9 Best UniFi Controllers in 2026

You have a box of UniFi access points, a couple of switches, and maybe a security camera. Now you need something to run the controller software that ties it all together. Pick the wrong device and you end up with a gateway that can't handle your ISP speed, a cloud key without enough storage for your Protect footage, or a controller that lives on your laptop and has to be running 24/7. The best UniFi controllers in 2026 range from self-contained routers that host the entire software stack to dedicated appliances that handle networks of fifty or more devices. Some even extend the UniFi ecosystem into physical access control.

This roundup covers every hardware option that either runs the UniFi Network application directly or is an essential component of a UniFi-managed network: all-in-one gateways, cloud keys, a door access controller, a managed switch, and even a TP-Link alternative for those considering the Omada ecosystem. We've organized them so you can zero in on the exact device your setup needs.

TL;DR: The Ubiquiti Cloud Gateway Ultra is the one most people should buy: it runs the controller natively and handles routing for a typical home or small office. The UniFi Cloud Key Gen2 Plus is the dedicated controller for anyone who also uses UniFi Protect cameras. The TP-Link OC200 is a capable hardware controller, but only for TP-Link Omada gear, not UniFi.

#	Product	Type	Max Devices	Best for
1	Ubiquiti Cloud Gateway Ultra (UCG-Ultra)	All-in-one gateway + controller	30+ UniFi devices, 300+ clients	Anyone who wants one box to route and manage their entire UniFi network
2	Ubiquiti UniFi Cloud Key Gen2 Plus (UCK-G2-PLUS)	Dedicated controller + NVR	50+ devices	Running UniFi Network and Protect simultaneously with onboard storage
3	Ubiquiti Networks UniFi Cloud Key Gen2 (UCK-G2)	Dedicated controller (no NVR)	50+ devices	Network-only management without video surveillance
4	TP-Link Hardware Controller (OC200)	Omada SDN controller	Up to 100 Omada devices	Those building a TP-Link Omada network, not UniFi
5	Ubiquiti Networks Gateway Lite (UXG-Lite)	Gateway only (needs separate controller)	1 Gbps routing	Users who already have a Cloud Key or self-hosted controller
6	Ubiquiti UniFi Access Hub (UA-Hub-US)	Door access controller	Single door	Adding UniFi Access to an existing UniFi setup
7	Ubiquiti UniFi Access Hub UA-Hub	Door access controller	Single door	Same as above; alternate listing for the same hardware
8	Ubiquiti UniFi Cloud Key Gen2 Plus (1TB HDD)	Dedicated controller + NVR	50+ devices	Those who prioritize remote management and unified control of Network + Protect
9	Ubiquiti UniFi USW-48-PoE Ethernet Switch	Managed PoE switch	48 ports (32 PoE+)	Expanding a UniFi network with high-density PoE and SFP uplinks

How we picked

Controller hosting vs all-in-one. Some people want a single box that routes and runs the controller. Others prefer to keep the controller on a dedicated appliance and swap the gateway independently. We considered both approaches.

Power and PoE capabilities. A controller that needs its own AC adapter is fine for a desk, but a unit that can be powered over Ethernet (PoE) or USB-C is much easier to deploy in a network closet or mounted under a desk.

Storage for UniFi Protect. If you plan to run surveillance cameras, the controller needs an integrated hard drive or at least an expansion slot. Without it, you will need a separate NVR or a self-hosted controller with attached storage.

Ecosystem lock-in. UniFi controllers only manage Ubiquiti gear. If you are open to TP-Link Omada, the OC200 is a compelling alternative. For pure Ubiquiti setups, the Cloud Keys and Cloud Gateways are the right tools.

Form factor and mounting. Rackmount gear suits a server rack. Desktop units are fine for a shelf. We looked at whether each device fits where you actually want to put it.

Network scale. A controller that can handle 300 clients is overkill for a home with 20 devices, but a underpowered controller will choke on a school's worth of access points. We matched each product to a realistic user count.

1. Ubiquiti Cloud Gateway Ultra: Best All-in-One

Pros

• Runs UniFi Network directly, no separate controller needed
• 1 Gbps routing with IDS/IPS enabled
• Multi-WAN load balancing for failover or aggregated connections
• Compact footprint, USB-C powered
• LCM status display shows real-time throughput and client count

Cons

• No built-in storage for UniFi Protect; can't run the video application
• Limited to 30+ UniFi devices, which may be tight for larger installations
• USB-C adapter included but cable is short for some rack placements

Best for Anyone building a new UniFi network who wants one device to handle routing and controller duty without compromise.

