Recommend Mikrotik for running Container

Hi Guys,

I’m planning to buy a new mikrotik device to replace my old mikrotik (rb951ui-2hnd, not supported container).
Basically, I need to run Container (Adguard Home) on this new device.

But I don’t know what the most recommended Mikrotik device is for running containers for the long term.
For now, I have two candidates:
HaP AX lite L41G-2axD

  • RB450GX4

Please, if you guys have any reviews or recommendations, please let me know.

AX Lite definitely not ! It has no storage expansion options and its arm32.
Second one is also arm32 so not really future proof.

For future safety you need to look at arm64 devices, storage expansion options (USB3 and/or M.2 or alike) and as much RAM or local storage as possible.

I use RB5009. I even run containers on AX3.
Others have CCR devices.

Personally I am still debating with myself if it’s a good idea to run containers on a router … there are tiny PCs nowadays, relatively cheap, which are way better suited as far as container performance is concerned.

Hi holvoetn,

Thanks for the advice,
The actual problem is because our DNS from ISP really sucks,
So i think build some DNS query and tuning would be great to handle the DNS from ISP.
I’m using 250Mbps Connection for 5-10 people at home.
also my concern with my electric bill :smiley: :smiley:

hap ax lite had a new generation cpu then RB450GX4,
but for the external storage i can use sdcard on RB450GX4,

So better to using RB450GX4 then AX lite?
Or Build x86 with Mikrotik license using mini pc?

The RB450GX4 is also a 32bit ARM processor.
And SD cards wear out very fast with the risk you container crashes.Which means with ADguard you do not have a dns anymore.
I do not know what your budget is but I for sure would go for the RB5009 or AX3.

At the moment I have the RB4011 with no external storage solution and a 32bit cpu. And both cause limitations with current ROS versions when you want to use i.e. containers and / or zerotier.
Zerotier is slow with a 32bit cpu as are containers. Because the RB4011 can not use external storage you have to install the containers on internal storage with the risk you wear out the internal storage to quick.

Hi zandhaas,

I Agree for choosing ARM 64bit for future update ROS.
My option now is hap AX Lite or hap AX3,

Actually i wanna testing first with hap ax lite after running Adguard home container,
because for home use i think the resources of hap ax lite would be enough.

And also hap ax already ARM 64bit right?

AX3: yes
AX Lite: no.

really?
because from the brochures from mikrotik website it said ARM64bit wih RouterOS 32bit for AX Lite
CMIIW

So the best option is AX 3?

You have to read everything from that brochure:

ARM 64bit (RouterOS 32bit)

Also, I have AX Lite at home and with client installations.
It says ARM, not ARM64.

So even the ARM is 64bit, but it cannot installed RouterOS 64bit?

It is what it is for now.
So if you want to look at AX-line, AX3 is your only option.

Edit: actually, there is also Chateau AX but that one costs a multitude of AX3…

Is a ‘running container’ different from a stationary container?

I think you need a faster CPU to keep pace with it. :laughing:

Touche!!

I may be not getting something, but…

If DNS is Your only problem, wouldn’t just making it use 1.1.1.1, 8.8.8.8, 8.8.4.4 - or something else - solve the problem? Better yet: wouldn’t letting the router do the DNS query solve all the problems?

Mind, my ISP has a good DNS, so I’m using theirs. Don’t know if there are problems with my suggestions. But…

Dear holvoetn ,
How about AX2?
Seems its arm 64, ros 64, right?
Will it fit for small conainer (not for dns) running with internal flash ?

You shouldnt use the internal flash for containers. Way too many writes.

You could try ram disk but that requires enough ram and everything on there will get wiped on powerloss

Thank you , but let me share real case comparison.
2 different ax2 with pretty same configs:

  1. AX2 with no containers, running native ipsec client , no wifi
    uptime: 1d 05:18:32
    sector writes since reboot: 2 020
    total sector writes: 124 780

  2. AX2 , running container (amneziaWG client), +wifi
    uptime: 1d 02:34:53
    sector writes since reboot: 931
    total sector writes: 208 960

Am I understanding correctly, that my particular container is harmless for internal flash ?

In my personal opinion, you only need a humble solution to run a 250meg symmetrical line. For this I recommend the basic HAP AC square which has a 900 Mhz arm CPU with auto frequency adjustment between 400 and 900. It has virtually no free space internally but an ancient 4 gig stock-standard USB 2.0 flash card to extend extend storage space to accommodate Unbound, and likely pi-hole running on the same device.

The above mentioned RB5009 and AX3 is likely an overkill for what you want to achieve.

Also if you have internet hungry tenant it’s best you limit the CPU to 700 or lower or upgrade the power supply to a higher amp limit than the power supply provided by factory.

No, I strongly disagree. Ac2 definitely wrong choice.
I use containers for VPN tunnels (clients only) on 4011, ax2, ax3, ac3.
All with internal flash except of ax3.

Ac2 - worst device ever in terms of containers. Had a several days of a struggle with external usb flash.
It just hangs after half of day of very unstable work.
It was an early version with 128 ram, most of ac2 has got 256.
The only packages I had : ros 7 + container.
Ac2 should be thrown away as total garbage.
Top performance (cpu usage for mangling and vpn tunnel) - 4011, then ax3, then ax2. The slowest one - ac3, it has got usb , but its slow comparing to ax2.

I think ax lite should be ok.
Its cheap if you buy it used and its capable of containers.

Also, avoid of buying hex refresh, as it has got another incompatible arm v5, which is not compatible with other.
http://forum.mikrotik.com/t/issue-with-container-not-working-on-new-hex-refresh-e50ug/180198/1