On January 6, 2026, day 1 of CES 2026, Gl.iNet is highlighting the Beryl 7 (GL-MT3600BE) as an upcoming travel router positioned below the company’s more premium Slate 7 in the same Wi-Fi 7 travel category. The device is being presented as a successor direction to the earlier Beryl AX generation, with Gl.iNet focusing its messaging on VPN throughput, portable use, and the practical ports and power features that matter when the router is used on the road. Pricing and a firm release date have not been included in the information shared so far.
In its CES materials, Gl.iNet describes Beryl 7 as a compact, dual-band Wi-Fi 7 model aimed at users who want higher encrypted throughput without stepping up to a larger, more feature-heavy travel router. Key claims include up to 1100Mbps on OpenVPN-DCO and WireGuard, dual 2.5G Ethernet capability, and support for 120+ connected devices, alongside USB Power Delivery compatibility and a 5V/2A power output intended to integrate cleanly with uFi and MiFi devices for primary or backup WAN use.
The Beryl 7 measures at 120 x 83 x 34mm and 205 grams, placing it in the small-router class rather than the pocket-hotspot style. Compared with battery-powered travel routers, the added thickness is consistent with a design that prioritizes full-size ports and airflow while still staying compact enough for a backpack or a small tech pouch. Gl.iNet also lists an operating temperature range of 0C to 40C, which sets basic expectations for typical indoor and travel use, even though performance under sustained load will still depend on ventilation and ambient conditions.
Unlike cellular travel routers, the Beryl 7 is designed to be powered externally rather than running from an internal battery, so it is closer in use to a small plug-in router than a self-contained hotspot. It takes USB-C power via USB Power Delivery and is specified for 5V/3A, 9V/3A, or 12V/2.5A input, which keeps powering simple with common phone and laptop adapters and most power banks that support PD. Gl.iNet also lists a 5V/2A power output, intended to pair with uFi and MiFi devices when you want the router to sit in front of a separate upstream connection and keep that upstream device powered from the same setup.
Gl.iNet Beryl 7 Travel Router – Connectivity
The Beryl 7 is a dual-band Wi-Fi travel router rather than a cellular router. It does not include a SIM slot or eSIM support, which means it is not designed to connect directly to a carrier network on its own. In practice, internet access is expected to come from an upstream source such as a wired connection, USB tethering, or an external hotspot or modem that provides the WAN link. This approach matches travel setups where the router’s job is to manage your local network and security policies, while a separate device handles mobile connectivity when needed.
On the wireless side, the Beryl 7 supports 802.11a/b/g/n/ac/ax/be and operates on 2.4GHz and 5GHz. The published maximum rates are 688Mbps on 2.4GHz and 2882Mbps on 5GHz, which sets its theoretical peak figures for those bands. Because there is no 6GHz band listed, it will not have access to the cleaner spectrum that some tri-band Wi-Fi 7 routers use to reduce congestion in dense environments. Real-world performance will still depend heavily on client device capability, channel conditions, and how crowded the local RF environment is, especially in hotels, apartments, or event venues.
For wired networking, the Beryl 7 includes 1x WAN and 1x LAN, with both ports rated at 100/1000/2500Mbps. Having 2.5Gbps capability on both sides can matter if you are connecting to faster-than-gigabit service, or if you want to avoid bottlenecking a wired client such as a laptop dock, mini PC, or NAS while the router is also handling wireless clients. The dedicated WAN and LAN labeling also suggests a straightforward topology for travel use, where the router can sit between a wired uplink and your personal devices without requiring additional switches. Specific options like port re-assignment or multi-WAN behavior are still dependent on the final firmware feature set.
For tethering and peripherals, the router includes 1 USB 3.0 port. Gl.iNet’s positioning also references pairing it with uFi and MiFi devices for primary or backup WAN use, which aligns with common travel workflows where a hotspot provides the upstream connection and the router distributes it to multiple devices. Depending on software support, USB can also be relevant for other functions such as attaching storage for basic file sharing, but those capabilities are not confirmed solely by the presence of the port. The practical takeaway is that the Beryl 7’s connectivity design focuses on managing and distributing an external internet source rather than replacing that source with built-in cellular hardware.
Gl.iNet Beryl 7 Travel Router – Internal Hardware
The Beryl 7 is specified with a MediaTek quad-core CPU clocked at 2.0GHz. Gl.iNet has not stated the exact chipset model in the material provided, so it is difficult to compare directly against specific MediaTek families used in other routers, but the listed clock speed and core count indicate it is intended to handle routing and VPN workloads beyond basic hotspot sharing. How that translates in practice will depend on the final firmware feature mix and how much processing overhead is added by enabled services. Memory is listed as 512MB of DDR4. That capacity is typically sufficient for a travel router doing standard routing, firewalling, and VPN duties, but it can become a limiting factor if heavy logging, multiple concurrent services, or more advanced packages are enabled. In practical use, headroom will depend on how Gl.iNet tunes the stock firmware and whether the router is expected to run additional features beyond its default configuration. Storage is specified as 512MB of NAND flash. This is a smaller onboard footprint than some higher-end travel routers that use multi-gigabyte eMMC, and it generally implies a tighter space budget for the base firmware image, installed packages, and retained logs. It also means features that rely on persistent local storage may be more constrained unless Gl.iNet provides options to offload data to external storage via USB.
Gl.iNet is presenting the Beryl 7 as part of its travel router lineup, which typically uses the company’s GL.iNet firmware with a web-based management interface. That software approach tends to balance simplified setup for common tasks with access to more detailed configuration when needed, which is relevant for travel scenarios where you may want quick changes without digging through advanced menus.
For this model in particular, VPN is the main emphasis in Gl.iNet’s CES messaging. The company is making a specific performance claim of up to 1100Mbps on OpenVPN-DCO and WireGuard, positioning encrypted throughput as a headline reason to choose the Beryl 7 over older Beryl models or lower-end travel routers. Actual results will still depend on factors such as upstream bandwidth, server performance, encryption settings, and network conditions.
Gl.iNet also highlights Amnezia VPN support as part of the Beryl 7’s privacy and censorship-bypass positioning. That places the router within the company’s broader direction of expanding VPN tooling and privacy-related options across its travel lineup, though the exact implementation details for the Beryl 7 will come down to the shipping firmware and how features are exposed in the final interface.
