Tailcat: Tailscale without Tailscale, by Tailscale

Tailscale has released tailcat, an open-source Go package and CLI described as “Tailscale without Tailscale,” enabling netcat-like bidirectional connections over its WireGuard-based magicsock data plane without accounts, IP addresses visible to users, a control plane, administrative access, or system network reconfiguration. A server generates and shares a tailcat address containing its public key and DERP rendezvous information, while clients use that address to establish encrypted userspace TCP connections through direct NAT-traversed WireGuard links when possible or DERP relays when necessary. Tailcat can pipe connections to standard output, support SOCKS-based use by otherwise unaware programs, and operate entirely in userspace without TUN devices or routing changes. Originally created as an experimental project, it became useful for customer scenarios and for connecting ephemeral, sandboxed, or untrusted systems, including AI-agent-managed virtual machines and specialized hardware. Tailscale says the project broadens access to parts of its open-source networking stack, may support uses such as IoT, peer-to-peer games, and distributed GPUs, and can be paired with self-hosted DERP infrastructure or limited, potentially commercial Tailscale-hosted relay services.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.