DebTik
Debian Linux Router v7 EngineEnterprise-grade network routing appliance combining the rock-solid stability of Debian Linux with high-performance dynamic routing & advanced policy control.
Hardware & Virtual Port Matrix Live Hardware State
Interfaces Overview Active Ports & Addresses
| Interface | Role / Type | MAC Address | IP Address | Live Traffic | Status |
|---|
Interface Table View
| Interface / Type | Role & Alias | IP Address (CIDR) | MAC & MTU | Throughput (RX/TX) | Link State | Actions |
|---|
Interface Role Tags
Define custom organizational role tags with colors to classify, filter, and assign to network interfaces.
| Badge Preview | Role Name | Color Theme | Description | Assigned Interfaces | Actions |
|---|
DHCP Client Interfaces
Active leases, assigned IP addresses, default gateways and lease duration
| Interface | Status | IP Address / Netmask | Gateway | DHCP Server | DNS Servers | Expires In | Options | Actions |
|---|
DHCP Server & Subnets Enterprise Engine
Dynamic Host Configuration Protocol server, subnet network parameters (NTP, TFTP/PXE, DNS, Option Codes), active lease allocations & static IP reservations.
DHCP Server Instances
Per-interface DHCP daemon listeners and address pools
| Flag | Name | Interface | Assigned Network | Address Pool | Lease Time | Authoritative | Active Leases | Comment | Actions |
|---|
DHCP Subnet Networks
Subnet parameters, Gateways, DNS, NTP servers, and TFTP / PXE Boot options
| Address | Gateway | Netmask | DNS Servers | Domain | DHCP Options | Comment | Actions |
|---|
DHCP Leases & Static Reservations
Active dynamic leases and static MAC-to-IP reservations
| Flag | Address | MAC Address | Host Name | Server | Expires After | Status | Comment | Actions |
|---|
Custom DHCP Options (Codes 1-254)
Standard & Vendor DHCP Options (NTP, TFTP, UniFi Inform, CAPWAP, VoIP)
| Name | Code | Value | Comment | Actions |
|---|
Bridge Interfaces
IEEE 802.1D / 802.1QLayer 2 software bridge with Rapid Spanning Tree Protocol (RSTP), 802.1Q VLAN filtering, horizon port isolation, and dynamic forwarding database (FDB).
Configured Bridges
0 Bridges| # | Flag | Name | MTU | MAC Address | STP | VLAN Filtering | PVID | Ports | IP Addresses | Traffic | Comment | Actions |
|---|
Bridge Ports
0 Ports| # | Flag | Interface | Bridge | PVID | Frame Types | Ingress Filter | Horizon | Role / Status | Comment | Actions |
|---|
Bridge VLAN Filtering Table
0 Entries| # | Flag | Bridge | VLAN IDs | Tagged Member Ports | Untagged Member Ports | Comment | Actions |
|---|
Forwarding Database (MAC Table)
0 Entries| MAC Address | Interface / Port | Bridge | VLAN | Age (s) | Flags (L=Local, S=Static, D=Dynamic) |
|---|
PPPoE Client Sessions
Point-to-Point Protocol over Ethernet (PPPoE) client management with automated reconnection, default gateway negotiation, and peer DNS acquisition.
Configured PPPoE Interfaces
0 Interfaces| Flag | Name | Interface | User | Profile | Assigned IP | Device | Def. Route | Actions |
|---|
WireGuard VPN Suite
High-performance multi-interface WireGuard VPN with kernel-accelerated cryptography, peer roaming, and endpoint keepalives.
WireGuard Interfaces
0 Interfaces| Flag | Name | Listen Port | Tunnel Address | Public Key | MTU | Peers | Actions |
|---|
WireGuard Peers
0 Peers| Flag | Interface | Peer Name | Public Key | Allowed IPs | Endpoint | Latest Handshake | Traffic (RX/TX) | Action |
|---|
IPSec (IKEv2) Tunnels
Enterprise IKEv2 / IPsec cryptographic tunnels with policy routing, automated SA rekeying, and Roadwarrior mobile client support.
Configured IPSec Tunnels
0 Active SAs| Status | Tunnel Name | Remote Gateway | Phase 1 (IKE) | Phase 2 Selectors (Subnets) | Phase 2 (ESP) | Actions |
|---|
L2TP Client Sessions
Layer 2 Tunneling Protocol (L2TP) multi-instance client manager with optional IPsec pre-shared key encapsulation.
Configured L2TP Clients
0 Clients| Flag | Name | Server Address | User | Profile | Assigned IP | Device | Def. Route | Actions |
|---|
PPTP Client Sessions
Point-to-Point Tunneling Protocol (PPTP) client management with MPPE-128 stateful encryption and automated routing.