Beyond VPN-related claims, Gl.iNet has not published a complete, model-specific list of software functions for the Beryl 7. Features that appear across other Gl.iNet travel routers, such as traffic controls, DNS and filtering options, remote access services, and package-style add-ons, may be present, but they are not confirmed by the hardware spec sheet alone. For ownership considerations, the missing pieces remain the update cadence, support window, and any limitations imposed by the device’s relatively small flash storage.
Gl.iNet Beryl 7 Travel Router – Conclusion
As presented on day 1 of CES 2026, the Beryl 7 (GL-MT3600BE) is positioned as a more affordable Wi-Fi 7 travel router option that sits below the Slate 7 in capability and likely in price, while serving as the next step after the Beryl AX generation. Its core proposition is a compact, USB-C powered router that focuses on high VPN throughput, dual-band Wi-Fi, and practical wired networking for travel setups. The specification sheet outlines a MediaTek quad-core 2.0GHz platform with 512MB DDR4 and 512MB NAND, paired with 2.5Gbps-capable WAN and LAN ports, plus a USB 3.0 port. It does not include an internal battery and it has no SIM or eSIM support, which means it is designed to sit behind an external internet source such as hotel Ethernet, phone tethering, or a dedicated hotspot. Power is handled through USB Power Delivery, and Gl.iNet also lists a 5V/2A output intended to keep an upstream mobile device powered in a single-cable travel arrangement.
The remaining unknowns are mostly around launch details and how the final firmware is packaged for a device with limited flash storage. Gl.iNet has not published pricing or a release date, and it has not provided a full, model-specific breakdown of software features beyond its VPN and privacy positioning. Those details will likely matter most to buyers deciding between the Beryl 7 and higher-end travel routers, especially if they plan to rely on add-on services, extensive logging, or other features that place more demand on storage and memory.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHERE
Gl.iNet is using day 1 of CES 2026 to spotlight the Mudi 7 travel router, with 2 listed variants: GL-E5800NA and GL-E5800EU. While the company is now formally presenting the device at the show and directing attention to its travel-focused positioning, it still has not published pricing or a confirmed retail release date in the materials available today. That leaves the Mudi 7’s market placement and availability timeline unresolved, even as the hardware is being discussed publicly at CES. Alongside the CES reveal, Gl.iNet has shared a full specification sheet that clarifies the Mudi 7’s core platform and feature set. It is based on a Qualcomm quad-core 2.2GHz design with 2GB LPDDR4X and 8GB eMMC, and it combines 5G NR with tri-band Wi-Fi 7-class networking, dual SIM dual standby plus eSIM, and a built-in touchscreen for on-device management. I previously saw an early prototype during a visit to Gl.iNet’s Shenzhen offices in October 2025, and the CES-era specification release fills in the internal details that were not available at the time, making it easier to assess what Gl.iNet intends to ship in the NA and EU variants.
With the full specifications now available, the Mudi 7 is confirmed as a compact, battery-powered travel router measuring 157 x 75 x 22.8mm and weighing 300g. That footprint places it closer to a portable hotspot than a small desktop router, with enough thickness to accommodate a touchscreen, battery, and internal antennas.
Gl.iNet lists a 2.8-inch touchscreen as the primary on-device interface. In practical terms, this design choice supports situations where you need to check status or adjust basic settings without relying on a separate phone or laptop, which can be useful when moving between locations or sharing access with other devices.
Power is handled through a built-in 3.85V, 5380mAh battery rated at 20.72Wh, and charging is specified as USB PD/PPS from 5V to 12V with up to 30W input. Gl.iNet also lists power consumption below 30W, which provides a ceiling for expected draw under load, though real battery life will still depend on cellular conditions, connected devices, and the mix of Wi-Fi and wired usage.
Gl.iNet Mudi 7 Router – Connectivity
Cellular is the main uplink option on the Mudi 7, with support listed for 5G NR in both NSA and SA modes. For fallback coverage, it also supports 4G LTE with Cat 20 download capability, which becomes relevant when 5G coverage is weak, when indoor signal conditions push the modem back to LTE, or when a roaming profile limits access to certain 5G services. Gl.iNet still has not published a band list in the specifications you shared, so region-by-region compatibility will depend on the exact supported bands of the NA and EU variants.
For SIM management, the router is specified with dual SIM dual standby and built-in eSIM support. In day-to-day use, that combination is intended to simplify switching between carriers, maintaining a backup line, or separating plans for different regions without having to physically swap cards as often. What remains unclear is how Gl.iNet handles priority rules, failover behavior, and eSIM provisioning in its interface, including whether switching can be automated based on signal or data limits.
On the local network side, the Mudi 7 supports 802.11a/b/g/n/ac/ax/be across 2.4GHz, 5GHz, and 6GHz. The published maximum Wi-Fi rates are 688Mbps on 2.4GHz, 2882Mbps on 5GHz, and 5764Mbps on 6GHz, which sets expectations for its theoretical peak throughput rather than typical sustained performance. Antenna information is also listed, including 2 internal Wi-Fi antennas covering 2.4GHz, 5GHz, and 6GHz, plus 6 internal cellular antennas for LTE and 5G NR, indicating an emphasis on maintaining link quality in variable travel environments.
For wired and tethered connectivity, the router includes a single WAN/LAN Ethernet port rated at 100/1000/2500Mbps, allowing it to slot into networks that offer faster-than-gigabit service while keeping the option for a basic wired LAN connection. It also lists 1 USB 3.1 port, which can be relevant for tethering or attaching compatible peripherals depending on firmware support, but Gl.iNet has not detailed the exact supported use cases yet. External antennas are supported for cellular via 2 TS-9 ports, while external Wi-Fi antenna support is not specified in the sheet, suggesting any range extension is primarily aimed at improving cellular reception.
Gl.iNet Mudi 7 Router – Internal Hardware
The Mudi 7 is based on a Qualcomm platform, listed with a quad-core CPU clocked at 2.2GHz. Gl.iNet does not specify the exact chipset model in the specification sheet, so it is not yet possible to compare its CPU class directly against other travel routers using named Snapdragon or IPQ-series parts. Even so, the stated clock speed and multi-core layout indicate it is designed to handle routing, Wi-Fi management, and cellular tasks concurrently rather than relying on a lower-power single-core design.
Memory is specified as 2GB of LPDDR4X. That capacity is typically relevant for sustaining multiple client connections, running VPN tunnels, and keeping the management interface responsive while traffic is flowing. In practice, how far 2GB goes will depend on the software stack, the number of enabled services, and whether features like traffic monitoring or advanced firewall rules are running continuously.
