Sold by: OpenVPN Inc.
Deployed on AWS
AWS Free Tier
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
4.5
Overview
This listing supports up to 10 concurrent VPN connections. For scaling flexibility, we recommend our AWS Marketplace: OpenVPN Access Server / Self-Hosted VPN (PAYG) listing instead.
Access Server is a self-hosted business VPN and Zero Trust Network Access (ZTNA) software solution, developed and maintained by OpenVPN Inc., the company behind the open-source OpenVPN protocol. It delivers secure, encrypted remote access to your business network and resources, with the controls needed to enforce least-privilege, zero-trust access policies.
On AWS, Access Server runs in your own environment on Amazon EC2, giving your remote, hybrid, and in-office workforce protected access to VPCs, private subnets, hybrid networks, and on-premises resources without surrendering control of your infrastructure to a third-party service.
Deployment Model:
- Self-hosted on Amazon EC2 within your AWS account and VPC, so data and configuration stay under your control.
- Deployed from a preconfigured AWS Marketplace image in minutes.
- Managed through an intuitive web-based Admin Web UI, with REST API, and command-line configuration options available for advanced administration.
- Supports remote-access and site-to-site VPN topologies.
Typical Use Cases on AWS:
- Provide secure remote access to applications and data hosted in your Amazon VPC
- Connect AWS environments with other clouds and on-premise networks.
- Protect SaaS and internal applications by making them reachable only through the VPN, reducing exposure to the public internet.
- Enforce zero-trust access policies based on identity, device, and location.
- Secure connectivity for devices, IoT, and machine-to-machine use cases.
Key Features:
Zero-Trust Access Controls
- Define identity-based, role-driven access to specific applications, subnets, and private resources.
- Enforce device verification and location-aware post-authentication checks to reject connections from unauthorized endpoints.
- Use Access Control Lists to segment network access and limit lateral movement across your environment.
Flexible Authentication
- Supports local authentication and external authentication with PAM, RADIUS, LDAP, and SAML
- Includes built-in multi-factor authentication using TOTP.
- Allows multiple authentication methods to be active simultaneously per user or user group.
- Includes built-in X.509 PKI and support for external PKI.
High-Performance Connectivity
- Supports OpenVPN Data Channel Offload (DCO) to move encryption and decryption into the OS kernel for improved VPN data-plane performance and reduced processing overhead.
- Supports multi-threaded operation for demanding, high-throughput AWS workloads.
- Supports NAT mode for remote-access deployments and routing mode for site-to-site deployments.
- Supports routing by IP CIDR ranges and domain names for defining access policies for cloud-hosted, SaaS, and internal applications.
- Supports split-tunnel and full-tunnel configurations.
Availability and Scale
- Supports clustering across multiple Access Server nodes to increase capacity and improve availability.
- Supports DNS-based traffic distribution for directing users to available cluster nodes.
Broad Client Support
- OpenVPN Connect client is available for Windows, macOS, ChromeOS, iOS, and Android.
- Supports all OpenVPN protocol-compatible clients.
- Includes a Client Web UI for downloading connection profiles and client software.
- Supports connection profile distribution by URL to streamline user onboarding.
Highlights
- Self-hosted control, built by the protocol's creators: Deploy a self-hosted business VPN and ZTNA solution on EC2 in minutes, developed by OpenVPN Inc., the team behind the open-source OpenVPN protocol. Your access policies, configuration, and data stay entirely within your AWS account and VPC.
- Zero-trust access to your AWS resources: Enforce least-privilege access with ACLs to destination IP subnets and domain names. Use identity, device, and location controls. Authenticate with SAML, LDAP, RADIUS, PAM, or local accounts, with built-in MFA and route traffic by domain name for application-aware control.
- High-performance, scalable connectivity: Data Channel Offload (DCO) moves encryption into the OS kernel for near wire-speed throughput on demanding AWS workloads. Cluster multiple servers for high availability and load distribution as your usage grows.
Details
Sold by
Delivery method
Delivery option
Quick deploy with CloudFormation (single instance)
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.123 |
t2.micro | $0.123 |
t3.micro | $0.123 |
m5ad.large | $0.123 |
r5b.metal | $0.123 |
i4i.16xlarge | $0.123 |
t3a.micro | $0.123 |
r5n.8xlarge | $0.123 |
c4.2xlarge | $0.123 |
r5n.large | $0.123 |
Dimensions summary
This listing bills hourly based on the AWS EC2 instance type you run Access Server on. Each dimension names a specific instance size, and you pay the software rate for the hours that instance runs. Larger or more capable instances carry different hourly rates, so your cost scales with the instance you choose rather than a fixed plan. The product supports up to 10 connected devices. You add as many devices and users as you like, but only 10 can connect at the same time. Pricing does not change based on data speed or performance.
Top-of-mind questions for buyers
A connection is one active device joined to the server at a time. You can register as many devices and users as you want. Only 10 can be connected simultaneously. An eleventh device must wait until one of the active 10 disconnects.
The software rate meters running instance-hours only. A fully stopped instance stops accruing the hourly software charge. Underlying AWS storage fees may still apply while the instance is stopped, but the Access Server rate bills active running time.
No. The 10-connection limit stays the same across all instance types. Data speed and performance do not change based on the billing. The instance type only changes the hourly software rate you pay, not your connection capacity.
openvpn.net+1
Helpful?
Vendor refund policy
Refunds are not provided, but you can cancel at any time.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
For instructions on using the OpenVPN Access Server appliance on the AWS Marketplace, please visit the Quick Start Guide .
