

Mikrotik doesn't have an "installer" for CHR, just a pre-made disk image, so we're going to download that image from Mikrotik's web site, upload it to Vultr as a "snapshot", and create a new VM using that snapshot.īy itself this does work, however it gives you a CHR with only 128 MB usable storage, which is kinda strange - if you're paying for VM with 20 GB of space, you would expect to have 20 GB of space available within the VM, right? Like most VPS providers, Vultr offers a library of ISO images you can use to install operating systems on your servers. Vultr's lowest-cost VPS is $2.50/mo, and has significantly higher specs than any Mikrotik hardware I've ever used, so this is what I'm using for my CHR. I'm using the CHR as an OpenVPN server, however this document will focus on getting the CHR up and running. In Cloud Hosted Router, forwarding table might be very different depending on the particular use scenario.This documents how I was able to set up a Mikrotik Cloud Hosted Router (CHR) on a VPS from.

] > ip firewall filter add action=drop chain=input comment="Drop everything else"

] > ip firewall filter add action=accept chain=input comment="Allow DNS for trusted network" dst-port=53 protocol=udp src-address=192.168.99.0/24 ] > ip firewall filter add action=accept chain=input comment="Accept related connections" connection-state=related

] > ip firewall filter add action=accept chain=input comment="Accept established connections" connection-state=established ] > ip firewall filter add action=accept chain=input comment="Allow SSH" dst-port=22221 protocol=tcp ] > ip firewall filter add action=accept chain=input comment="Allow WinBox" dst-port=8291 protocol=tcp ] > ip firewall filter add action=accept chain=input comment="Allow ICMP ping" protocol=icmp
