TailSocks is an unofficial client for Tailscale networks (tailnets). It runs the Tailscale daemon in userspace-networking mode and gives your apps the tailnet through local SOCKS5 and HTTP proxies, so it does not take Android's VPN slot and runs next to another VPN, firewall or ad blocker. When you want system-wide routing, a VPN (TUN) mode is one switch away. It works with Tailscale's own coordination server and with a self-hosted Headscale server. <b>Networking</b> • Local SOCKS5 proxy (optional username and password) and HTTP proxy, optionally reachable from your local network • VPN (TUN) mode: full or split tunnel, per-app exclusions, accepted subnet routes; the daemon runs the tunnel itself, with hev-socks5-tunnel as a compatibility engine • Exit nodes; MagicDNS and split DNS through a local DNS server, with a DNS-over-HTTPS fallback • Root mode (experimental): a kernel tailscale0 interface with policy routing that steps aside when another VPN app holds the VPN slot • Restricted networks: send coordination traffic through your own SOCKS5/HTTP proxy, or through the built-in ByeDPI against SNI-based DPI • Optional auto-reconnect, a watchdog for a killed service, and start after reboot <b>Services and files</b> • Taildrop: send and receive files, including from the share sheet • Taildrive: share folders and open the shares of other devices. The daemon reads a shared folder itself, so sharing one asks for All files access; nothing else does • Serve and Funnel, Tailscale Services (svc:) • TailCat: forward ports or run a SOCKS5 proxy through a tailcat server, with no VPN and no Tailscale account; the phone can serve its own ports too <b>Management</b> • Several accounts, each with its own state, keys and settings • A console for the Tailscale Admin API (devices, DNS, users, auth keys, ACLs), protected by a biometric lock • Encrypted backups and per-account export • Automation: token-protected broadcast intents for Tasker or MacroDroid, and Android AppFunctions on