DebTik
Debian Linux Router v7 EngineEnterprise-grade network routing appliance combining the rock-solid stability of Debian Linux with high-performance dynamic routing & advanced policy control.
Hardware & Virtual Port Matrix Live Hardware State
Interfaces Overview Active Ports & Addresses
| Interface | Role / Type | MAC Address | IP Address | Live Traffic | Status |
|---|
Interface Table View
| Interface / Type | Role & Alias | IP Address (CIDR) | MAC & MTU | Throughput (RX/TX) | Link State | Actions |
|---|
Interface Role Tags
Define custom organizational role tags with colors to classify, filter, and assign to network interfaces.
| Badge Preview | Role Name | Color Theme | Description | Assigned Interfaces | Actions |
|---|
DHCP Client Interfaces
Active leases, assigned IP addresses, default gateways and lease duration
| Interface | Status | IP Address / Netmask | Gateway | DHCP Server | DNS Servers | Expires In | Options | Actions |
|---|
DHCP Server & Subnets Enterprise Engine
Dynamic Host Configuration Protocol server, subnet network parameters (NTP, TFTP/PXE, DNS, Option Codes), active lease allocations & static IP reservations.
DHCP Server Instances
Per-interface DHCP daemon listeners and address pools
| Flag | Name | Interface | Assigned Network | Address Pool | Lease Time | Authoritative | Active Leases | Comment | Actions |
|---|
DHCP Subnet Networks
Subnet parameters, Gateways, DNS, NTP servers, and TFTP / PXE Boot options
| Address | Gateway | Netmask | DNS Servers | Domain | DHCP Options | Comment | Actions |
|---|
DHCP Leases & Static Reservations
Active dynamic leases and static MAC-to-IP reservations
| Flag | Address | MAC Address | Host Name | Server | Expires After | Status | Comment | Actions |
|---|
Custom DHCP Options (Codes 1-254)
Standard & Vendor DHCP Options (NTP, TFTP, UniFi Inform, CAPWAP, VoIP)
| Name | Code | Value | Comment | Actions |
|---|
Bridge Interfaces
IEEE 802.1D / 802.1QLayer 2 software bridge with Rapid Spanning Tree Protocol (RSTP), 802.1Q VLAN filtering, horizon port isolation, and dynamic forwarding database (FDB).
Configured Bridges
0 Bridges| # | Flag | Name | MTU | MAC Address | STP | VLAN Filtering | PVID | Ports | IP Addresses | Traffic | Comment | Actions |
|---|
Bridge Ports
0 Ports| # | Flag | Interface | Bridge | PVID | Frame Types | Ingress Filter | Horizon | Role / Status | Comment | Actions |
|---|
Bridge VLAN Filtering Table
0 Entries| # | Flag | Bridge | VLAN IDs | Tagged Member Ports | Untagged Member Ports | Comment | Actions |
|---|
Forwarding Database (MAC Table)
0 Entries| MAC Address | Interface / Port | Bridge | VLAN | Age (s) | Flags (L=Local, S=Static, D=Dynamic) |
|---|
PPPoE Client Sessions
Point-to-Point Protocol over Ethernet (PPPoE) client management with automated reconnection, default gateway negotiation, and peer DNS acquisition.
Configured PPPoE Interfaces
0 Interfaces| Flag | Name | Interface | User | Profile | Assigned IP | Device | Def. Route | Actions |
|---|
WireGuard VPN Suite
High-performance multi-interface WireGuard VPN with kernel-accelerated cryptography, peer roaming, and endpoint keepalives.
WireGuard Interfaces
0 Interfaces| Flag | Name | Listen Port | Tunnel Address | Public Key | MTU | Peers | Actions |
|---|
WireGuard Peers
0 Peers| Flag | Interface | Peer Name | Public Key | Allowed IPs | Endpoint | Latest Handshake | Traffic (RX/TX) | Action |
|---|
IPSec (IKEv2) Tunnels
Enterprise IKEv2 / IPsec cryptographic tunnels with policy routing, automated SA rekeying, and Roadwarrior mobile client support.
Configured IPSec Tunnels
0 Active SAs| Status | Tunnel Name | Remote Gateway | Phase 1 (IKE) | Phase 2 Selectors (Subnets) | Phase 2 (ESP) | Actions |
|---|
L2TP Client Sessions
Layer 2 Tunneling Protocol (L2TP) multi-instance client manager with optional IPsec pre-shared key encapsulation.
