Best UniFi Cloud Gateway for a Home or Small Office

Quick answer

Choose the Cloud Gateway Ultra for a straightforward, gigabit-class UniFi network without on-gateway Protect recording. Choose the Cloud Gateway Max when you need 2.5GbE ports, faster intrusion-prevention routing, and the option to run Protect in a compact box. Choose the Cloud Gateway Fiber for a desktop build that needs 10G connectivity and a higher published routing ceiling. Choose the Dream Machine Special Edition (UDM-SE) when a rack, built-in gigabit PoE ports, and an HDD bay fit your camera and wiring plan. The Dream Machine Pro Max is the higher-capacity rack option when faster protected routing and two NVR drive bays matter more than built-in PoE.

These are specification-based fit recommendations. We have not run a controlled throughput test of all five gateways. Ubiquiti's published IDS/IPS ratings are useful for comparing tiers, but real throughput depends on enabled features and the rest of the network. Specifications were checked against Ubiquiti on September 29, 2026.

Compare the gateway tiers

Ubiquiti

Ubiquiti UniFi Cloud Gateway Ultra

UniFi controller built-in

• 1 Gbps IDS/IPS
• 2.5GbE WAN
• No Protect recording

Before you buy: This Amazon link selects Adorama's offer. Confirm Sold by Adorama, New condition, the final price, and return terms at checkout; the offer can change.

Check price on AmazonOfficial specifications

Ubiquiti

Ubiquiti UniFi Cloud Gateway Max

Five 2.5GbE RJ45 ports, including default WAN

• 2.3 Gbps IDS/IPS
• 5 × 2.5GbE ports
• Optional NVMe storage

View at Ubiquiti Store

Ubiquiti

Ubiquiti UniFi Cloud Gateway Fiber

5 Gbps IDS/IPS throughput

• 5 Gbps IDS/IPS
• 10GbE RJ45 + SFP+
• 4 × 2.5GbE ports

View at Ubiquiti Store

Ubiquiti

Ubiquiti UniFi Dream Machine Special Edition

10G SFP+ + 2.5G WAN ports

• 3.5 Gbps IDS/IPS
• 8 × 1GbE PoE
• 1 HDD bay

View at Ubiquiti Store

Ubiquiti

Ubiquiti UniFi Dream Machine Pro Max

5 Gbps IDS/IPS throughput

• 5 Gbps IDS/IPS
• 2 HDD bays
• Separate PoE switch

Before you buy: This Amazon link selects Adorama's offer. Confirm Sold by Adorama, New condition, the final price, and return terms at checkout; the offer can change.

Check price on AmazonOfficial specifications

The first budget decision is whether you are building a network only, a network plus cameras, or a multi-gig network plus cameras. A faster WAN port alone does not make the LAN side or intrusion prevention equally fast. For example, the Ultra has a 2.5GbE default WAN port, but Ubiquiti rates IDS/IPS at 1 Gbps and its other RJ45 ports at 1GbE. A 2Gbps internet plan is a reason to evaluate Max or Fiber, not to assume the Ultra's WAN socket solves the entire path.

Cloud Gateway Ultra: the simple network-first choice

The Cloud Gateway Ultra is the lowest-complexity pick here for a small UniFi network whose internet service and routing demands fit its published 1 Gbps IDS/IPS rating. It runs UniFi Network and manages APs and switches. It does not list Protect in its application suite, so do not select it as the recorder for planned UniFi cameras.

Its four non-WAN RJ45 ports are gigabit. A U7 Pro has a 2.5GbE uplink and needs PoE+, so a separate suitable PoE switch or injector is part of the installation. If the AP's faster wired link matters, use a multi-gig switch and understand that the Ultra still defines the internet-facing routing tier. Local traffic between devices on an appropriately designed switch need not traverse the gateway.

Cloud Gateway Max: compact multi-gig and optional cameras

The Cloud Gateway Max raises the published IDS/IPS rating to 2.3 Gbps and provides five 2.5GbE RJ45 ports in total, one assigned as WAN by default. It runs Protect and accepts selectable NVMe SSD storage up to 2 TB. That makes it the most balanced compact choice for a home or small office with a multi-gig internet plan and a limited camera deployment.

Read the store variant carefully. Storage capacity and inclusion vary by the selected configuration; a bare gateway is not automatically a ready-to-record NVR. Ubiquiti publishes camera capacity by resolution, so size actual cameras and retention rather than treating the headline client count as a camera limit. Max does not provide built-in PoE output, and APs and cameras still need a powered switch or suitable injectors.

Cloud Gateway Fiber: desktop 10G headroom

The Cloud Gateway Fiber adds a 10GbE RJ45 port, two 10G SFP+ ports, four 2.5GbE RJ45 ports, and a 5 Gbps published IDS/IPS rating. It is a useful fit when the ISP handoff, core switch, or local storage plan needs a faster link while the gateway still sits on a desk or shelf. It also runs Protect with selectable NVMe storage.

Its 30W total PoE budget is limited. Do not treat the gateway as a replacement for a properly sized PoE switch when several APs or cameras are planned. Confirm which ports provide PoE and the exact power class in Ubiquiti's technical specification before wiring an endpoint. If this gateway connects to a 2.5GbE PoE switch, budget that switch and its power supply separately.

Dream Machine SE: rack gateway with built-in PoE

The Dream Machine Special Edition combines a 1U rack gateway, UniFi applications including Protect, a 3.5-inch HDD bay, and eight gigabit PoE LAN ports with a 180W total budget. Ubiquiti rates IDS/IPS at 3.5 Gbps. It is attractive when cameras and ordinary gigabit PoE devices terminate in the rack and a local hard drive is preferred.

