If you’ve spent any time on the UniFi store page, you’ve noticed that Ubiquiti doesn’t sell one gateway — they sell a dozen, and the naming is a mess. Dream Machine, Dream Router, Cloud Gateway, Cloud Gateway Ultra, Cloud Gateway Max, UDM Pro, UDM Pro Max. All of them “route.” All of them run the UniFi app. None of them are obviously better or worse on the spec sheet.
This post compares the three that come up most often when a homeowner or small-business owner is shopping: the original Dream Machine line (the desktop, all-in-one boxes), the Cloud Gateway Ultra (the tiny, cheap one), and the UDM Pro (the 1U rack-mount one). The goal is to figure out which one actually fits your house and the devices you’re going to hang off of it — not just this year, but three years from now.
The short version
- Dream Machine / Dream Router: desktop all-in-one with built-in Wi-Fi. Best for small spaces or renters who can’t do ceiling APs.
- Cloud Gateway Ultra: the cheapest way into the UniFi ecosystem. Great for networking-only setups. No on-box camera storage, no room to grow.
- UDM Pro: rack-mount, dual-WAN, runs every UniFi app (Network, Protect, Access, Talk) on a single box with an internal drive for camera recording. The default for a serious install.
Dream Machine / Dream Router: the all-in-one
The Dream Machine line (including the newer Dream Router 7) is UniFi’s answer to the consumer-router shelf at Costco. It’s a single desktop box that does routing, switching, and Wi-Fi in one chassis.
- Form factor: round or tall desktop unit. Sits on a shelf, not in a rack.
- Wi-Fi: built-in radios (Wi-Fi 6 or Wi-Fi 7 depending on model).
- Ports: a handful of 1 GbE LAN, one WAN, no PoE by default.
- Apps: runs UniFi Network. Protect is either unsupported or limited — there’s no internal drive bay for camera recording.
Where it shines: apartments, condos, rentals, and small homes under about 2,000 sq ft where the built-in Wi-Fi actually covers the space. If you’re not going to add ceiling APs and you’re not going to run UniFi cameras, it’s a clean, one-box solution.
Where it breaks down: the second you add ceiling-mounted APs or UniFi Protect cameras, the built-in radios are redundant and the lack of a camera drive forces you into a second box. You’ve outgrown it before you got it out of the closet.
Cloud Gateway Ultra: the minimum viable UniFi
The Cloud Gateway Ultra is the cheapest way to run a UniFi network. It’s a small plastic brick — pocket-sized, fanless, low-power — that handles routing, firewall, and the UniFi Network controller.
- Form factor: tiny desktop, fits on a shelf. No rack ears.
- Ports: 1 WAN, a few 1 GbE LAN, no PoE, no multi-gig out of the box.
- Wi-Fi: none. You bring your own APs.
- Apps: UniFi Network only. No internal drive — Protect is not supported in a way that scales.
- Device limit: officially capped in the app at a modest number of UniFi devices — plenty for a small home, limiting for a larger one.
Where it shines: networking-only setups. You want UniFi switches and APs but don’t need Protect, Access, or Talk. You’re cost-conscious and the device count is small. It’s a great on-ramp to the ecosystem.
Where it breaks down: the moment you add cameras. The Ultra has no drive bay, which means you’re either routing camera storage to a separate UniFi NVR or giving up on Protect entirely. That’s a second box, a second power draw, a second thing to manage, and the wiring starts to get awkward. The Ultra also doesn’t do dual-WAN failover, which rules it out for any home or business that needs internet redundancy.
UDM Pro: the one that does everything
The UniFi Dream Machine Pro is a 1U rack-mount unit built to sit in a network closet next to switches, a UPS, and a patch panel. It’s not a consumer product, and Ubiquiti doesn’t try to pretend otherwise.
- Form factor: 1U rack-mount. Drops straight into a wall-mount or floor rack.
- Ports: 8x 1 GbE LAN, 10G SFP+ LAN and WAN, a secondary RJ45 WAN for dual-WAN failover.
- Wi-Fi: none. You use dedicated ceiling APs where they belong — in the ceiling, not on a shelf next to the router.
- Drive bay: 3.5” HDD bay for UniFi Protect. Drop in an 8–12 TB surveillance drive and you’ve got weeks of 4K recording on a dozen cameras with no subscription.
- Apps: runs everything — Network, Protect, Access, Talk — on a single box with a unified dashboard.
- Dual-WAN: native failover between fiber and a backup (cable, LTE, second fiber drop). Zero-touch cutover when the primary drops.
Why we default to the UDM Pro for installs
For any system we design — residential or small commercial — the UDM Pro is the default gateway. A few reasons why, specifically from an installer’s perspective rather than a spec-sheet perspective:
- It fits the rack. Every install we do puts the gateway, switch, UPS, and patch panel into a proper network rack. A rack-mount gateway is the right shape for the job. A desktop Dream Machine on a shelf next to the rack looks wrong and is harder to secure.
- It handles every UniFi app on one box. Network today, Protect when the cameras go in next year, Access when the office adds a keycard reader, Talk if the business wants VoIP. No second hardware purchase, no separate NVR, one login for the client.
- Dual-WAN is standard, not a feature. For customers on fiber along the Wasatch Front (Google Fiber, UTOPIA, CenturyLink), a secondary cable or LTE connection through the UDM Pro keeps the house online when the primary fails. The Ultra and Dream Machine can’t do this cleanly.
- It leaves headroom. A 3,000 sq ft house today often becomes a 3,000 sq ft house with eight cameras, a workshop AP, an ADU, and a guest network in two years. Starting on the Ultra means replacing the gateway when the device count creeps up. Starting on the UDM Pro means adding APs and cameras without touching the core.
- One dashboard for the homeowner. Protect events, network alerts, firmware updates, access logs — all in one app on their phone. Two boxes means two dashboards and more support calls.
The UDM Pro costs more up front than the Ultra, and more than the base Dream Machine. The gap is usually made up the first time the homeowner adds cameras or loses their ISP for a day.
When the UDM Pro is overkill
We’re not going to pretend the UDM Pro is always right. It’s not, if:
- You’re in a rental and can’t put a rack anywhere. The Dream Router is cleaner.
- You have zero interest in cameras, access control, or a second WAN, and the house is under 2,000 sq ft. The Cloud Gateway Ultra plus one or two APs is the efficient answer.
- You’re deliberately keeping the stack minimal — one AP, 10 devices, a guest Wi-Fi, and done.
Bottom line
The Dream Machine is the one-box consumer replacement. The Cloud Gateway Ultra is the cheapest entry to UniFi networking. The UDM Pro is the one built for a rack, for multiple UniFi apps on a single box, and for a house that’s going to grow.
If you’re a DIYer picking between them, match the gateway to the endpoint state — where the system will be in three years, not just today. If you’re hiring a professional install along the Wasatch Front, expect the UDM Pro to be the starting point, and expect a good installer to tell you why if they recommend something else.
Keystone Integration designs UniFi networks around the UDM Pro for Sandy homes and the rest of the Wasatch Front — rack-mounted, dual-WAN, and ready for Protect and Access without a second box. You can see the full list of what we do on our main site, or get in touch to scope a gateway and network for your house.