Resources
Vendor resources
Support
Vendor support
Visit the OpenVPN Support Center for access to technical support resources, troubleshooting guidance, and the option to submit a support ticket.
For AWS-specific setup and troubleshooting information, review the Access Server on AWS support documentation .
For answers to common AWS deployment, connectivity, configuration, licensing, and administration questions, review the Access Server on AWS FAQ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By AppGate
Top
10
In Device Connectivity, Network Infrastructure
Top
100
In Network Infrastructure, Security
Top
10
In Continuous Integration and Continuous Delivery, Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Zero-Trust Network Access Control
Identity-based, role-driven access policies with device verification, location-aware post-authentication checks, and Access Control Lists for network segmentation and lateral movement prevention.
Multi-Factor Authentication and Flexible Authentication
Support for multiple authentication methods including SAML, LDAP, RADIUS, PAM, local accounts, built-in TOTP-based multi-factor authentication, and X.509 PKI with external PKI support.
Kernel-Accelerated Data Encryption
Data Channel Offload (DCO) technology that moves encryption and decryption operations into the OS kernel for improved throughput and reduced CPU processing overhead.
Application-Aware Traffic Routing
Domain name-based and IP CIDR-based routing policies for granular access control to cloud-hosted, SaaS, and internal applications with support for split-tunnel and full-tunnel configurations.
High Availability and Scalability
Multi-node clustering across multiple Access Server instances with DNS-based traffic distribution for load balancing and increased capacity.
Firewall and Packet Inspection
Stateful packet inspection with GeoIP blocking, anti-spoofing, captive portal, time-based rules, and connection limits
VPN Protocols and Connectivity
Support for IPsec, OpenVPN, and WireGuard protocols with site-to-site and remote access VPN capabilities, high-availability tunnels, and authentication integration
Intrusion Detection and Prevention
IDS/IPS functionality with deep packet inspection, application detection and blocking, and threat intelligence feeds
Routing and Traffic Management
Policy-based routing with IPv4/IPv6 support, static routing, load balancing, reverse proxy, and high availability for TCP, HTTP, and HTTPS applications
Centralized Management Platform
Multi-instance visibility and policy control across distributed AWS environments through Netgate Nexus with unified policy management and scalable administration
Zero Trust Network Access Architecture
Cloud-native, unified, API-enabled solution implementing zero trust network access principles with one-to-one encrypted network segments for each user to explicitly granted resource locations
Encrypted Network Segmentation
Individual encrypted network tunnels provisioned per user for each authorized resource location, isolating user access paths
Multi-Environment Access Support
Concurrent automated access across multiple disparate environments including multi-cloud, on-premises, and legacy applications without manual approval workflows
Cross-Platform Device Support
Secure access capability from managed and unmanaged devices across all makes and models
Multi-Tunnel Connectivity
Simultaneous secure tunnel connections enabling consistent access for remote and on-premises users across diverse workload types and locations
Standard contract
No
No
No
Customer reviews
Higher Education
Easy Server Setup and Strong Control Over Network Connectivity
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's easy to set up the server and manage various aspects of the network connectivity, like access to certain internal domains and forcing those over the vpn.
What do you dislike about the product?
Managing the licensing is a bit disjointed from the server management which I don't like
What problems is the product solving and how is that benefiting you?
Access to internal resources securely.
Construction
Suitable for SaaS Application Server Administrative Access on OCI
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's suitable for SaaS application server administrative access.
What do you dislike about the product?
SAML authentication is supported for user access, but isn't supported for administrative access of OpenVPN itself.
What problems is the product solving and how is that benefiting you?
Administrative access to Application servers running on Oracle Cloud Infrastructure, OCI Bastion function is not easy to use for application administrators.
Luis A.
Simple access management and stable VPN connectivity, at a good price
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I think what stands out the most is the ease of managing access to different servers, as the interface allows us to grant or restrict permissions to users in a very simple way.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
What do you dislike about the product?
I think the only thing that might bother me is the "temporary" access to the administration portal. Since we have the Systems teams in custody and maintain a fairly strict security control, we sometimes need to make quick changes to resolve incidents. However, what delays us a bit is the access itself, as we would prefer to have a "Remember device" option, so it doesn't ask for a password every time we close and reopen the page.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
What problems is the product solving and how is that benefiting you?
Connectivity security.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Primary/Secondary Education
Easy Setup, Stable Performance, and Flexible Internal Network Access
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It's easy to use and set up. It's very stable and consistent. You can set up access to both internal networks and force connections over the internal VPN endpoint where needed.
What do you dislike about the product?
The connection between the server itself and the licensing makes sense now but it's a little disjointed. It would be easier if it were easier to manage licensing overall.
What problems is the product solving and how is that benefiting you?
Access to internal resources securely without public facing access to those resources. Assigning permissions variably to people based on roles or groups.
Oz G.
Simple VPN Management with Powerful Controls—Despite Some Setup Delays
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I really like how simple OpenVPN Access Server is. The admin page is pretty simple, and I don’t need a master’s degree to understand how to use it. I can keep track of all the users in my system and check for suspicious activity, which is really helpful. I also find full tunneling for specific users, websites, or endpoints useful. It lets me whitelist the VPN IP and easily access customer or internal endpoints that don’t connect to the VPN. I can connect to different company VPCs through one tunnel. I use AWS and Google Workspace SSO so users can get their profiles directly, and that has really helped adoption across the team. After the initial installation, it’s a great product.
What do you dislike about the product?
I find that applying changes can be a bit delayed. Installing OpenVPN Access Server also has a little bit of complexity.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to connect to the different VPCs we have in the company through one tunnel.