Configured L2TP Clients
0 Clients| Flag | Name | Server Address | User | Profile | Assigned IP | Device | Def. Route | Actions |
|---|
PPTP Client Sessions
Point-to-Point Tunneling Protocol (PPTP) client management with MPPE-128 stateful encryption and automated routing.
Configured PPTP Clients
0 Clients| Flag | Name | Server Address | User | Profile | Assigned IP | Device | MPPE | Actions |
|---|
PPP Servers, Secrets & Profiles
Centralized subscriber credentials, dynamic address assignment pools, and multi-protocol VPN access concentrators.
PPP Secrets (Subscriber Credentials)
0 Users| Flag | Name (Username) | Service | Profile | Local Address | Remote Address | Comment | Actions |
|---|
PPP Profiles (IP Pools & Policies)
0 Profiles| Profile Name | Local Address | Remote Address (Pool) | DNS Servers | Encryption | Only One | Comment | Actions |
|---|
Active PPP Connections
| Interface | Username | Service | Client IP Address | Uptime | RX / TX Traffic | Actions |
|---|
EoIP Tunnels (Ethernet over IP)
Ethernet over IP (EoIP / GRETAP) encapsulation protocol to transparently bridge Layer 2 broadcast domains across IP networks.
Configured EoIP Interfaces
0 Tunnels| Flag | Name | Tunnel ID | Tunnel IP | Remote Address | Local Address | MAC Address | MTU | RX / TX Traffic | Comment | Actions |
|---|
AeroTUN High-Speed VPN XChaCha20-Poly1305 + LZ4
IP tunnels over UDP. V3 adds pinned peer identities, forward secrecy and automatic key rotation. Compression is optional.
Configured AeroTUN Tunnels
0 Tunnels| Flag | Name | Mode | Port / Remote Endpoint | Tunnel IP (CIDR) | Compression | Active Peer | Payload Traffic | Wire Traffic | Comment | Actions |
|---|
iptables Firewall
Manage Linux filter, NAT and mangle tables, address lists (ipset), GeoIP and connection tracking (conntrack). Rules are evaluated in order within each chain.
Filter table
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Protocol | Ports | In / Out | Target | Packets / Bytes | Comment | Order & Actions |
|---|
NAT Rules
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Proto/Port | Out / In | Target | To Address:Port | Packets / Bytes | Comment | Order & Actions |
|---|
Mangle table
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Target | New Mark / Value | Pass | Packets / Bytes | Comment | Order & Actions |
|---|
Address Lists (ipset)
0 Entries| # | Status | List Name | IP Address / CIDR | Comment | Actions |
|---|
Active Conntrack Connections
0 Flows| Proto | Source Address | Destination Address | Reply Source | Reply Dest | TCP State | Mark | Timeout | Target |
|---|
Geo-Location IP Filtering
Auto-Update ONAggregated country CIDR databases loaded into Linux kernel ipset. Usable anywhere in Filter, NAT, and Mangle rules.
| Code | Country Name | Continent | Subnets | Kernel IPSet | Rule Usage | Actions |
|---|
IP Routes & Policy Rules
Kernel FIB/RIB routing tables, static gateways, multipath uplinks, and policy routing (ip rule / fwmark lookup).
Active Routing Table (RIB)
0 Routes| Flags | Dst. Address | Protocol | Gateway | Distance | Table / Mark | Interface | Internet / Gateway Health | Comment | Actions |
|---|
Policy Routing Rules (ip rule)
0 Rules| Pref | Src. Address | Dst. Address | Routing Mark (fwmark) | Lookup Table | Action | Actions |
|---|
Defined Routing Tables
0 Tables| FIB ID | Table Name | Comment / Purpose |
|---|
BGP Dynamic Routing
Checking...High-Performance BIRD 2 BGP Engine: Multi-Instance / Multi-AS peering sessions, programmable route filters, prefix announcements, and BGP routing table (RIB).
