Tailcat Opens Tailscale’s Data Plane

Tailcat is a clever unbundling of Tailscale: it turns sophisticated mesh networking into a lightweight, one-shot capability tunnel. Its real appeal is giving scripts and AI sandboxes secure reachability without identity and network-management overhead.

• –Userspace WireGuard, magicsock, and gVisor Netstack avoid root privileges and OS-level network configuration.
• –Short-lived connection tokens make ad hoc access dramatically simpler than VPN enrollment or port forwarding.
• –Direct UDP connections improve latency when possible, while DERP relays preserve connectivity behind difficult NATs.
• –Tokens behave like bearer credentials, so saved keys and shared addresses require careful handling.
• –The project complements rather than replaces Tailscale: it sacrifices governance, identity, auditability, and SLAs for speed and simplicity.