At the request of many, this post, a supplement to the one detailing the UniFi Network, provides a quick yet comprehensive buying guide for UniFi Cloud Gateways.
When through, you’ll be able to pick the right UniFi “router” for your needs. It also includes tips, upgrades, or replacement if you already have an existing gateway that’s been set up to also function as a UniFi Network Video Recorder (UNVR).
Before continuing, keep in mind that while a UniFi system, with appropriate hardware, can function effectively in a fully wireless environment, many of its features work best in a wired home or when you’re willing to run one or two network cables to connect the hardware units.
UniFi Cloud Gateways: The complete guide on picking or replacing a Ubiquiti “router”
Each UniFi Cloud Gateway (UCG) is much more than a standard router. As UniFi consoles powered by UniFi OS, most of these hardware units can run multiple applications simultaneously, similar to a computer.
To be clear, there are different types of UniFi hardware, called controllers, that share the same hardware design as UniFi Cloud Gateways, but can’t work independently. We’re not talking about them. You want to get a UniFi console that can at least run the Network application, the primary app in the UniFi ecosystem that turns the hardware into a “router”.
Tip
Ubiquiti’s naming convention can be confusing. Here’s a way to make it a bit easier to know which is which, in most cases:
- UniFi consoles: Powered by the UniFi OS and are often known as UniFi Cloud Gateway, or UCG. These consoles always support at least the Network application and often more. The key here is the “Cloud” notion. Members of the UniFi Dream series, such as UDR7, UDM-SE, or UDM Pro Max, are all UniFi Cloud Gateways.
- UniFi controller (legacy): A controller generally has a single function. None of them has the “Cloud” or “Dream” notion in the name. A controller doesn’t have built-in UniFi OS and requires a separate device, such as the Cloud Key, to provide the UniFi OS and apps for it to function.
Still, you need to pay close attention to avoid getting the wrong device, since many of these controllers and consoles look strikingly similar.
And for most home users, this Network app is all they need. However, it never hurts to get a console that can run multiple apps—other than the Network app, the rest are not installed by default and can be uninstalled. Most UniFi Cloud Gateways can run multiple apps anyway.
Apart from Network, the second app worth considering for the home (and SMB) is UniFi Protect, which turns the console into a UniFi Network Video Recorder. The post linked below details this unique approach to home camera-based security and how you can get started.
Since all UniFi Cloud Gateways share the same Network application mentioned above, no matter which one you pick, you will have the same networking experience. That said, the first thing to consider when getting the hardware is its physical size. The device has to fit in your space.
UniFi Cloud Gateways’ physical design: Rackmount vs. desktop
UniFi Cloud Gateways come in a few different shapes and sizes, as you’ve likely noted in the first photo of this post.
Generally, for a business network, you can choose the full-scale rackmount design. For a home, there are more compact options for desktop placement or wall mounting—pick one that meets your placement and “spouse approval” requirements.
Cost and capacity aside, all UniFi Cloud Gateways function the same, at least as “routers”. However, a larger gateway generally has more processing power or storage space. So, if you want to have the best performance and enough power to run multiple apps, that’s also a reason to get a rackmount or a large unit, as long as you have room for it—you can build a rack for a relatively low cost.
UniFi Cloud Gateways: Wi-Fi or not Wi-Fi
After the physical size, the second thing to consider is Wi-Fi. Some UniFi Cloud Gateways have built-in access points, similar to Wi-Fi routers. Others don’t—they are non-Wi-Fi routers.
Top non-Wi-Fi UniFi Cloud Gateways
 |  |  |  | |
| Name | Ubiquiti Cloud Gateway Fiber (UCG-Fiber)’s Rating | Ubiquiti UniFi Cloud Gateway Max (UCG-Max)’s Rating | Ubiquiti UniFi Dream Machine Pro Max (UDM-Pro-Max)’s Rating | Ubiquiti UniFi Dream Machine Special Edition (UDM-SE)’s Rating |
| Price | – | – | – | – |
| Rating | ||||
| Description | ||||
| Statistics | ||||
| Buy this product |
Check current prices at the Ubiquiti Store or on Amazon!