For onboard storage, the Mudi 7 includes 8GB of eMMC flash. This is generally used for the operating system image, configuration data, and any built-in packages or logs, though Gl.iNet has not detailed how much of that space is reserved versus user-accessible. The specification also does not clarify whether there is any storage expansion path, or how storage is managed over time for items like VPN profiles, connection history, and accumulated logs.
Gl.iNet Mudi 7 Router – Conclusion
On January 6, 2026, the opening day of CES 2026, Gl.iNet is drawing attention to the Mudi 7as its next travel router, listed in 2 variants: GL-E5800NA and GL-E5800EU. The published specification sheet outlines a Qualcomm quad-core 2.2GHz platform with 2GB LPDDR4X and 8GB eMMC, paired with 5G NR (NSA and SA) and tri-band Wi-Fi across 2.4GHz, 5GHz, and 6GHz. The physical and power details are also clear at this stage. Gl.iNet lists the Mudi 7 at 157 x 75 x 22.8mm and 300g, with a 3.85V 5380mAh battery rated at 20.72Wh and USB PD/PPS input up to 30W. Interfaces include a single WAN/LAN Ethernet port rated up to 2500Mbps, 1 USB 3.1 port, and 2 TS-9 ports for external cellular antennas, while a 2.8-inch touchscreen is positioned as a central part of on-device control.
Even with those specifications confirmed, several practical release details remain open on day 1. Gl.iNet has not published pricing, a retail availability date, or a cellular band list for each regional variant, which will determine how well the NA and EU models align with specific carriers and travel use cases. The company has also not provided a complete, Mudi 7-specific breakdown of firmware features and long-term software support, leaving the final day-to-day picture dependent on what is shown during CES and what ships in the retail firmware.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHERE
Is the Sipeed NanoKVM Safe? On-board Microphone Identified
The Sipeed NanoKVM Cube is a low cost, network connected KVM built around the LicheeRV Nano RISC-V module, and recent reporting has drawn attention to the fact that this first generation hardware quietly inherited an onboard analog microphone from that core board. While the LicheeRV Nano documentation clearly lists audio input and output capabilities, the NanoKVM product materials initially focused on its KVM role and did not prominently call out the presence of a microphone on the internal PCB. That gap in presentation, combined with the device’s origin in China and its role as an always-on, remotely accessible appliance, has led to questions about transparency and potential privacy impact. This article reviews what is actually on the hardware, how Sipeed has responded, which issues have been addressed in software, and what residual risk remains for users who already have the NanoKVM Cube deployed.
The NanoKVM Cube and That Microphone – What We Learned?
The initial detailed public discussion of the NanoKVM Cube microphone came from a Telefoncek.si research article, which documented security testing of early units and highlighted the presence of a small, operational microphone on the device’s PCB. The NanoKVM Cube is built on the LicheeRV Nano platform, and that design decision is the origin of the audio hardware. The LicheeRV Nano specification explicitly lists an onboard analog silicon microphone for audio input and a PA amplifier for driving a small speaker, because the module is intended as a general purpose SBC for a range of embedded applications. When Sipeed used this module as the core of a consumer facing KVM, the Cube inherited that audio circuitry intact, including the tiny surface mount MEMS microphone, even though typical KVM usage does not require audio capture capabilities.
What Telefoncek.si article from Feb ’25 drew attention to was the combination of this hardware and a software stack that already contained working audio tooling. Researchers who obtained early NanoKVM units found that, with SSH access, standard ALSA tools such as amixer and arecord could be used to adjust gain and record ambient sound through the built in microphone, and that the resulting audio files could be copied or potentially streamed off the device. At that time, the NanoKVM product page described its relationship to the LicheeRV Nano SDK and resources in general terms, but did not highlight that a functioning microphone remained present on the KVM board. For many users, that gap between what the SBC documentation said and what the KVM product page emphasized was perceived as a lack of clear disclosure rather than a predictable consequence of module reuse.
The NanoKVM Security Concern and Presentation Issues
The initial concern around NanoKVM security was not limited to the microphone. Early firmware builds shipped with default credentials, SSH enabled, weak web security controls, and hardcoded encryption keys that were identical across devices. Researchers also found diagnostic and security utilities present on the system image that were more appropriate for development or lab use than for a small appliance likely to be exposed on home or small business networks. These findings created a picture of a product that had been moved from prototype to retail relatively quickly, with baseline functionality in place but limited attention paid to hardening or least privilege.
Presentation played a significant role in how the microphone issue was perceived. For the LicheeRV Nano SBC, the presence of audio input and output is clearly listed as part of the hardware specification, and that makes sense for a general purpose module. For NanoKVM Cube, the public facing documentation initially focused on KVM features, HDMI input, and compatibility with the LicheeRV Nano SDK, while leaving the inherited audio hardware implicit. Only later did the NanoKVM wiki entry gain explicit wording that the Cube retains display, touch, microphone, and amplifier circuits from the base module, and that newer firmware versions would remove the relevant drivers and future production runs would omit these components entirely.
Sipeed’s public responses combine these two aspects. On the one hand they point to the LicheeRV Nano documentation and the updated NanoKVM wiki as evidence that the microphone is not intended to be secret. On the other hand they argue that, from a threat model perspective, the presence of a board level microphone does not materially change risk once an attacker has obtained full control of the device, since they could already perform sensitive actions through the host system. For critics, the issue is less about the technical possibility of audio capture in a fully compromised scenario and more about expectation and trust: a network attached KVM marketed primarily on its remote control capabilities but not clearly calling out built in audio capture hardware is likely to be treated with more suspicion, especially when it comes from a vendor that has already needed several rounds of security fixes.
Reality Check – How Much of a Concern is this?
From a strict security engineering viewpoint, the onboard microphone in the NanoKVM Cube does not create a new, independent way into the device. An attacker still needs a working exploit, exposed service, or misconfiguration to gain sufficient access before any audio capture is possible. In that sense, the primary risk is still the usual set of issues that apply to any IP KVM: exposed management interfaces, weak credentials, unpatched firmware, or poor network segmentation. If those fundamentals are handled correctly, the probability that a remote attacker can turn the Cube into a listening device is significantly reduced, and using alternative firmware or a locked down software stack can further narrow the options.
