Cloud Key Gen2 Plus: Still Worth It vs Local UniFi OS Console

There was a stretch of UniFi history where the Cloud Key was not optional. If you wanted a UniFi network, something had to run the controller, and unless you felt like babysitting a self-hosted install on a spare machine, the Cloud Key was that something. That era is over. Every current UniFi gateway of any ambition — the Dream Machine line, the Cloud Gateway Ultra and Max, the Express — runs the Network application on the device itself, as a UniFi OS Console. So the reasonable question in 2026 is not "which Cloud Key do I buy" but "do I need one at all," and the honest answer is: for a lot of homelabs, no — and for a specific and common case, still yes.

This post is about drawing that line cleanly. What the Cloud Key Gen2 Plus actually brings that a built-in console does not, where the built-in console has simply absorbed the Cloud Key's old job, and the one workload — cameras — that keeps the Gen2 Plus relevant as a separate box. If you land on the "still worth it" side, the Unifi CloudKey Gen2 Plus 19" Rack Mount - 1U (Modular) is how it goes into the rack; the harder part is deciding whether it belongs there.

What the Cloud Key Gen2 Plus actually is

The Gen2 Plus is more than a controller-on-a-stick, and that is the whole key to when it still makes sense. It is a small UniFi OS appliance that runs both the Network and Protect applications, and — the part that matters — it ships with an onboard 2.5-inch hard drive (1 TB in the stock configuration, and user-replaceable) plus an internal battery for graceful shutdown when the power drops. The plain Gen2, by contrast, runs the controller but has no drive bay; the "Plus" exists specifically to be a small network video recorder.

So the device is really wearing two hats. Hat one: it runs the UniFi Network controller, the same job it has always done. Hat two: it is the cheapest UniFi camera recorder, because it has storage inside it. That second hat is the one that has kept the Gen2 Plus in the catalog while built-in consoles quietly took over the first job. Treat exact current figures — drive capacity ceiling, camera count, battery runtime — as spec-sheet items that Ubiquiti revises; what does not change is the shape of the thing: controller plus onboard storage plus a small battery, in one compact box.

What "UniFi OS Console" means now

A UniFi OS Console is any device that runs UniFi OS and hosts applications like Network and Protect locally, rather than reaching out to a controller hosted elsewhere. The important development of the last few years is that this capability moved into the gateways. When your gateway is a UniFi OS Console, adopting your switches and access points to it means the controller is already there, already backed up with the device, already updated alongside it. There is no second box to power, patch, or account for.

For a Network-only homelab this quietly deletes the original reason the Cloud Key existed. If your gateway is a Dream Machine, a Cloud Gateway Ultra or Max, or an Express, the Network application is running on it right now, and bolting a Cloud Key onto the same LAN to also run Network would be running two controllers to manage one network — which is not how it works and not something you want. The built-in console won this fight. A Network-only lab with a modern gateway does not need a Cloud Key, full stop, and anyone telling you otherwise is describing 2019.

The Network-only case: the built-in console wins

Let me be direct about the common configuration, because it is worth saying plainly. If you run UniFi for networking — gateway, switches, access points — and you do not run UniFi Protect cameras, a modern gateway's built-in console is the correct and complete answer, and a Cloud Key Gen2 Plus is redundant hardware. It would sit in the rack drawing power to duplicate a job your gateway already does. There is no performance argument, no feature you unlock, no meaningful reliability gain for the typical lab. Skip it.

The one exception worth acknowledging is deliberate separation of concerns, and it is a minority taste. Some operators like the controller to live on a device that is not also the router, so that reflashing or replacing the gateway does not disturb the controller state, and so that a controller upgrade cannot take the routing plane down with it. That is a real preference and the Cloud Key can serve it — but understand that you are buying operational separation, not capability, and most homelabs are better served by the simplicity of one console than by the tidiness of two. Buy the separation only if you know specifically why you want it.