However, on this Wi-Fi front, keep the following in mind:
- All UniFi Cloud Gateways can host multiple UniFi access points to add Wi-Fi or extend coverage.
- Once adopted, these add-on APs become part of the system and function as if they were integral to the gateway itself.
- In a UniFi network, you can mix access points of different Wi-Fi standards and performance tiers, and they will work well together.
The point is that regardless of which UniFi Cloud Gateway you have, you can always get one or a few UniFi access points to build a robust Wi-Fi system of your liking.
Still, if you don’t need Wi-Fi, it’s best to go with a non-Wi-Fi gateway. Otherwise, when Wi-Fi is part of the picture, consider these main scenarios:
- If your home only requires a single Wi-Fi host unit (access point), then:
- If you can place the “router” at the optimal location for best coverage, then get a single Wi-Fi-integrated console. This applies to most airy homes under 2000 ft2 (186 m2) that are round or square.
- If your home is wired with network cabling, it’s still best to get a non-Wi-Fi console and a separate UniFi access point (or use the UX7 in access point mode). This way, you can place the access point where it delivers the best coverage. This applies to a home with lots of walls, or that has the Internet entry in the basement or at one far corner.
- If your home is large, has lots of walls, or sprawling and, therefore, requires more than one Wi-Fi access point, then:
- If you need a fully wireless setup, consider using a Wi-Fi-integrated console, such as the UDR7, and then the UX7 or U7 Mesh as a wireless mesh point. I described this combo in detail in the UX7’s review.
- If your home is already wired, consider a non-Wi-Fi console (compact or large-scale), then add one or a few UniFi access points to build your Wi-Fi system.
- For an environment with extra requirements, such as rugged, outdoors, or requiring 5G access:
- If you need a rugged unit that can handle the elements, pick the UCG-Industrial as the primary router. Afterward, you can use any standard UniFi access point for a wired or wireless setup, depending on the needs. Additionally, outdoor access points will come in handy.
- If you need 5G as the primary or backup Internet connection, consider the UniFi 5G Max (or its outdoor version) as an add-on to any existing UniFi network. Alternatively, the Dream Router 5G Max has an internal 5G cellular modem with dual-SIM support.
In most cases, it’s best to get your home wired and start with a non-Wi-Fi console—you’ll get flexibility in hardware placement.
Top Wi-Fi 7 UniFi Cloud Gateways
 |  |  |  | |
| Name | Ubiquiti UniFi Dream Router 7 (UDR7)’s Rating | Ubiquiti UniFi Dream Router 5G Max (UDR-5G-Max)’s Rating | Ubiquiti UniFi Cloud Gateway Industrial (UCG-Industrial)’s Rating | Ubiquiti UniFi Express 7 (UX7)’s Rating |
| Price | – | – | – | – |
| Rating | ||||
| Description | ||||
| Statistics | ||||
| Buy this product |
Check current prices at the Ubiquiti Store or on Amazon!
UniFi Cloud Gateways: Operation roles, uplink options, and Wi-Fi management
There are three things that make a UniFi Cloud Gateway different from any other standard router.
UCG has robust SSID assignments: A non-obsolescent approach
The first is that UniFi Cloud Gateways generally don’t become obsolete.
I often say that a non-Wi-Fi router won’t become “dated” when there’s a significant change in Wi-Fi, such as the release of a new standard. And that’s always true. However, a UniFi Cloud Gateway with built-in Wi-Fi won’t become obsolete, either.
That’s because the UniFi Network app allows users to disable or ignore a gateway’s built-in Wi-Fi access point by not assigning any SSID to it, effectively rendering it a non-Wi-Fi router.
The point is that, to save costs, you can get a UniFi router with dated Wi-Fi specs, such as the UDM (with a built-in Wi-Fi 5 access point) or the UDR (Wi-Fi 6), and use it as the host for modern Wi-Fi 7 UniFi access points. Specifically, if you don’t assign an SSID to the UDM’s built-in Wi-Fi 5 access point, it effectively functions the same as a non-Wi-Fi gateway, such as the UCG-Max.