The eight built-in PoE LAN ports are 1GbE, not 2.5GbE. If a U7 Pro or another Wi-Fi 7 AP needs a 2.5GbE wired uplink, add a 2.5GbE PoE switch and plan the faster uplink path. The UDM-SE's 2.5GbE port is a default WAN port, and its 10G SFP+ ports are a separate part of the port plan. The HDD bay also means you must choose a compatible drive and retention plan; the bay alone is not camera storage.

Dream Machine Pro Max: larger rack and camera plan

The Dream Machine Pro Max is a step up for a rack installation that needs Ubiquiti's published 5 Gbps IDS/IPS rating and two 3.5-inch NVR HDD bays. Its eight built-in LAN ports are gigabit and do not provide PoE output. Budget a separate PoE switch for APs and cameras, plus compatible drives for the intended recording retention. Do not buy it solely to gain a 2.5GbE AP port; that still calls for the right switch topology.

Price the complete UniFi installation

The gateway is only one line item. Build the shopping list before deciding which gateway seems cheapest:

1. Gateway and internet handoff: confirm ISP speed, Ethernet or fiber presentation, failover requirements, and which WAN ports the chosen gateway will use.
2. Access points: count the locations that need coverage and the APs' maximum power draw and Ethernet uplink speed. See the U7 Pro setup guide.
3. PoE: add a suitable injector or switch for every AP and camera. Count powered ports, each port's PoE class, and total wattage. Our multi-gig PoE switch guide covers the sizing exercise.
4. Cabling and uplinks: confirm existing cable runs can negotiate the desired speed, and add SFP+ modules or DACs if the selected topology needs them.
5. Protect storage: choose the Max/Fiber SSD configuration or a compatible UDM-SE HDD, then check camera count and retention against Ubiquiti's planning tools. A separate NVR may make more sense as the camera estate grows.
6. Resilience and installation: budget for a UPS, rack or shelf space, cable labeling, and configuration time.

For a network-only home, an Ultra plus one or two appropriately powered APs may be enough. For two or three wired Wi-Fi 7 APs on a multi-gig plan, a Max or Fiber plus a multi-gig PoE switch is the more coherent topology. For a camera-heavy rack, the UDM-SE's built-in PoE can reduce a separate switch purchase for gigabit endpoints, but fast APs may still require another switch. These are example architectures, not fixed bills of materials.

Where to buy without guessing the seller

UniFi hardware is frequently listed by third-party Amazon marketplace sellers. An exact model page can change seller, condition, and fulfillment after a link is published. A seller name in our product database does not prove who will fulfill a future purchase. On September 29, 2026, we found seller-specific Adorama offers for the Cloud Gateway Ultra and Dream Machine Pro Max, and those two product cards link to their exact Amazon listings with Adorama selected. Adorama's Amazon seller profile showed 4.5/5 stars, 88% positive feedback over the past 12 months, and 2,559 recent ratings when checked. This is a long-running electronics retailer, though that recent feedback percentage is a reason to review the offer details carefully rather than treat the seller name as a blanket guarantee.

We did not find an Adorama offer for the Max, Fiber, or UDM-SE among the offers checked. Their cards continue to link to the Ubiquiti Store instead of routing you to an unverified Amazon seller. Amazon affiliate links are used only for the two seller-specific cards; official store links are not Amazon affiliate offers.

For any Amazon purchase, check the exact model number, sold by name, seller feedback and recent reviews, ships from name, new versus used condition, warranty/returns, and the final checkout seller. Recheck immediately before payment. If an Adorama offer disappears or the checkout seller changes, do not assume the replacement seller has the same reputation. A high product star rating by itself does not establish seller reputation. Ubiquiti also recommends buying through official channels to reduce counterfeit and support risk.

FAQs

Does a UniFi Cloud Gateway include Wi-Fi?

The five gateways compared here are gateways and controllers. Plan separate UniFi access points for Wi-Fi and a compatible power source for each AP.

Can Cloud Gateway Ultra run Protect cameras?

Its published application suite lists Network only. Choose a Protect-capable gateway or a separate supported Protect console/NVR if you want UniFi camera recording.

Is the UDM-SE's PoE switch enough for Wi-Fi 7 APs?

It may power compatible APs, subject to per-port class and total budget, but its built-in LAN ports are gigabit. Use a suitable multi-gig PoE switch if the AP's 2.5GbE wired uplink is part of the design.

Is a 10G port the same as 10 Gbps of protected routing?

No. Physical port speed and IDS/IPS throughput are different specifications. Ubiquiti rates the Fiber at 5 Gbps IDS/IPS and the UDM-SE at 3.5 Gbps, despite their 10G interfaces.

Sources

• Cloud Gateway Ultra technical specifications — applications, ports, and routing rating; checked September 29, 2026.
• Cloud Gateway Max technical specifications — applications, ports, cameras, and storage; checked September 29, 2026.
• Cloud Gateway Fiber technical specifications — ports, PoE budget, applications, and routing rating; checked September 29, 2026.
• Dream Machine Special Edition technical specifications — ports, PoE budget, storage, and routing rating; checked September 29, 2026.
• Dream Machine Pro Max technical specifications — routing, storage, and port layout; checked September 29, 2026.
• Adorama seller profile on Amazon — seller feedback checked September 29, 2026. The linked Ultra and Pro Max offers use Adorama's storefront merchant ID shown by Amazon.
• Ubiquiti brand protection guidance — official-channel and counterfeit guidance; checked September 29, 2026.