About
cs-routeros-bouncer is a free, open-source CrowdSec remediation component (bouncer) for MikroTik RouterOS. It syncs CrowdSec ban/unban decisions into RouterOS firewall rules through the RouterOS API, with reconciliation, Prometheus metrics, and safe cleanup. The project is written in Go and released under the MIT License.
Maintainer
Section titled “Maintainer”The project is written and maintained by José Manuel Requena Plens (jmrplens):
- Personal site · GitHub · LinkedIn · Mastodon
- Contact for security issues: see the Security Policy (private GitHub advisories, PGP available)
Where the project is listed
Section titled “Where the project is listed”- CrowdSec Hub — official remediation-component listing
- GitHub repository — source code, issues, and releases
- pkg.go.dev — Go module index
- GitHub Container Registry — container images
How it is tested
Section titled “How it is tested”The test suite spans unit, integration, and functional layers (see the Testing Guide). Performance figures published in this documentation were measured on real hardware:
| Component | Tested with |
|---|---|
| Router | MikroTik RB5009UG+S+ (ARM64, 4 cores, 1 GB RAM) |
| RouterOS | 7.22.1 (requires 7.x with the API service enabled) |
| CrowdSec | 1.5+ with the Local API (LAPI) |
| Bouncer host | Linux (amd64/arm64), Go 1.26.4 |
See Benchmarking for the methodology and full numbers.
Contributing
Section titled “Contributing”Bug reports and pull requests are welcome on GitHub. Start with the Contributing guide. This documentation is bilingual (English/Español); every page has an “Edit page” link.