Securing MikroTik Management with Cloudflare Zero Trust (Part 1)

Architecture diagram for managing a MikroTik router through Cloudflare Zero Trust, Cloudflare Access, Cloudflare Tunnel, cloudflared, and a management VLAN.

I, due to recent SSH vulnerabilities in MikroTik, figured this series of articles would be relevant. The router may have strong passwords and firewall filters, but those services still receive constant login attempts from automated scanners. For years, the normal answer was a VPN with a management network. VPNs work well, but they require another … Read more