Multi-Tenant ISP Management SaaS Platform
🌐 Website · 📖 Documentation · 🐛 Report Bug · ✨ Request Feature
NexaLink is a production-grade, multi-tenant SaaS platform built specifically for Internet Service Providers (ISPs). It consolidates PPPoE session management, RADIUS authentication, customer billing, NOC monitoring, and support operations into a single unified system.
Built by a working ISP engineer, NexaLink solves real infrastructure problems — not hypothetical ones.
Target: Pakistani ISPs first → regional expansion → global SaaS
- MikroTik RouterOS API integration for live PPPoE session control
- Real-time session monitoring: connect, disconnect, bandwidth stats
- Multi-NAS support with dynamic client provisioning
- VLAN-aware customer assignment
- Auto-provisioning of RADIUS users on customer creation
- Dynamic NAS client management via SQL (
nastable) — no config file edits - PPPoE profile binding per customer plan
- Authentication logs and session tracking
- Automated invoice generation (PDF via DomPDF)
- Subscription plan management
- Payment tracking and overdue handling
- Per-tenant invoice branding
- Real-time network health widgets
- Active sessions, bandwidth utilization, alarm summary
- Per-ISP tenant isolation
- MikroTik health metrics via RouterOS API
- Customer-facing and staff-facing ticket management
- Priority levels, status tracking, and internal notes
- Per-tenant ticket queues
- Full customer lifecycle: onboarding → suspension → termination
- Bulk import/export (CSV)
- Plan assignment and service history
- Role-based staff access per tenant
- Centralized multi-tenant management
- Tenant provisioning and licence control
- System health and usage metrics
- Access restricted to WireGuard VPN + internal IP ranges
┌─────────────────────────────────────────────────────┐
│ NexaLink SaaS │
├──────────────────────┬──────────────────────────────┤
│ Master Panel │ Admin Panel │
│ (Super Admin) │ (Per ISP Tenant) │
│ VPN-restricted │ Public HTTPS │
├──────────────────────┴──────────────────────────────┤
│ Laravel 13 + Filament v5 │
│ Stancl/Tenancy (Single-DB Multi-Tenant) │
├─────────────┬───────────────┬────────────────────────┤
│ PostgreSQL │ Redis │ Laravel Horizon │
│ 16 │ 8 │ (Queue Workers) │
└─────────────┴───────────────┴────────────────────────┘
│ │
┌───────▼──────────┐ ┌──────────▼──────────┐
│ FreeRADIUS │ │ MikroTik RouterOS │
│ (Auth Server) │ │ (PPPoE / Sessions) │
└──────────────────┘ └─────────────────────┘
| Layer | Technology |
|---|---|
| Backend Framework | Laravel 13 / PHP 8.3 |
| Admin UI | Filament v5 (Admin + Master panels) |
| Frontend | Livewire, Alpine.js, Tailwind CSS |
| Multi-Tenancy | Stancl/Tenancy (single-database) |
| Database | PostgreSQL 16 |
| Cache / Queue | Redis 8 + Laravel Horizon |
| Auth Server | FreeRADIUS 3.2.5 |
| Network Device | MikroTik RouterOS API |
| Virtualization | Proxmox VE |
| Reverse Proxy | Nginx |
| VPN | WireGuard |
| CI/CD | GitLab CE (test → build → deploy) |
| Code Quality | SonarQube |
Screenshots coming soon. See nexalink.app for a live demo preview.
| NOC Dashboard | Customer Management |
|---|---|
| (screenshot) | (screenshot) |
| Invoicing | Support Tickets |
|---|---|
| (screenshot) | (screenshot) |
| Document | Description |
|---|---|
| PPPoE Management | Session control, MikroTik integration |
| RADIUS Integration | FreeRADIUS setup, auto-provisioning |
| Invoicing | Billing, PDF generation, plans |
| NOC Dashboard | Real-time monitoring widgets |
| Support Tickets | Ticket system usage |
| Customer Management | Lifecycle, import/export |
| API Overview | REST API reference |
- PPPoE Management (MikroTik API)
- FreeRADIUS Integration
- Invoicing & PDF Billing
- NOC Dashboard
- Support Ticket System
- Customer Import/Export
- Multi-Tenant Master Panel
- WhatsApp/SMS Notification Gateway
- Mobile App (customer self-service)
- Stripe / JazzCash Payment Integration
- Public API (v1)
- Bandwidth Monitoring (SNMP/MKTXP)
- Reseller / Sub-tenant Module
See CHANGELOG.md for release history.
- Master panel access enforced at Nginx level: WireGuard VPN only
- Tenant isolation at database row level via Stancl/Tenancy
- All secrets managed via
.env— never committed - SonarQube integrated in CI/CD pipeline for continuous quality checks
- SSL enforced across all subdomains via Nginx reverse proxy
Found a security issue? Please do not open a public issue. Contact: zilleali1245@gmail.com
Zill E Ali — Junior Network Engineer & Founder of Developer Zon
- 🌐 zilleali.com
- 💼 linkedin.com/in/zilleali12
- 🐙 github.com/Zilleali
- 📦 packagist.org/packages/zilleali/mikrotik-laravel
NexaLink is proprietary software. All rights reserved.
This repository contains public-facing documentation only. The source code is not distributed under an open-source license.
© 2025–2026 Zill E Ali / Developer Zon. All rights reserved.