An ultra-compact mini router in a 58 × 58 mm body weighing just 40 g fits easily in a pocket or travel bag. Shadow (GL-AR300M16) supports WireGuard and OpenVPN, and what sets it apart from its close relative Mango is EAP support — so it connects to corporate and university Wi-Fi networks that sign users in over WPA2/WPA3-Enterprise (Extensible Authentication Protocol). It’s a compact, secure router for travel, temporary deployment of a private network, or working as a wired or wireless bridge to existing infrastructure.
Internet connectivity
Shadow connects to the internet in four ways: via an Ethernet cable (WAN port), a wireless repeater of an existing Wi-Fi network, a 4G LTE USB modem, or tethering from a smartphone over USB. The portable router turns any of these sources into a private 2.4 GHz Wi-Fi network with speeds up to 300 Mbps.
VPN and encryption
Shadow supports two VPN protocols — WireGuard (up to 45 Mbps) and OpenVPN (up to 12 Mbps). Thanks to the Qualcomm QCA9531 processor clocked at 650 MHz, this model is slightly faster than the entry-level Mango. The VPN runs at the router level: once a VPN service is configured, all traffic from every connected device passes through an encrypted tunnel, with no need to install a separate VPN client on each device. The device is compatible with most commercial VPN services. For the best compatibility, speed, and privacy protection we recommend GemiGuard VPN.
Privacy and cybersecurity with GemiGuard Mirage
The GemiGuard Mirage package is available for Shadow — our software solution for enhancing the privacy and cybersecurity of GL.iNet devices. Mirage for the GL-AR300M16 includes: automatic clearing of system logs, removal of the connected Wi-Fi client history, and hardened encrypted DNS. These features reduce the device’s digital footprint and protect user privacy.
Shadow vs GL.iNet Mango — which model to choose?
Customers often compare these two models. Both devices are ultra-compact mini VPN routers at a minimal price, with an identical 58 × 58 mm body. The key difference: Shadow connects to Wi-Fi networks that use EAP (Extensible Authentication Protocol), the WPA2/WPA3-Enterprise sign-in of corporate and university networks, while Mango connects to networks with a regular password. Shadow also delivers higher VPN speeds: up to 45 Mbps WireGuard and up to 12 Mbps OpenVPN versus up to 25 and 5 Mbps on Mango. At the same time, Mango’s firmware is more polished and stable. If you need EAP support or higher VPN speed, choose Shadow; if your priority is the most polished firmware at the lowest price, take a look at Mango.
Network features and protection
The Shadow pocket router supports WPA3 encryption, Cloudflare DNS over TLS to protect DNS queries from interception, IPv4 and IPv6 protocols, and a built-in firewall. The device features one WAN and one LAN Ethernet port (10/100 Mbps) and a USB 2.0 port for connecting a USB modem or storage drive. Power is supplied via Micro USB (5 V / 2 A); consumption of under 2 W allows it to run from any standard USB power adapter or power bank. Shadow operates in several modes: router, access point (AP), wireless or wired bridge.
OpenWrt, custom firmware, and full technical support
GL.iNet firmware is based on OpenWrt and gives you full control over settings and additional options. Our team of system administrators, network engineers and DevOps specialists supports the router for its whole life, handles warranty repair or replacement directly, and builds custom firmware and set-ups on request.
What’s in the box
GL.iNet Shadow router (GL-AR300M16), Micro USB power cable, Ethernet cable, quick start guide. A power adapter is not included — the device runs from any standard USB adapter or power bank.
GemiGuard Mirage Light for GL.iNet Shadow. Mirage for this device is a Light configuration: DNS encryption, system log wiping, removal of the connected Wi-Fi client history, MAC randomization. Mirage details →
Full technical specifications
- Wi-Fi standards
- 802.11b · 802.11g · 802.11n
- Wi-Fi bands
- 2.4 GHz
- Wi-Fi speed
- 300 Mbps (2.4 GHz)
- Ethernet interfaces
- 2 (1 WAN + 1 LAN)
- Ethernet speed
- 10 Mbps · 100 Mbps
- VPN protocols
- WireGuard · OpenVPN
- WireGuard speed
- up to 45 Mbps
- OpenVPN speed
- up to 12 Mbps
- Network modes
- wireless bridge · wired bridge · router · access point
- Operating system
- GL.iNet firmware based on OpenWrt
- Processor
- Qualcomm QCA9531, 650 MHz
- RAM
- DDR2 128 MB
- Storage
- NOR flash 16 MB
- USB ports
- 1x USB 2.0 Type A
- Antennas
- 2 pcs., internal
- Antenna type
- built-in
- Power port
- Micro USB
- Supply voltage
- 5 V
- Power consumption
- < 2 W
- Operating temperature
- 0–40° C
- Color
- gray
- Dimensions
- 58 × 58 × 25 mm
- Weight
- 40 g
- Humidity
- 5% - 95%, non-condensing
- Warranty
- 24 months
- Certifications
- CE · FCC
- In the box
- GL.iNet Shadow (GL-AR300M16) VPN router · Micro USB cable · Ethernet cable · user manual