Network Operations

Real-time estate health, WAN path state and service-impact visibility.

Waiting for telemetry…

Global network state

—

unknown

Waiting for controller data

— management online— devices— sites

Estate health

Healthy—

Degraded—

Down—

Unknown—

Operational posture

—

Sites on backup

—

Active incidents

—

Fleet Internet 24h

—

Telemetry coverage

Healthy sites ●

—

Normal primary path

Degraded ▲

—

Backup or impaired

Down ■

—

Service impact

On backup ⇄

—

Failover active

Incidents !

—

Unresolved alerts

Poll cycle ↻

—

Controller cadence

Site operations

Actual active path, availability and management state.

WAN transition timeline

Failover, failback and path-state events.

Active incidents

Current service-impact and control-plane alerts.

Path distribution

Primary versus backup usage across the estate.

—

On primary

—

On backup

Waiting for WAN data

WAN Fabric

Logical real-time path view derived from active WAN telemetry.

PrimaryBackup activeUnknown/down

◇

OpenSDWANController / NOC

Fabric summary

Live path adoption and service state.

—

Sites

—

Devices

—

Primary paths

—

Backup paths

Recent path changes

Most recent data-plane transitions.

WAN Intelligence

Deterministic path scoring, SLA policy, brownout detection and guarded autonomous failover.

Explainable policy engine

Policy target

Autonomous route changes remain OFF until explicitly enabled per device.

Managed Router

Select a managed router to load WAN intelligence.

Secure Overlay Fabric

OpenSDWAN-owned WireGuard management overlay with isolated /32 addressing, verified migration and recovery path retention.

No vendor tunnel mutation

Configured

—

Overlay records

Connected

—

WireGuard evidence

API verified

—

Overlay management path

Migrated

—

Controller using overlay

Overlay target

Provisioning is additive. Public/recovery management remains in place until an overlay API test passes and migration is explicitly confirmed.

Managed Router

Select a managed router to configure the secure overlay.

Analytics

Persisted WAN, traffic, availability, overlay and policy evidence. No synthetic history.

SQLite-backed historical analytics

Analysis window

Only recorded telemetry inside the selected range is used.

Range

Device

Internet availability

—

Observed successful samples

Failovers

—

Recorded path transitions

Brownouts

—

Policy brownout evidence

Overlay availability

—

Persisted overlay samples

Traffic RX

—

Integrated sampled rate

Traffic TX

—

Integrated sampled rate

Policy decisions

—

Explainable decision ledger

Telemetry samples

—

History availability

Incident MTTR

—

Mean resolved incident duration

Failover duration

—

Failover to failback mean

Config drift

—

Detected baseline divergence

Policy effectiveness

—

Verified / verified+failed actions

Path quality and Internet latency

Actual persisted measurements for the selected scope.

WAN path analytics

Quality, SLA measurements and active-path utilisation.

Device analytics

Availability, failover and traffic by managed router.

Policy outcomes

Decision → evidence → result correlation.

Policies

Estate-wide WAN SLA policy management, recommendation mode and autonomous path control.

Policies

—

Enabled

—

Recommend

—

Autonomous

—

Policy inventory

One deterministic WAN SLA policy per managed router. Decision history is retained if a policy is deleted.

Select or create a policy to edit thresholds and action mode.

Network Flight Recorder

One evidence timeline across WAN decisions, incidents, overlay events, changes, snapshots and drift.

Evidence correlation

Evidence scope

Correlate recorded evidence without inventing unsupported causality.

Range

Device

Severity

Source

Evidence records

—

Critical

—

Warnings

—

Config evidence

—

Evidence timeline

Newest first. Open a context window to reconstruct the surrounding incident evidence.

Incident reconstruction

Temporal evidence, explicit reason codes, actions and recovery.

Select Context on any timeline event.

Configuration Intelligence

Versioned snapshots, known-good baselines, drift detection and bounded verified rollback.

Default routes remain WAN Policy owned

Configuration target

Protection is additive and never silently undoes direct administrator changes.

Managed Router

Snapshots

—

Baselines

—

Open drift

—

Protected devices

—

Configuration history

Every snapshot is timestamped, attributed and hashable.

Compare from

Compare to

Choose snapshots to compare.

Protection policy

Scheduled snapshots and drift scans run independently of network health.

Protection enabled

Drift ledger

Direct/untracked changes are surfaced for operator decision.

Clients & Fleet

Customer → site → device hierarchy, estate inventory and controlled zero-touch enrollment.

Add client / organisation

Create a first-class customer boundary before adding sites and routers.

Clients

—

Sites

—

Devices

—

Management online

—

Fleet hierarchy

Each device belongs to a site, and each site belongs to a client / organisation.

Zero-touch enrollment tokens

One-time, revocable claim tokens. A claim records device identity only; management credentials still require operator approval.

Sites

Branch inventory, status and controller association.

Add site

Create a branch/location under a client organisation.

Site inventory

Loading…

Devices

Router inventory, management state and controlled operations.

Enroll RouterOS device

Select the client and site explicitly. Existing NUR remains untouched.

Use RouterOS API TLS

Managed devices

Loading…

Network Control Plane

Verified RouterOS changes with pre-change snapshots, guard rails, audit and rollback.

Verified-write mode

Control target

Select a managed device. All writes require explicit confirmation and administrator access.

Managed Router

◇

Management guard active

Configured WANs, active default routes and dynamic routes are protected from accidental mutation. Forced WAN policy belongs to v0.4.

InterfacesVerified write

Static routesVerified write

DNSVerified write

DHCPRead only

FirewallRead only

TerminalDisabled

Select a managed router to load the control plane.

Incidents

Active and recovered network events with duration and recovery state.

Active

—

High severity

—

Recovered

—

Total shown

—

Incident ledger

Controller-generated incident and recovery records.

Operate the network.See the path.

Network Operations

Site operations

WAN transition timeline

Active incidents

Path distribution

WAN Fabric

Fabric summary

Recent path changes

WAN Intelligence

Policy target

Secure Overlay Fabric

Overlay target

Analytics

Analysis window

Path quality and Internet latency

WAN path analytics

Device analytics

Policy outcomes

Policies

Policy inventory

Network Flight Recorder

Evidence scope

Evidence timeline

Incident reconstruction

Configuration Intelligence

Configuration target

Configuration history

Protection policy

Drift ledger

Clients & Fleet

Add client / organisation

Fleet hierarchy

Zero-touch enrollment tokens

Sites

Add site

Site inventory

Devices

Enroll RouterOS device

Managed devices

Network Control Plane

Control target

Incidents

Incident ledger

Operate the network.
See the path.