Check current price on Amazon →

The Ubiquiti Cloud Gateway Ultra is the device we recommend most often. It replaces the older USG and the separate controller hardware with a single box that runs the full UniFi Network application. You plug it in, adopt your access points and switches through the web interface or mobile app, and never think about controller software again.

Routing performance is genuinely useful. With IDS/IPS enabled the UCG-Ultra handles a full gigabit connection, so you do not have to disable security features to get your ISP's headline speed. Multi-WAN is there if you want a backup LTE modem or a second broadband line. The USB-C power input is convenient, though note that the unit does not support PoE input. You will need the included adapter or a USB-C port on a UPS.

The obvious limitation is the lack of onboard storage. If you plan to run UniFi Protect cameras, you need a separate Cloud Key Gen2 Plus or a UniFi Network Video Recorder. For pure networking, the UCG-Ultra is the cleanest path to a managed UniFi setup.

2. Ubiquiti UniFi Cloud Key Gen2 Plus: Best Dedicated Controller with NVR

Pros

• Runs both UniFi Network and UniFi Protect on the same box
• 1TB 2.5-inch hard drive included for video storage and backups
• Front-panel display shows system stats and device health
• Compact metal chassis, can be hidden away or desk-mounted

Cons

• No internal PoE; requires PoE input from a switch or injector
• The 1TB drive fills up quickly with a few 4K cameras
• Setup can be slightly fiddly if the firmware is not up to date

Best for Users who need a single appliance to manage their network and record surveillance footage without a separate NVR.

Check current price on Amazon →

The UniFi Cloud Key Gen2 Plus is the workhorse of the UniFi controller lineup. It runs the Network application and the Protect video application simultaneously, stores recordings on its internal 1TB drive, and gives you a front-panel LCM that shows device adoption status, throughput, and camera health. It is the right choice when you have both UniFi access points and UniFi cameras.

Performance is solid for a small to medium deployment. The 2GB of RAM and the dual-core processor handle 20 to 30 UniFi devices comfortably. The included hard drive is a standard 2.5-inch SATA, so you can upgrade it to a larger SSD later if you need more storage for longer retention or higher-resolution cameras.

The Cloud Key Gen2 Plus requires PoE power (802.3af) from a PoE switch or injector. That is not a problem in most network closets, but it does mean you cannot just plug it into a wall outlet without an intermediary. The initial setup process sometimes requires a manual firmware update before the controller becomes reachable, which can be annoying if you are not comfortable with Ubiquiti's recovery tools.

3. Ubiquiti Networks UniFi Cloud Key Gen2: Best Network-Only Controller

Pros

• Same compact form factor as the Gen2 Plus
• Front-panel display for at-a-glance monitoring
• Lower power draw than the Plus variant
• Runs the latest UniFi Network software without being tied to a gateway

Cons

• No internal hard drive; no Protect support
• Slightly slower processor for large networks
• Only one Gigabit Ethernet port (limiting management traffic to a single link)

Best for Network administrators who want a dedicated hardware controller but do not need video surveillance and prefer a lower power footprint.

Check current price on Amazon →

The UniFi Cloud Key Gen2 is essentially the same hardware as the Gen2 Plus but without the internal hard drive and the Protect license. It runs the Network application only, which keeps power consumption low and eliminates the fan noise that sometimes bothers people with the Plus model.

You get the same front-panel display, the same metal enclosure, and the same PoE-powered operation. The absence of a hard drive means this unit is slightly lighter and runs cooler. For a pure networking setup with no cameras, it is the right tool.

The biggest tradeoff is that Ubiquiti has been pushing the Gen2 Plus as the recommended controller for new installations, and the Gen2 can sometimes lag behind in firmware updates. It is still fully supported, but you may find that some newer gateway features require the Plus hardware. If you know you will never add UniFi Protect, the UCK-G2 saves a meaningful amount of money and does everything a network controller needs to do.

4. TP-Link Hardware Controller (OC200): Best for Omada Networks

Pros

• Purpose-built hardware controller for TP-Link Omada SDN
• Can manage up to 100 Omada devices (APs, gateways, switches)
• Cloud access included with no license fee
• Metal casing with rackmount/desktop flexibility

Cons

• Not compatible with UniFi devices whatsoever
• Only Fast Ethernet ports, not Gigabit (management traffic only, though)
• Limited to 2 Fast Ethernet ports; no SFP or dual LAN for heavy management

Best for Anyone building a TP-Link Omada network who wants a dedicated hardware controller instead of running the software on a PC or Raspberry Pi.

