Apache Guacamole is a clientless remote desktop gateway that lets users securely access RDP, VNC, SSH, telnet, and Kubernetes sessions directly from a web browser, with no plugins or client software required. This preconfigured AMI deploys Guacamole with PostgreSQL, an Nginx reverse proxy, automatic SSL, and S3 database backups, giving IT teams, MSPs, and DevOps engineers a centralized, self-hosted platform for secure browser-based remote access to servers and desktops.
Apache Guacamole is a clientless remote desktop gateway that gives users secure access to RDP, VNC, SSH, telnet, and Kubernetes sessions straight from a web browser, with no plugins or client software to install. This preconfigured Apache Guacamole AMI is built for IT teams, MSPs, DevOps engineers, and organizations that need centralized, browser-based remote access to servers and desktops. It launches on AWS in minutes, so you can skip manual installation and configuration.
Instant Deployment: Launch a fully configured Apache Guacamole gateway in minutes using a ready-to-use AMI and CloudFormation template, with no manual installation required.
Clientless Browser Access: Connect to remote desktops and servers from any modern HTML5 browser with no plugins, agents, or desktop clients needed on user devices.
Multi-Protocol Support: Access RDP, VNC, SSH, telnet, and Kubernetes sessions through one unified web interface.
Centralized Connection Management: Create and organize connections, users, groups, and permissions through the built-in web admin console.
Secure Gateway Architecture: Nginx reverse proxy with HTTPS, automatic Let's Encrypt SSL via Route53, and a hardened Ubuntu base image keep remote sessions protected.
Persistent Storage and Backups: PostgreSQL stores users, connections, and session history, and a built-in backup script uploads database dumps to your S3 bucket.
Self-Hosted Control: Keep full ownership of your remote access infrastructure, credentials, and connection data on your own instance.
Version: 1.6.0
Operating System: Ubuntu 26.04
Apache Guacamole is an open source remote desktop gateway for secure, centralized, browser-based access to your infrastructure. Give your team one place to reach Windows, Linux, and virtual desktops from anywhere. For detailed setup steps, see the installation guide: https://meetrix.io/blogs/guacamole-developer-guide/
Highlights
Instant Deployment: Launch a fully configured Apache Guacamole gateway in minutes with a ready-to-use AMI, PostgreSQL, Nginx reverse proxy, and automatic SSL, with no manual installation required.
Clientless Remote Access: Connect to RDP, VNC, SSH, telnet, and Kubernetes sessions from any HTML5 browser, with no plugins, agents, or desktop clients needed.
Centralized Self-Hosted Control: Manage connections, users, groups, and permissions from one web console while keeping all credentials and session data on your own instance.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for the EC2 instance type you choose to run this remote desktop gateway. The dimensions are not feature tiers; they are hardware sizes across several instance families, including burstable (t2, t3, t3a), general-purpose (m4, m5, m5a, m6a, m6i, m7a, m7i), compute-optimized (c5, c5a, c6a), and memory-optimized (r5, r5a, r6a, r6i). Each family comes in sizes such as small, medium, large, and xlarge. Larger sizes carry more CPU and memory. The software capability stays the same; your hourly cost scales with the instance you pick.
Top-of-mind questions for buyers
What hardware does one hourly unit map to, and which instance type is recommended to start?
Each hourly unit covers one running EC2 instance of the size you pick. The size sets the CPU and memory available to the gateway. The vendor recommends t3a.small as a baseline. Choose a larger size when many users connect at the same time, since each active session uses CPU and memory.
Am I still charged if I stop the gateway instance, for example overnight?
Hourly software charges apply only while the instance runs. Stopping the instance ends every open remote session and halts hourly accrual. You can restart it later when needed. Note that stopped instances may still incur underlying AWS storage fees for attached volumes.
Does the hourly price change when I add more users or remote connections?
No. Billing is tied to the running instance, not to user counts or the number of saved connections. Adding users or connections does not change your hourly rate. The only way cost changes is by choosing a different instance size or by stopping and starting the instance.
meetrix.io
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Apache Guacamole Deployment with Clientless Remote Desktop Gateway
This deployment launches Apache Guacamole on a single EC2 instance using a CloudFormation template. The stack creates the instance with an Elastic IP, a security group, and an IAM role that allows Route53 DNS validation for Let's Encrypt SSL and database backups to your S3 bucket. On the instance, the guacd protocol proxy and the Guacamole web application run in Docker alongside PostgreSQL, which stores users, connections, permissions, and session history. Nginx serves as the HTTPS reverse proxy and handles the WebSocket tunnel. After the stack completes, users open the application URL in a browser, log in as guacadmin with the admin password set during deployment, and add RDP, VNC, SSH, or telnet connections from the web admin console. This architecture provides secure, centralized, clientless remote access with simple management and backup workflows.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
First Release
Additional details
Usage instructions
Template components
CloudFormation template
Usage instructions
Click the "Continue to Subscribe" button.
After subscribing, you will need to accept the terms and conditions. Click on "Accept Terms" to proceed.
Please wait for a few minutes while the processing takes place. Once it's completed, click on "Continue to Configuration".
IAM Role is set up and configured with the necessary permissions to assume the role for the Apache Guacamole service. The IAM Policy is created and responsible for access Route53 and create Letsencrypt SSL certificates and backing up data to the S3 bucket.
Access the application via a browser at http://<your domain name> or http://<Public IPv4 address>.
Product will try to create SSL certificate when its deploying, if domain hosted on route53. If the automatic SSL creation unsuccessful then you have to point domain name into server ip, ssh into server and run /root/certificate_generate_standalone.sh. Admin email using for SSL generation.
Please contact us through aws@meetrix.io. Please allow up to 12 hours for our support team to address your request.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Ubuntu 22 Remote Desktop with high-end NICE DCV Remote 3D experience - includes NVIDIA GPU 3D performance drivers and CUDA Toolkit. Llama.cpp inference and NVIDIA Docker support.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.