Configured PPTP Clients
0 Clients| Flag | Name | Server Address | User | Profile | Assigned IP | Device | MPPE | Actions |
|---|
PPP Servers, Secrets & Profiles
Centralized subscriber credentials, dynamic address assignment pools, and multi-protocol VPN access concentrators.
PPP Secrets (Subscriber Credentials)
0 Users| Flag | Name (Username) | Service | Profile | Local Address | Remote Address | Comment | Actions |
|---|
PPP Profiles (IP Pools & Policies)
0 Profiles| Profile Name | Local Address | Remote Address (Pool) | DNS Servers | Encryption | Only One | Comment | Actions |
|---|
Active PPP Connections
| Interface | Username | Service | Client IP Address | Uptime | RX / TX Traffic | Actions |
|---|
EoIP Tunnels (Ethernet over IP)
Ethernet over IP (EoIP / GRETAP) encapsulation protocol to transparently bridge Layer 2 broadcast domains across IP networks.
Configured EoIP Interfaces
0 Tunnels| Flag | Name | Tunnel ID | Tunnel IP | Remote Address | Local Address | MAC Address | MTU | RX / TX Traffic | Comment | Actions |
|---|
VXLAN (Virtual Extensible LAN)
RFC 7348 standard L2 overlay network encapsulated in UDP packets (port 4789). Supports 16M VNIs and static VTEPs for unicast flooding matching MikroTik RouterOS v7.
Configured VXLAN Interfaces
0 Tunnels| Flag | Name | VNI | Port | Overlay IP | Underlay (Dev / Local) | MAC Address | MTU | VTEPs | RX / TX Traffic | Comment | Actions |
|---|
Static Remote VTEPs (Flooding Peers)
Unicast peer IP endpoints for BUM (Broadcast, Unknown unicast, Multicast) packet replication.
| Parent Interface | Remote IP | UDP Port | Comment | Actions |
|---|
AeroTUN High-Speed VPN XChaCha20-Poly1305 + LZ4
IP tunnels over UDP. V3 adds pinned peer identities, forward secrecy and automatic key rotation. Compression is optional.
Configured AeroTUN Tunnels
0 Tunnels| Flag | Name | Mode | Port / Remote Endpoint | Tunnel IP (CIDR) | Compression | Active Peer | Payload Traffic | Wire Traffic | Comment | Actions |
|---|
Tunnel health
Runs four 8-second tests through the tunnel and directly. Both addresses must reach the same bandwidth test server. This can use the full available bandwidth.
Health history
iptables Firewall
Manage Linux filter, NAT and mangle tables, address lists (ipset), GeoIP and connection tracking (conntrack). Rules are evaluated in order within each chain.
Filter table
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Protocol | Ports | In / Out | Target | Packets / Bytes | Comment | Order & Actions |
|---|
NAT Rules
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Proto/Port | Out / In | Target | To Address:Port | Packets / Bytes | Comment | Order & Actions |
|---|
Mangle table
0 Rules| # | Status | Chain | Src. Address | Dst. Address | Target | New Mark / Value | Pass | Packets / Bytes | Comment | Order & Actions |
|---|
Address Lists (ipset)
0 Entries| # | Status | List Name | IP Address / CIDR | Comment | Actions |
|---|
Active Conntrack Connections
0 Flows| Proto | Source Address | Destination Address | Reply Source | Reply Dest | TCP State | Mark | Timeout | Target |
|---|
Geo-Location IP Filtering
Auto-Update ONAggregated country CIDR databases loaded into Linux kernel ipset. Usable anywhere in Filter, NAT, and Mangle rules.
| Code | Country Name | Continent | Subnets | Kernel IPSet | Rule Usage | Actions |
|---|
IP Routes & Policy Rules
Kernel FIB/RIB routing tables, static gateways, multipath uplinks, and policy routing (ip rule / fwmark lookup).
Active Routing Table (RIB)
0 Routes| Flags | Dst. Address | Protocol | Gateway | Distance | Table / Mark | Interface | Internet / Gateway Health | Comment | Actions |
|---|
Policy Routing Rules (ip rule)
0 Rules| Pref | Src. Address | Dst. Address | Routing Mark (fwmark) | Lookup Table | Action | Actions |
|---|
Defined Routing Tables
0 Tables| FIB ID | Table Name | Comment / Purpose |
|---|
Software-Defined WAN (SD-WAN)
Multi-link aggregation, percentage balancing, SLA quality probes, and unified firewall zone interfaces.
