Mikrotik - V2ray

/ip firewall address-list add list=direct-list address=10.0.0.0/8 comment="Local networks bypass"

Since MikroTik can't see inside the V2Ray tunnel, monitor via: v2ray mikrotik

It is important to clarify a common misconception: RouterOS itself does not have a native V2Ray package. /ip firewall address-list add list=direct-list address=10

To achieve V2Ray functionality, you generally have two approaches: Since MikroTik can't see inside the V2Ray tunnel,

Unlike Socks or HTTP proxy, TPROXY preserves the original destination IP. This means CDNs, banking apps, and gaming traffic work flawlessly.

  "inbounds": [
    "port": 443,
    "protocol": "vless",
    "settings":  "clients": [ "id": "UUID", "flow": "" ] ,
    "streamSettings": 
      "network": "ws",
      "wsSettings":  "path": "/ray" ,
      "security": "tls",
      "tlsSettings":  "certificates": [ "certificateFile": "/etc/letsencrypt/live/example.com/fullchain.pem", "keyFile": "/etc/letsencrypt/live/example.com/privkey.pem" ]
],
  "outbounds": [ "protocol": "freedom" ]