How to Choose a UniFi Gateway in 2026

The word "router" undersells it. A consumer router is a gateway, a switch, and a Wi-Fi access point fused into one disposable box. A UniFi gateway separates those jobs: it is the routing-and-security core, and you scale switching and Wi-Fi around it as separate managed devices. That separation is the entire point of the UniFi ecosystem — the gateway is the brain, not the whole body.

Every modern UniFi gateway also runs the UniFi Network application on-device. There is no separate controller PC, no CloudKey requirement. The gateway routes your traffic and simultaneously serves the dashboard that adopts and configures your Cloud Gateway Ultra, Dream Router, UDM-Pro, and any UniFi switch or AP you connect.

An "all-in-one" gateway like the Dream Router folds Wi-Fi and a small PoE switch back into the chassis for convenience. A modular gateway like the Cloud Gateway Ultra deliberately does not — it expects you to bring your own AP and switch. Neither approach is wrong; they target different buyers, which is what the rest of this guide sorts out.

IDS/IPS throughput is the spec that actually caps a gateway — not the WAN port number. With intrusion detection enabled, routed throughput settles at the inspection rating. The Cloud Gateway Ultra and Dream Router both inspect at 1 Gbps; the UDM-Pro inspects at 3.5 Gbps. A common mistake is reading the Ultra's 2.5 GbE WAN as 2.5 Gbps of protected throughput. It is not — the 2.5 GbE figure is the physical port speed, and once IPS is on, 1 Gbps is the real ceiling.

WAN and multi-gig. The Ultra has a 2.5 GbE WAN that accepts a multi-gig plan at the port; the UDM-Pro adds a 10G SFP+ WAN (plus a gigabit RJ45 default); the Dream Router has a 1 GbE WAN only. If your internet plan is faster than gigabit, the Dream Router is out at the port, and the Ultra is out once you turn on inspection. (techspecs.ui.com)

Integrated Wi-Fi. Only the Dream Router has it — Wi-Fi 6 rated at 2.4 Gbps on 5 GHz and 600 Mbps on 2.4 GHz. The Ultra and the UDM-Pro have no built-in Wi-Fi; both expect separate UniFi access points. If you want one box to also be your AP, the Dream Router is the only gateway in this set that qualifies.

UniFi Protect / NVR storage. The Dream Router ships a 128 GB SSD for Protect recordings. The UDM-Pro has a 3.5-inch HDD bay you populate with your own drive, scaling to far more camera footage. The Ultra has no Protect storage — pairing it with cameras means buying a separate NVR. For camera plans, this single line often decides the gateway.

Client capacity and form factor. Ubiquiti rates the Dream Router for 20+ UniFi devices / 150+ clients, the Ultra for 30+ devices / 300+ clients, and the UDM-Pro for 100+ devices / 1,000+ clients. The two desktop units are fanless or near-silent; the UDM-Pro is a 1U rackmount with an active fan that wants a rack or AV closet.

The Cloud Gateway Ultra at $129 is the cheapest modern UniFi gateway. It is a fanless desktop puck drawing 6.2 W, with a 2.5 GbE WAN, four gigabit LAN ports, and 1 Gbps of IPS. It has no Wi-Fi and no Protect storage by design — it is the modular choice, built to sit beside a separate UniFi switch and access points. Past a few wired devices its four LAN ports run out, so budget a switch alongside it.

The Dream Router at $199 is the all-in-one first box. It folds in Wi-Fi 6 (2.4 Gbps / 600 Mbps), a 5-port gigabit switch with two PoE ports (40 W total budget, 15.4 W per port), a 128 GB SSD for UniFi Protect, and 1 Gbps of IPS over a 1 GbE WAN. Every subsystem is entry-level and it tops out at 150+ clients, but for a first UniFi network in a small home it does everything in one 19.37 W unit.

The UDM-Pro at $379 is the rackmount workhorse. It pairs 3.5 Gbps of IPS with a 10G SFP+ WAN and LAN, an onboard 8-port gigabit switch, and a 3.5-inch HDD bay that turns it into a UniFi Protect NVR. It has no Wi-Fi and no PoE, so APs and a PoE switch are separate purchases, but it scales to 100+ devices / 1,000+ clients — the most headroom of any gateway here. See the full Gateways & Routers hub for the rest of the lineup.

Small home, gigabit internet, already has a switch. The Cloud Gateway Ultra is the obvious pick — $129, silent, and its 300+ client rating is far more than a house needs. Add UniFi APs and a switch as you grow. The detailed case against the rackmount unit is in UDM-Pro vs Cloud Gateway Ultra.

First UniFi network, wants one box. The Dream Router is built for this buyer: gateway, Wi-Fi 6, PoE switch, and Protect NVR in a single unit, no separate AP required on day one. Its trade-off versus the modular puck is laid out in Dream Router vs Cloud Gateway Ultra.

Prosumer or small business with a rack. The UDM-Pro is the answer when you have a rack and need 3.5 Gbps IPS, a 10G uplink, or capacity past a few hundred clients. Internet faster than gigabit with full threat inspection is exactly what its ceiling is for. Weighed against the all-in-one, the case is in UDM-Pro vs Dream Router.

Camera-heavy network. Storage decides this one. A couple of cameras and a small home → the Dream Router and its built-in 128 GB SSD is the cheapest path. A growing camera fleet → the UDM-Pro and its user-supplied 3.5-inch drive, which scales footage far past a fixed SSD. The Ultra is the wrong choice for cameras unless you add a standalone NVR.

Think of the gateway as the hub and everything else as spokes. Because UniFi separates routing from switching and Wi-Fi, a modular gateway like the Cloud Gateway Ultra expects a UniFi switch to fan out wired ports and UniFi APs to provide coverage. The UDM-Pro ships an 8-port switch in the chassis, which shortens the parts list, but a real deployment still adds APs and usually more switch ports.

The gateway is also where inter-VLAN routing happens. When you segment your network — a workstation VLAN, an IoT VLAN, a guest VLAN — the gateway routes between those Layer 2 domains and applies the firewall rules that isolate them. Switches tag and carry the VLAN frames via 802.1Q; APs put each SSID on its assigned VLAN before handing traffic to the gateway uplink. The full segmentation workflow is covered in our VLAN guide.

This is why the gateway choice matters more than any single switch or AP. The gateway sets your IPS ceiling, your routing capacity, and your client count — the limits the whole network inherits. Switches and APs are easy to add later; the gateway is the foundation you build on. Browse compatible hardware in the Gateways & Routers hub, and start the spec comparison with UDM-Pro vs Cloud Gateway Ultra.