Sold by: OpenVPN Inc.
Deployed on AWS
AWS Free Tier
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
4.5
Overview
This listing supports up to 250 concurrent VPN connections. For scaling flexibility, we recommend our AWS Marketplace: OpenVPN Access Server / Self-Hosted VPN (PAYG) listing instead.
Access Server is a self-hosted business VPN and Zero Trust Network Access (ZTNA) software solution, developed and maintained by OpenVPN Inc., the company behind the open-source OpenVPN protocol. It delivers secure, encrypted remote access to your business network and resources, with the controls needed to enforce least-privilege, zero-trust access policies.
On AWS, Access Server runs in your own environment on Amazon EC2, giving your remote, hybrid, and in-office workforce protected access to VPCs, private subnets, hybrid networks, and on-premises resources without surrendering control of your infrastructure to a third-party service.
Deployment Model:
- Self-hosted on Amazon EC2 within your AWS account and VPC, so data and configuration stay under your control.
- Deployed from a preconfigured AWS Marketplace image in minutes.
- Managed through an intuitive web-based Admin Web UI, with REST API, and command-line configuration options available for advanced administration.
- Supports remote-access and site-to-site VPN topologies.
Typical Use Cases on AWS:
- Provide secure remote access to applications and data hosted in your Amazon VPC
- Connect AWS environments with other clouds and on-premise networks.
- Protect SaaS and internal applications by making them reachable only through the VPN, reducing exposure to the public internet.
- Enforce zero-trust access policies based on identity, device, and location.
- Secure connectivity for devices, IoT, and machine-to-machine use cases.
Key Features:
Zero-Trust Access Controls
- Define identity-based, role-driven access to specific applications, subnets, and private resources.
- Enforce device verification and location-aware post-authentication checks to reject connections from unauthorized endpoints.
- Use Access Control Lists to segment network access and limit lateral movement across your environment.
Flexible Authentication
- Supports local authentication and external authentication with PAM, RADIUS, LDAP, and SAML
- Includes built-in multi-factor authentication using TOTP.
- Allows multiple authentication methods to be active simultaneously per user or user group.
- Includes built-in X.509 PKI and support for external PKI.
High-Performance Connectivity
- Supports OpenVPN Data Channel Offload (DCO) to move encryption and decryption into the OS kernel for improved VPN data-plane performance and reduced processing overhead.
- Supports multi-threaded operation for demanding, high-throughput AWS workloads.
- Supports NAT mode for remote-access deployments and routing mode for site-to-site deployments.
- Supports routing by IP CIDR ranges and domain names for defining access policies for cloud-hosted, SaaS, and internal applications.
- Supports split-tunnel and full-tunnel configurations.
Availability and Scale
- Supports clustering across multiple Access Server nodes to increase capacity and improve availability.
- Supports DNS-based traffic distribution for directing users to available cluster nodes.
Broad Client Support
- OpenVPN Connect client is available for Windows, macOS, ChromeOS, iOS, and Android.
- Supports all OpenVPN protocol-compatible clients.
- Includes a Client Web UI for downloading connection profiles and client software.
- Supports connection profile distribution by URL to streamline user onboarding.
Highlights
- Self-hosted control, built by the protocol's creators: Deploy a self-hosted business VPN and ZTNA solution on EC2 in minutes, developed by OpenVPN Inc., the team behind the open-source OpenVPN protocol. Your access policies, configuration, and data stay entirely within your AWS account and VPC.
- Zero-trust access to your AWS resources: Enforce least-privilege access with ACLs to destination IP subnets and domain names. Use identity, device, and location controls. Authenticate with SAML, LDAP, RADIUS, PAM, or local accounts, with built-in MFA and route traffic by domain name for application-aware control.
- High-performance, scalable connectivity: Data Channel Offload (DCO) moves encryption into the OS kernel for near wire-speed throughput on demanding AWS workloads. Cluster multiple servers for high availability and load distribution as your usage grows.
Details
Sold by
Delivery method
Delivery option
Quick deploy with CloudFormation (single instance)
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
c5.2xlarge Recommended | $2.363 |
t3.micro | $2.363 |
t2.micro | $2.363 |
c6id.metal | $2.363 |
i4i.4xlarge | $2.363 |
r6idn.16xlarge | $2.363 |
c6a.48xlarge | $2.363 |
m6i.2xlarge | $2.363 |
x2iedn.2xlarge | $2.363 |
c5a.16xlarge | $2.363 |
Dimensions summary
You pay by the hour based on the AWS EC2 instance size you run this software on. Every listed dimension is an instance type, from small shared instances up to large bare-metal and memory-optimized machines. The software itself supports up to 250 connected devices, meaning devices actively connected at the same time. Your hourly rate rises with the compute, memory, and storage capacity of the instance you choose. There are no separate feature tiers here. All instances deliver the same functions; you select one based on your capacity and performance needs.
