Technology
Networking
MikroTik
Advanced routing at low cost with RouterOS
What it is
MikroTik is a network hardware manufacturer built around RouterOS, its own operating system, known for offering advanced routing features — BGP, VPN, QoS, traffic shaping — at a hardware cost far below traditional enterprise vendors. It's a regular tool in DITAP Core projects where budget is tight but routing complexity is real.
We treat RouterOS as a specialist tool: we deploy it where its routing depth actually earns its keep, not as a default choice for every project.
When we recommend it
We recommend MikroTik when:
- The client needs advanced routing features — multiple WANs, BGP, site-to-site VPN — without enterprise-brand licensing costs.
- It's a secondary or backup site where investing in the same standard as the main site isn't justified.
- The project requires detailed multi-WAN failover (for example, combining fiber and Starlink) with specific routing rules.
- There's technical expertise in-house or at DITAP available to operate RouterOS, which has a steeper learning curve than other interfaces.
- The project needs dynamic routing (OSPF, BGP) between several of the client's own sites, something many mid-range devices don't offer.
How we implement it
Since RouterOS is powerful but demanding, our implementation prioritizes documentation:
- Firewall rules, VLANs, and VPN tunnels configured to the client's specific topology, not generic templates.
- QoS and traffic-shaping design to prioritize critical traffic (VoIP, video surveillance) over general traffic.
- Integration with other vendors' switches and access points (frequently UniFi) on the same network.
- Detailed configuration documentation — essential in RouterOS, where poor documentation makes maintenance by someone else nearly impossible.
- Periodic configuration backup and a documented rollback plan before any major change on production equipment.
Alternatives
MikroTik isn't always the right call against other options we also implement:
Ubiquiti UniFi
a simpler interface and better WiFi integration, with less advanced routing depth than RouterOS.
Cisco Meraki
a better fit when the client needs formal factory support and can't rely on manual configuration.
pfSense / OPNsense
an open-source firewall alternative on x86 hardware, more focused on perimeter security than ISP-style routing.
DITAP is not an official partner of this vendor and holds no certification or exclusive commercial agreement with it. This page describes our real implementation experience on client projects.
Need to implement or migrate this at your company?
Let's talk about your specific case — site, number of users, budget — and we'll tell you honestly whether this is the right technology.