In any case, as mentioned above, the UniFi Network application—whose latest version 10.2 is available on all UniFi Cloud Gateways, including the UDM released in 2019—can gracefully handle access points with mixed Wi-Fi standards and tiers.
UCG supports flexible uplink: Wired vs. mesh (wireless)
Another thing to note about using a UniFi Cloud Gateway is that all UniFi access points can generally operate in the wireless (mesh) mode.
However, considering most of them use PoE as the (only) power method and don’t include a PoE injector (power adapter) as they’re designed for those with a PoE switch, it’s kind of pointless not to use the network cable as the wired uplink—you already need that cable to bring power to the unit.
The point is that you can always buy a standard PoE power adapter that supports the PoE standard of a particular UniFi access point to use it in a mesh mode. (When in doubt, just get an injector with the highest PoE power output.)
Currently, the U7 Mesh is one of a few UniFi access points designed specifically for mesh mode—it comes with all the necessary accessories for this mode and features separate directional antennas for extended uplink range. Additionally, the UX7 is another viable option for a fully wireless (mesh) UniFi setup.
UCG has a rigid operation role: No AP mode
The third and final important thing to note about using a UniFi Cloud Gateway is that while it gives you lots of in-depth customization, it’s not as flexible in terms of operation role as other brands, such as ASUS AiMesh.
On this front, keep the following in mind:
- Most UniFi Cloud Gateways can only work as the primary unit (the router) for a Wi-Fi system. They can’t work as a switch, an access point, or a Wi-Fi extender (mesh point). In other words, you can’t use them as a satellite unit in a Wi-Fi system. For example, if you’re using the UDR and now get the UDR7 as an upgrade, you can’t repurpose the UDR as a satellite unit to extend Wi-Fi coverage—it can’t be used for anything at all unless you want another network. Needless to say, you cannot use multiple UDR7 units to create a Wi-Fi system, either.
- Even the few consoles that can serve in different roles—such as the UX7, which can function as an access point or mesh point—can’t change their role once they’ve been set up as a router. As a result, there’s no way to use an entire UniFi Wi-Fi system in the access point mode.
The takeaway here is that you should use a UniFi system only when you do not need/want to keep your existing router or the ISP-supplied gateway unit (unless you can use it in the bridged mode). Otherwise, double NAT is the only outcome.
Tip
The access point mode can apply to more than a single hardware unit.
In many Wi-Fi (mesh) systems, you can put the primary unit (the router) into access point mode. In this mode, the entire system extends the network hosted by another router while still allowing you to manage the Wi-Fi settings of all mesh nodes via the primary unit’s management interface.
However, this AP-mode-as-a-system is not available in all brands of Wi-Fi systems. Some canned systems, such as Google Nest Wifi, only have this AP mode when you use each hardware unit individually. Among advanced DIY Wi-Fi mesh system approaches, UniFi is an example that doesn’t support the AP mode.
To be clear, this lack of hardware role flexibility is not necessarily a drawback. To have a truly advanced network, you need a single-NAT setup—the UniFi console must be the sole router of your system. Additionally, wired backhauling is generally the only way to achieve optimal performance and reliable Wi-Fi coverage.
So, if you’re thinking of going the UniFi way, a few things to consider:
- A must-do: Get only the terminal device, such as a cable modem or a fiber-optic ONT from your Internet provider, not a gateway unit. (Some gateways can be turned into a modem via the bridge mode.)
- Recommended (especially when you need multiple Wi-Fi access points): Get your home wired with network cables or use the latest MoCA adapters when applicable.
- If you must go with a full mesh configuration, as mentioned above, the U7 Mesh and UX7 are currently the only sensible options for the satellite role.
Top Wi-Fi 7 UniFi access points
 |  |  |  | |
| Name | Ubiquiti Enterprise7 (UniFi E7)’s Rating | Ubiquiti U7 Pro XGS’s Rating | Ubiquiti UniFi U7 Mesh’s Rating | Ubiquiti UniFi U7-Lite’s Rating |
| Price | – | – | – | – |
| Rating | ||||
| Description | ||||
| Statistics | ||||
| Buy this product |
Check current prices at the Ubiquiti Store or on Amazon!
