SD-WAN
Cloud Controller
Mikrotik-Powered Hub & Edge Network Fabric
A centralised cloud controller for SD-WAN deployments built on Mikrotik RouterOS. Manage all Hub and Edge routers from a single dashboard — zero-touch provisioning, encrypted tunnels, multi-WAN failover, and live topology visibility.
How It Works
The INIC SD-WAN platform has three layers — a cloud-hosted controller, Mikrotik Hub routers at central PoPs or datacenters, and Mikrotik Edge routers at branch or customer sites. All three are unified under a single management plane.
Cloud Controller
Web-based dashboard hosted in the cloud. Manages all routers, pushes configs, monitors topology, and handles zero-touch provisioning.
Hub Router
Mikrotik CCR or RB series at your datacenter or PoP. Terminates all Edge tunnels, runs BGP/OSPF, and provides the central routing point for the WAN fabric.
Edge Routers
Mikrotik hEX, RB4011, or hAP series at each branch or customer site. Self-provisions on first boot, establishes encrypted tunnels to the Hub, and handles local LAN routing.
What the platform delivers
Cloud Controller
A centralised web-based controller manages all Hub and Edge routers from a single dashboard. Push configurations, monitor tunnels, and view live topology — all from the cloud.
Mikrotik Hub & Edge Architecture
Purpose-built for Mikrotik RouterOS. Hub routers at the core datacenter/PoP and Edge routers at branch or customer sites — all managed through the same controller.
Multi-WAN & Automatic Failover
Edge routers support multiple WAN links — fiber, LTE, broadband. The controller orchestrates automatic failover and failback, keeping branches online even when a primary link drops.
WAN Load Balancing
Distribute traffic intelligently across multiple WAN connections using PCC (Per-Connection Classification) or ECMP — maximising available bandwidth at each Edge site.
Encrypted Overlay Tunnels
All Hub-to-Edge traffic traverses encrypted tunnels — WireGuard, IPSec, or SSTP — over the public internet. Branch traffic is secured without dedicated MPLS circuits.
Zero-Touch Provisioning
New Edge routers call home to the Cloud Controller on first boot. The controller pushes the full configuration automatically — no manual SSH or Winbox required at the branch.
QoS & Traffic Prioritisation
Per-application and per-site traffic shaping policies pushed from the controller. Voice, video, and critical applications always get priority over bulk traffic.
Live Topology & Monitoring
The controller renders a live network topology map showing all Hub and Edge nodes, tunnel states, WAN link health, and bandwidth utilisation in real time.
Centralised Policy Management
Define firewall rules, routing policies, NAT configurations, and VPN settings once in the controller and deploy across all Edge sites simultaneously.
Who is this for?
ISP Managed SD-WAN Service
Offer SD-WAN as a managed service to business customers. The controller is yours — you manage the Hub and deploy Edge routers at customer premises.
Multi-Branch Enterprise WAN
Connect all branch offices through encrypted tunnels to a central Hub — replacing expensive MPLS circuits with cost-effective broadband + SD-WAN.
ISP PoP Interconnect
Use SD-WAN to link multiple ISP PoPs with automatic failover across diverse paths — keeping the backbone resilient without dedicated dark-fibre circuits everywhere.
Technical details
Frequently Asked Questions
Common questions about INIC SD-WAN.
What routers does INIC SD-WAN support?
INIC SD-WAN is purpose-built for MikroTik RouterOS. Both Hub aggregation nodes and Edge branch routers run MikroTik hardware, all managed through the centralised cloud controller at sdwan.inic.in.
How is SD-WAN different from a traditional MPLS network?
MPLS uses dedicated leased-line circuits — expensive and slow to provision. SD-WAN runs an encrypted overlay over any internet connection (broadband, fiber, LTE) at a fraction of the cost, with automatic failover and centralised policy management from a single dashboard.
What tunnelling protocols are supported?
INIC SD-WAN supports WireGuard (primary — high performance, low overhead), GRE over IPSec (for branches behind restrictive firewalls), and SSTP (for branches behind carrier-grade NAT, using HTTPS port 443).
Does it support multiple WAN links at a branch?
Yes. Each branch (Edge) router supports multiple simultaneous WAN connections — fiber, broadband, and LTE. The controller monitors path health every 30 seconds and triggers automatic failover and failback with no manual intervention.
Can customers manage the SD-WAN themselves?
Yes. The INIC SD-WAN portal gives customers full visibility — live topology, tunnel health, site status, and alerts. INIC also offers a fully managed service for customers who prefer to outsource day-to-day network operations.
Now Live
Ready to deploy SD-WAN?
The INIC SD-WAN portal is live at sdwan.inic.in. Log in to your account, onboard your routers, and start managing your network fabric today.