NEW FEATURE: Back to Home VPN

“Available from 7.11 (currently in RC)”


Mikrotik RB4011iGS+5HacQ2HnD-IN stable ROS 7.11 he didn’t get an option Back to Home VPN.

??

They had a change of heart!
http://forum.mikrotik.com/t/v7-11rc-is-released/168431/1

I think if you had the configuration from the 7.11rc…and upgrade to 7.11stable, it keeps the configuration at least. Or at least that’s what I see.
So I don’t think it breaks for previous beta users — since it really just create the config needed for WG, the peers remain after upgrade.
Now since UI is not stable build, you cannot enable it, or setup a new BTH peers – until 7.12beta comes out (if my reading MT’s post right).

I moved straight to 7.12alpha…
Sorry if I gave bad info.

Pretty cool.

I do still buy Hex (RB 750gr3) though. They’re good spec, dual core, SD slot, IPsec acceleration, so feels like they should not be left behind. I’m not sure there is a direct replacement for that model? Maybe hap ax2 is close but they have different uses

Will this solution allow VPN via 443 only and to accept custom Root CA?
That would allow to reach the router out of cooperate networks.

Thx

Maybe something like hAP ac2, it has USB, arm CPU, 5×1Gig eth ports, wifi but you can disable that if you don’t need it. Or maybe new L009 ?

Maybe something like hAP ac2, it has USB, arm CPU, 5×1Gig eth ports, wifi but you can disable that if you don’t need it. Or maybe new L009 ?

Yes it’s close. It’s just the USB feels fragile and temporary. Although, I haven’t really been using the SD. It’s just that I think I should, and might use it, for capsman firmware updates.
Also, using a wireless router for the non-wireless role just looks confusing. Like, someone might think “is this thing working?” or something.
The rb750gr3 has been my go-to mini main-router & capsman controller.

You can disable WiFi, or you can use L009 version without wifi

Hi, new feature is really awesome. App for android and iPhone/iPad/MacBook already tested and they are great.
Will be there also app for windows ?

For windows you can use Wireguard app https://www.wireguard.com/install/
You will need to copy the config from your router, that is provided in menu “IP > Cloud > BTH wireguard”

What does “use local address” mean?

use-local-address is not for Back to Home. It is for Cloud DNS.

So what will happen if I enable use-local-address ? The Cloud DNS will be set to my local public ipv4 address?

it appears to be that way:
https://help.mikrotik.com/docs/display/ROS/Cloud#Cloud-Advanced

any chance that connection to the relay server goes via port 443?
So that I can use BTH from within restricted networks.

yes, but it does not matter for BTH. That is for Cloud DNS feature, unrelated to this topic. BTH does not care if you have public or private IP.

thanks for the clarification

I’d like to know what will be the consumption of ВТН traffic in idle mode?
(device behind a NAT; а metered Internet connection; per day;)
Is there a possibility of optimization?