Real-time MikroTik RouterOS v7 dashboard — streaming binary API, Socket.IO, Docker-ready.

MikroDash connects directly to the RouterOS API over a persistent binary TCP connection, streaming live data to the browser via Socket.IO. No page refreshes. No agents. Just plug in your router credentials and go.

• Monitor one or many MikroTik routers from a single MikroDash instance (device selector in top bar)

• Live traffic chart — per-interface RX/TX Mbps with configurable history window (1m–30m)
• System card — CPU, RAM, Storage gauges with colour-coded thresholds (amber >75%, red >90%), board info, temperature, uptime chip
• RouterOS update indicator — shows installed vs available version side by side
• Network card — animated SVG topology diagram with live wired/wireless client counts, WAN IP, LAN subnets, and latency chart (ping to 1.1.1.1)
• Connections card — total connection count sparkline, protocol breakdown bars (TCP/UDP/ICMP), top sources with hostname resolution, top destinations with geo-IP country flags
• Top Talkers — top 5 devices by active traffic with RX/TX rates
• WireGuard card — active peer list with status and last handshake

• Bell icon in topbar opens an alert history panel showing the last 50 alerts with timestamps
• Browser push notifications (when permitted) for:
  • Interface down / back up
  • WireGuard peer disconnected / reconnected
  • CPU exceeds 90% (1-minute cooldown)
  • 100% ping loss to 1.1.1.1

MikroDash is designed to run on your local network only. It has no built-in authentication, no HTTPS, and no access control.

Do not expose MikroDash directly to the internet. Doing so would allow anyone to:

• View live data from your router (traffic, clients, connections, firewall rules, logs)
• Read your WAN IP, LAN topology, and connected device information
• Monitor your network activity in real time

If you need remote access, place MikroDash behind an authenticating reverse proxy (such as Nginx with Basic Auth, Authelia, or Cloudflare Access) or access it exclusively over a VPN.

Recommended local hardening:

• Run on a non-default port and bind to your LAN interface only
• Set chmod 600 .env to protect your router credentials
• Ensure .env is listed in .gitignore and never committed to version control
• Use a dedicated read-only API user on the router (see RouterOS Setup below)

Pull and run the pre-built image directly — no need to clone the repo:

docker pull ghcr.io/secops-7/mikrodash:latest

Create your .env file:

curl -o .env https://raw.githubusercontent.com/SecOps-7/MikroDash/main/.env.example
# Edit .env — for one router set ROUTER_HOST, ROUTER_USER, ROUTER_PASS.
# For multiple routers, add ROUTER_1_*, ROUTER_2_* banks (see Environment Variables below).

Run the container:

docker run -d   --name mikrodash   --restart unless-stopped   --env-file .env   -p 3081:3081   ghcr.io/secops-7/mikrodash:latest

Or with Docker Compose — create a docker-compose.yml:

services:
  mikrodash:
    image: ghcr.io/secops-7/mikrodash:latest
    restart: unless-stopped
    env_file: .env
    ports:
      - "3081:3081"

docker compose up -d

git clone https://github.com/SecOps-7/MikroDash.git
cd MikroDash
cp .env.example .env
# Edit .env — for one router set ROUTER_HOST, ROUTER_USER, ROUTER_PASS.
# For multiple routers, add ROUTER_1_*, ROUTER_2_* banks (see Environment Variables below).
docker compose up -d

• Dashboard: http://localhost:3081
• Health check: http://localhost:3081/healthz

Create a read-only API user (recommended):

/ip service set api port=8728 disabled=no
/user group add name=mikrodash policy=read,api,!local,!telnet,!ssh,!ftp,!reboot,!write,!policy,!test,!winbox,!web,!sniff,!sensitive,!romon,!rest-api
/user add name=mikrodash group=mikrodash password=your-secure-password

To use API-SSL (TLS) instead, enable the ssl service and set ROUTER_TLS=true in your .env:

/ip service set api-ssl disabled=no port=8729

PORT=3081                    # HTTP port MikroDash listens on
ROUTER_HOST=192.168.88.1     # RouterOS IP or hostname
ROUTER_PORT=8728             # API port (8728 plain, 8729 TLS)
ROUTER_TLS=false             # Set true to use API-SSL
ROUTER_TLS_INSECURE=false    # Skip TLS cert verification (self-signed certs)
ROUTER_USER=mikrodash        # API username
ROUTER_PASS=change-me        # API password
DEFAULT_IF=ether1            # Default interface shown in traffic chart
HISTORY_MINUTES=30           # Traffic chart history window

# Optional: monitor multiple routers in one dashboard
# Preferred: bank style (easy to edit in .env)
# ROUTER_1_ID=home
# ROUTER_1_NAME=Home Router
# ROUTER_1_HOST=192.168.88.1
# ROUTER_1_USER=mikrodash
# ROUTER_1_PASS=secret
# ROUTER_1_PORT=8728
# ROUTER_1_TLS=false
# ROUTER_1_DEFAULT_IF=ether1
#
# ROUTER_2_ID=lab
# ROUTER_2_NAME=Lab Router
# ROUTER_2_HOST=10.0.0.1
# ROUTER_2_USER=mikrodash
# ROUTER_2_PASS=secret
# ROUTER_2_PORT=8729
# ROUTER_2_TLS=true
# ROUTER_2_TLS_INSECURE=true
# ROUTER_2_DEFAULT_IF=wan

# Legacy: single-line JSON (used when no ROUTER_<n>_* banks are defined)
# ROUTERS_JSON=[{"id":"home","name":"Home Router","host":"192.168.88.1","port":8728,"tls":false,"username":"mikrodash","password":"secret","defaultIf":"ether1"},{"id":"lab","name":"Lab Router","host":"10.0.0.1","port":8729,"tls":true,"tlsInsecure":true,"username":"mikrodash","password":"secret","defaultIf":"wan"}]
ROUTERS_JSON=

# Polling intervals (ms)
CONNS_POLL_MS=3000
KIDS_POLL_MS=3000
DHCP_POLL_MS=15000
LEASES_POLL_MS=15000
ARP_POLL_MS=30000
SYSTEM_POLL_MS=3000
WIRELESS_POLL_MS=5000
VPN_POLL_MS=10000
FIREWALL_POLL_MS=10000
IFSTATUS_POLL_MS=5000
PING_POLL_MS=10000

# Ping target for latency monitor
PING_TARGET=1.1.1.1

# Top-N limits
TOP_N=10
TOP_TALKERS_N=5
FIREWALL_TOP_N=15

All collectors run concurrently on a single TCP connection — no serial queuing.

MIT — see LICENSE

Third-party attributions — see THIRD_PARTY_NOTICES

MikroDash is an independent, community-built project and is not affiliated with, endorsed by, or associated with MikroTik SIA in any way. MikroTik and RouterOS are trademarks of MikroTik SIA. All product names and trademarks are the property of their respective owners.

The code for MikroDash was written with the assistance of Claude by Anthropic.