SD-WAN Groups & Zones
Virtual aggregation interfaces usable directly in Firewall rules| State | Group Name | Balancing Mode | Load Distribution | Members | Probe Interval | Auto-NAT | Actions |
|---|---|---|---|---|---|---|---|
| Loading SD-WAN groups... | |||||||
Member WAN Links & Live SLA Telemetry
Active latency, packet loss, jitter and routing tables| State | Group | Interface | Gateway | Weight / Prio | Health Status | Target Probe | Live Latency | Packet Loss | Jitter | Actions |
|---|---|---|---|---|---|---|---|---|---|---|
| No member links configured yet. | ||||||||||
BGP Dynamic Routing
Checking...High-Performance BIRD 2 BGP Engine: Multi-Instance / Multi-AS peering sessions, programmable route filters, prefix announcements, and BGP routing table (RIB).
Configured BGP Peers
0 Peers Checking...| Flags | Name | Remote Address | Remote AS | State | Uptime | Prefixes (RX/TX) | Routing Filters | Comment | Actions |
|---|
Advertised BGP Networks
0 Networks| Network (CIDR) | Status | Discard Route | Comment | Actions |
|---|
BGP Routing Information Base (show ip bgp)
0 Routes| Prefix | Next Hop | Metric | Weight | AS Path | Origin |
|---|
| # | Flags | Comment | Name ▲ | Version | VRF | Router ID | Redistribute | Originate Default |
|---|
| # | Flags | Comment | Name ▲ | Instance | Area ID | Type |
|---|
| # | Flags | Comment | Area ▲ | Prefix | Cost | Advertise |
|---|
| # | Flags | Comment | Interfaces ▲ | Area | Networks | Network Type | Cost | Priority | Auth |
|---|
| Flags | Interface ▲ | Address | Area | Instance ID | State | Cost | Priority |
|---|
| # | Flags | Comment | Address ▲ | Area | Poll Interval | Cost |
|---|
| Flags | Comment | Instance | Area | Address ▲ | State | State Changes |
|---|
| Flags | Instance ▲ | Area | Type | Originator | ID | Link | Link In... | Sequence | Age |
|---|
| Flags | # ▲ | Chain | Rule Syntax | Comment | Actions |
|---|
| Flags | List Name ▲ | Communities | RegExp | Comment | Actions |
|---|
| Flags | List Name ▲ | Range / ASNs | Comment | Actions |
|---|
| # | Flags | Comment | Name | Version | Update Time | Timeout | Redistribute | Metric |
|---|
| # | Flags | Comment | Interface | Mode | Metric | Passive | BFD |
|---|
| # | IP Address | Interface | Last Seen | Uptime |
|---|
| # | Prefix | Next-Hop | Metric | Interface | Age |
|---|
BFD Protocol Daemon INACTIVE
Bidirectional Forwarding Detection (BFD) provides sub-50ms fault detection for routing protocols.
When enabled, BGP peers and OSPF interfaces with BFD enabled will register live sessions automatically.
| # | Flags | Comment | Interface | Min RX (ms) | Min TX (ms) | Idle TX (ms) | Multiplier | Passive |
|---|
| # | Flags | Comment | Neighbor Address | Interface | Local Address | Multihop |
|---|
| # | Neighbor IP | Interface | State | Interval | Timeout | Since |
|---|
| # | Flags | Comment | Name | Router ID | Dual-Stack | Redistribute | Metric |
|---|
| # | Flags | Comment | Instance | Interface | Type | RX Cost | Hello Interval | Update Interval |
|---|
| # | Flags | Interface | Instance | State | Auth | RX Cost | Neighbors | Timer | Next Hop (IPv4) | Next Hop (IPv6) |
|---|
| # | Neighbor IP | Interface | Metric | Cost | Uptime |
|---|
| # | Prefix | Next-Hop | Metric | Interface |
|---|
| # | Flags | Comment | Name | Status |
|---|
| # | Flags | Comment | Interface | Min/Max RA (s) | Lifetime | Prefixes | RDNSS (DNS) |
|---|
| # | Flags | Comment | Name | AS | Router ID | Redistribute | Variance | Max Paths |
|---|
| # | Comment | Network CIDR | Instance / AS |
|---|
| # | Flags | Comment | Interface | Instance | Hello / Hold | Passive | Split Horizon | Auth |
|---|
| # | AS | Neighbor IP | Interface | Hold Time | Uptime | SRTT (ms) | RTO | Q Cnt | Seq Num |
|---|
| # | AS | Network Prefix | Successors | FD (Metric) | Next-Hop | Interface |
|---|
VRRP Virtual Routers Active / Backup Failover
Virtual Router Redundancy Protocol (VRRPv3/v2) with automated Virtual IP (VIP) failover, preemptive election, priority ranking, and virtual MAC routing.
