4.8/5
Trustpilot customer rating
MikroTik VPS Hosting RouterOS CHR in the Cloud
Run the same RouterOS you know from RouterBOARD hardware on a KVM virtual server. BGP, WireGuard, IPsec, hotspot, firewall, and QoS deployed in under 5 minutes with a dedicated IPv4 and 1 Gbps unmetered port.
99.99%
Network uptime guarantee
<5 min
Average CHR deploy time
24/7
Networking-specialist support
//What Is It
MikroTik CHR VPS: RouterOS Without the Hardware
A MikroTik VPS runs Cloud Hosted Router (CHR) the x86 build of RouterOS on a KVM virtual machine in our datacenters. It is the same operating system that powers RouterBOARD and CCR devices, with the same menu tree, the same WinBox interface, and the same configuration syntax.
Feature parity is the point: routing, firewalling, tunnels, hotspot, queues, scripting, and The Dude all behave exactly as they do on physical MikroTik gear. What changes is the delivery no rack space, no RMA, no shipping, no capex. You provision a router the way you provision a server.
CHR ships with a free license that caps each interface at 1 Mbps for evaluation. Upgrade in-place to P1 (1 Gbps), P10 (10 Gbps), or P-Unlimited directly from MikroTik at any time the license is tied to your CHR instance, not to us.
RouterOS v6 & v7
Deploy the stable v6 branch or the current v7 branch with the new routing stack, containers, and WireGuard support.
KVM / QEMU Virtualization
Full hardware virtualization with dedicated vCores and guaranteed RAM no container throttling, no shared kernel.
Dedicated IPv4
Every instance gets its own public IPv4 for tunnel endpoints, BGP peering, and remote WinBox access.
WinBox, WebFig & CLI
Manage the router with WinBox on desktop, WebFig in a browser, or SSH into the RouterOS CLI and API.
CHR License Model
Start on the Free tier, then move to P1, P10, or P-Unlimited when you need more than 1 Mbps per interface.
//Pricing
MikroTik CHR Plans Transparent Pricing
No setup fees, no activation charges, and no renewal tricks. Every plan runs RouterOS CHR on Intel Xeon KVM with a dedicated IPv4 and a 1 Gbps unmetered port.
Free CHR license included on deploy
Every instance ships with the free RouterOS CHR license so you can configure and test immediately. When you need more throughput, buy P1, P10, or P-Unlimited from MikroTik.com and apply it in-place no reinstall, no downtime, and no markup from us.
//Use Cases
What Engineers Build on a MikroTik CHR VPS
Terminate WireGuard, IPsec, OpenVPN, L2TP, and SSTP tunnels on one cloud router. Connect branch offices to each other and give roaming staff a single stable endpoint, with per-tunnel firewall rules and routing policies.
//Supported Protocols
Every Protocol RouterOS Ships With
CHR is the full RouterOS feature set, so tunnelling and routing protocols behave exactly as they do on RouterBOARD hardware. These are the ones customers deploy most often.
| Protocol | Category | Typical use |
|---|---|---|
| WireGuard | VPN | Fastest modern VPN in RouterOS v7 kernel-level, key-based, ideal for site-to-site and roaming clients. |
| IPsec (IKEv1/IKEv2) | VPN | Interoperable site-to-site tunnels with Cisco, Fortinet, and cloud VPN gateways; hardware-accelerated AES. |
| OpenVPN | VPN | TCP or UDP client access with certificate authentication useful where UDP is blocked. |
| L2TP / IPsec | VPN | Native client support on Windows, macOS, iOS, and Android with no extra software to install. |
| SSTP | VPN | TLS over TCP 443 for restrictive networks that only allow HTTPS traffic outbound. |
| PPTP | VPN | Legacy compatibility only supported for old equipment, never for sensitive traffic. |
| EoIP | Tunnel | MikroTik-to-MikroTik Ethernet bridging over IP extends a layer 2 segment between sites. |
| GRE | Tunnel | Generic point-to-point tunnels for carrying routing protocols between routers of any vendor. |
| VXLAN | Tunnel | Layer 2 overlay across layer 3 networks for multi-tenant and datacenter-style topologies. |
| BGP | Routing | eBGP and iBGP peering, prefix announcements, filters, communities, and multi-homing. |
| OSPF | Routing | Fast interior routing with areas, virtual links, and automatic reconvergence. |
| MPLS / VPLS | Routing | Label switching and layer 2 VPN services for carrier and ISP topologies. |
//Platform Features
The Full RouterOS Toolkit
Nothing is stripped out of CHR. Every menu you use on a RouterBOARD is present, and every configuration you export from hardware imports cleanly here.
//01
Advanced Routing
BGP, OSPF, RIP, static routes, policy routing, ECMP, and VRF the v7 routing stack handles full internet tables with enough RAM.
