UniFi controller online means that the controller is publicly accessible via any browser. The reason for this is that UniFi use their API to send commands to and from the controller, therefore the controller must always be available. The best way to achieve this is UniFi cloud hosting, however an on premise server or cloud key exposed to a public url will work just as well.