Syed Hashmi.
Work

MikroTik tools

Pipsqueeze.

WireGuard for MikroTik routers — like Tailscale, but yours.

Status
Paused Not running
Stack
  • Python
  • Flask
  • WireGuard
  • RouterOS API
Licence
MIT
Last update
Oct 2026
Source
Source on GitHub
Pipsqueeze VPN dashboard in a dark cyan-on-navy theme. A row of navigation buttons sits at the top: Peers, Alerts, Security, Report, Map, CSV, Backup and Reset. Below them are status cards for the MikroTik API (Connected), CPU 0.0%, RAM 51.3% and Disk 10.5%, then counters for total clients 0, used IPs 0 and available IPs 253. A Create Client form follows, with fields for client name, tags, notes, expiry date and location (plus latitude/longitude), a LAN access mode toggle (Internet only, LAN only, Full access) and a Generate Client button. To its right is an empty panel reading Ready to generate.
The main dashboard shows router health and the IP pool, and creates a WireGuard client in one form with tags, an expiry date and a LAN access mode.

Manage WireGuard peers on a MikroTik router from the browser — configs, QR codes, quotas and a self-serve client portal.

Why I built it

Tailscale-style convenience for a VPN you fully own: create and manage WireGuard clients on a MikroTik router from the browser.

What it does

  • Client management — create a client and get its config and QR code instantly; enable, disable, rename, clone and expire clients in bulk.
  • Three access modes — internet only, LAN only, or full access.
  • Self-serve portal — clients download their own config from a private link, or a one-time link creates a new client on first visit.
  • Quotas and monitoring — per-client bandwidth limits, live status, latency and uptime history, and a map of client locations.

Engineering decisions

  • Straight to the router’s API — Pipsqueeze talks to the router over its API, so managing clients never needs SSH or the router’s own UI.
  • Secure by default — two-factor login, CSRF protection and encrypted secrets at rest.

Pipsqueeze is paused at the moment; the code and docs are on GitHub.

Pipsqueeze login card on a dark grid background, headed 'WireGuard Access Panel / VPN Dashboard - Secure authentication required'. It has an empty username field, a masked password field, a green-outlined TOTP box labelled Two-Factor Authentication with a six-digit code input, an Authenticate button, and a footer reading 'MikroTik · WireGuard VPN' with a green System Online indicator.
Sign-in needs a password plus a six-digit TOTP code from an authenticator app.