Technical Specifications
Everything you need to know about compatibility, integration, and deployment
Network Equipment Compatibility
MikroTik RouterOS
- Primary Support: RouterOS 6.x and 7.x
- API Integration: Full REST API support
- Auto-Discovery: Automatic router detection
- Models: hEX, RB series, CCR, CRS series
RADIUS-Compatible Devices
- Ubiquiti UniFi: Full RADIUS support
- pfSense: Captive portal integration
- OpenWrt: CoovaChilli hotspot
- Cisco: AAA authentication support
Fiber / GPON
- OLT management: Huawei and VSOL; other vendors on request
- ONU provisioning from the NetOS dashboard
- Same billing, plans, and portal as hotspot and PPPoE
Built-in RADIUS Authentication
- Enterprise-grade RADIUS server included
- No Setup Required: Pre-configured for MikroTik
- Multi-NAS: Support for multiple routers
- Custom Attributes: Rate-limit, bandwidth control
Authentication & Access Control
Hotspot (Captive Portal)
- Splash Page: Custom branded login pages
- Vouchers: Time and data limits, printable codes
- Auto-Login: MAC address binding
- Self-service: Customer picks a voucher and pays
PPPoE
- Dedicated Connections: Per-customer bandwidth
- Auto-Provisioning: Generate PPPoE credentials
- Session Monitoring: Track active sessions
- Idle Timeout: Configurable disconnect rules
Static IP / DHCP
- IP Bindings: MAC-to-IP reservations
- Lease Management: DHCP lease tracking
- Firewall Rules: Auto-generated allow/deny
- ARP Tables: Live device detection
Deployment & Hosting
Cloud-Hosted (Managed)
- Subdomain: yourcompany.netos.co.ke
- SSL Certificate: Free Let's Encrypt included
- Uptime: 99.9% SLA guarantee
- Backups: Daily automated backups
Self-Hosted (On-Premise)
- Requirements: Ubuntu 22.04+ or Docker
- Minimum: 2 CPU, 4GB RAM, 40GB SSD
- Database: PostgreSQL 15+
- Web Server: Built-in with Laravel Octane
Docker Deployment
- Official Images: Docker Hub repository
- Compose File: One-command deployment
- Containers: App, DB, RADIUS, Queue
- Portability: Run anywhere Docker runs
API & Integrations
REST API
- Authentication: Bearer token + API keys
- Endpoints: 50+ documented endpoints
- Rate Limiting: 100 req/min (adjustable)
- Format: JSON responses with pagination
Webhooks
- Events: Payment, login, logout, quota alerts
- Delivery: Real-time HTTP POST notifications
- Retries: Auto-retry failed deliveries (3x)
- Security: HMAC signature verification
SMS Integration
- Providers: Africa's Talking, Twilio, custom
- Triggers: Payment, expiry, low balance
- Templates: Customizable messages
- Bulk SMS: Campaign management
Security & Compliance
Data Security
- Encryption: TLS 1.3 for all connections
- Passwords: Bcrypt hashing (cost 12)
- Database: Encryption at rest
- Backups: Encrypted backup storage
Access Control
- RBAC: Role-based access control
- 2FA: Two-factor authentication
- Audit Logs: Full activity tracking
- IP Whitelisting: Admin restrictions
Compliance
- Kenya DPA: Data protection ready
- Data Retention: Configurable policies
- GDPR-inspired practices: right to delete your account and data
- Privacy First: No data selling
Payment Gateway Integration
| Gateway | Status | Setup Time | Features |
|---|---|---|---|
| M-Pesa (Safaricom) | Built-in | Pre-configured | STK Push, C2B, Paybill, Till |
| Pesapal | Built-in | Pre-configured | Mobile money and card, East Africa |
| Flutterwave | Built-in | Pre-configured | Mobile money and card, Africa-wide |
| Paystack | Built-in | Pre-configured | Card and mobile money, NG/GH/ZA/KE |
| PayPal | Built-in | Pre-configured | Card and PayPal balance |
| Stripe | On request | Talk to us | Card payments, recurring |
M-Pesa Integration Flow
1. Customer sends payment to PayBill (Account: Phone Number)
2. M-Pesa sends instant notification to NetOS
3. NetOS validates payment & matches customer
4. RADIUS server updates customer balance
5. MikroTik grants internet access
6. Customer receives SMS confirmation
Questions about your network?
Tell us your routers, OLTs and payment rail, and we will tell you how NetOS fits. Or start free and add your router now.