Check current price on Amazon →

The TP-Link OC200 is a hardware controller for the TP-Link Omada ecosystem, which is the closest competitor to Ubiquiti UniFi. If you are reading this article because you are evaluating both platforms, the OC200 is the counterpart to the UniFi Cloud Key. It provides centralized management for Omada access points, security gateways, and JetStream switches, all through a web dashboard or the Omada app.

The OC200 has a robust metal casing and supports PoE power as well as micro USB, giving you flexibility in placement. The two Fast Ethernet ports are fine for management traffic to the controller, but if you are used to UniFi's Gigabit controller ports, this feels a bit dated. The Omada controller software is stable and feature-rich, with VLAN management, mesh networking, and detailed client statistics.

The catch, obviously, is that the OC200 cannot manage any Ubiquiti hardware. Its inclusion here is for readers who have not yet committed to a platform and are comparing the two. If you own a single UniFi access point, stick with Ubiquiti's controllers. If you are starting from scratch and prefer TP-Link's price structure, the OC200 is a good controller that will not cost you recurring license fees.

5. Ubiquiti Networks Gateway Lite: Best Compact Gateway

Pros

• Very compact, about the size of a deck of cards
• Up to 10x routing performance increase over the older USG
• USB-C powered, easy to tuck anywhere
• Runs UniFi Network firmware with full routing and security features

Cons

• Does not host the UniFi controller; requires a separate Cloud Key or self-hosted controller
• Only one WAN and one LAN port, no SFP or multi-WAN
• No integrated Wi-Fi or PoE

Best for Users who already have a Cloud Key or a self-hosted UniFi controller and want a compact, modern gateway upgrade.

Check current price on Amazon →

The Ubiquiti Networks Gateway Lite is a pure gateway: it routes traffic, runs IDS/IPS, and supports VLANs, but it does not run the UniFi controller. You need a Cloud Key Gen2, a self-hosted server, or a Cloud Gateway Ultra if you want the controller built in. That makes the UXG-Lite a niche product for people who already have a controller and just want to upgrade an older USG.

When paired with a Cloud Key, the UXG-Lite delivers impressive routing throughput. Ubiquiti claims up to 10 times the routing performance of the original USG with IDS/IPS enabled, and in real use it handles gigabit connections without breaking a sweat. The compact size (roughly 5.9 x 5.9 x 3.1 inches) means it fits almost anywhere, and USB-C power makes it easy to keep alive on a UPS.

The single WAN and single LAN port are limiting if you need dual-WAN failover or a separate management network. This gateway is really aimed at the simplest possible setup: one ISP connection, one LAN switch, and a separate controller appliance. If that describes your network, the UXG-Lite is a solid, future-proof upgrade.

6. Ubiquiti UniFi Access Hub (UA-Hub-US): Best Single Door Access Controller

Pros

• Manages one door with UniFi Access readers, locks, and sensors
• Three PoE outputs for readers and a camera
• 12V dry contacts compatible with most electric locks
• Managed through the UniFi Access application on a UDM-Pro or Cloud Key

Cons

• Requires a UniFi controller (UDM-Pro or Cloud Key) to manage it
• Only a single door controller; larger deployments need multiple hubs
• PoE++ input required (802.3bt), not all switches support that standard

Best for Adding keyless entry to a single door in a business, co-working space, or home office.

Check current price on Amazon →

The UniFi Access Hub is not a network controller, but it is a controller in the UniFi ecosystem: it controls a single door's lock, reader, and sensor. If you already have a UniFi setup with a UDM-Pro or a Cloud Key running the Access application, the UA-Hub is how you add physical access control.

The hardware includes three 802.3af PoE ports that power UniFi Access readers and can also power a G3 Flex surveillance camera. The dry relay contacts work with standard 12V electric strikes and magnetic locks. You can connect motion sensors, request-to-exit buttons, and door position switches to the four input terminals. Everything is managed from the same UniFi interface you use for your network, which is the real value here: one dashboard for Wi-Fi, switching, and now door access.

The main limitation is the single door. If you need to secure multiple entrances, you chain multiple UA-Hubs, each with its own PoE++ injector or a switch that supports 802.3bt power. That can get expensive quickly, but for a single door it is a clean solution.

7. Ubiquiti UniFi Access Hub UA-Hub: Alternate Listing for Door Access

Pros

• Same reliable hardware as the UA-Hub-US
• Compact metal enclosure for wall mounting
• Low power consumption as a PoE-powered device
• Integrates seamlessly with UniFi Protect and UniFi Access software

Cons

• No built-in power supply; requires a PoE++ switch or injector
• Limited to a single door with one reader
• No web interface; must be adopted through the UniFi controller

Best for Users who found this specific listing and want the same single-door controller for a UniFi Access deployment.

