# Tailcat 七平台发布包

## X 七条串文

### 1

今天 GitHub Trending 全球 Today 前三名都已经在实验田做过，我顺延测试第 4 名 Tailcat。它想做一件很直接的事，不登录 Tailscale 账号，也能交换一个令牌建立 WireGuard 加密连接。剑的 AI 实验室 https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

### 2

官方源码来自 Tailscale。服务端运行后给出连接令牌，客户端拿令牌连接。能打洞就升级成点对点 UDP，失败就走 DERP 中继，不改系统路由，也不要求 root。完整来源与实验边界 https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

### 3

首轮直接失败。容器里没有 Go，`go: command not found`。我按项目的 go.mod 下载官方 Go 1.26.5，先核对 SHA-256，再放进隔离目录继续。种子区、播种区和命令记录都在这里 https://jianailab.com/experiments/tailcat-no-account-encrypted-tunnel-test

### 4

完整测试没有全通过。6 组网络集成测试被容器的 netlink 权限挡住，错误是 `operation not permitted`。所以今天不能说双端文字、文件、SSH 或 SOCKS5 已经跑通。真实失败记录 https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

### 5

能独立核验的部分继续做。CLI 编译成功，版本 v0.2.0，文件 30,393,371 字节。连接令牌、畸形公钥拒绝、DERP 缓存、SOCKS 地址、SSH 目标和 Web demo 等 11 组测试通过。成果文件 https://jianailab.com/experiments/tailcat-no-account-encrypted-tunnel-test

### 6

我让 Tailcat 真实生成了一枚服务端连接令牌，再用官方 parse 子命令解析。JSON 里能看到 WireGuard 公钥与自定义 DERP 节点。私钥没有进入公开包。完整收成包 https://jianailab.com/experiments/tailcat/tailcat-harvest-pack.zip

### 7

今天的结论很窄。Tailcat 能编译，核心逻辑、令牌和 Web demo 测试通过；真实两台设备传输仍待复测。下一步会用两台普通机器记录 DERP、直连升级、延迟、吞吐和文件哈希。作者也可认领、纠正或指定测试 https://jianailab.com/claim/tailscale/tailcat

## 小红书

标题

不用账号也能打通加密隧道吗，我实测了 Tailcat

正文

今天按 GitHub Trending 去重规则测试了第 4 名 Tailcat。

它来自 Tailscale。两边交换一段连接令牌，就能尝试建立 WireGuard 加密连接，不要求 Tailscale 账号，也不改系统路由。

实测结果

官方 Go 1.26.5 校验并安装成功

Linux CLI 编译成功，版本 v0.2.0

11 组核心测试通过

服务端令牌生成和解析成功

完整集成测试有 6 组被容器 netlink 权限挡住

因此我没有把它写成双端传输已经通过。文字、文件、SSH 和 SOCKS5 仍需要两台真实设备复测。

完整报告和下载包在剑的 AI 实验室

https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

#GitHub #开源项目 #Tailscale #WireGuard #网络工具 #程序员工具

## Instagram

Tailcat is netcat-like encrypted transport built from Tailscale’s data plane without requiring a Tailscale account.

Today’s verified result

CLI built successfully on Go 1.26.5

11 selected core tests passed

Server token generation and parsing worked

6 privileged network integration tests were blocked by container netlink restrictions

Real two-device transfer is still unverified. Full evidence at https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

#opensource #github #tailscale #wireguard #networking #golang

## TikTok

GitHub Trending 第 4 名 Tailcat 到底能不能用

我先碰到环境没有 Go，补上官方 Go 1.26.5 后成功编译 CLI。11 组核心测试通过，连接令牌也真实生成并解析了。完整双端测试仍被容器 netlink 权限挡住，所以没有冒充文件传输已经成功。

完整报告 https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

## DEV English article

Title

I Built Tailcat and Tested Its Token Path Without a Tailscale Account

Body

Tailcat was the highest-ranked eligible repository in GitHub Trending Today after Jian AI Lab skipped three projects that had already completed the full experiment cycle.

The project reuses Tailscale’s data-plane components to provide a netcat-like encrypted tunnel without the Tailscale control plane. A server prints a connection token. A client receives that token out of band. WireGuard encrypts traffic, DERP provides rendezvous and relay fallback, and NAT traversal can upgrade the connection to direct UDP.

The first run failed because the container had no Go installation. I downloaded the official Go 1.26.5 Linux archive, verified its published SHA-256, and kept the toolchain inside the isolated experiment directory.

The full test suite did not pass. Six network integration tests required netlink route access that the container does not permit. Two CLI integration tests later hit a nil pointer while automatic DERP region discovery had no usable network report. I kept these failures instead of claiming end-to-end success.

The CLI did build successfully as v0.2.0. Eleven selected top-level tests passed across token encoding, malformed key rejection, DERP map caching, wire fields, SOCKS address classification, SSH destination handling, listen-address normalization, and the web demo handler.

I then generated a server key with a custom DERP hostname, produced a connection token, and parsed it with Tailcat itself. The result contained the expected WireGuard public key and DERP node metadata. A client public key was also generated. Private keys stayed in the isolated workspace and are not part of the public harvest package.

The verified boundary is clear. Source build, CLI, token generation, token parsing, and selected core logic worked. Real two-device text, file, port, SSH, and SOCKS5 transfer remain unverified.

Full report and artifacts

https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

## 知乎视频简介

我把 GitHub Trending 第 4 名 Tailcat 按真实流程跑了一遍。视频保留第一次缺 Go 的失败、完整测试被 netlink 权限挡住的记录，以及后续 CLI 编译、11 组核心测试、服务端令牌生成和解析结果。双端传输仍待两台真实设备复测。

报告 https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test

## 抖音说明

不用 Tailscale 账号也能交换令牌建立加密隧道。今天验证了 Tailcat 的构建、11 组核心测试和令牌路径，完整双端传输因容器网络权限没有完成。失败和成功都保留在报告里。

## 作者邀请草稿

Hi @Tailscale, Jian AI Lab selected tailcat as today’s highest-ranked eligible GitHub Trending project. We built v0.2.0, passed 11 selected core tests, generated and parsed a server token, and preserved six integration failures caused by restricted container netlink access. We did not claim two-device transfer. You’re welcome to claim, correct, supplement, or suggest a real-device test. https://jianailab.com/reports/tailcat-no-account-encrypted-tunnel-test