The Protect case: why the Gen2 Plus survives

Here is where the Gen2 Plus stops being redundant and starts being the answer. UniFi Protect — the camera system — needs somewhere to write video, continuously, for weeks. That means storage, and storage is exactly what a bare gateway console usually does not have. A gateway can run the Network application beautifully with no disk, because network config is small; it cannot be your camera recorder if it has nowhere to record.

The Gen2 Plus has a 1 TB drive inside it, which makes it the smallest, cheapest way to run UniFi Protect for a handful of cameras. If your homelab is adding a few cameras and you do not want to jump to a multi-bay UNVR, the Gen2 Plus is the device that gives you Protect with onboard recording in one compact box. This is the honest reason it is still sold: not as a controller — the gateways took that — but as an entry-level NVR that happens to also run Network if you want it to.

The decision inside the Protect case is really Gen2 Plus versus a dedicated UNVR, and it comes down to camera count and retention. A few cameras with modest retention fit the single internal drive of the Gen2 Plus comfortably. Once you are running many cameras, high-resolution streams, or long retention windows, the single 2.5-inch drive becomes the bottleneck and a multi-bay recorder built for the job is the better spend. The Gen2 Plus is the right floor, not the ceiling.

Reliability, battery, and the separation argument

Two smaller points round out the picture. The first is the internal battery, which is a genuinely thoughtful inclusion: on power loss the Gen2 Plus can shut down cleanly rather than yanking the controller database or the Protect recording out from under an active write. Databases and video files both hate abrupt power cuts, and the battery buys the seconds needed to close them gracefully. It is not a UPS — it protects the device's own orderly shutdown, not your uptime — but for a device holding a controller database and camera footage, that orderly shutdown is worth having.

The second is the separation argument revisited through a reliability lens. Keeping Protect on a dedicated appliance means the workload that writes gigabytes of video all day is not sharing a device with your router's packet processing. On a busy setup that isolation has value: camera I/O stays off the box that is inspecting and routing your traffic. This is a stronger version of the separation preference than the Network-only case, because cameras are an genuinely heavy, continuous workload rather than the light housekeeping that Network config represents. If you run cameras seriously, a device dedicated to Protect — the Gen2 Plus at the small end, a UNVR at the large — is a defensible architecture rather than just a taste.

Mounting the Gen2 Plus in a rack

If you have worked through the above and the Gen2 Plus is going in — almost certainly for Protect, possibly for deliberate controller separation — it is a small device that does not present a rack face on its own. The Unifi CloudKey Gen2 Plus 19" Rack Mount - 1U (Modular) holds it flush to 19-inch rails in a single U so it lives in the rack properly instead of balancing on a shelf. Because it contains a spinning 2.5-inch drive, treat it a little more gently than a solid-state device: mounting it solidly so it is not subject to vibration from a fan tray or a hard-working neighbor is not fussiness, it is drive longevity, since mechanical drives dislike sustained vibration.

The mount being modular is useful here because the Gen2 Plus is exactly the kind of small device you often want to pair with something else in the same 1U rather than spend a whole rack unit on a box the size of a paperback. Printed in PETG, the bracket handles the mild warmth the device puts out without issue — this is a low-heat tenant, and the thermal demands are trivial next to a PoE switch. Give the drive a stable, low-vibration home and route its single power and network cable without strain, and it disappears into the rack the way an appliance should.

Wrap-up

The Cloud Key Gen2 Plus lost one job and kept another. Modern UniFi gateways run the Network controller as a built-in console, which makes a Cloud Key redundant for a networking-only homelab — if your gateway is a current Dream Machine, Cloud Gateway, or Express, you already have your console and do not need this device. That case is genuinely closed.

What keeps the Gen2 Plus worth buying is storage: it is the smallest, cheapest way to run UniFi Protect with onboard recording, and cameras are a workload a bare gateway console cannot serve on its own. Decide on the workload, not the habit — no cameras and a modern gateway means skip it; a few cameras or a deliberate reason to separate the controller from the router means it still earns its 1U. Buy it for the job it still does, not the one the gateways took away.