Znevna
October 14, 2026, 8:01pm
113
@Amm0 let your bot know that the vibe in this topic is the result of the previous topics opened (well the ones that remain, that didn't get merged/moved/deleted) by the same author, in the same section, about the same tool (5, this would be the 6th):
Hello everyone,
I’ve been following the discussions around TunGuard, particularly the conversations about kernel vs. userspace performance, RouterOS firewall rule ordering ("place-before=0"), and comparisons with larger overlay-network platforms such as Tailscale and ZeroTier.
A lot of the discussion has focused on TunGuard as a server-to-router transport layer. However, there is another use case that I think deserves more attention: using TunGuard as a remote management plane for MikroTik rou…
One of the most annoying things about managing remote MikroTik routers is realizing that the router you're trying to reach is sitting behind CGNAT.
No public IP.
No port forwarding.
No easy way to just open WinBox and connect.
And when you start doing this across multiple sites, things get messy quickly. Every site becomes its own little networking problem.
I wanted to get away from that.
So the idea became:
What if I could just connect my laptop to one private network and reach every rou…
When I started building TunGuard, the goal was simple: create a WireGuard server that anyone could deploy without fighting kernel modules, package managers, or complicated Linux networking. I wanted a userspace VPN that was portable, easy to install, and simple to manage.
That vision worked.
But as I kept using TunGuard in real deployments, I realized the VPN wasn't actually the hardest problem.
The hardest problem was managing remote infrastructure.
If you've ever deployed MikroTik routers …
https://forum.mikrotik.com/t/from-cgnat-prison-to-public-domain-how-a-userspace-wireguard-engine-transformed-my-distributed-mikrotik-network/273717/
Many WISP operators face the same challenge:
Remote sites without public IP addresses
Routers behind CGNAT
Changing WAN IPs
Difficult remote management across multiple locations
Avoiding exposing MikroTik management ports directly to the Internet
TunGuard is an open-source userspace WireGuard VPN server that simplifies connecting remote MikroTik routers back to a central server.
The workflow is simple:
Install TunGuard on your VPS or server
Generate a MikroTik RouterOS configuration scr…
LE: 4 remain it seems, one had posts moved into another topic, it only contains mod messages about .. the moved messages, and scheduled for deletion in 4 days. sorry about that.