tailscale builds a WireGuard mesh network, and up registers this machine with your account, authenticating via a browser or auth key and opening a secure tunnel to every other device in your tailnet. The first run prints a login URL. Subsequent up commands simply ensure the machine stays connected.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.