Configured VRRP Instances
Virtual router instances, priority weights, virtual IP addresses and live election states
| Flag | Name | Interface | VRID | Priority | Virtual IP (VIP) | Preempt | Virtual MAC | Live State | Comment | Actions |
|---|
Troubleshoot & Diagnostic Tools
Comprehensive network diagnostic suite: ICMP echo latency, path route tracing, continuous MTR telemetry, DNS resolution, and TCP port probing.
| # Seq | Responder | Bytes | TTL | Latency (RTT) | Status |
|---|
Raw CLI Console Output
| Hop # | Gateway Host / IP | RTT 1 | RTT 2 | Status |
|---|
Raw CLI Console Output
| Hop # | Host / Router | Loss % | Sent | Last (ms) | Avg (ms) | Best (ms) | Worst (ms) | StDev |
|---|
Raw CLI Console Output
| Name | TTL (s) | Class | Type | Value / Target |
|---|
Raw CLI Console Output
Handshake Details
Bandwidth Test Engine UDP & TCP Line-Rate
High-performance network throughput benchmark with line-rate packet generation, token-bucket pacing, sliding-window RFC 3550 jitter telemetry, and bidirectional stream testing.
Test Parameters
IDLELive Real-Time Throughput
Interval Telemetry Log
0 samples| Interval | TX Rate | RX Rate | Loss % | Jitter | Total Volume |
|---|---|---|---|---|---|
| No test active. Click "Run Bandwidth Test" to benchmark link. | |||||
Recent Benchmark History
Summary of previous bandwidth test runs recorded on this router.
| Session ID | Target Server | Protocol | Direction | Duration | Avg / Peak TX | Avg / Peak RX | Packet Loss | Avg Jitter | Date / Time |
|---|---|---|---|---|---|---|---|---|---|
| No past benchmark runs recorded yet. | |||||||||
Router DNS & Upstream Resolvers
Configure system recursive DNS forwarders, caching, and LAN client request resolution.
Static DNS Records 0 Records
Authoritative local hostname-to-IP overrides and local CNAME aliases.
| Name (Hostname) | Type | Address / Target | TTL | Comment | Status | Actions |
|---|
Loading...
System Identity & Hostname
Set the router appliance identity and timezone.
Full Configuration Backup & Disaster Recovery
Export the complete DebTik router appliance configuration—including routing policies, firewall rules, NAT, WireGuard & AeroTUN tunnels, SSL/TLS certificates & private keys, Reverse Proxy routes, DHCP, DNS, and user credentials—into a single downloadable .zip archive. Restorations automatically generate a pre-restore fallback safety copy.
Export Configuration Backup
Generate and download complete router archive (.zip)
- ✔ /etc/debtik/* (Firewall, Routing, VPN, Certs, DNS, Users)
- ✔ /etc/network/interfaces.d/* (Interfaces, VLANs)
- ✔ manifest.json (SHA-256 integrity verification)
Restore Configuration
Upload a backup archive to restore router state
Stored Safety Fallback Backups
Automated pre-restore backups retained in /var/lib/debtik/backups
| Filename | DebTik Version | Hostname | Created | Size | Comment | Actions |
|---|
| User | Permissions (Role) | Status | Comment | Last Login | Actions |
|---|
Certificates & SSL/TLS
Manage Root Certificate Authorities (CA), issue Server/Client certificates, and request automated Let's Encrypt certificates.
| Type | Name / Common Name | Issuer | SANs | Valid Until | Actions |
|---|
Reverse Proxy & Application Gateway
Route HTTP/HTTPS domains and IP path prefixes to backend targets with subfolder forwarding and SSL/TLS termination.
Proxy Routes & Rules
Supports wildcards, subpath nesting and SSL termination| State | Name / Comment | Inbound Domain / IP | Inbound Path | Target Backend | Protocol & SSL | Strip Path | Requests | Actions |
|---|---|---|---|---|---|---|---|---|
| Loading proxy rules... | ||||||||
Management Services
Control management service listeners and listening ports across Web, SSH, and Telnet.
| Service | Port | Status | Description | Actions |
|---|
Git Updates
Set the source repository for this appliance. Only a higher stable release version (vMAJOR.MINOR.PATCH tag) can be installed. Installation rebuilds DebTik, restarts the service and keeps the previous binaries for rollback.
Available: —
Status: idle
| # | Time | Topics | Message |
|---|