The impact side of the equation is different. Once a NanoKVM Cube is compromised at a system level, the presence of a functional microphone increases the potential harm compared with a KVM that only relays keyboard, video, and mouse. A device that sits in a home office, lab, or equipment room and can capture ambient sound can turn a general compromise into a privacy incident that extends beyond the connected host system. For some users that incremental risk will be acceptable if the device is strictly isolated, regularly updated, and treated as an untrusted appliance at the edge of the network. For others, the residual possibility of room audio capture from a small, unattended box may be enough to justify either physical removal of the mic, replacement with a later hardware revision, or avoiding this particular model altogether.
Note. Here is the board view of the NanoKVM USB and NanaKVM Pro PCIe, with no microphone visible:
Asking Sipeed Questions about the NanoKVM Microphone Issue – How and Why This Occurred?
To clarify how the microphone ended up in a shipping KVM product and what Sipeed intends to do about it, I put a series of written questions to the company. The goal was not to reassess the technical findings already covered by independent research, but to obtain clear statements from the vendor on 4 points: how they view the documentation and disclosure around the microphone, which specific NanoKVM variants and hardware revisions include it, what mitigations they believe limit its security and privacy impact for existing deployments, and what concrete changes they are planning for future production runs. The questions and Sipeed’s responses are reproduced in full below. Thanks again to Caesar Wu for his time in answering my questions.
Why was there a microphone on the device, and how/why it’s absent from the documentation?
Which Version/Batch/Revisions of NanoKVM feature this Microphone?
The microphone is featured on the NanoKVM Lite and NanoKVM Cube versions. These are derivative products based on the LicheeRV-Nano (RISC-V SBC core module) and consequently inherited its Single Board Computer (SBC) peripherals, including the microphone, speaker, and MIPI touchscreen support.
Is this present on other versions of NanoKVM (i.e PCIe, Pro, USB, etc)?
No. Other products use custom-designed boards dedicated solely to the KVM scenario. They do not reuse the SBC module and therefore do not include non-KVM-essential components.
Why was this microphone not eliminated at the point of production?
The core part of NanoKVM-Cube/Lite is LicheeRV Nano. We reuse LicheeRV Nano as a standard “SOM” in many different products, like AI Camera MaixCAM: https://www.aliexpress.com/item/1005006912917562.html . And our toB customer also use it as a standard linux core board(Just like RPi CM4, CM5), they are very satisfied with the onboard microphone, speaker, and touch screen. As stated in my previous email, we maintain that logically, the retention of the microphone on the board does not introduce any negative impact on security. While the onboard components (microphone, speaker power amplifier (PA), and touchscreen connector) introduce a slight increase in Bill of Materials (BoM) cost, this decision significantly simplifies inventory management.
In fact, the base LicheeRV Nano product already comes in 4 configuration variants (Basic, Eth, WiFi, and Ethe+WiFi). If we were to further segment the inventory by adding options for the presence or absence of the microphone and touchscreen connector, the total number of SKUs would increase exponentially(the number of SKUs multiplies by two for every added configuration options). Therefore, based on a comprehensive consideration of security, cost efficiency, and inventory management complexity, we maintain the microphone, speaker PA, and touchscreen connector as the default base configuration.
What steps are being taken to ensure that this does not pose a Security/Privacy threat to user who have the nanoKVM in active deployment?
Users must understand the threat model: an attacker can only listen via the onboard mic if the NanoKVM itself has already been fully compromised. The paradox is that once compromised, the attacker already has sufficient privileges to perform high-level operations (include record audio via PC’s own mic). Therefore, the presence of the onboard mic does not increase the inherent security risk of the device. We emphasize that proper network risk awareness and isolation configuration by the user are essential, regardless of whether the device is a NanoKVM, JetKVM, GL.iNet KVM, or PiKVM.
What further steps have been made/planned at Production to avoid this occurring again in future hardware releases?
As stated in Question 4, we plan to remove the microphone in the next batch of the Lite/Cube models purely for psychological comfort and ease of mind for our users. We acknowledge this step will inevitably increase our inventory management complexity due to the need for separate SKUs and production processes. We are also implementing more rigorous hardware audits to ensure compliance with the Principle of Least Privilege in future designs.
Conclusion – Should NanoKVM Owners Be Worried?
For current NanoKVM Cube owners, the level of concern depends largely on how and where the device is deployed. In a well segmented environment where the KVM sits on an isolated management network, with updated firmware and strong access controls, the presence of a dormant microphone on the board is a secondary issue behind the more general risk of any remote management appliance. In small or less structured setups where the NanoKVM has direct exposure to the internet or shares a LAN with everyday client devices, both the historical software weaknesses and the possibility of audio capture in a successful compromise are more relevant factors in deciding whether to keep using the unit unchanged.
Looking ahead, Sipeed has stated that newer firmware removes the audio drivers and that future Lite and Cube batches will omit the microphone and related circuitry entirely, which addresses the concern for new buyers over time. For existing devices, users who are uncomfortable with any residual audio capability have practical options: physically removing or disabling the mic at board level, reflashing with a minimal or community maintained software stack, or replacing the hardware with a later revision or a different KVM platform. The key is to treat the NanoKVM Cube as a high impact management tool rather than a neutral accessory, and to decide whether its cost and feature set justify the additional precautions it requires in a given environment.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
New KVMs, Travel Routers and WiFi 7 Tech on the way from Gl.iNet Soon
Gl.iNet is preparing several new devices for late 2025 and early 2026 that expand its presence in mobile networking, remote access management, and high speed home routing. These include the Beryl 7 travel router, the Comet 5G RedCap KVM with an integrated WiFi access point, and the Flint 3e dual band WiFi 7 desktop router. Each system is positioned to address a specific operational requirement, ranging from portable VPN-enabled wireless access to remotely deployable KVM control and multi gigabit home connectivity. The updated lineup also includes the Brume 3 high speed VPN security gateway, which builds on the Brume 2 by adding faster encrypted throughput and broader support for open VPN standards such as AmneziaVPN. Collectively, these releases indicate that Gl.iNet is prioritising more capable processors, improved wireless performance, and tighter integration between VPN features and local network tools.
Beryl 7 Travel Router (GL-MT3600BE)
The Beryl 7 is positioned as an updated travel router that builds on the feature set of the original Beryl while shifting to a more capable Qualcomm quad core processor running at 1.1GHz and 256MB of DDR4 memory. It uses IEEE 802.11a, b, g, n, ac, ax and be wireless standards and supports dual band WiFi 7 operation on the 2.4GHz and 5GHz bands. Although it does not include 6GHz support, it delivers higher throughput than its predecessor, reaching 688Mbps on 2.4GHz and 2882Mbps on 5GHz. The unit also integrates two foldable external antennas and two 2.5GbE ports that can be configured as WAN plus LAN or as dual LAN for specific on-the-go deployment requirements.
