Wantastic convierte dispositivos MikroTik, OpenWrt y Linux difíciles de alcanzar en infraestructura gestionable desde la nube. Mantén Winbox fuera de internet público, evita credenciales VPN compartidas, abre sesiones de trabajo en el navegador y ejecuta un core open source self-hosted cuando necesites control total.
MikroTik RouterOS • OpenWrt • Linux • Malla WireGuard • WantasticCore MIT
Winbox remoto, WebSSH, WebProxy, monitoreo, acceso de equipo y políticas en una capa de gestión para flotas MikroTik, OpenWrt y Linux detrás de CGNAT, LTE, Starlink o firewalls cerrados.
Los dispositivos MikroTik se unen con el cliente WireGuard incluido en RouterOS 7, manteniendo las instalaciones simples y reversibles.
Pega el script RouterOS generado, deja que el router inicie la conexión saliente y evita binarios personalizados en hardware MikroTik.
Cada cuenta obtiene enrutamiento y políticas aisladas para que los dispositivos sean accesibles para trabajar, no confiables por defecto solo por entrar a una VPN.
Usa rutas P2P cuando sea posible, relay solo cuando haga falta, y mantén la comunicación entre dispositivos explícita mediante topología y ACL.
Llega a routers MikroTik mediante endpoints overlay gestionados, sin exponer Winbox a escáneres ni depender de jump boxes frágiles.
Da a cada técnico una sesión controlada, rota credenciales gestionadas, audita accesos y conserva flujos RoMON nativos para dispositivos aguas abajo.
Deja de pasar contraseñas admin, archivos VPN o accesos permanentes a jump servers para arreglar un sitio de cliente.
Invita compañeros, concede solo los flujos necesarios, registra sesiones y revoca acceso de forma central sin reconfigurar cada router.
Abre terminales SSH e interfaces web internas desde el portal para que el soporte funcione desde cualquier navegador confiable.
Usa WebSSH para shell, WebProxy para HTTP/HTTPS privados de LAN y sesiones persistentes para multitarea.
WantasticCore es un portal WireGuard mesh self-hosted con licencia MIT, y wantasticd conecta Linux, OpenWrt, macOS y Windows.
Usa la consola alojada para velocidad, o ejecuta el core open source cuando clientes, compliance o laboratorio requieran propiedad del control plane.
Wantastic sigue el camino real de soporte: conectar el dispositivo, aislarlo, conceder acceso y trabajar desde el navegador.
Onboarding outbound-first
Conecta RouterOS con WireGuard nativo o instala wantasticd en OpenWrt y Linux. El dispositivo inicia la conexión, así CGNAT y enlaces ISP dinámicos dejan de bloquearte.
Enrutamiento con políticas
Los dispositivos entran en un overlay aislado donde el acceso es intencional. Los técnicos llegan a los flujos necesarios sin unirse a una red privada plana.
Operaciones de mínimo privilegio
Modela grupos, enlaces y reglas por protocolo desde el portal. Da acceso a Winbox, SSH o web sin entregar llaves permanentes de red.
Winbox, WebSSH, WebProxy, WUSP
Lanza acceso Winbox, WebSSH persistente, interfaces web privadas, monitoreo y control tipo WUSP desde la misma consola.
Field notes from operators solving remote Winbox, CGNAT, OpenWrt and browser-based support workflows.
“The real win is not having to expose Winbox or maintain a separate VPN path for every customer site. Devices behind CGNAT are reachable from the console, and the support workflow is much cleaner.”
Mar 2025“Remote Winbox over the overlay solved the annoying Starlink and NAT problem for MikroTik support. I can keep native Winbox and RoMON habits without opening ports at the customer edge.”
Feb 2025“wantasticd makes the Linux and OpenWrt side feel like part of the same management plane. That matters when a site has routers, small servers, and embedded devices on unreliable LTE links.”
Jan 2025“The team access model is the feature I care about most. I can stop handing out shared router credentials and give technicians the exact workflows they need for a device.”
Dec 2024“I used to maintain a WireGuard jump server just to reach routers. Wantastic gives me the tunnel, the browser tools, and the device list in one place, which is the part generic VPN tools miss.”
Nov 2024“The P2P-first design is the right architecture for interactive work. When a direct path is possible, Winbox and SSH feel much better than a relay-only remote access stack.”
Oct 2024“The free plan was enough to test the real workflow: add a router, connect through Winbox, try WebSSH, and see whether it fits support operations before rolling it wider.”
Sep 2024“The open-source direction changed how I looked at the product. WantasticCore and wantasticd make it possible to inspect the architecture instead of trusting a black-box remote access service.”
Aug 2024“The real win is not having to expose Winbox or maintain a separate VPN path for every customer site. Devices behind CGNAT are reachable from the console, and the support workflow is much cleaner.”
Mar 2025“Remote Winbox over the overlay solved the annoying Starlink and NAT problem for MikroTik support. I can keep native Winbox and RoMON habits without opening ports at the customer edge.”
Feb 2025“wantasticd makes the Linux and OpenWrt side feel like part of the same management plane. That matters when a site has routers, small servers, and embedded devices on unreliable LTE links.”
Jan 2025“The team access model is the feature I care about most. I can stop handing out shared router credentials and give technicians the exact workflows they need for a device.”
Dec 2024“I used to maintain a WireGuard jump server just to reach routers. Wantastic gives me the tunnel, the browser tools, and the device list in one place, which is the part generic VPN tools miss.”
Nov 2024“The P2P-first design is the right architecture for interactive work. When a direct path is possible, Winbox and SSH feel much better than a relay-only remote access stack.”
Oct 2024“The free plan was enough to test the real workflow: add a router, connect through Winbox, try WebSSH, and see whether it fits support operations before rolling it wider.”
Sep 2024“The open-source direction changed how I looked at the product. WantasticCore and wantasticd make it possible to inspect the architecture instead of trusting a black-box remote access service.”
Aug 2024Practical answers about remote Winbox, CGNAT, OpenWrt, WebSSH and self-hosted WantasticCore.
Empieza con Wantastic alojado para ir rápido, o explora WantasticCore open source cuando necesites una malla WireGuard self-hosted y portal de gestión en navegador.