Technical Specifications
Everything you need to know about compatibility, integration, and deployment
Network Equipment Compatibility
MikroTik RouterOS
- Primary Support: RouterOS 6.x and 7.x
- API Integration: Full REST API support
- Auto-Discovery: Automatic router detection
- Models: hEX, RB series, CCR, CRS series
RADIUS-Compatible Devices
- Ubiquiti UniFi: Full RADIUS support
- pfSense: Captive portal integration
- OpenWrt: CoovaChilli hotspot
- Cisco: AAA authentication support
Built-in FreeRADIUS
- Version: FreeRADIUS 3.x included
- No Setup Required: Pre-configured for MikroTik
- Multi-NAS: Support for multiple routers
- Custom Attributes: Rate-limit, bandwidth control
Authentication & Access Control
Hotspot (Captive Portal)
- Splash Page: Custom branded login pages
- Social Login: Facebook, Google OAuth
- Voucher Codes: Generate printable vouchers
- Auto-Login: MAC address binding
PPPoE
- Dedicated Connections: Per-customer bandwidth
- Auto-Provisioning: Generate PPPoE credentials
- Session Monitoring: Track active sessions
- Idle Timeout: Configurable disconnect rules
Static IP / DHCP
- IP Bindings: MAC-to-IP reservations
- Lease Management: DHCP lease tracking
- Firewall Rules: Auto-generated allow/deny
- ARP Tables: Live device detection
Deployment & Hosting
Cloud-Hosted (Managed)
- Subdomain: yourcompany.netos.co.ke
- SSL Certificate: Free Let's Encrypt included
- Uptime: 99.9% SLA guarantee
- Backups: Daily automated backups
Self-Hosted (On-Premise)
- Requirements: Ubuntu 22.04+ or Docker
- Minimum: 2 CPU, 4GB RAM, 40GB SSD
- Database: PostgreSQL 15+
- Web Server: Built-in with Laravel Octane
Docker Deployment
- Official Images: Docker Hub repository
- Compose File: One-command deployment
- Containers: App, DB, RADIUS, Queue
- Portability: Run anywhere Docker runs
API & Integrations
REST API
- Authentication: Bearer token + API keys
- Endpoints: 50+ documented endpoints
- Rate Limiting: 100 req/min (adjustable)
- Format: JSON responses with pagination
Webhooks
- Events: Payment, login, logout, quota alerts
- Delivery: Real-time HTTP POST notifications
- Retries: Auto-retry failed deliveries (3x)
- Security: HMAC signature verification
SMS Integration
- Providers: Africa's Talking, Twilio, custom
- Triggers: Payment, expiry, low balance
- Templates: Customizable messages
- Bulk SMS: Campaign management
Security & Compliance
Data Security
- Encryption: TLS 1.3 for all connections
- Passwords: Bcrypt hashing (cost 12)
- Database: Encryption at rest
- Backups: Encrypted backup storage
Access Control
- RBAC: Role-based access control
- 2FA: Two-factor authentication
- Audit Logs: Full activity tracking
- IP Whitelisting: Admin restrictions
Compliance
- Kenya DPA: Data protection ready
- Data Retention: Configurable policies
- GDPR Practices: Right to erasure
- Privacy First: No data selling
Payment Gateway Integration
| Gateway | Status | Setup Time | Features |
|---|---|---|---|
| M-Pesa (Safaricom) | Built-in | Pre-configured | C2B, B2C, STK Push, Paybill, Till |
| Airtel Money | Built-in | Pre-configured | Push Payment, Disbursement |
| T-Kash (Telkom) | Available | 24-48 hours | API integration |
| PayPal | Available | 24 hours | IPN webhooks, subscriptions |
| Stripe | Available | 24 hours | Card payments, recurring |
M-Pesa Integration Flow
1. Customer sends KES 500 to PayBill (Account: Phone Number)
2. M-Pesa sends instant notification to NetOS
3. NetOS validates payment & matches customer
4. RADIUS server updates customer balance
5. MikroTik grants internet access (< 5 seconds)
6. Customer receives SMS confirmation