GL.iNet Brume 3 (GL-MT5000) High-Speed VPN Security Gateway

The Brume 3 is a wired VPN security gateway that sits quietly between your modem and your network, encrypting and inspecting everything that passes through. Peak VPN throughput hits 1,100 Mbps over WireGuard and 1,000 Mbps over OpenVPN-DCO with hardware acceleration — over 3x faster than the Brume 2 — so shielding your whole LAN no longer means slowing it down.

It brings enterprise-style controls to homes and small offices: free Deep Packet Inspection automatically filters malicious traffic and malware with a continuously updated database, a real-time dashboard tracks application usage over 7 days, and SQM plus dynamic QoS kill bufferbloat and keep video calls and gaming smooth under load. VPN obfuscation disguises your tunnel so it works even on networks that block standard VPN traffic.

Three 2.5G Ethernet ports offer flexible WAN/LAN assignment, including dual-ISP failover and load balancing, and a USB-C 3.0 data port takes 3G/4G/5G dongles for cellular backup or external drives for a lightweight NAS. Built on OpenWrt 21.02 with 1 GB DDR4 and 8 GB eMMC, powered by simple USB-C 5V/3A — from UK stock with support from CLI Secure.

Key features

• Extreme VPN performance — up to 1,100 Mbps WireGuard and 1,000 Mbps OpenVPN-DCO, trusted by 30+ VPN partners.
• Tri-port multi-gig connectivity — 3 x 2.5GbE with flexible WAN/LAN configuration; LAN1 switchable to a second WAN.
• VPN obfuscation — masks VPN signatures to evade DPI-based blocking, throttling and restrictive firewalls.
• DPI-based protection — automatic filtering of malicious traffic, gambling sites and malware, plus manual blocking of apps, domains and IPs.
• Real-time dashboard — application-level visibility with 7-day traffic trends to spot anomalies and bandwidth hogs.
• SQM and dynamic QoS — eliminates bufferbloat and prioritises video calls and gaming when bandwidth is scarce.
• Multi-WAN failover and load balancing — dual-ISP setups with automatic switchover for always-on connectivity.
• USB 3.0 expansion — USB-C data port (5V/2A out) for cellular dongles, external storage, ad-blocking, DLNA or a light NAS role.
• OpenWrt 21.02 — kernel 5.4.281 with 1 GB DDR4 and 8 GB eMMC for packages, services and home-lab experiments.

Works with

• All routers
• The networking range

Frequently asked questions

What is a VPN security gateway, and how is it different from a router?

The Brume 3 is a wired gateway: it has no Wi-Fi radio of its own and focuses its hardware on encryption, inspection and traffic management. Sit it between your modem and your existing network (or an access point) and it becomes the secure heart of the LAN — VPN server, DPI filter and QoS engine in one.

How fast is the VPN really?

Up to 1,100 Mbps over WireGuard and 1,000 Mbps over OpenVPN-DCO on a local network — more than three times the Brume 2 — fast enough that a full-line VPN no longer bottlenecks a gigabit connection.

What does the DPI feature actually do?

Deep Packet Inspection is included free: it automatically filters malicious traffic, gambling sites and malware using a continuously updated database, lets you manually block specific apps, domains or IPs, and feeds a real-time dashboard showing application usage and 7-day traffic trends.

Can I build a private cloud with it?

Yes. Run the Brume 3 as your home VPN server and connect a travel router such as the Beryl 7 (GL-MT3600BE) as a client — your devices reach your home NAS securely from anywhere, invisible to prying eyes. The USB 3.0 port also takes external drives for lightweight NAS or DLNA duties.

What if my broadband goes down?

Convert LAN1 into a second WAN for a dual-ISP setup with automatic failover and load balancing, or plug a 3G/4G/5G dongle into the USB-C data port for cellular backup.

Planning a secure home lab or small-office gateway? Call 0333 242 1314 or email sales@clisecure.com — we'll help you design the setup.