The system maintains the travel-focused design of the original model by keeping compact dimensions, low power requirements and USB-C power delivery suitable for laptops, power banks and small chargers. The physical toggle switch remains, allowing quick selection between standard routing and VPN operation without navigating menus. VPN capability is supported by OpenVPN DCO, WireGuard and AmneziaVPN, enabling users to run a VPN server at home and connect to it through the Beryl 7 when travelling. As noted during the demonstration, the WiFi 7 implementation prioritises improved packet handling and multi-link operation rather than wide-band 6GHz performance, which keeps the device compatible in regions where 6GHz availability is limited or restricted.
The Beryl 7 aims to retain pricing similar to the original Beryl while scaling both its internal hardware and wireless capabilities. It uses a gigabit-class Ethernet configuration, supports sub-18W peak power draw and retains a form factor suited for hotel WiFi, temporary offices and public hotspot environments. The inclusion of 2.5GbE, higher throughput on both bands and broader VPN support allows it to operate as a compact edge router for users needing reliable encrypted access across multiple devices. Despite carrying a WiFi 7 label, it does not support the 6GHz band, mirroring the Slate 7, and instead focuses on maximising performance within the 2.4GHz and 5GHz ranges. Nevertheless, this is going to be a disappointment to users who were hoping to see ‘full fat’ WiFi 7 with that 3rd frequency in play, and really maximize MLO use.
Comet 5G KVM with Redcap 5G SIM/LTE Support (GL-RM10RC)
The Comet 5G is a RedCap-based KVM device that integrates remote management, HDMI capture and mobile connectivity into a single compact unit. It uses a quad core ARM Cortex-A53 processor, 1GB of DDR3 memory and 64GB of eMMC storage, matching the hardware profile of the existing Comet Pro. The device includes both HDMI in and HDMI out, allowing it to be used for remote console access, system monitoring and basic pass-through scenarios. A 2.22-inch touchscreen provides local visual feedback including IP address, active WiFi status and connection indicators. Wireless capability is delivered through 802.11a/n/ac/ax at 150Mbps on 2.4GHz and 286Mbps on 5GHz, supported by an external dual band WiFi 6 antenna rather than a WiFi 7 module.
A key addition to this model is the integrated 5G RedCap SIM slot. This allows the device to operate independently of the local network when deployed on-site, which is relevant for administrators or engineers who need to access remote systems without relying on customer-provided WiFi or Ethernet. The mobile connection also supports failover for situations where the primary network becomes unavailable, ensuring that remote KVM access remains possible. During the demonstration, it was highlighted that this improves usability for workloads such as multi-day monitoring or configuration tasks performed in locations where network restrictions or firewall rules prevent direct access.
The Comet 5G retains a familiar selection of ports including USB-C for power, USB-A for peripherals, a gigabit Ethernet port for direct LAN connection and a SIM slot for mobile data. The device is not PoE-powered, although an injector or adapter is expected to be offered as an accessory. This approach keeps the unit closer in design to a travel-friendly tool rather than a fixed enterprise appliance. It remains suited to users who already deploy compact KVM units as part of their field equipment and who require a method of accessing remote devices through either wired, wireless or cellular links.
The combination of 5G failover and HDMI-based remote access positions it as a small-scale management device for distributed environments, temporary field sites or systems that require out-of-band connectivity. Many users will make comparisons between this and the recently crowdfunded ‘Comet Pro’ device (very similar, but alongside a few small changes internally and adjustable antennae, also does not support a 5G SIM CARD/LTE), as well as the Comet PoE device recently released. This is largely the same, but tailored towards a different, decidedly more mobile deployment.
Flint 3e Dual Band WiFi 7 Router (GL-BE5600)
The Flint 3e is a dual band WiFi 7 router aimed at users who want higher wireless throughput and multi gigabit Ethernet connectivity without moving to a full tri band system. It is built around a Qualcomm quad core processor running at 1.5GHz with 1GB of DDR4 memory and 512MB of NAND storage. Wireless support covers IEEE 802.11a, b, g, n, ac, ax and be, delivering 688Mbps on 2.4GHz and 5764Mbps on 5GHz. The unit includes four external foldable antennas, a dual colour LED indicator and a housing designed for stable operation in home or small office environments. Connectivity is centred around five 2.5GbE ports, with one operating as a dedicated WAN input and the remainder configurable as LAN. This gives the router a faster wired backbone than earlier consumer models from the brand.
The router maintains a focus on local performance and low latency operation rather than offering the widest possible spectrum support. It does not include 6GHz capability, placing it closer to the Beryl 7 and Slate 7 in terms of band allocation. However, the higher 5GHz ceiling and improved channel management provide an upgrade path for users moving from WiFi 6 or earlier models who still want to take advantage of WiFi 7 features such as improved modulation and multi link operation. USB 3.0 support is included for storage or tethering tasks, and the system integrates the company’s familiar software stack with options for AdGuard Home, parental controls and fast VPN throughput, including WireGuard and OpenVPN DCO at speeds up to 680Mbps.
The Flint 3e is presented as a more accessible alternative to the full tri band Flint 3, offering similar processing power and Ethernet flexibility while reducing overall wireless complexity. Its design suits users who require multi gigabit wired networking for NAS systems, workstations or mesh uplinks, while maintaining predictable WiFi coverage within standard two band environments. Power consumption remains below 25W without USB load and below 37.2W with active USB devices. This allows the router to operate efficiently in homes with multiple connected devices, including smart home hubs, streaming systems and personal storage servers.
When comparing the Flint 3e with the currently available Flint 3, the key distinction lies in wireless scope and deployment scale. The Flint 3 includes an additional 6GHz band with a 5765Mbps ceiling, a larger 8GB eMMC module and the same five port 2.5GbE layout. This gives the Flint 3 wider spectrum availability, higher aggregate throughput and more headroom for larger properties or higher density environments. The Flint 3e, by contrast, focuses on delivering similar processor performance and identical wired networking while intentionally omitting the 6GHz band to reduce cost and complexity. The result is a model suited for medium sized homes or users who rely primarily on 5GHz and wired backhaul, while the Flint 3 is positioned for broader coverage, multi floor layouts and deployments with more simultaneous wireless clients.
When will the Comet 5G, Beryl 7 and Flint 3e Be Released and What Price?