Check current price on Amazon →

This is the same Ubiquiti UA-Hub hardware as the previous entry, sold under a slightly different title. It controls one door, provides PoE for a reader and camera, and connects to your UniFi controller via the Access application. Everything about the hardware is identical: the dimensions, the weight, the PoE++ power requirement, and the input/output terminals.

The reason we include both listings is that you may find this one at a different availability or vendor. We treat them as the same product. If you are building a UniFi Access system, pick whichever listing is in stock. The pros, cons, and best-for remain exactly the same as the UA-Hub-US above.

8. Ubiquiti UniFi Cloud Key Gen2 Plus (1TB HDD): Best Remote Management Focus

Pros

• Hosts UniFi Network and UniFi Protect locally with no cloud dependency
• 1TB hard drive for onboard video storage
• Silver aluminum enclosure with front-panel display
• Remote access via UniFi mobile app and web portal

Cons

• No PoE pass-through; needs its own PoE or USB-C power
• The aluminum chassis can get warm under heavy Protect recording
• Limited to 2GB RAM; large camera counts may slow the interface

Best for Those who want the same Cloud Key Gen2 Plus hardware but with an emphasis on remote management and a unified dashboard for network and cameras.

Check current price on Amazon →

This variant of the UniFi Cloud Key Gen2 Plus is essentially the same device as the earlier pick, but the listing's title puts the 1TB HDD and 2GB RAM front and center. The hardware is identical in every meaningful way, down to the silver aluminum enclosure and the front-panel LCM. We include it because some retailers sell this as a separate SKU, and the price and availability can differ.

What sets this listing apart in our selection is the emphasis on remote management. Ubiquiti sells the Cloud Key Gen2 Plus as the appliance that lets you walk away from the physical hardware and manage everything from the UniFi mobile app or web portal. The 1TB drive gives you enough storage for a few cameras with reasonable retention. If you are choosing between the two identical Cloud Key Gen2 Plus listings, pick the one that fits your cart better and expect the same performance.

9. Ubiquiti UniFi USW-48-PoE: Best Managed PoE Switch for UniFi

Pros

• 48 Gigabit Ethernet ports with 32 PoE+ (802.3at)
• Four 1G SFP ports for uplinks or fiber connections
• 240W total PoE budget, enough for many access points and cameras
• 1.3-inch touch LCM simplifies configuration and monitoring

Cons

• Large and heavy; takes up full 1U in a rack
• No 10GbE SFP+; uplinks are limited to 1G without a separate aggregation switch
• Does not run the controller itself; must be managed by a UniFi Network controller

Best for Building out a UniFi network with a high number of PoE-powered devices like access points, cameras, and door readers.

Check current price on Amazon →

The UniFi USW-48-PoE is a fully managed Layer 2 switch that integrates into UniFi Network for single-pane-of-glass management. It does not run the controller, but it is the kind of device you would pair with a Cloud Key Gen2 Plus or a Cloud Gateway Ultra. With 32 PoE+ ports, it can power a large deployment of U6 access points and G5 cameras without needing injectors.

The 240W PoE budget is generous. You can run multiple high-power devices like the U6-Enterprise (which draws up to 21W) or the G4 Pro camera without worrying about the budget. The 1.3-inch touch screen on the front shows port status, PoE consumption, and network activity. It is a useful convenience when you are in the wiring closet.

The main shortcoming is the lack of 10GbE uplinks. The four SFP ports are limited to 1G, so if you have a 10GbE server or a high-bandwidth backbone, you need a separate aggregation switch like the USW-Aggregation. For most offices and homes, 1G to the distribution switch is still sufficient. The USW-48-PoE is a heavy, solid piece of kit that justifies its rack space if you need that many PoE ports.

Buyer's Guide: How to Choose a UniFi Controller

The term "UniFi controller" covers several hardware categories, and the right one for you depends on what you already own and what you want to manage.

All-in-One vs Separate Controller

The Cloud Gateway Ultra combines a router and the UniFi Network controller in a single box. That is the simplest approach for a new network: one device, one power cable, one interface. The tradeoff is that you lose the ability to upgrade the controller separately from the gateway. If the next generation of UniFi Network requires more processing power, you would need to replace the whole gateway.

A separate controller like the Cloud Key Gen2 Plus lets you swap out the gateway (or add a faster one like the UXG-Lite) without touching the controller. This is the more flexible architecture, especially in growing networks.

