Tailscale Releases tailcat: A Secure Netcat Alternative

Tailscale released tailcat, a netcat alternative that runs over its encrypted data plane, bypassing the control plane entirely. The tool enables port listening and raw data transfer between nodes on a Tailscale network without coordination from Tailscale’s coordination servers.

For operators managing private infrastructure, this removes a common failure mode: debugging service connectivity over Tailscale previously required either SSHing to a node or relying on tailscale ping and HTTP health checks. With tailcat, you can directly test arbitrary TCP/UDP ports between machines with the same WireGuard-level encryption, but without the overhead of control-plane dependency. That makes it viable for air-gapped or degraded-network troubleshooting where control-plane access is intermittent. It also lowers the barrier for ad-hoc data piping between ephemeral environments, replacing insecure or complex alternatives like nc over public IPs or port-forwarding through bastions. The strategic signal is that Tailscale is doubling down on the data plane as a general-purpose transport — expect more utilities that assume the network is already secure, not something to bolt on per tool.