Independent project · Infrastructure · Networking · Security
Multi-Tenant RADIUS Authentication Platform
Containerized multi-tenant RADIUS authentication platform designed for enterprise WiFi networks. Enables WiFi service providers to deliver secure WPA2-Enterprise access at scale with real-time session visibility, bandwidth accounting, and tenant isolation.
RADIUS administration dashboard with tenant navigation, session statistics, bandwidth accounting, and traffic visualization.
Shared infrastructure. Separate access policies.
A Wi-Fi provider serving several organizations needs more than successful authentication. Each tenant needs control of its own users and policies, while operators need visibility into active sessions and usage.
The platform combines FreeRADIUS authentication with a Go backend and a Vue administration interface. REST APIs handle provisioning, Docker makes deployment reproducible, and tenant isolation defines how data and policies are managed. It has been deployed in schools and municipal organizations in Bulgaria.
Keep tenants isolated
User administration, policies, and data are separated by tenant within a multi-tenant platform.
Use established authentication
FreeRADIUS supports WPA2-Enterprise access with EAP-PEAP and MSCHAPv2.
Expose operational visibility
Session tracking, bandwidth accounting, and traffic views make access activity visible to administrators.
Architecture & decisions
Keep tenant policies and data isolated while exposing provisioning through REST APIs. Package the platform in Docker for reproducible deployments.
- Enterprise Wi-Fi
- FreeRADIUS · EAP authentication
- Go · tenant policies & provisioning
- Vue · sessions & accounting
A high-level view of the project’s components and workflow.
Implementation details
Go / FreeRADIUS 3.x / Vue.js / Docker
- Supports 10,000+ concurrent RADIUS sessions with 500–1,000 authentications per second
- Multi-tenant architecture with strict tenant and data isolation
- FreeRADIUS 3.x.x integration with custom Go backend
- Full EAP-PEAP / MSCHAPv2 authentication support for WPA2-Enterprise networks
- Vue.js admin dashboard for tenant, user, and policy management
- Real-time session tracking, bandwidth accounting, and traffic visualization
- Automated user provisioning and session lifecycle management via REST APIs
- Containerized deployment using Docker for reproducible and scalable operations
- Deployed in production environments across schools and municipal organizations in Bulgaria
Outcomes
Deployed in schools and municipal organizations in Bulgaria. Published capacity: 10,000+ concurrent sessions and 500–1,000 authentications per second.
Capacity and operating figures are from my published project notes.
Explore the project
See the product, documentation, or available downloads.