Network Intelligence
● LIVEOnline Users by Location
Unique usernames within each location. A user connected in two locations appears in both.
Download PNGVMs by Distance-1 Route
Default route in table Out with distance 1. Unknown and unavailable VMs are included.
Download PNGPath Health — Fresh Complete 10m Loss
| Node | Connection | Internet | RTT | Loss | Stability | Freshness |
|---|
Diagnosis Engine
Upstream Control
Choose the network used to reach each VM's foreign Upstream server.
Iran: remove the server /32 route via 10.10.10.1. Via 10.10.10.1: add that route. Applying a change briefly reconnects only the selected Upstream interface.
| VM / Management | Upstream Server | Current Network | Tunnel | Change Network |
|---|
Online Users
Management: 10.10.10.101–129 & 10.10.10.201–225 · 54 nodes
| User / Client IP | Location | Server / Node | Protocol | Uptime | Download | Upload | Total |
|---|---|---|---|---|---|---|---|
| Collecting live connections… | |||||||
≈ WireGuard uses a recent handshake (≤180s); uptime and traffic start at first continuous observation and reset after a monitoring gap or restart. — means unavailable. ≈ IPsec traffic is measured from first observation where SAs can be matched unambiguously. Server is the management IP. Location uses the matching panel session or account setting, with public server labels as fallback; unknown labels remain Unmapped. Multiple public IPs on a router are listed in Server Coverage.
Technical Details · Server Status
Only management nodes 10.10.10.101–129 and 10.10.10.201–225 are queried. Every requested address is listed, including unavailable or unconfigured gaps. Public IPs are used only for location labels.
| Source | Public addresses | Status | Details |
|---|
Unverified addresses
RouterOS PPP, WireGuard client peers (wg-clients interface or u-panel-id user labels), named IPsec/IKE identities and HotSpot sources are queried. Anonymous transport peers are excluded from the user list. Services hosted outside RouterOS (such as OpenConnect, Xray or Hysteria) require a separate integration and are not included.
Advanced Settings · Servers & Locations
Add management addresses missing from existing Nodes. Prefix: 10.10.10. SSH access must already be permitted from this server. RouterOS JSON serialization support is required. These targets do not change routing or the path-monitoring node list.
Set Location for a Public IP Range · 2.188.246.x
Previously supplied labels are prefilled where known. Unspecified ranges remain Unmapped.
Nodes
Bulk Management Nodes
Default direct management network: 10.10.10.0/24. Existing nodes are not duplicated.
Manual Node
Connections
The three VAPS connection models below are created automatically. Internet path is detected live: EoIPv6/GREV6 follow the VM group (Upstream1/Upstream2); Upstream is detected as Iran or Upstream1/Upstream2 by checking the L2TP server /32 route via 10.10.10.1.
Default VAPS Models
| Model | Interface | Local / Source | Probe Server |
|---|---|---|---|
| Upstream | Upstream-{id} | 2.2.2.{id} | 2.2.2.1 |
| EoIPv6 | EoipV6-{id} | 6.6.6.{id} | 6.6.6.1 |
| GREV6 | GREV6-{id} | 7.7.{id}.2 | 7.7.{id}.1 |
Connection Models
Advanced: add another reusable model only when a new tunnel/connection type is introduced.
Stability & Quality
Each VM is grouped in one card. Paths are shown strictly by routing-table=Out Distance 1 → 2 → 3.
10-Minute Window Intelligence
Each measurement is a 5-packet ICMP batch. 10-minute slices contain hundreds of real packets; 30-minute packet loss drives switching and 60 minutes confirms recovery. Single isolated ping failures cannot trigger a route change.
Bandwidth Test
Download-only RouterOS bandwidth tests. remote-tx-speed=100M. Tests run sequentially with no overlap.
Connection Details
7-day historyAdvisory Decisions
Open recommendations are shown first. Decision Inspector shows every VM, all safety gates and the exact 30/60-minute evidence.
Decision Inspector
Route Actions
Incidents
Connection incidents resolve on recovery. All-path failures are collapsed into NODE/TELEMETRY incidents; legacy INTERNET: Dynamic incidents are automatically resolved.
Settings & Telegram
Bandwidth Test
One test at a time across the whole system. Download only, once per hour by default.