Sold by: OpenVPN Inc.
Deployed on AWS
AWS Free Tier
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, SAML single sign-on via AWS IAM Identity Center, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
After installation, get a free 2-connection key or start a trial from https://myaccount.openvpn.com/signup
4.4
Overview
If you want to purchase licenses directly from AWS, we recommend our PAYG listing instead: AWS Marketplace: OpenVPN Access Server / Self-Hosted VPN (PAYG)
Once you have launched from the AMI, sign up to retrieve your activation key for two free connections, or start a trial for higher capacity. The first time you open the Admin Web UI, a guided setup wizard walks you through initial configuration to get your VPN running quickly. Schedule a demo at Schedule a Demo with the OpenVPN Team
Access Server is a self-hosted business VPN and Zero Trust Network Access (ZTNA) software solution, developed and maintained by OpenVPN Inc., the company behind the open-source OpenVPN protocol. It delivers G2's #1-ranked VPN solution for secure, encrypted remote access to your business network and resources, with the controls needed to enforce least-privilege, zero-trust access policies.
On AWS, Access Server runs in your own environment on Amazon EC2, giving your remote, hybrid, and in-office workforce protected access to VPCs, private subnets, hybrid networks, and on-premises resources without surrendering control of your infrastructure to a third-party service.
Deployment Model:
- Self-hosted on Amazon EC2 within your AWS account and VPC, so data and configuration stay under your control.
- Deployed from a preconfigured AWS Marketplace image in minutes.
- Managed through an intuitive web-based Admin Web UI, with REST API, and command-line configuration options available for advanced administration.
- Supports remote-access and site-to-site VPN topologies.
Typical Use Cases on AWS:
- Provide secure remote access to applications and data hosted in your Amazon VPC
- Connect AWS environments with other clouds and on-premise networks.
- Protect SaaS and internal applications by making them reachable only through the VPN, reducing exposure to the public internet.
- Enforce zero-trust access policies based on identity, device, and location.
- Secure connectivity for devices, IoT, and machine-to-machine use cases.
Key Features:
Zero-Trust Access Controls
- Zero Trust Application Broker: Access Server verifies user identity, location, and device ID during connection and assigns, during domain lookup, a synthetic intermediate IP scoped to a single authorized app - the device never gets a route to the entire private network, so lateral movement isn't merely limited; it's structurally impossible.
- Define identity-based, role-driven access to specific applications, subnets, and private resources.
- Enforce device verification and location-aware post-authentication checks to reject connections from unauthorized endpoints.
- Use Access Control Lists to segment network access within your environment.
Flexible Authentication
- Supports local authentication and external authentication with PAM, RADIUS, LDAP, and SAML - including SAML single sign-on with AWS IAM Identity Center
- Includes built-in multi-factor authentication using TOTP.
- Allows to specify different authentication methods per user or group.
- Includes built-in X.509 PKI and support for external PKI.
High-Performance Connectivity
- Supports OpenVPN Data Channel Offload (DCO) to move encryption and decryption into the OS kernel for improved VPN data-plane performance and reduced processing overhead.
- Supports multi-threaded operation for demanding, high-throughput AWS workloads.
- Supports NAT mode for remote-access deployments and routing mode for site-to-site deployments.
- Supports routing by IP CIDR ranges and domain names for defining access policies for cloud-hosted, SaaS, and internal applications.
- Supports split-tunnel and full-tunnel configurations.
Availability and Scale
- Supports clustering across multiple Access Server nodes to increase capacity and improve availability.
- Supports DNS-based traffic distribution for directing users to available cluster nodes.
Broad Client Support
- OpenVPN Connect client is available for Windows, macOS, ChromeOS, iOS, and Android.
- Supports all OpenVPN protocol-compatible clients.
- Includes a Client Web UI for downloading connection profiles and client software.
- Supports connection profile distribution by URL to streamline user onboarding.
Highlights
- Self-hosted control, built by the protocol's creators: Deploy a self-hosted business VPN and ZTNA solution on EC2, developed by OpenVPN Inc., the team behind the open-source OpenVPN protocol. Your policies, configuration, and data stay entirely within your AWS account and VPC.
