5G internet with VPN support
Puli AX is equipped with the Quectel RM520N-GL modem supporting 5G NR Sub-6 (built on the Qualcomm Snapdragon X62 platform) with 4G LTE fallback. The modem is compatible with Ukrainian operators — Kyivstar (recommended), Vodafone and Lifecell — and works on 5G bands n78 (3.5 GHz) and n28 (700 MHz). After basic setup and connecting to a VPN service, the router broadcasts a secure Wi-Fi network to all connected devices — phones, laptops, tablets. The VPN runs at the router level, so there’s no need for a separate VPN client on every device.
Puli AX supports two protocols — WireGuard (over 287 Mbps in our tests) and OpenVPN (over 144 Mbps in our tests), as both client and server, making it compatible with most commercial VPN services. For the best compatibility, speed and privacy protection, we recommend GemiGuard VPN.
Battery life and blackout protection
The built-in 6400 mAh lithium-polymer battery (7.4 V · 47.4 Wh) takes over power instantly and without dropping the connection the moment external power is lost — Puli AX keeps serving internet during power outages. Real-world runtime is around 6.5 hours, with a full charge in roughly 3.2 hours. You can keep the device permanently plugged into the mains as a router with backup power in case of a blackout.
Multi-WAN, load-balancing and failover
Puli AX supports several WAN channels at once: wired 2.5 Gbps Ethernet, cellular 5G/LTE and Wi-Fi in repeater mode. You can set a priority for each channel, enable load-balancing to distribute traffic evenly, or automatic failover — if the primary channel drops, the router switches to the backup automatically. Two Nano-SIM slots add redundancy even at the mobile-operator level.
Privacy and cybersecurity with GemiGuard Mirage Pro
The GemiGuard Mirage package is available for Puli AX in the Pro edition — our software solution for enhancing the privacy, anonymity and cybersecurity of GL.iNet devices. Mirage Pro for the GL-XE3000 includes: IMEI, MAC address and BSSID randomization (its own IMEI for each SIM card), system log wiping, removal of connected Wi-Fi client history and hardened encrypted DNS. These features significantly reduce the device’s digital footprint and protect the user’s privacy.
Dual-band 802.11ax Wi-Fi and interchangeable antennas
Puli AX runs on the 802.11ax standard across two bands simultaneously — 2.4 GHz (574 Mbps) and 5 GHz (2402 Mbps), up to 3000 Mbps combined. MU-MIMO and OFDMA technologies ensure stable performance in networks with a large number of connected devices and reduce latency. The six external antennas with SMA connectors (four for 5G NR and two for Wi-Fi) can be swapped for antennas suited to a specific scenario — for example, directional antennas for remote locations with a weak signal.
Networking features and protection
Puli AX supports WPA3 encryption, encrypted DNS to protect DNS queries from interception, IPv4 and IPv6 protocols, and a built-in firewall with port forwarding, DMZ and Drop-in Gateway mode. The router is equipped with a 2.5 Gbps WAN port and a 1 Gbps LAN port, two Nano-SIM slots, a USB 2.0 port and a TF (MicroSD) card slot up to 1 TB — handy for local data storage. The device operates in several modes: classic router, access point (AP), wireless or wired bridge.
OpenWrt, custom firmware and full technical support
GL.iNet firmware is based on OpenWrt and gives you full control over settings and advanced options. Our team of system administrators, network engineers and DevOps specialists supports the router for its whole life, handles warranty repair or replacement directly, and builds custom firmware and set-ups on request.
What’s in the box
GL.iNet Puli AX router (GL-XE3000), power adapter with four interchangeable plugs (US, EU, UK, AU), two Wi-Fi antennas, four 5G NR antennas, Ethernet cable, wall-mount kit, warranty card, quick start guide.
Useful resources
- IMEI obfuscation
- WireGuard and OpenVPN — protocol comparison
- backup internet channel for your router
Full technical specifications
- Wi-Fi standards
- 802.11a · 802.11b · 802.11g · 802.11n · 802.11ac · 802.11ax
- Wi-Fi bands
- 2.4 GHz · 5 GHz
- Wi-Fi speed
- 2402 Mbps (5 GHz) · 574 Mbps (2.4 GHz)
- Ethernet interfaces
- 2 (1 WAN + 1 LAN)
- Ethernet speed
- 2.5 Gbps (WAN) · 1 Gbps (LAN)
- VPN protocols
- WireGuard · OpenVPN
- WireGuard speed
- over 287 Mbps (our tests)
- OpenVPN speed
- over 144 Mbps (our tests)
- Network modes
- router · access point · wired bridge · wireless bridge
- Modem
- Quectel RM520N-GL · 5G NR Sub-6
- 5G NR
- n1/
2/ 3/ 5/ 7/ 8/ 12/ 13/ 14/ 18/ 20/ 25/ 26/ 28/ 29/ 30/ 38/ 40/ 41/ 48/ 66/ 70/ 71/ 75/ 76/ 77/ 78/ 79 - LTE-FDD
- B1/
2/ 3/ 4/ 5/ 7/ 8/ 12/ 13/ 14/ 17/ 18/ 19/ 20/ 25/ 26/ 28/ 29/ 30/ 32/ 66/ 71 - LTE-TDD
- B34/
38/ 39/ 40/ 41/ 42/ 43/ 48 - SIM card
- 2× Nano-SIM
- TF (MicroSD) slot
- up to 1 TB
- Operating system
- GL.iNet firmware based on OpenWrt
- Advanced features
- Multi-WAN · load-balancing · failover · AdGuard · DNS over TLS · DDNS
- Processor
- MediaTek, dual-core, 1.3 GHz
- RAM
- DDR4 512 MB
- Storage
- eMMC 8 GB
- USB ports
- 1× USB 2.0 Type-A
- Antennas
- 6 pcs., external SMA (4× 5G NR + 2× Wi-Fi)
- Antenna type
- removable
- Power port
- DC5521 (5.5 × 2.1 mm) · 12 V /
2.5 A · 9–16 V - Power consumption
- <14 W
- Battery
- Li-Po 6400 mAh · 7.4 V · 47.4 Wh (built-in)
- Battery life
- ~6.5 hours · full charge ~3.2 hours
- Operating temperature
- 0–40° C
- Color
- white
- Dimensions
- 155 × 95 × 49 mm
- Weight
- 761 g
- Humidity
- 5% - 95%, non-condensing
- Warranty
- 24 months
- Certifications
- CE · CP65 · FCC · IC · RoHS · UKCA · WEEE
- In the box
- GL.iNet Puli AX (GL-XE3000) router with a built-in battery · four cellular and two Wi-Fi antennas · power adapter with integrated cable · Ethernet cable