UniFi Cloud Gateways: Tips on hardware upgrade or replacement
As mentioned above, all UniFi Cloud Gateways can work interchangeably as “routers”. That is especially true when they use the same or similar versions of the UniFi OS and Network app.
That said, if you use only the Network app, the process of replacing the current unit with another one is simple:
- Back up the current console’s settings to a file (or to Ubiquiti’s cloud if you use a UI account). To do this, open the web-based user interface, then navigate to Settings (the cogwheel) -> Control Plane -> Backups. Now turn this gateway off and put it away, or reset it to factory defaults to avoid potential conflicts.
- During the setup process for the replacement gateway, select the option to restore it using the backup file created in #1. Or you can go to the same section within its interface and choose Restore.
After that, you’ll note that most of the settings from the old console will be carried over to the new one. In my experience, unless you replace it with the same model, some of the previous settings might need to be adjusted for them to work properly or at all.
The discrepancy varies depending on how different the new UniFi console is from the one it replaces. However, overall, the following often require some attention:
- VPN server configuration
- Dynamic DNS settings
- Certain advanced port configuration and WAN settings
In any case, after the replacement, it is never a bad idea to check that everything is in order. In all cases, when possible, it’s best to update the hardware to the latest firmware before the process.
On the other hand, if you also use the Protect App, which turns the UniFi Cloud Gateway into a UNVR, replacing it with a different model can be straightforward or very tricky depending on what you want to achieve.
Specifically, if you don’t care about the existing recordings, all you need to do is ensure your new gateway has enough storage for the cameras. After that, restore it following the steps mentioned above. In rare cases, if you use an older camera model, you might need to reset it and re-add it to the system. And that’s it.
However, if you want to keep the existing recordings of the Protect app, that’s generally only possible if the two gateways share what I call the UNVR Compatibility. Specifically, all three conditions below must be met:
- You move to a gateway that uses the same type of media for storage space as the current one, and
- The number of supported cameras of the replacement gateway is the same or higher than that of the one it replaces, and
- You keep the same storage device.
The table below will give you some quick pointers on which UniFi Cloud Gateway to get based on their ports, wired/wireless bandwdith and number of supported cameras. It’ll also help you find the replacement gateway if you want to keep your existing UniFi Protect recordings.
| Model Name | Network Ports and PoE | Max Wired Bandwdith | Max Wi-Fi Bandwidth | Camera Support and Storage Type | UNVR Compatibility (plus camera agreement) | Notes | |
 | Dream Router 5G Max (UDR-5G-Max) | 1x 10G SFP+, 4x 2.5 GbE (1x PoE) | 2.5Gbps | Tri-band BE11000 | (5) HD (2) 2K (1) 4K microSD | Self, UDR, UDR7, UCG-Industrial (compare specs and costs) | Desktop design with built-in 5G cellular modem |
 | Cloud Gateway Industrial (UCG-Industrial) | 1x 10GbE (PoE+++), 1x SFP+, 4x 2.5GbE (2x PoE+ and 2x P0E+++) | 10Gbps | Dual-band BE5000 | (15) HD (8) 2K (5) 4K microSD | Self, UDR, UDR7, 5G-Max (compare specs and costs) | Desktop and various mount designs for rough environments |
 | Cloud Gateway Fiber (UCG-Fiber) | 1x 10GbE, 2x SFP+, 4x 2.5GbE (1x PoE+) | 10Gbps | None | (15) HD (8) 2K (5) 4K NVMe SSD | Self, UCG-Max (compare specs and costs) | Desktop design |
 | Cloud Gateway Max (UCG-Max) | 5x 2.5GbE | 2.5GbE | None | (15) HD (8) 2K (5) 4K NVMe SSD | Self, UCG-Fiber (compare specs and costs) | Desktop design |