- Zero-trust remote access, site-to-site VPN & ZTNA: Move from a trusted-perimeter model to identity-based, least-privilege access to the resources that matter. Give users or groups access to specific private apps by domain name or hostname, without exposing entire networks or subnets. Allow-list approved SaaS, and route internet-bound traffic through a trusted gateway with a fixed egress IP. Enforce ACLs by destination IP, subnet, and domain with identity, device, and location controls.
- High-performance connectivity with broad client & auth support: Data Channel Offload (DCO) moves encryption into the OS kernel for near wire-speed throughput on demanding AWS workloads, and you can cluster multiple servers for high availability and load distribution as usage grows. OpenVPN client software is available for Windows, macOS, Linux, Android, iOS, and ChromeOS. Authenticate with local credentials and 2FA, plus Active Directory, PAM, LDAP, RADIUS, SAML, or a custom Python3 module.
Details
Sold by
Delivery method
Delivery option
Quick deploy with CloudFormation (single instance)
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Refunds allowed up to 60 days after purchase, if license has not been activated.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
For instructions on using the OpenVPN Access Server appliance on the AWS Marketplace, please visit the Quick Start Guide .
Resources
Vendor resources
Support
Vendor support
Visit the OpenVPN Support Center for access to technical support resources, troubleshooting guidance, and the option to submit a support ticket.
For AWS-specific setup and troubleshooting information, review the Access Server on AWS support documentation .
For answers to common AWS deployment, connectivity, configuration, licensing, and administration questions, review the Access Server on AWS FAQ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Customer reviews
Higher Education
Easy Server Setup and Strong Control Over Network Connectivity
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's easy to set up the server and manage various aspects of the network connectivity, like access to certain internal domains and forcing those over the vpn.
What do you dislike about the product?
Managing the licensing is a bit disjointed from the server management which I don't like
What problems is the product solving and how is that benefiting you?
Access to internal resources securely.
Construction
Suitable for SaaS Application Server Administrative Access on OCI
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's suitable for SaaS application server administrative access.
What do you dislike about the product?
SAML authentication is supported for user access, but isn't supported for administrative access of OpenVPN itself.
What problems is the product solving and how is that benefiting you?
Administrative access to Application servers running on Oracle Cloud Infrastructure, OCI Bastion function is not easy to use for application administrators.
Luis A.
Simple access management and stable VPN connectivity, at a good price
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I think what stands out the most is the ease of managing access to different servers, as the interface allows us to grant or restrict permissions to users in a very simple way.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
What do you dislike about the product?
I think the only thing that might bother me is the "temporary" access to the administration portal. Since we have the Systems teams in custody and maintain a fairly strict security control, we sometimes need to make quick changes to resolve incidents. However, what delays us a bit is the access itself, as we would prefer to have a "Remember device" option, so it doesn't ask for a password every time we close and reopen the page.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
What problems is the product solving and how is that benefiting you?
Connectivity security.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Primary/Secondary Education
Easy Setup, Stable Performance, and Flexible Internal Network Access
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It's easy to use and set up. It's very stable and consistent. You can set up access to both internal networks and force connections over the internal VPN endpoint where needed.
What do you dislike about the product?
The connection between the server itself and the licensing makes sense now but it's a little disjointed. It would be easier if it were easier to manage licensing overall.
What problems is the product solving and how is that benefiting you?
Access to internal resources securely without public facing access to those resources. Assigning permissions variably to people based on roles or groups.
Oz G.
Simple VPN Management with Powerful Controls—Despite Some Setup Delays
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I really like how simple OpenVPN Access Server is. The admin page is pretty simple, and I don’t need a master’s degree to understand how to use it. I can keep track of all the users in my system and check for suspicious activity, which is really helpful. I also find full tunneling for specific users, websites, or endpoints useful. It lets me whitelist the VPN IP and easily access customer or internal endpoints that don’t connect to the VPN. I can connect to different company VPCs through one tunnel. I use AWS and Google Workspace SSO so users can get their profiles directly, and that has really helped adoption across the team. After the initial installation, it’s a great product.
What do you dislike about the product?
I find that applying changes can be a bit delayed. Installing OpenVPN Access Server also has a little bit of complexity.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to connect to the different VPCs we have in the company through one tunnel.