The diagram is the following, I am trying to make a VPN server which
is accessible anywhere in the world and put Bandwidth shaping so they
don't end up using more than the allocated speed, can allow burst
speed if possible, is it possible to put some expiry on the WireGuard
client like a month
reddit / selfhosted

----------------------------------------------------------------------
LucidDreamer2k · 2023-11-22 15:44

eth5 port has Internet
    # 2023-11-22 15:39:22 by RouterOS 7.10.2
# software id =
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no name=ether4
set [ find default-name=ether2 ] disable-running-check=no name=ether5
/interface wireguard
add listen-port=13231 mtu=1420 name=wireguard1
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/port
set 0 name=serial0
/ipv6 settings
set max-neighbor-entries=15360
/interface wireguard peers
add allowed-address=10.10.0.2/32 interface=wireguard1 persistent-
keepalive=25s \
    public-key="u+2qjZlKkQjUZsDmE42Ak/ZubablL0IDDKen0NbTrjM="
/ip address
add address=10.10.0.1 interface=wireguard1 network=10.10.0.1
/ip dhcp-client
add interface=*1
add interface=*2
add interface=*3
add interface=ether4
add interface=ether5
/system note
set show-at-login=no
/system scheduler
add name=myscheduler on-event=ipscript1 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler2 on-event=ipscript2 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler3 on-event=ipscript3 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler4 on-event=ipscript4 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler5 on-event=ipscript5 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
add name=myscheduler6 on-event=ipscript6 policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
    start-time=startup
/system script
add dont-require-permissions=no name=ipscript1 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether3 disabled=no;"
add dont-require-permissions=no name=ipscript2 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether4 disabled=no;"
add dont-require-permissions=no name=ipscript3 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether5 disabled=no;"
add dont-require-permissions=no name=ipscript4 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether6 disabled=no;"
add dont-require-permissions=no name=ipscript5 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether7 disabled=no;"
add dont-require-permissions=no name=ipscript6 owner=admin policy=\
    ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon
source=\
    "/ip dhcp-client add interface=ether8 disabled=no;"

----------------------------------------------------------------------
SirLagz · 2023-11-23 12:45

Why not run the Mikrotik hotspot and route all your vpn traffic
through that?

----------------------------------------------------------------------
LucidDreamer2k · 2023-11-23 20:01

Is any guide available on the internet regarding what you're saying?
sounds good.