//02
Stateful Firewall
Filter, NAT, mangle, and RAW chains with connection tracking, address lists, and rate limiting to drop attack traffic before it costs CPU.
//03
VPN & Tunnels
WireGuard, IPsec, OpenVPN, L2TP, SSTP, EoIP, GRE, and VXLAN terminate on the same router with per-tunnel routing rules.
//04
QoS & Traffic Shaping
Simple queues, queue trees, HTB, PCQ, and packet marking give you per-customer or per-service bandwidth guarantees.
//05
Hotspot & User Manager
Captive portal with customisable login pages, quotas, walled gardens, and RADIUS or local user authentication.
//06
Monitoring & Logging
Graphs, Netwatch, SNMP, syslog export, traffic flow (NetFlow/IPFIX), and The Dude server for network-wide visibility.
//07
Scripting & Automation
RouterOS scripting, schedulers, and the REST and legacy APIs let you automate provisioning, failover, and reporting.
//08
High Availability
VRRP, bonding, recursive routing with check-gateway, and route failover keep traffic flowing when a path drops.
//09
Management Access
WinBox, WebFig, SSH, Telnet, MAC-Telnet, and the API plus backup and export files you can version-control.
//Who It's For
Built for People Who Run Networks
If you already think in address lists, queue trees, and BGP filters, a CHR VPS removes the hardware from the equation and leaves the parts you actually use.
Move PPPoE termination, subscriber shaping, and hotspot services into a datacenter with redundant power, cooling, and transit instead of a tower shelter.
//Getting Started
Routing Traffic in 5 Steps.
Pick CHR Lab for study and testing, Edge Router for VPN and BGP work, or Core Router for ISP-scale routing. RAM is the spec that matters most for large routing tables.
Pro tip
Before you change anything else, restrict WinBox and API access to a management address list /ip firewall address-list add list=mgmt address=YOUR.OFFICE.IP and drop everything else on the input chain. A CHR instance with a public IPv4 is scanned within minutes of going live.
admin@dashrdp-chr-01 /terminal
# Step 3: connect over SSH if you prefer CLI to WinBoxssh admin@YOUR.SERVER.IPÂ# Step 4: claim the free CHR license/system license print/system license renew account=you@example.com level=freeÂ# Step 5a: set the admin password/user set admin password=YOUR-STRONG-PASSWORDÂ# Step 5b: bring up a WireGuard interface/interface wireguard add name=wg0 listen-port=13231/ip address add address=10.10.0.1/24 interface=wg0Â# Step 5c: announce a prefix over BGP/routing bgp connection add remote.as=65001 local.role=ebgpÂ# Check RouterOS version and resources/system resource print
Pick CHR Lab for study and testing, Edge Router for VPN and BGP work, or Core Router for ISP-scale routing. RAM is the spec that matters most for large routing tables.
Pro tip
Before you change anything else, restrict WinBox and API access to a management address list /ip firewall address-list add list=mgmt address=YOUR.OFFICE.IP and drop everything else on the input chain. A CHR instance with a public IPv4 is scanned within minutes of going live.
admin@dashrdp-chr-01 /terminal
# Step 3: connect over SSH if you prefer CLI to WinBoxssh admin@YOUR.SERVER.IPÂ# Step 4: claim the free CHR license/system license print/system license renew account=you@example.com level=freeÂ# Step 5a: set the admin password/user set admin password=YOUR-STRONG-PASSWORDÂ# Step 5b: bring up a WireGuard interface/interface wireguard add name=wg0 listen-port=13231/ip address add address=10.10.0.1/24 interface=wg0Â# Step 5c: announce a prefix over BGP/routing bgp connection add remote.as=65001 local.role=ebgpÂ# Check RouterOS version and resources/system resource print
//Technical Specifications
What You Get on Every MikroTik VPS
Shared across all three tiers. Only vCores, RAM, and disk change between plans.
Platform
| Operating system | MikroTik RouterOS CHR v6 or v7 (your choice at deploy) |
|---|---|
| Virtualization | KVM / QEMU with full hardware virtualization |
| Processor | Intel Xeon, 2–4 dedicated vCores depending on plan |
| Memory | 2 GB, 4 GB, or 6 GB DDR4 size for your routing table |
| Storage | 100 GB, 200 GB, or 300 GB SSD |
| CHR license | Free tier included; P1, P10, and P-Unlimited upgradeable in place |
Network & Operations
| IPv4 | 1 dedicated public IPv4 address per instance |
|---|---|
| IPv6 | Available on request in supported locations |
| Bandwidth | Unmetered transfer, fair-use policy applies |
| Port speed | 1 Gbps uplink per VPS |
| Management | WinBox, WebFig, SSH, MAC-Telnet, REST API |
| Backups | Free weekly backups; export your RouterOS config any time |
//Why DashRDP?
