GL.iNet Brume 3 (MT5000) review
The GL.iNet Brume 3 is a Wi-Fi-free VPN gateway with 1,100 Mbps WireGuard throughput and AmneziaVPN support for bypassing VPN blocks. The fastest home gateway from GL.iNet.
GL.iNet Brume 3 (MT5000) review
The Brume 3 is the successor to the Brume 2 — a VPN gateway without Wi-Fi that you place in front of your existing router. Compared to its predecessor it offers three times the WireGuard throughput (1,100 Mbps), three 2.5G ports, and something new: AmneziaVPN support, which lets you bypass VPN blocks in environments that actively filter VPN traffic.
Specifications
| Property | Value |
|---|---|
| Processor | MediaTek quad-core (ARM Cortex-A53) |
| RAM | 1 GB DDR4 |
| Storage | 8 GB eMMC |
| Wi-Fi | None |
| Ethernet | 3x 2.5 Gbps (configurable as WAN/LAN) |
| USB | 1x USB 3.0 |
| Operating System | OpenWrt |
| Power | USB-C |
| Price | €109 – €129 |
WireGuard performance: 1,100 Mbps
The Brume 3 achieves up to 1,100 Mbps via WireGuard — the fastest VPN gateway in the GL.iNet lineup. For symmetric 1 Gbps fibre connections, this is the only compact gateway that does not throttle your connection.
Comparison:
| Model | WireGuard | Price |
|---|---|---|
| Brume 2 (MT2500) | ~310 Mbps | €69–89 |
| Flint 2 (MT6000) | ~850 Mbps | €139 |
| Brume 3 (MT5000) | ~1,100 Mbps | €109–129 |
| Flint 3 (BE9300) | ~680 Mbps | €179–229 |
AmneziaVPN: bypassing VPN blocks
This is the feature that makes the Brume 3 unique. Standard VPN protocols (WireGuard, OpenVPN) are identifiable by Deep Packet Inspection — the technology hotels, corporate networks, and some countries use to block VPN traffic.
AmneziaVPN modifies the WireGuard handshake so it resembles ordinary encrypted HTTPS traffic. Result: less detectable by firewalls.
When this is relevant:
- Corporate networks that block VPN
- Hotel networks with active filtering
- Connecting from countries with VPN restrictions (China, Russia, UAE)
Limitation: AmneziaVPN only works if your VPN server supports the protocol. Major commercial providers (Mullvad, ProtonVPN) do not yet offer this as standard. You need your own server (VPS with AmneziaVPN software) or a provider that explicitly supports it.
Three 2.5G ports: flexible configuration
The Brume 3 has three ports you can configure flexibly:
- Default: 1 WAN + 1 LAN + 1 free
- Or: 1 WAN + 2 LAN (for a small wired switch)
- Or: multi-WAN load balancing with two WAN connections
Built-in features
Via the GL.iNet web interface:
- WireGuard, OpenVPN and AmneziaVPN client
- DNS-over-TLS and DNS-over-HTTPS
- AdGuard Home
- VPN policy per device
- Kill switch
- Multi-WAN failover
Brume 2 or Brume 3?
Choose Brume 2 if: Your connection is under 300 Mbps, you don’t need AmneziaVPN, and you prefer the lower price.
Choose Brume 3 if: You have 500+ Mbps fibre, you need to bypass VPN blocks, or you want the extra flexibility of three 2.5G ports.
Conclusion
The Brume 3 is the logical choice for anyone who would buy a Brume 2 but has a faster connection, or who regularly deals with networks that block VPN. The WireGuard performance is impressive for this size and price. AmneziaVPN is a niche feature but genuinely valuable for the right user.
See also:
- GL.iNet Brume 2 review — the simpler, cheaper gateway
- GL.iNet Flint 2 review — home router with Wi-Fi
- Privacy DNS guide — setting up DNS-over-TLS on your network