Integrated Storage for Video

If you plan to run UniFi Protect cameras, the controller needs an internal hard drive. Only the Cloud Key Gen2 Plus and the Cloud Key Gen2 Plus (1TB) have that. The Cloud Key Gen2 has no drive and cannot run Protect at all. The UCG-Ultra also lacks storage, so you would need a separate Network Video Recorder or a self-hosted controller with external storage.

Network Scale and Performance

A Cloud Key Gen2 can handle 50 or more devices, but the processor is not as fast as the Cloud Key Gen2 Plus, so large networks may see slower web interface responsiveness. The UCG-Ultra is rated for 30+ devices and 300+ clients, which is plenty for a mid-sized home. The UXG-Lite is just a gateway, so its performance is about routing throughput, not device count.

Access Control Hardware

The UA-Hub is a door controller, not a network controller. It requires a separate UniFi controller (like a UDM-Pro or Cloud Key) to manage it via the UniFi Access application. If you need physical access control, factor in the cost of the UA-Hub plus the controller that runs the software.

Ecosystem Compatibility

Ubiquiti controllers only manage Ubiquiti gear. The TP-Link OC200 is included here as a point of comparison for those evaluating Omada. It cannot adopt UniFi devices. If you have a mix of brands, the hardware controllers discussed here will not work across ecosystems. You would need to run open-source controller software on a general-purpose machine.

Frequently Asked Questions

What is a UniFi controller?

A UniFi controller is software that manages Ubiquiti's UniFi networking devices, including access points, switches, and gateways. It provides a centralized interface for configuring networks, monitoring traffic, applying firmware updates, and setting up guest portals. The controller can run on a dedicated hardware appliance (like the Cloud Key or Cloud Gateway), a self-hosted server, or a cloud service.

Can I run the UniFi controller on a Raspberry Pi?

Yes. Ubiquiti provides UniFi Network software for Debian-based Linux, and many users run it on a Raspberry Pi 4 or 5. However, a Raspberry Pi does not support UniFi Protect (video surveillance) officially, and performance may be limited with large networks. For a small home setup, a Pi works fine. For anything larger, a dedicated hardware controller is more reliable.

Do I need a Cloud Key if I have a UDM-Pro?

No. The UDM-Pro (UniFi Dream Machine Pro) includes the UniFi Network controller built in, along with a hard drive for Protect. The same applies to the UCG-Ultra and the UDM-SE. If you own any of these all-in-one devices, you do not need a separate Cloud Key.

What is the difference between the Cloud Key Gen2 and the Gen2 Plus?

The Gen2 Plus has an internal 2.5-inch hard drive (usually 1TB) and can run UniFi Protect for video surveillance. The standard Gen2 has no internal storage and cannot run Protect. Both manage UniFi Network, but the Plus is the recommended choice if you plan to add cameras later.

Can I use a TP-Link OC200 to manage UniFi devices?

No. The OC200 runs TP-Link Omada SDN software and only manages TP-Link Omada access points, gateways, and switches. It cannot communicate with Ubiquiti UniFi gear. If you are building a UniFi network, stick with a Cloud Key or Cloud Gateway.

How many UniFi devices can a Cloud Key manage?

A Cloud Key Gen2 or Gen2 Plus can comfortably manage 50 or more UniFi devices, depending on the device types and traffic volume. Ubiquiti does not publish a hard limit, but in practice, networks with more than 80 devices may experience slower web interface response and longer adoption times. For very large deployments, a self-hosted controller on a server with more RAM is recommended.

Is the UA-Hub a network controller?

No. The UniFi Access Hub is a hardware controller for a single door's access control system (readers, locks, sensors). It must be managed by a UniFi controller running the Access application, such as a UDM-Pro or a Cloud Key Gen2 Plus. It does not run the network controller itself.

Final Verdict

The Ubiquiti Cloud Gateway Ultra is the pick for most people because it combines routing and controller duty in one compact box with real IDS/IPS performance. If you need video surveillance, the UniFi Cloud Key Gen2 Plus is the dedicated controller that handles both network and camera management. For those who already have a controller and want a faster gateway, the UXG-Lite is a compact upgrade with excellent throughput. The UA-Hub fills a specific niche for access control, and the USW-48-PoE is the right switch for large PoE deployments. The best UniFi controllers are the ones that match your current gear and your foreseeable growth. Buy the Cloud Gateway Ultra if you are starting fresh, the Cloud Key Gen2 Plus if you run Protect, and the UXG-Lite if you want to keep your existing controller while upgrading the gateway.

This article contains Amazon affiliate links. We may earn a small commission on qualifying purchases at no extra cost to you.