Top-of-mind questions for buyers
A connected device is any device actively connected to the server at the same time. You can add unlimited users and devices, but only 250 can be connected simultaneously. Licenses count active connections, not total registered users or devices.
Software charges apply per hour while the instance runs. A fully stopped instance does not accrue hourly software charges. Stopped instances may still incur separate AWS storage fees for attached volumes, which are billed by AWS independently of this software.
Yes. Your hourly bill combines two parts: the software charge for this listing and the underlying AWS EC2 compute charge. Both meter running time. Larger instances raise the compute portion. You select the instance type based on your capacity and performance needs.
openvpn.net+1
Helpful?
Vendor refund policy
Refunds are not provided, but you can cancel at any time.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
For instructions on using the OpenVPN Access Server appliance on the AWS Marketplace, please visit the Quick Start Guide .
Resources
Vendor resources
Support
Vendor support
Visit the OpenVPN Support Center for access to technical support resources, troubleshooting guidance, and the option to submit a support ticket.
For AWS-specific setup and troubleshooting information, review the Access Server on AWS support documentation .
For answers to common AWS deployment, connectivity, configuration, licensing, and administration questions, review the Access Server on AWS FAQ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Customer reviews
Higher Education
Easy Server Setup and Strong Control Over Network Connectivity
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's easy to set up the server and manage various aspects of the network connectivity, like access to certain internal domains and forcing those over the vpn.
What do you dislike about the product?
Managing the licensing is a bit disjointed from the server management which I don't like
What problems is the product solving and how is that benefiting you?
Access to internal resources securely.
Construction
Suitable for SaaS Application Server Administrative Access on OCI
Reviewed on Nov 04, 2026
Review provided by G2
What do you like best about the product?
It's suitable for SaaS application server administrative access.
What do you dislike about the product?
SAML authentication is supported for user access, but isn't supported for administrative access of OpenVPN itself.
What problems is the product solving and how is that benefiting you?
Administrative access to Application servers running on Oracle Cloud Infrastructure, OCI Bastion function is not easy to use for application administrators.
Luis A.
Simple access management and stable VPN connectivity, at a good price
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
I think what stands out the most is the ease of managing access to different servers, as the interface allows us to grant or restrict permissions to users in a very simple way.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
Moreover, compared to other VPNs we have worked with, this one has offered us much more stable connectivity without impacting the performance of the user's equipment. This has also helped us alleviate the workload on their devices.
The price also seems like a better offer to us, and we can adjust it to our needs. Since we have a constant flow of users, both new and outgoing, we can manage the VPN's operating costs as needed.
What do you dislike about the product?
I think the only thing that might bother me is the "temporary" access to the administration portal. Since we have the Systems teams in custody and maintain a fairly strict security control, we sometimes need to make quick changes to resolve incidents. However, what delays us a bit is the access itself, as we would prefer to have a "Remember device" option, so it doesn't ask for a password every time we close and reopen the page.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
Additionally, the downtime also bothers us a bit. Sometimes connectivity tests are carried out, and some parameters need to be modified, which take time to verify; therefore, being disconnected after a while can be quite annoying.
What problems is the product solving and how is that benefiting you?
Connectivity security.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Previously, servers were accessed via SSH through the public IP, which posed a significant security breach. Thanks to this VPN, we were able to segment access and configure firewall rules so that each person could connect via SSH or RDP to the servers following only a private network segment, instead of keeping those services open globally.
Permission segmentation.
This has allowed us to have several users from different areas and still grant only the permissions they need, instead of opening access to the entire network. Before, with another licensing, having a VPN meant the networks were completely open to anyone with VPN access; today, having the VPN no longer means having global permissions.
Primary/Secondary Education
Easy Setup, Stable Performance, and Flexible Internal Network Access
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It's easy to use and set up. It's very stable and consistent. You can set up access to both internal networks and force connections over the internal VPN endpoint where needed.
What do you dislike about the product?
The connection between the server itself and the licensing makes sense now but it's a little disjointed. It would be easier if it were easier to manage licensing overall.
What problems is the product solving and how is that benefiting you?
Access to internal resources securely without public facing access to those resources. Assigning permissions variably to people based on roles or groups.
Oz G.
Simple VPN Management with Powerful Controls—Despite Some Setup Delays
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I really like how simple OpenVPN Access Server is. The admin page is pretty simple, and I don’t need a master’s degree to understand how to use it. I can keep track of all the users in my system and check for suspicious activity, which is really helpful. I also find full tunneling for specific users, websites, or endpoints useful. It lets me whitelist the VPN IP and easily access customer or internal endpoints that don’t connect to the VPN. I can connect to different company VPCs through one tunnel. I use AWS and Google Workspace SSO so users can get their profiles directly, and that has really helped adoption across the team. After the initial installation, it’s a great product.
What do you dislike about the product?
I find that applying changes can be a bit delayed. Installing OpenVPN Access Server also has a little bit of complexity.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to connect to the different VPCs we have in the company through one tunnel.