MikroTik RouterOS

RouterOS is the network operating system that Latvia-based MikroTik builds on the Linux kernel. Besides RouterBOARD, CCR and CRS hardware, it runs on x86 servers and hypervisors as CHR (Cloud Hosted Router). The same configuration model applies from a small home device to a core router, which is why it is so common in ISP, wireless ISP (WISP) and enterprise networks.

Key capabilities include static and dynamic routing (OSPF, BGP), a stateful firewall and NAT, rate limiting with Simple Queues and Queue Trees, PPPoE server and client, DHCP, VLANs and bridging, IPsec, OpenVPN and WireGuard tunnels, a RADIUS client, a built-in Hotspot (captive portal) and centralised management of wireless access points. RouterOS v7, released in 2021, introduced a new routing engine, WireGuard, multiple routing tables, RPKI support and a REST API.

Devices are managed through the Winbox application, the WebFig web interface, SSH/CLI and the API (port 8728, or 8729 over TLS). Hardware ships with a licence level (for example L4 on CPEs and L6 on high-end products) that defines certain tunnel and wireless client limits. CHR applies interface speed limits according to its licence type.

The most common field mistakes are weak admin passwords, Winbox and API services exposed to the internet, and outdated firmware. The widely exploited 2018 Winbox vulnerability (CVE-2018-14847) is the best-known example. Management services should be reachable only from trusted networks, the stable or long-term release channel should be tracked regularly, and configuration backups should be collected centrally.