# Go into the cloned directory cd mikrotik_monitoring Install Docker + Docker-compose (reboot required) Sudo apt install python3-dev python3 python3-pip -y You need to execute the following steps on the target machine itself (e.g. This would mean, that you need to compile the mikrotik-exporter by hand, because there are no pre built 32-bit Docker images. You may also use Raspian, but then you are limited to 32bit ARM executables.

You need Ubuntu Server for ARM 64 bit in order to use this setup. user add name=prometheus group=prometheus password=TOP_SECRET Prepare Raspi user group add name=prometheus policy=api,read,winbox,test

before opening a new issue, please take a look at the FAQĪt first you need to prepare your router.Ĭreate a group on the device that has API and read-only access:.

Raspberry Pi 4 with 2 gb RAM (other PIs may also work, but I wanted ARM 64 bit).

It is designed and tested to be run on Raspberry Pis. This projects serves as a ready to use blueprint for monitoring based on Docker. Use Grafana & Prometheus to monitor Mikrotik devices. Now lets change the listening address from localhost to '0(dot)0(dot)0(dot)0', so the service will accept incoming queries by opening dnscrypt-proxy.Monitor your Mikrotik router with Prometheus and Grafana $ cp example-dnscrypt-proxy.toml dnscrypt-proxy.toml (make sure you check page to choose the latest version availabe) $ wget https:/ //jedisct1/dnscrypt-proxy/releases/download/ 2.0. Step1: Getting dns-crypt-proxy binary for ARM I am going to setup dns-crypt-proxy on raspberry and set mikrotik to use this dns instead of the ones provided by my isp.

a static ip assigned to RaspberryPI (I've set routeros to assign an static ip to my raspberry).

a working home network and internet connection.I have these in my home network: a Mikrotik Router, a RaspberryPi So how do we get rid of dns-spoofing imposed by 'big-brothers'?

So IETF and other big players are working on a more 'secure' and 'private' dns. That '10(dot)10(dot)34(dot)35 clearly is not the ip of youtube and this is dns spoofing.Īs you probably already know, DNS protocol is decades old and more modern requirements such as privacy was not seen in the early days.

Routeros raspberry