Headscale is an open-source, self-hosted implementation of the Tailscale control plane. It provides a complete VPN solution including user management, node registration, policy enforcement (ACLs, SSH rules, route approvals), API services (v1 and v2), DERP relay capabilities, MagicDNS, and OAuth/OIDC integration. The architecture follows a modular monolith pattern with clear separation between CLI, API, core application logic, state management, policy engine, database layer, and network mapping components. Key entry points include the main CLI command (cmd/headscale/headscale.go) and various subcommands for administration, along with HTTP API handlers for client and management interactions. The system manages the complete lifecycle of a tailnet: authenticating devices, assigning WireGuard keys and IP addresses, enforcing access policies, and distributing network map updates to connected clients.
Tailscale is a production-grade mesh VPN application that creates secure WireGuard-based networks between devices. The repository implements a complete VPN solution: a daemon (`tailscaled`) that manages networking, a CLI (`tailscale`) for user interaction, a DERP relay server for NAT traversal, a Kubernetes operator, a WebDAV-based file sharing system (Taildrive), an SSH server, a DNS resolver, and a web-based management UI. The architecture is modular with feature flags via build tags, extensive platform support (Linux, Windows, macOS, iOS, Android, FreeBSD, etc.), and a plugin-style hook system for optional components (port mapping, app connectors, TPM attestation, etc.). Key data flows include control plane communication via Noise protocol, peer-to-peer connections with NAT traversal (STUN, PCP, UPnP), DNS configuration through OS-specific managers, and file transfers via Taildrop. External dependencies include WireGuard, gVisor netstack, Kubernetes client-go, and AWS SDK. The codebase demonstrates strong engineering practices: extensive tests (unit, integration, VM-based), immutable view types, code generation for cloning and serialization, and careful concurrency with custom utilities like sharded maps and event buses.
Shadowbroker is a full-stack intelligence platform that aggregates real-time OSINT data from 60+ public sources into a geospatial dashboard with secure mesh networking capabilities. The architecture consists of a Next.js/React frontend with MapLibre GL visualization, a Python/FastAPI backend handling data fetching and mesh protocols, and a Tauri-based desktop application for local operation. Key features include aircraft/ship/satellite tracking, encrypted Wormhole messaging, InfoNet reputation/governance system, Agentic AI channel for automated analysis, OSINT reconnaissance tools, and time machine snapshot playback. The platform emphasizes security through SSRF protection, HMAC authentication, and privacy-preserving mesh communications while providing extensibility via toggleable data layers and plugin-like agent skills.
This repository is an Android plugin for the Android Team Awareness Kit (ATAK) that integrates with Meshtastic mesh networking technology. It enables tactical communication capabilities including position sharing, messaging, voice memos, file transfer, and external GPS functionality over Meshtastic's low-power, long-range mesh network. The application follows a modular architecture with separate components for mesh service management, CoT (Cursor on Target) event processing, voice encoding/decoding using Codec2, and reliable file transfer using fountain codes. The codebase combines Java/Kotlin for Android components with C/C++ for the Codec2 audio codec and STM32 microcontroller implementations, reflecting its dual purpose as both an Android application and embedded communications system.