 | Dream Machine Pro Max (UDM-Pro-Max) | 2x SFP+, 1x 10GbE, 8x Gigabit | 10Gbps | None | (50) HD (25) 2K (15) 4K HDD | Self, UDM-Pro, UDM-SE (compare specs and costs) | Rackmount design |
 | Dream Router 7 (UDR 7) | 1x SFP+ 4x 2.5Gbps (1x PoE) | 2.5Gbps | Tri-band BE11000 | (5) HD (2) 2K (1) 4K microSD | UDR, UDR-5G-Max, UCG-Industrial (compare specs and costs) | Desktop design |
 | UniFi Express 7 (UX7) | 1x 10GbE 1x 2.5GbE | 2.5Gbps | Tri-band BE11000 | None | N/A | Desktop design, Can work as a UniFi access point or mesh point |
 | Dream Machine Second Edition (UDM-SE) | 2x SFP+, 1x 2.5GBE, 8x Gigabit (2x PoE+ and 6x PoE) | 10Gbps | None | (24) HD (14) 2K (8) 4K HDD | Self, UDM-Pro, UDM-Pro-Max (compare specs and costs) | Rackmount environment |
 | Dream Machine Pro (UDM-Pro) | 2x SFP+, 9x Gigabit | 10Gbps | None | (24) HD (14) 2K (8) 4K HDD | Self, UDM-SE, UDM-Pro-Max (compare specs and costs) | Rackmount design |
 | Dream Router (UDR) | 5x Gigabit (2x PoE) | Gigabit | Dual-band AX3000 | (5) HD (2) 2K (1) 4K microSD | Self, UDR7, UDR-5G-Max, UCG-Industrial (compare specs and costs) | Desktop design |
 | Dream Machine (UDM) | 5x Gigabit | Gigabit | Dual-band AC2000 | None | N/A | Desktop design |
From the table above, you’ll note, for example, that you can switch the UniFi Protect app from UCG-Max to UCG-Fiber, or vice versa, while keeping the existing recordings by moving the NVMe SSD from the source gateway to the replacement one. Keeping the existing recordings is not possible if you also want to replace that SSD—Ubiquiti doesn’t support manual copying or drive cloning. Needless to say, it’s not possible to retain existing recordings when you move from the UCG-Fiber to the UCG-Industrial or the UDM-Pro Max, as they use different media types.
Now that we’re clear on when it’s possible to keep the existing UniFi Protect’s recordings, here are the steps to perform the replacement:
- Back up the current (source) gateway’s settings to a file (or to Ubiquiti’s cloud if you use a UI account) and turn it off.
- Move the storage device from the source gateway to the replacement gateway.
- During the setup process for the replacement gateway, select the option to restore from the backup file created in #1, and choose to restore all apps and settings (the default option).
Upon finishing the process, you’ll note that both the Network and Protect apps will have the same or largely the same settings as the previous gateway. Still, as a rule, check that everything is in proper working order.
The takeaway
There you go, if you’re new to the UniFi ecosystem, you now know which console to start with—again, this post will help you get it up and running and familiarize yourself with UniFi as a whole. And if you have been using one and now want to do more, you know which replacement to get or which add-on upgrade to buy.
Still undecided? You likely can’t go wrong with any of the top five below.
Top 5 Best UniFi Cloud Gateways
Check current prices at the Ubiquiti Store or on Amazon!
Hi Dong, I currently am running my ISP’s router with two Aginet HX510 APs (rented from my ISP) connecting over a Ubiquiti wifi bridge between the house and barn. Coverage in the house isn’t great – the AP is in the basement and I probably need another AP upstairs at the opposite end of the house. I would like to put in a few outdoor security cameras, a couple of which will have to be solar wireless due to location (horse paddock). Before switching to this setup, I was running an ASUS mesh system double-NATted behind the ISP’s router. The ASUS gear was all out of support so the current setup with rented everything was intended to be temporary while I decided what direction to go next as I was already thinking about adding cameras.
I’ve had Hikvision and Ubiquiti both recommended for camera system (including one rec of Ubiquiti NVR with Hikvision cameras and Ubiquiti AI ports) and also a recommendation of Tapo cameras. At this point, I’ve hit a bit of analysis paralysis.
