for TCP transfers by half to three quarters. Small
outbound packets such as keepalives and handshakes now use 2 KiB
buffers, so packets waiting on a peer with no active session hold
at least 97% less memory than before. gVisor's TCP stack, which
carries every tailcat c

Changelog
- ce6fedc README: document Homebrew install for macOS
- 79da910 tailcat: reject meows with a zero disco key
- deece63 flake.nix, tool/updateflakes: keep the nix vendor hash fresh automatically
- 2a48b15 tailcat: reject null regions and nodes in a ConnBlob
- 4d50a34 cmd/tailcat: keep --version working as an unadvertised alias
- 3748bfd cmd/tailcat: add an ls subcommand
- c6dfb6b README: document receiving, sending, and serving files
- 1730246 cmd/tailcat: add a recv subcommand
- 0e377d7 cmd/tailcat: add a cp subcommand
- 6e15eac tailcat: send the SSH exit-status before closing the sftp channel
- 1bf70fa cmd/tailcat: add the files service and --files flag
- 2bd0b26 tailcat: serve the SFTP subsystem, optionally rooted and access-limited
- 0bf8f4e cmd/tailcat: omit an empty --key from the ssh ProxyCommand
- 696590d cmd/tailcat: fix accidental revert of pipe_test.go "none" DERP URL
- 3132331 cmd/tailcat: add a serve subcommand
- 1fba818 tailcat: add tests for meow packet encoding and parsing
- 4b057c4 cmd/tailcat: reject genkey --client --key=default as a likely mix-up
- 9db9c6a cmd/tailcat: print requested help to stdout, not stderr
- 0c2e011 cmd/tailcat: add examples and long help to the subcommands
- 0d18092 cmd/tailcat: port the CLI to ff/v4 declarative commands
- 7be233f tailcat, cmd/tailcat: support SSH on Windows
- 16efa8c build-tags.txt: pin LF line endings, tolerate CRLF in the sync test
- 1d77269 cmd/tailcat: don't leak test binaries to the system temp dir
- 1e2cb79 build-tags.md: document the release build tag list
- 9092106 internal/buildtags: keep bakedroots in release builds
- c80e793 .github/workflows: bump the test timeout, cross-build release targets
- 3dd7671 cmd/tailcat: add an e2e test for the ping subcommand
- 6973244 cmd/tailcat: add an e2e test for --serve=no-auth-ssh and the ssh subcommand
- 6e7ba85 cmd/tailcat: add e2e tests for --serve ports and --serve=exit-node
- b361122 cmd/tailcat: extract an e2e test harness, build the child with release tags
- 28c95bc add build-tags.txt; build official releases with the trimmed tag list
- 6e84d56 internal/buildtags: add shared build tag computation, moved from wasmbuild
- 1075afa Merge pull request #34 from FenjuFu/fix/windows-test-binary
- 9372744 all: update tailscale.com, adapt to upstream and toolchain changes
- e008dbe .github/workflows, cmd/tailcat: run tests on macOS and Windows too
- 0823967 cmd/tailcat: make integration tests portable on Windows