This guide was created by a community member and reviewed by us. Firmware and router interfaces may change over time, so some steps may differ depending on your device or version.
Requirements
Modern routers based on ARM/ARM64/AMD64 platforms that support containers are suitable.
All procedures described in this guide were performed on a router with factory-default settings. If your router has an existing configuration, some steps may need to be adjusted accordingly.
- Download WinBox 4 and connect to the router.
Check the current device mode with the command:
sys dev prIf mode: advanced and container: yes are not set, enable container support with:
/system/device-mode update mode=advanced container=yesA power-cycle reboot is required — physical access to the device is necessary!
Enable automatic bootloader updates and update RouterOS to the latest stable version.
Install the Containers package.
Insert a USB flash drive and format it as EXT4. (This step can be skipped, but there may be situations where the internal storage is insufficient for future installations or RouterOS upgrades.)
Install the VPN client and enter your subscription URL.
/interface/bridge add name=Bridge-Docker port-cost-mode=short
/ip/address add address=192.168.254.1/24 interface=Bridge-Docker network=192.168.254.0
/interface/veth add address=192.168.254.3/24 gateway=192.168.254.1 name=MIHOMO
/interface/bridge/port add bridge=Bridge-Docker interface=MIHOMO
/container envs add list=MIHOMO key=SUB1_Xeovo value="YOUR_LINK"
/container envs add list=MIHOMO key=LOG_LEVEL value="error"
/container envs add list=MIHOMO key=EXTERNAL_UI_URL value="https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip"
/container/config set registry-url=https://registry-1.docker.io tmpdir=/usb1/docker/pull
/container add hostname=MIHOMO interface=MIHOMO mount=/usb1/docker_configs/mihomo_mikrotik:/etc/mihomo:rw name=mihomo_mikrotik remote-image=wiktorbgu/mihomo-mikrotik restart-interval=10s restart-max-count=50 restart-policy=always root-dir=/usb1/docker/mihomo_mikrotik envlists=MIHOMO start-on-boot=yes dns=1.1.1.1,8.8.8.8,9.9.9.9- Open the following URL in your browser and verify that the servers are listed and online:
http://192.168.254.3:9090/ui/#/setup?hostname=192.168.254.3&port=9090&secret=You can select the proxy server mode in the main selector.
At this stage, a SOCKS proxy server is already available at:
Address: 192.168.254.3
Port: 1090
It can be used by applications and devices that support SOCKS proxies.
Next, configure routing for the entire network connected to the bridge through the VPN:
/routing/table add disabled=no fib name=to_mihomo
/ip/route add dst-address=0.0.0.0/0 gateway=192.168.254.3%Bridge-Docker routing-table=to_mihomo
/routing rule add action=lookup dst-address=10.0.0.0/8 table=main chain=user
/routing rule add action=lookup dst-address=192.168.0.0/16 table=main chain=user
/routing rule add action=lookup dst-address=172.16.0.0/12 table=main chain=user
/routing rule add action=lookup interface=bridge table=to_mihomo chain=userTo prevent DNS leaks, configure external DNS servers in DHCP and disable DNS query handling on the router itself.
To verify your connection, visit the DoesMyVPN.work website.
Additional instructions and documentation are available here.