Gl.iNet’s forthcoming device trio is designed to cover distinct deployment needs across travel, remote management and wired-performance routing. The Beryl 7 travel router brings dual-band WiFi 7, USB-C power, 2.5GbE wired ports and VPN switch functionality; it is estimated to launch at a price similar to the original Beryl AX model. The Comet 5G KVM device increases flexibility by adding 5G RedCap connectivity, HDMI I/O, gigabit Ethernet and WiFi 6, positioning it in terms of design and feature set somewhere between the Comet Pro and the Slate 7; pricing is yet to be confirmed. The Flint 3e desktop router offers dual-band WiFi 7 and five 2.5GbE ports while foregoing the 6GHz band, making it more affordable than the tri-band Flint 3; this pricing strategy targets users seeking strong wired and wireless performance without full spectrum coverage. All models are expected to be formally announced at CES 2026 and become available in Q1 2026.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.
If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHERE
The NanoKVM Pro from Sipeed represents the latest iteration in the company’s growing range of remote management devices, developed as a more capable successor to the original NanoKVM. Building on the lessons learned from its earlier RISC-V model, this version introduces a dual-core ARM architecture and significantly enhanced system resources. The design focus shifts toward higher-resolution capture, faster data handling, and improved remote-access functionality, all within a self-contained form factor that can sit on a desk or integrate into rack systems. Supported by an open-source PiKVM-based software environment, it provides the same level of control normally associated with enterprise IPMI solutions, including BIOS access, remote mounting of ISOs, and full keyboard-video-mouse interaction through a browser interface. Unlike many entry-level devices in its category, it supports 4K capture up to 30 fps, 1080p up to 60 fps, and HDMI loop-out for simultaneous local display. Optional features such as Wi-Fi 6, PoE input, and ATX power control expand its deployment flexibility across both professional and hobbyist environments. With 1 GB of LPDDR4X memory, 32 GB of onboard eMMC storage, and the ability to run either NanoKVM OS or full PiKVM firmware, the Pro model aims to balance affordability with advanced functionality suited to modern remote administration setups. But is it any good? Let’s find out if the NanoKVM Pro deserves your money and your data.
*UPDATE 9/12/25* The original NanoKVM (so, not the device in this video/article, but the first development version) features a small on board microphone that can be activated over SSH. This *looks* like it was a case of the brand reusing an existing board and it having the mic onboard (the LicheeRV Nano – which DID mention the microphone in it’s hardware specifications, but it is not detailed on the NanoKVM spec sheets at the time of discovery). I am currently going over the NanoKVM Pro device in this video for any further issues of hardware irregularities or issues discovered since this video was published (the device has been in action for 3 weeks more now), but even early checking has shown up negative/nothing. Bottom line, that device was not released finished, and early reviews of that device absolutely SLAMMED it for security issues (again, see Aparld’s vid linked in the description!) largely related to poor practices (plain text passwords, chinese DNS, etc), so no one should be deploying it on mission-critical clients anyway. Nevertheless, this sounds like (at best) a stupid mistake by the brand, and (at worst) poorly developed and badly baked hardware. I have reached out to the brand for more on this and will add here as/when it arrives. In the meantime, check out Jeff’s Level 2 channel for his video on this, which does a solid job of nailing the salient points! You can find the original investigation of the device HERE .
NanoKVM Pro KVM Review – Quick Conclusion
The NanoKVM Pro from Sipeed is a compact, Linux-based IP-KVM device that brings enterprise-grade remote management features into an affordable, open-source package designed for homelab enthusiasts, technicians, and small-scale administrators. Built around a dual-core ARM Cortex-A53 processor with 1 GB of LPDDR4X memory and 32 GB of onboard eMMC storage, it supports 4K capture at 30 fps, 1080p at 60 fps, and HDMI loop-through for simultaneous local display, while maintaining low latency and stable frame delivery over gigabit Ethernet or Wi-Fi 6. The device integrates ATX control for power and reset functionality, allowing full BIOS-level access and system reboots without physical interaction, and can be powered via USB-C, PoE, or motherboard header connection. A 1.47-inch touchscreen with rotary encoder provides local control and monitoring, supported by an intuitive browser-based interface that enables ISO mounting, firmware updates, and encrypted remote access through built-in Tailscale VPN integration. It runs either Sipeed’s NanoKVM firmware or a full PiKVM stack, both of which are open-source and compatible with community-developed extensions, including AI-assisted features that perform local OCR and screen automation. The aluminum body ensures passive cooling and silent operation, with power draw averaging 3 to 7 watts depending on load. While early firmware builds lacked full 4K45 and H.265 support, continued updates have addressed most of these gaps, and the open nature of the platform allows for further improvement. Its minor drawbacks—such as inconsistent cable bundles, a lightweight dial, and limited CPU overhead during heavy 4K sessions—are outweighed by its flexibility, performance, and independence from proprietary cloud control. Overall, the NanoKVM Pro stands out as one of the most capable and customizable IP-KVM solutions in its price range, offering real out-of-band management power in a device smaller than a deck of cards.
The NanoKVM Pro adopts a compact aluminum enclosure that measures 65 by 65 by 28 millimeters, emphasizing passive cooling and durability over aesthetic design. The casing doubles as a heat spreader, transferring thermal load from the PCB through its metal base and dissipating it through the chassis surface. This construction allows it to maintain stable temperatures around 50–55°C during typical use, even with extended operation or PoE power input. The metal build makes it suitable for permanent desktop placement or rack integration, and Sipeed provides 3D printable mounting templates for both single and triple-unit configurations. Despite its small footprint, the front panel includes a 1.47-inch 320×172 capacitive touch display and a rotary encoder that enables system navigation and control without needing to connect a keyboard or mouse. The LCD serves both as a configuration interface and as a secondary monitoring screen, capable of displaying live HDMI capture, resource utilization, or user-defined Python applications.
Storage performance represents a notable improvement over the earlier NanoKVM, which relied on a microSD card for its operating system. The Pro integrates 32 GB of eMMC storage rated at approximately 300 MB/s read speeds, providing faster ISO mounting and firmware updates, as well as the ability to host lightweight scripts or utilities locally. The onboard storage can be expanded through a microSD slot positioned beside the HDMI input, supporting additional media up to 512 GB. This expansion capability allows users to keep multiple boot images or installation media accessible directly through the web interface, making it useful for managing test systems or recovery environments. In practice, transferring a 1 GB ISO via a gigabit network takes about a minute, which is considerably faster than previous microSD-based units.
