Mikrotik Video set up a secure Tor port on your router! (DoHoT included)

Video overview

In this video, MikroTik shows how to turn one Ethernet port on your RouterOS device into a dedicated “Tor port” using the new Socksify feature. Anything you plug into that port is forced to access the internet through Tor, no Tor Browser or client-side proxy settings required.

The walkthrough runs Tor inside a lightweight RouterOS container, then uses NAT + Socksify rules to transparently proxy TCP traffic into the Tor network (with safeguards to avoid proxy loops). The presenter also explains why this approach isn’t ideal for most UDP-heavy streaming, while noting that some apps can fall back to TCP.

A key part of the tutorial is preventing leaks: it covers DNS privacy with DNS-over-HTTPS, and then takes it further by routing DoH through Tor as well. Finally, it adds firewall “fail-closed” rules and start-on-boot settings so the port stays secure even after reboots.