UniFi Network 11: What’s New and Should You Upgrade?

UniFi Network 11 landed in October 2026, and Ubiquiti is pitching it as its biggest release so far. The headline claims are about 30% more device capacity, real-time traffic visibility, SLA-based SD-WAN routing, and Wi-Fi as a backup internet connection. It is also the first UniFi release that is aware of Matter smart home devices.

Some of it is genuinely useful, and some of it comes with strings attached. This guide covers both, starting with what to check before you upgrade.

01Before you upgrade: the breaking changes

Network 11 is not a routine point update. Several things change under the hood, and a few of them can catch you off guard.

• Your statistics history is wiped. The new telemetry engine starts fresh, and devices are re-provisioned after the update, which can cause a brief network interruption.
• The USG is no longer supported. Network 10.6 is the last version that runs on the legacy UniFi Security Gateway. If you still have one, stay on 10.6 and plan a replacement.
• The standalone Network Server is gone. Self-hosters need to move to UniFi OS Server, the official replacement (more on that below).
• Zone-Based Firewall is automatic. Sites still on the legacy firewall are migrated to the Zone-Based Firewall, so review your rules afterward.
• The database moved to PostgreSQL and the requirement is UniFi OS 6.0 or newer, with some features, including Matter, needing 6.0.10 or later.

02Live traffic flows and Time Machine

The Insights page now has a Live view next to History. It shows the connections passing through your gateway as they happen, with filters for source, destination, MAC address, and IP address. Click a flow and you can see the application, its category, which policy allowed it, and which WAN it used. You can also end a flow from there.

This is the feature that makes troubleshooting faster. Instead of guessing which firewall rule is blocking a device, you filter on that device, try the connection, and watch what happens.

The topology map also gains Time Machine, which lets you scrub back through the last 24 hours to see what joined or left the network and when. If something dropped off overnight, you can now see exactly when.

03WiFi WAN: your phone as backup internet

With WiFi WAN, your gateway can use a Wi-Fi network as an internet connection. It can be a primary link, but the obvious use is failover: your cable or fiber goes down, you turn on your phone’s hotspot, and the network stays up. That is a lot more appealing than buying a dedicated LTE or 5G backup device and a monthly data plan for an outage that happens once or twice a year.

The catch is that the gateway needs its own Wi-Fi radio, so only a few models can do it:

On a supported gateway, you add it under Settings → Internet as a new WAN connection using the WiFi Uplink option. Once it connects, it behaves like any other WAN and can take part in failover.

04Matter awareness

UniFi now understands Matter and Thread devices, with an emphasis on understands. It does not replace your Matter controller, whether that is Apple Home, Google Home, Home Assistant, or another hub. It works alongside it and gives you visibility: battery level, firmware, signal strength, and how each device connects to the Thread network. Thread devices appear in the topology, and Time Machine shows when one lost its connection.

Setup lives under Settings → Matter, where UniFi detects Thread border routers such as Apple TV, HomePod, and Google Nest hubs on the network. There are a few requirements to know about:

• UniFi OS 6.0.10 or newer on the gateway.
• mDNS enabled.
• IPv6 enabled on the network (VLAN) where the Thread border router lives. Many people leave IPv6 off on IoT networks, so this is the one most likely to trip you up.

05Network lists that update themselves

Network Lists are reusable groups of IPs, subnets, or domains that you can reference in firewall rules, routing policies, and VPN settings. Until now you had to maintain them by hand. In Network 11 a list can point to an external URL and refresh automatically every 24, 48, or 72 hours.

That opens the door to blocklists that maintain themselves, or routing policies for services like streaming platforms whose address ranges change often. One caution: very large lists can exceed what your gateway can handle, so import only what you need.

06SD-WAN and application-based routing

For multi-site environments, SD-WAN in Site Manager now supports performance-based routing. You define SLAs for your WAN connections and hubs, and UniFi steers traffic over the path that performs best. You can also set custom failover policies and send specific applications over specific paths. If you manage a single home or small office, you will not use this, but it matters for businesses with several locations.

07The smaller changes worth knowing

• Policy Engine is a normal menu. Firewall rules, port forwarding, and related settings are now regular menu items instead of a row of icons.
• Custom client icons. You can generate an icon from a photo. It is AI-generated, so expect a similar-looking icon rather than an exact copy, which is still handy for spotting devices in a long list.
• Bulk client actions. Select several clients and group, annotate, block, or remove them in one step.
• New client alerts in the Alarm Manager for new connections, and for clients connecting or disconnecting.
• More VLAN capacity on supported gateways.
• Channel plan by country, so you can see which Wi-Fi channels are allowed in your region.
• Subnet overlap detection in the system log.
• Packet capture per radio on access points.
• UPS battery self-tests on a schedule you choose.
• AI-explained threats for Cybersecure Enhanced subscribers, with plain-language explanations and recommendations for detected threats.

08Self-hosting: UniFi OS Server

If you run the Network application on your own hardware, this is the biggest practical change. Ubiquiti now treats the standalone Network Server as legacy and points self-hosters to UniFi OS Server, which gives you the same platform experience as a UniFi console, with features like Organizations, identity provider integration, and Site Manager.

Two things to plan for. It is a full platform rather than a single container, and on Linux it runs on Podman, so it is not a drop-in swap for a Docker or Kubernetes deployment of the old controller. And migration is a backup-and-restore: export a backup from the old controller, restore it into the new one, and if the controller’s IP address changed, point your devices at the new inform address. Existing Network 10 installations keep working, but new features land on the new platform.

09Should you upgrade?

For a home network or a lab, yes, once you have a backup. The live traffic view alone makes it worth it, and WiFi WAN is a real win if you own a supported gateway. For a business or a client network, hold off until you have confirmed you are on a stable release, you have reviewed the automatic Zone-Based Firewall migration, and you are comfortable losing your historical stats.

If you are unsure whether your gateway, your self-hosted controller, or your firewall rules are ready for the jump, that is exactly the kind of thing we plan before touching a network.