Externally, the NanoKVM Pro’s layout balances density and accessibility. All primary I/O connections, including HDMI input and output, dual USB-C ports for power and HID control, and a gigabit Ethernet port, are aligned along the rear edge to simplify cable routing in both rack and desktop configurations. The USB-C design allows for flexible power sourcing, supporting either direct 5V input, PoE via Ethernet, or ATX line integration through the bundled adapter board. This modularity is complemented by a detachable ATX control board that connects through a flat ribbon cable, enabling power, reset, and LED signal passthrough from a host motherboard. When connected correctly, this board allows remote hard resets and complete power cycling through the web interface, replicating the hardware-level management seen in dedicated IPMI modules.
On the front of the device, the rotary dial and touchscreen offer combined tactile and touch control options. Short presses, rotations, and swipes allow for full system interaction, while long presses bring up system menus and app selections. The screen can also operate as a secondary display via USB connection on Windows systems, acting as a miniature monitor that mirrors or supplements the primary display output. Through custom scripts, users can configure the display to show diagnostic data, resource graphs, or network metrics, further extending the device’s use beyond remote management.
Sipeed’s packaging reflects the device’s development-oriented nature. The kit typically includes two USB-C to USB-A cables, a short HDMI cable, and an ATX interface adapter with DIP cables, although early Kickstarter units reportedly shipped with incomplete cable sets. Documentation is provided through QR-linked web guides rather than printed manuals, directing users to detailed online setup instructions and firmware repositories. This approach aligns with Sipeed’s community-driven model, where updates, firmware images, and user scripts are hosted on GitHub for open access.
Finally, the overall footprint and passive cooling design allow the NanoKVM Pro to run silently, drawing between 3 to 5 watts depending on load, or up to 7 watts when AI functions or ambient lighting are enabled. While compact enough for portable or field use, it performs best when placed on conductive or ventilated surfaces, such as a metal case or rack shelf. The Pro model’s focus on internal storage, heat management, and flexible installation makes it notably more practical than most low-cost USB KVMs and positions it closer to a self-contained remote administration terminal.
NanoKVM Pro KVM Review – Ports and Connectivity
The NanoKVM Pro provides several configuration options for both local and remote access, reflecting its design for flexible integration across various network types. Wired connectivity is managed through a full gigabit Ethernet interface, which supports both data transfer and Power over Ethernet (PoE) in certain configurations. This upgrade from the previous model’s 100 Mbps port reduces latency and ensures smoother 4K capture and ISO mounting operations across a local area network.
For environments where wired access is unavailable, Sipeed also offers Wi-Fi 6 variants that include built-in wireless support, allowing users to connect through a temporary access point and configure the device from a phone or laptop. Initial setup is handled through DHCP, displaying the assigned IP address directly on the front LCD screen. From there, users can access the web interface by entering the device’s IP address in a browser such as Chrome, with HTTPS enabled by default through a self-signed certificate.
For secure remote administration, the NanoKVM Pro includes native support for Tailscale, enabling encrypted VPN-style access across different networks without manual port forwarding. Once linked to a Tailscale account, the unit automatically joins the same virtual LAN as other connected devices, simplifying access to systems behind firewalls or NAT routers. This makes it suitable for home users who need unattended access to remote PCs or small business administrators managing distributed systems.
The device also supports USB-NCM network connections for direct link setups, as well as traditional SSH sessions for users who prefer command-line management. Because the underlying operating system is based on Ubuntu, it can also host additional networking utilities such as ZeroTier or Cloudflare Tunnels, giving users a range of choices for secure remote links depending on their existing infrastructure.
The NanoKVM Pro also supports HDMI loop-through, allowing users to connect both the target computer and a local display simultaneously. The input captures up to 4K at 30 frames per second, while the output can pass through up to 4K at 60 frames per second, depending on the connected monitor and signal mode. This dual-mode setup enables simultaneous viewing and control without interrupting the host system’s display, which is particularly useful for remote diagnostics or shared monitoring environments. In practice, the captured video stream can be viewed in near real time, with local testing showing roughly three frames of latency difference on a gigabit network connection. Combined with audio capture and bidirectional USB-HID control, the NanoKVM Pro provides a complete interface for headless or offsite system management.
Feature
Specification
Ethernet
1 Gbps (with optional PoE power input)
Wi-Fi (optional)
Wi-Fi 6 (AP and client mode supported)
USB Ports
2 × USB-C (Power and HID control)
HDMI Input
Up to 4K at 30 fps, 2K at 95 fps
HDMI Output (Loop-Out)
Up to 4K at 60 fps
ATX Power Control Interface
9-pin header via KVM-B board (power/reset/LED)
Audio
Integrated digital audio capture
Additional Interfaces
2-channel serial terminal, MicroSD expansion
Network Protocols
DHCP, HTTPS, SSH, Tailscale, optional ZeroTier
Power Input Options
USB-C 5V/1A minimum, PoE, or ATX connector
NanoKVM Pro KVM Review – Internal Hardware
Internally, the NanoKVM Pro is based on the AX630C processor, a dual-core ARM Cortex-A53 SoC operating at 1.2 GHz. This represents a significant step up from the previous NanoKVM’s single-core RISC-V SG2002 processor, which struggled with multitasking and heavier video capture workloads. The new chip enables both 4K video input and real-time encoding in H.264 or H.265, as well as MJPEG for lower-latency streaming. It is paired with 1 GB of LPDDR4X memory and 32 GB of onboard eMMC storage, providing a notable improvement in performance and responsiveness when handling ISO uploads, live video feeds, or concurrent network sessions. In operation, CPU utilization typically sits around 25 to 35 percent during local access, rising to 50 to 60 percent when performing 4K capture or running AI-assisted functions.
Thermal management relies entirely on the metal enclosure acting as a passive heatsink. The system consumes roughly 3 to 4 watts at idle and up to 7 watts when AI processing or 4K capture is active. During extended use, surface temperatures can reach the mid-50 °C range, while internal readings may approach 70 °C under continuous workloads. Despite this, thermal throttling has not been observed in regular use, provided the device is placed on a conductive or ventilated surface. Users operating in warmer environments can improve dissipation by resting it on a metallic case or rack shelf, as the aluminum body is designed to transfer heat evenly across its underside. The device remains silent throughout, as no active fan is used.
