GL.iNet Shadow GL-AR300M16

An ultra-compact mini router in a 58 × 58 mm body weighing just 40 g fits easily in a pocket or travel bag. Shadow (GL-AR300M16) supports WireGuard and OpenVPN, and what sets it apart from its close relative Mango is EAP support — so it connects even to the corporate networks and captive portals that require the Extensible Authentication Protocol. It’s a compact, secure router for travel, temporary deployment of a private network, or working as a wired or wireless bridge to existing infrastructure.

Internet connectivity

Shadow connects to the internet in four ways: via an Ethernet cable (WAN port), a wireless repeater of an existing Wi-Fi network, a 4G LTE USB modem, or tethering from a smartphone over USB. The portable router turns any of these sources into a private 2.4 GHz Wi-Fi network with speeds up to 300 Mbps.

VPN and encryption

Shadow supports two VPN protocols — WireGuard (real-world speed ~35 Mbps) and OpenVPN (~7 Mbps). Thanks to the Qualcomm QCA9531 processor clocked at 650 MHz, this model is slightly faster than the entry-level Mango. The VPN runs at the router level: once a VPN service is configured, all traffic from every connected device passes through an encrypted tunnel, with no need to install a separate VPN client on each device. The device is compatible with most commercial VPN services. For the best compatibility, speed, and privacy protection we recommend GemiGuard VPN.

Privacy and cybersecurity with GemiGuard Mirage

The GemiGuard Mirage package is available for Shadow — our software solution for enhancing the privacy and cybersecurity of GL.iNet devices. Mirage for the GL-AR300M16 includes: automatic clearing of system logs, removal of the connected Wi-Fi client history, and hardened encrypted DNS. These features reduce the device’s digital footprint and protect user privacy.

Shadow vs GL.iNet Mango — which model to choose?

Customers often compare these two models. Both devices are ultra-compact mini VPN routers at a minimal price, with an identical 58 × 58 mm body. The key difference: Shadow supports the EAP protocol (Extensible Authentication Protocol), used by some legacy corporate networks and captive portals — Mango does not support this protocol. Shadow also delivers slightly higher VPN speeds: ~35 Mbps WireGuard and ~7 Mbps OpenVPN versus ~25 and ~5 Mbps on Mango. At the same time, Mango’s firmware is more polished and stable. If you need EAP support or slightly higher VPN speed, choose Shadow; if your priority is the most polished firmware at the lowest price, take a look at Mango.

Network features and protection

The Shadow travel router supports WPA3 encryption, Cloudflare DNS over TLS to protect DNS queries from interception, IPv4 and IPv6 protocols, and a built-in firewall. The device features one WAN and one LAN Ethernet port (10/100 Mbps) and a USB 2.0 port for connecting a USB modem or storage drive. Power is supplied via Micro USB (5 V / 2 A); consumption of under 2 W allows it to run from any standard USB power adapter or power bank. Shadow operates in several modes: router, access point (AP), wireless or wired bridge.

OpenWrt, custom firmware, and full technical support

The OpenWrt operating system gives you full control over settings and additional options. GemiGuard is more than just a store. We are a team of system administrators, network engineers, and DevOps specialists with deep expertise in OpenWrt and GL.iNet. We develop custom firmware, provide full technical support throughout the entire lifecycle of the device, handle warranty cases directly (repair or replacement), and can build a fully bespoke solution tailored to your needs.

What’s in the box

GL.iNet Shadow router (GL-AR300M16), Micro USB power cable, Ethernet cable, quick start guide. A power adapter is not included — the device runs from any standard USB adapter or power bank.

Full technical specifications

Wi-Fi standards

802.11b · 802.11g · 802.11n

Wi-Fi bands

2.4 GHz

Wi-Fi speed

300 Mbps (2.4 GHz)

Ethernet interfaces

2 (1 WAN + 1 LAN)

Ethernet speed

10 Mbps · 100 Mbps

VPN protocols

WireGuard · OpenVPN

WireGuard speed

~35 Mbps

OpenVPN speed

~7 Mbps

Network modes

wireless bridge · wired bridge · router · access point

Operating system

OpenWrt

Processor

Qualcomm QCA9531, 650 MHz

RAM

DDR2 128 MB

Storage

NOR flash 16 MB

USB ports

1x USB 2.0 Type A

Antennas

Internal

Power port

Micro USB

Supply voltage

5 V

Power consumption

< 2 W

Operating temperature

0–40° C

Color

Gray

Dimensions

58 × 58 × 25 mm

Weight

40 g

Humidity

5% - 95%, non-condensing

Warranty

24 months

Certifications

CE · FCC