Configured BGP Peers
0 Peers Checking...| Flags | Name | Remote Address | Remote AS | State | Uptime | Prefixes (RX/TX) | Routing Filters | Comment | Actions |
|---|
Advertised BGP Networks
0 Networks| Network (CIDR) | Status | Comment | Actions |
|---|
BGP Routing Information Base (show ip bgp)
0 Routes| Prefix | Next Hop | Metric | Weight | AS Path | Origin |
|---|
| # | Flags | Comment | Name ▲ | Version | VRF | Router ID |
|---|
| # | Flags | Comment | Name ▲ | Instance | Area ID | Type |
|---|
| # | Flags | Comment | Area ▲ | Prefix | Cost | Advertise |
|---|
| # | Flags | Comment | Interfaces ▲ | Area | Networks | Network Type | Cost | Priority | Auth |
|---|
| Flags | Interface ▲ | Address | Area | Instance ID | State | Cost | Priority |
|---|
| # | Flags | Comment | Address ▲ | Area | Poll Interval | Cost |
|---|
| Flags | Comment | Instance | Area | Address ▲ | State | State Changes |
|---|
| Flags | Instance ▲ | Area | Type | Originator | ID | Link | Link In... | Sequence | Age |
|---|
| Flags | # ▲ | Chain | Rule Syntax | Comment | Actions |
|---|
| Flags | # ▲ | Chain | Rule Syntax | Comment | Actions |
|---|
| Flags | List Name ▲ | Communities | RegExp | Comment | Actions |
|---|
| Flags | List Name ▲ | Range / ASNs | Comment | Actions |
|---|
VRRP Virtual Routers Active / Backup Failover
Virtual Router Redundancy Protocol (VRRPv3/v2) with automated Virtual IP (VIP) failover, preemptive election, priority ranking, and virtual MAC routing.
Configured VRRP Instances
Virtual router instances, priority weights, virtual IP addresses and live election states
| Flag | Name | Interface | VRID | Priority | Virtual IP (VIP) | Preempt | Virtual MAC | Live State | Comment | Actions |
|---|
Troubleshoot & Diagnostic Tools
Comprehensive network diagnostic suite: ICMP echo latency, path route tracing, continuous MTR telemetry, DNS resolution, and TCP port probing.
| # Seq | Responder | Bytes | TTL | Latency (RTT) | Status |
|---|
Raw CLI Console Output
| Hop # | Gateway Host / IP | RTT 1 | RTT 2 | Status |
|---|
Raw CLI Console Output
| Hop # | Host / Router | Loss % | Sent | Last (ms) | Avg (ms) | Best (ms) | Worst (ms) | StDev |
|---|
Raw CLI Console Output
| Name | TTL (s) | Class | Type | Value / Target |
|---|
Raw CLI Console Output
Handshake Details
Bandwidth Test Engine UDP & TCP Line-Rate
High-performance network throughput benchmark with line-rate packet generation, token-bucket pacing, sliding-window RFC 3550 jitter telemetry, and bidirectional stream testing.
Test Parameters
IDLELive Real-Time Throughput
Interval Telemetry Log
0 samples| Interval | TX Rate | RX Rate | Loss % | Jitter | Total Volume |
|---|---|---|---|---|---|
| No test active. Click "Run Bandwidth Test" to benchmark link. | |||||
Recent Benchmark History
Summary of previous bandwidth test runs recorded on this router.
| Session ID | Target Server | Protocol | Direction | Duration | Avg / Peak TX | Avg / Peak RX | Packet Loss | Avg Jitter | Date / Time |
|---|---|---|---|---|---|---|---|---|---|
| No past benchmark runs recorded yet. | |||||||||
Router DNS & Upstream Resolvers
Configure system recursive DNS forwarders, caching, and LAN client request resolution.
Static DNS Records 0 Records
Authoritative local hostname-to-IP overrides and local CNAME aliases.
| Name (Hostname) | Type | Address / Target | TTL | Comment | Status | Actions |
|---|
Loading...
System Identity & Hostname
Set the router appliance identity and timezone.
| User | Permissions (Role) | Status | Comment | Last Login | Actions |
|---|
Certificates & SSL/TLS
Manage Root Certificate Authorities (CA), issue Server/Client certificates, and request automated Let's Encrypt certificates.
| Type | Name / Common Name | Issuer | SANs | Valid Until | Actions |
|---|
Management Services
Control management service listeners and listening ports across Web, SSH, and Telnet.
| Service | Port | Status | Description | Actions |
|---|
Git Updates
Set the source repository for this appliance. Only a higher stable release version (vMAJOR.MINOR.PATCH tag) can be installed. Installation rebuilds DebTik, restarts the service and keeps the previous binaries for rollback.
Available: —
Status: idle
| # | Time | Topics | Message |
|---|