Internally accessible interfaces add to its adaptability. Two USB-C ports handle power and human interface device connections, while a microSD slot offers external storage expansion or alternate firmware booting. A small 0.1 mm header provides access to two RS-232 serial ports, allowing direct console communication with servers, switches, or other serial-based equipment. This makes the NanoKVM Pro suitable not only for managing desktop systems but also for integrating with embedded or industrial hardware that lacks graphical interfaces.
Combined with the ATX breakout board for power management and the option to use the unit’s LCD as a miniature USB secondary display, these features extend its application well beyond that of a standard KVM switch.
Component
Specification
Main Processor
AX630C Dual-Core ARM Cortex-A53, 1.2 GHz
Memory
1 GB LPDDR4X
Internal Storage
32 GB eMMC (approx. 300 MB/s)
Expandable Storage
MicroSD slot (up to 512 GB)
Video Encoding
MJPEG, H.264, H.265
Audio
Integrated digital capture
Serial Interface
Dual RS-232 channels via header
ATX Control
External board with 9-pin header
Power Draw
3 W typical, up to 7 W under load
Cooling
Passive aluminum enclosure
Operating Temperature
Surface 45–55 °C, CPU up to ~70 °C
NanoKVM Pro KVM Review – Software and Services
The NanoKVM Pro runs on a customized Linux environment built around the open-source PiKVM framework, allowing users to operate within Sipeed’s own NanoKVM interface or switch to a full PiKVM installation through the system menu. The preinstalled NanoKVM environment provides a more streamlined interface tailored to less experienced users, offering web-based management with HTTPS, user authentication, and direct BIOS-level control of connected systems. It supports remote mounting of ISO images, firmware updates, and automated scripts, all handled through an integrated file manager accessible via browser. The software operates entirely locally by default, without mandatory cloud connections, which is a notable distinction compared with many modern remote-access appliances that rely on vendor relay servers.
Once configured, users can log in through a web browser using the device’s IP address, with the default credentials set to “admin” for both username and password. The interface prompts password change on first login and provides granular control over network settings, storage, user accounts, and ATX power functions. Most settings can be modified directly through the web GUI without command-line access, although advanced users can enable SSH for deeper configuration or script automation. Firmware updates are managed via the same interface, with an option to enable preview builds for early access to experimental features such as H.265 encoding or AI integrations. The NanoKVM Pro also includes support for WebSSH, allowing browser-based terminal access to the device itself or to the connected host.
One of the most distinctive aspects of the NanoKVM Pro is its front-panel software ecosystem. The 1.47-inch touchscreen runs its own UI layer with interactive menus, swipes, and rotary input for navigation. It displays real-time system metrics such as CPU load, IP address, and network status, and can also serve as a live HDMI preview display. Beyond these default utilities, users can install small Python-based applications that render custom data on the screen. Three example apps—“coin,” “conway,” and “hello”—are included to demonstrate this feature, and advanced users can upload their own code to the /userapp directory to display statistics, weather, or system messages. Through this approach, the NanoKVM Pro acts not just as a control interface but as a miniature programmable display for local or rack-mounted setups.
Remote management services are another major focus. Tailscale is preinstalled, providing quick setup for secure, encrypted remote sessions without the need for static IP addresses or manual port forwarding. For users preferring other approaches, the device’s Ubuntu base supports additional VPN tools such as ZeroTier, WireGuard, or Cloudflare Tunnels, which can be manually installed through apt. This flexibility ensures compatibility with existing enterprise or homelab networks. The system also includes Wake-on-LAN, remote reboot, and full ATX control options, allowing users to perform power cycling or forced shutdowns directly through the web interface. The integration of these features means the NanoKVM Pro functions as an accessible alternative to server-grade remote management tools, at a fraction of their cost and complexity.
Finally, Sipeed has begun introducing experimental AI-driven functions in its firmware. These include smart assistant options that use basic optical character recognition (OCR) and contextual automation to simplify KVM operations such as copying text from the remote screen or assisting with troubleshooting prompts. Although early and limited in scope, the AI feature demonstrates the company’s effort to integrate local intelligence without relying on external cloud processing. This is complemented by the open-source nature of the platform, where both NanoKVM and PiKVM firmware images are publicly available for inspection and customization. Users can adapt the system to their own needs, extending its functionality through community scripts or integrating it into larger automation frameworks for testing, monitoring, or remote maintenance tasks.
NanoKVM Pro KVM Review – Verdict and Conclusion
The NanoKVM Pro marks a substantial improvement over its predecessor, combining more capable ARM hardware with higher capture quality, local storage, and multiple remote-access options. It bridges the gap between budget IP-KVMs and more professional management tools, delivering features like ATX control, HDMI loop-out, Tailscale connectivity, and a programmable touchscreen interface within a single, compact unit. The open-source base allows users to adapt it for highly specific workflows, whether for homelab management, small business system maintenance, or integration into test benches and automation setups. In day-to-day operation, latency and video performance remain strong over gigabit connections, with the interface proving responsive and stable. While early firmware versions lacked some advertised features such as full 4K45 capture and H.265 encoding, updates have continued to expand the system’s capabilities over time.
As a whole, the NanoKVM Pro is best understood as an evolving platform rather than a fixed appliance. Its combination of hardware versatility and accessible software design positions it as one of the more flexible low-cost KVM options available, even if certain elements, such as the dial build quality and early AI features, feel unfinished. For users seeking an independent, locally managed solution for BIOS-level control and remote diagnostics without vendor lock-in, it represents one of the strongest value offerings in its class.
This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below
Need Advice on Data Storage from an Expert?
Finally, for free advice about your setup, just leave a message in the comments below here at NASCompares.com and we will get back to you.Need Help?
Where possible (and where appropriate) please provide as much information about your requirements, as then I can arrange the best answer and solution to your needs. Do not worry about your e-mail address being required, it will NOT be used in a mailing list and will NOT be used in any way other than to respond to your enquiry.
[contact-form-7]
TRY CHAT Terms and Conditions
If you like this service, please consider supporting us.
We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service checkHEREIf you need to fix or configure a NAS, check FiverHave you thought about helping others with your knowledge? Find Instructions Here
Or support us by using our affiliate links on Amazon UK and Amazon US
Alternatively, why not ask me on the ASK NASCompares forum, by clicking the button below. This is a community hub that serves as a place that I can answer your question, chew the fat, share new release information and even get corrections posted. I will always get around to answering ALL queries, but as a one-man operation, I cannot promise speed! So by sharing your query in the ASK NASCompares section below, you can get a better range of solutions and suggestions, alongside my own.