I admin the network at the office (14 branches plus hq, mixed Fortigate (branches) and Cisco (hq – we’re transitioning back to Cisco gradually) plus Omada wifi) but did not do all the initial setup, I just make tweaks and policy changes as needed. So while I’m not unable to handle config to get things at home set up, I’d really prefer things to run smoothly without intervention on a day to day basis.
Does pure Ubiquiti make the most sense (other than the solar wifi cams)? I have heard comments that their video quality – night vision in particular – is still significantly subpar compared to Hikvision. Buy once, cry once? Or do I go Omada and Tapo and save a few bucks but probably have more headaches?
I’m in southwestern Ontario, Canada BTW, which tends to make sourcing equipment a bit more expensive and challenging than if I was in the US.
Pure UniFi makes most sense, Diana. To best link up the ban, use a pair of U7 Mesh outdoor access points—mount them outside facing each other. Good luck!
I’m glad Ubiquity is on this channel and is being thoroughly tested. My experience with these solutions is much better than with Asus. The mesh system finally works as it should, with no compatibility issues between different models. The user interface is much more user-friendly, and device support is simply better. One warning: regarding the gateway, don’t buy the UCG-Max Cloud Gateway Max; this device has a processor that operates at very high temperatures and simply throttles. It’s better to go straight for the “Fiber” device, slightly more expensive, but much better and future proof (10gig ports).
👍
I have a 3400 sq ft single story home and with my current Asus WiFi 6 hardwired mesh system with main unit and 1 node I still have some dead spots in the house. My home is fully wired. If I were to purchase the Cloud gateway Fiber, which WiFi units would you recommend to get better coverage? I have a Lorex POe camera system and would like the ability to use a NVR for computer back up.
You can use the UCG-Fiber with any UniFi access, Stephen. In fact, you can pick Wi-Fi 6 if that suite your budget. However, if you want best coveage, I’d recommend the E7 or the U7 XGS. You’ll need a switch if you want to use more than one AP, by the way (or you have to buy an injector for each).
With UniFi you can make mutiple SSIDs (up to 8 per band) and configure each to your liking to support any type of (legacy) devices.
Good luck!
My biggest reservation about the UniFi ecosystem is that in a household where one adult manages the IT and the other is mainly just a user without expertise, a gateway-based UniFi network is going to be significantly harder (compared to the big consumer brands) for the non-expert to keep operating properly in the event of illness or death of the partner who is the IT maven. Dong, do you have an opinion on this?
I hear you, David, and UniFi used to gear toward advanced users. However, its been made very consumer-friendly in the past couple of years. If you don’t need the advanced features, just ignore them.
I’ve used the UDM since the review in 2019 and it’s been great. I didn’t even have to restart it. Since then I’ve had about half a dozen UniFi systems in multiple places, some are quite large, and they all proved to be low-maintenance. Everything works as long as there’s power and nobody unplugs any cable.
UniFi is also easy to be managed remotely. So, you can hire somebody to manage your network for you.
Thank you. That’s helpful to hear, and I do remember seeing that earlier link. Right now I’m a happy user of the Amplifi Alien with a second unit as a hardwired mesh point, but everyone agrees UniFi won’t be taking the Amplifi line any further, so I’m thinking about what I’ll buy for my next router when an upgrade becomes necessary or desirable. As an equally happy user of a Synology NAS, I’m keeping a close eye on the Synology line of routers. I know it doesn’t regularly feature here because the cadence of product release is very slow at Synology compared with the other brands, but please keep an eye out for their eventual entry to the WiFi 7 world, and let us know when that happens with a review so we can compare against options from UniFi and Asus, for example. Thanks for everything you do on this site!
The Alien is great! I just played with mine a bit while testing the Dream Router 5G Max—review coming up soon. But yes, with UniFi the way it is, AmpliFi is no longer applicable.
Synology is great with NAS, and their routers are also excellent. However, it seems they’ve given up on networking. We’ll see.