The GL.iNet Brume 2 (GL-MT2500) is a compact wired VPN gateway for any site that needs constant VPN protection for the entire network without replacing the main router. Its key advantage is simple: you keep your current router, your Wi-Fi network and all your familiar settings — and the Brume 2 adds VPN, OpenWrt features, remote access and extra control over your traffic. Every phone and computer on the network is protected without a VPN app on each, and your router and Wi-Fi stay as they are.
VPN for the whole network without replacing the router
A regular VPN has to be installed separately on every phone, laptop or computer. But smart TVs, game consoles, media players, work devices and plenty of other hardware often lack proper VPN support. The Brume 2 solves this at the network gateway level. The VPN is turned on once — and the required traffic on the network can travel through a secure tunnel. This is especially convenient if you already have a good Wi-Fi router and do not want to replace it. The Brume 2 adds VPN, traffic control and OpenWrt features to your existing network. For the connection we recommend GemiGuard VPN — a VPN service optimized for GL.iNet devices.
Drop-in without a complex network rebuild
The Brume 2’s main practical advantage is Drop-in mode (a wired VPN gateway in front of your router). It lets you add a VPN gateway to an already existing network without fully replacing the router, Wi-Fi, passwords and familiar connections. For the buyer this means one simple thing: your network stays familiar, while the Brume 2 adds a new layer of traffic management. There is no need to reconnect every device, explain a new Wi-Fi network to the family or rebuild the infrastructure. This is one of the best scenarios for the Brume 2: when the internet and Wi-Fi already work, but you need a centralised VPN for the entire network.
VPN client and VPN server at the same time
The Brume 2 can act as a VPN client and a VPN server at the same time. As a VPN client, it routes the network’s traffic through a commercial VPN service. As a VPN server, it lets you connect to your network remotely. For example, the Brume 2 can constantly maintain a VPN connection for the devices on the network, and when you are away from the network — you can connect back to access local resources. WireGuard supports speeds up to 355 Mbps, OpenVPN up to 150 Mbps. For a compact wired gateway, this is enough for stable operation in most scenarios.
A wired gateway in front of your existing Wi-Fi router
The Brume 2 is a wired VPN gateway. Its job is to manage traffic between your network, the main router, the provider and the VPN. The Brume 2 has a 2.5 Gbps WAN port and a 1 Gbps LAN port. This configuration is a good fit for scenarios where the main Wi-Fi network is already built on another router, and the Brume 2 is added as a separate VPN layer.
Backup power during outages
The Brume 2 is powered via USB Type-C and consumes less than 2.6 W. For the buyer this means a simple advantage: it is easy to power from a power bank or backup USB power during blackouts. If your main internet, fiber, ONU or other network equipment also has backup power, the Brume 2 can keep protecting the network with VPN without interruption.
More control over your network
The Brume 2 is based on OpenWrt and supports the features advanced users usually need: Multi-WAN, DNS over TLS, DDNS, MAC address cloning, a firewall, port forwarding and DMZ. It also supports GoodCloud for remote management and Site-to-Site VPN. This is useful for anyone managing several networks or who wants control over the device without physical access to it. If you need a simple VPN gateway — the Brume 2 works as a compact solution for a whole-network VPN. If you need deeper configuration — it has plenty of headroom for more complex scenarios.
USB 3.0 for storage
Through USB 3.0 you can connect an external drive to the Brume 2. This is useful if you need to add simple network storage or use additional OpenWrt features related to local data storage.
GemiGuard Mirage
The GemiGuard Mirage package is available for the Brume 2 — a software solution for improving privacy, anonymity and cybersecurity on GL.iNet devices. It is installed on request. GemiGuard Mirage wipes local log files and locally stored connection history, and randomizes MAC network identifiers to reduce long-term device tracking. DNS queries and their metadata are encrypted. As a result, the number of local technical traces on the gateway itself is reduced.
What’s in the box
The GL.iNet Brume 2 is worth choosing if you need a VPN for the entire network but do not want to replace your current Wi-Fi router. It is a compact wired gateway for those who need a constant VPN, remote access, OpenWrt features and network control in a single device. All devices are new and in factory wrap. Delivery across Ukraine with Nova Poshta.
GemiGuard Mirage Light for the GL.iNet Brume 2. Mirage for this wired gateway includes DNS encryption, system log wiping and MAC address randomization on the Ethernet interface. More about Mirage →
Full technical specifications
- Ethernet interfaces
- 2 (1 WAN + 1 LAN)
- Ethernet speed
- 100 Mbps · 1 Gbps · WAN 2.5 Gbps
- VPN protocols
- OpenVPN · WireGuard
- WireGuard speed
- up to 355 Mbps
- OpenVPN speed
- up to 150 Mbps
- Network modes
- router · access point · VPN gateway
- Operating system
- GL.iNet firmware based on OpenWrt
- Firewall
- port forwarding · open ports · DMZ
- Advanced features
- Multi-WAN · DDNS · DNS over TLS (Cloudflare) · MAC cloning · remote web management · remote SSH · IPv6
- Processor
- MediaTek MT7981B, dual-core, 1.3 GHz
- RAM
- 1 GB DDR4
- Storage
- 8 GB eMMC
- USB ports
- 1x USB 3.0 Type-A
- Power port
- USB Type-C
- Supply voltage
- 5 V
- Power consumption
- < 2.6 W
- Operating temperature
- 0 – 40 °C
- Antenna type
- none
- Color
- gray
- Dimensions
- 70 × 70 × 22 mm
- Weight
- 60 g
- Humidity
- 5 – 95 %, non-condensing
- Warranty
- 24 months
- Certifications
- CE · CP65 · FCC · IC · RoHS · UKCA · WEEE
- In the box
- GL.iNet Brume 2 (GL-MT2500) VPN gateway · USB-C power adapter with EU plug · Ethernet cable · user manual