Carrier Infrastructure. Engineer-Friendly Price.
PLATFORM
CHR-Ready KVM Infrastructure
Our hypervisors are configured for RouterOS CHR: full KVM virtualization, virtio drivers, and dedicated vCores so packet forwarding is not fighting a noisy neighbour for CPU time.
PRICING
Transparent Pricing, No Upsells
The price you see is the price you renew at. No setup fee, no management surcharge, and no markup on MikroTik licences buy those directly from MikroTik at their price.
NETWORK
15+ Datacenter Locations
Place your cloud router close to your subscribers, your peers, or your servers. Choose from locations across North America, Europe, and Asia at the same price.
SCALING
Instant Scale-Up
Outgrew your routing table? Move to a larger plan without rebuilding. Your configuration, licence, and IPv4 stay with the instance while CPU, RAM, and disk grow.
RELIABILITY
99.99% Uptime
Redundant power, redundant upstreams, and N+1 cooling in every facility. A router that is down is worse than no router, so the network is built to stay up.
PERFORMANCE
NVMe + 1 Gbps Per VPS
NVMe-backed storage for fast boots, logs, and backups, plus a 1 Gbps unmetered port so throughput is limited by your CHR licence, not by us.
SUPPORT
Networking-Specialist Support
Our engineers work with RouterOS daily. Ask about a BGP filter, an IPsec proposal mismatch, or a queue tree and you get an answer, not a link to the manual.
CHECKOUT
Pay How You Want
Cards, PayPal, UPI, and major cryptocurrencies are accepted, backed by a 7-day money-back guarantee if the instance is not what you needed.
//Comparison
CHR VPS vs MikroTik Hardware
A RouterBOARD or CCR still wins when you need physical ports on site. For everything that terminates over IP tunnels, BGP edges, hotspot controllers a cloud router is faster to deploy and easier to scale.
| Metric | MikroTik CHR VPS | On-premise MikroTik hardware |
|---|---|---|
| Hardware | None to buy, rack, or replace the hypervisor is our problem | Capex per unit, plus spares, rack space, power, and RMA handling |
| Deploy time | Under 5 minutes from checkout to WinBox login | Days to weeks order, ship, rack, cable, and configure |
| Scaling | Change plan to add vCores, RAM, and disk; config and IP stay put | Replace the device and migrate the configuration |
| Bandwidth ceiling | 1 Gbps unmetered port; throughput set by your CHR licence tier | Fixed by the model's ports and CPU |
| Location choice | 15+ datacenters deploy next to your peers or subscribers | Wherever the box is physically installed |
| Resilience | Redundant power, cooling, and upstreams with a 99.99% uptime guarantee | Depends entirely on your site's power and transit |
| Cost model | From $10.99/month, cancel any time | Upfront purchase plus ongoing site and maintenance costs |
| Best for | VPN concentration, BGP edge, hotspot control, labs, cloud firewalls | Local switching, PoE, wireless, and anything needing physical ports |
| Choose a deployment model | See CHR Plans | Talk to an Engineer |
.svg?dpl=dpl_3L1CMNkEhj85fNMGTWcTQiUkQkCf)
//Related products
Explore related hosting options
Match your workload to another DashRDP environment remote desktop, residential IPs, dedicated hardware, VPS, or VPN.
Remote Desktop Server
RDP
Remote Windows desktop for daily tasks, browser work, and team productivity. Admin access available for users who need full control over approved tools, settings, and workflows.
Best For
- Remote Access
- 24/7 workflows
- Automation
Residential IP Remote Desktop
Residential RDP
Genuine residential ISP IPs for marketplace selling, ad accounts, scraping, and geo-sensitive workflows that block datacenter addresses.
Best For
- Real ISP IPs
- Marketplace & ads
- 100+ locations
Bare Metal Server
Dedicated Server
Bare-metal performance for high-demand projects, streaming, gaming, and enterprise workloads with dedicated hardware and full control.
Best For
- Enterprise workloads
- High-performance applications
- Large-scale hosting
Virtual Private Network
VPN
Encrypted connectivity with OpenVPN and WireGuard options for private network access and secure browsing.
Best For
- Secure browsing
- Privacy protection
- Remote network access
//Also in this product line
Deploy RouterOS CHR.
Route Traffic in Minutes.
KVM virtualization. Dedicated IPv4. WinBox, WebFig, and CLI access. From $10.99 a month.
Clear specs
transparent pricing
money-back guarantee
//Q&A
MikroTik VPS Questions Answered
Clear answers about CHR licensing, WinBox access, BGP, throughput, and backups before you order.