Buy a license. Bond every signal.
Self-serve checkout for every tier and datacenter SKU. License keys are minted as signed, offline-verifiable .mtlic tokens.
Pick your tier.
Own the version forever. Optional annual subscription (20%) adds backports + signature feeds.
Free / PoC / lab — the MikroTik-killer at evaluation time.
- Unlimited multi-WAN
- VyOS routing
- 1 VRF · 4 tunnels
Drop-in router with the multi-WAN moat.
- Everything in Community
- Custom branding / white-label
- IPsec + WireGuard VPN
- SNMP / REST write
- 2 VRF · 8 tunnels
$20/yr · backports + signature feeds. Year 1 bundled.
Enterprise routing, VPN, security baseline.
- Custom branding / white-label
- FEC · BBRv2 · priority WAN
- FRR / BIRD · nftables
- OpenVPN · OpenConnect
- LDAP / RADIUS · IDS detect
- 4 VRF · 32 tunnels
$240/yr · backports + signature feeds. Year 1 bundled.
Satellite-grade reliability + zero-trust + SD-WAN.
- Custom branding / white-label
- Adaptive quality · latency sched
- SD-WAN · IPS inline
- OIDC / SAML / WebAuthn
- Multi-tenancy · ACME
- 16 VRF · 256 tunnels
$1,500/yr · backports + signature feeds. Year 1 bundled.
The license is yours forever. The threat landscape isn't static.
A perpetual license version-locks the software you own today. The annual subscription (20% of license) keeps the live, server-fed capabilities current and ships security backports for your locked version. Year 1 is included with every paid license — renew to keep these active.
Already own a license? Add or extend a subscription from your account. Without an active subscription these features pause; everything else keeps running.
Datacenter hub
Terminate the fleet on one hub — capacity bundles (peers × throughput) with the full Premier set plus carrier features: BGP-FlowSpec, RTBH, GraphQL API, LVS-HA.
Multi-year prepay (−10% / −15%) and Premier+ fleet bands apply at quote. All licenses are signed offline · EdDSA / Ed25519.