Sold by: Solve DevOps
Deployed on AWS
AWS Free Tier
This is a repackaged open-source software product with additional charges for production tuning, security hardening, AWS service integration, and vendor support by Solve DevOps.
Overview
A production-tuned, CIS-hardened HAProxy load balancer and reverse proxy image built for teams who want HAProxy running correctly on AWS in minutes, with logging and monitoring already configured to native AWS services.
What You Get Beyond Open-Source HAProxy
- Production tuning - System and root file-descriptor limits raised to 65,535 so HAProxy can sustain high connection counts out of the box
- Pre-configured logging - rsyslog routes HAProxy's local2 facility to a dedicated /var/log/haproxy.log
- Amazon CloudWatch integration - CloudWatch Agent pre-configured to ship HAProxy, syslog, and auth logs to CloudWatch Logs (per-instance streams, 30-day retention) and publish CPU, memory, disk, and TCP connection-state metrics under the SolveDevOps/HAProxy namespace
- AWS Systems Manager integration - SSM Agent installed and enabled for Session Manager shell access without opening SSH, plus Patch Manager and Run Command for fleet operations
- CIS benchmark hardening - OS hardened to CIS benchmarks with password SSH disabled, root remote login disabled, X11 forwarding off, no baked-in keys, passwords, or shell history
- Operational quick-start - Login banner with config path, log location, and monitoring instructions
Key Use Cases
- API Load Balancing - Distribute incoming API requests across multiple EC2 instances. With file-descriptor limits raised to 65,535, handle high-concurrency workloads such as an e-commerce platform routing thousands of checkout API calls per minute across backend instances during peak traffic
- Microservices Traffic Management - Balance requests among microservices with low latency and high availability, ideal for cloud-native applications running on Auto Scaling groups
- Web Application Scalability - Distribute web traffic across servers to keep applications responsive during traffic spikes, with real-time visibility through CloudWatch metrics
AWS Service Integrations
- Amazon CloudWatch - Logs and custom metrics ship automatically when an IAM role is attached
- AWS Systems Manager - Session Manager access, Patch Manager, and Run Command for fleet management
- Amazon EC2 Auto Scaling - Metrics tagged with Auto Scaling group for dynamic scaling visibility
- IAM - No credentials stored on the image; attach CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore policies to activate
Requirements and Setup
- Operating System: Ubuntu
- IAM Role Required: Attach an instance role with CloudWatchAgentServerPolicy and AmazonSSMManagedInstanceCore to activate CloudWatch and SSM
- Configuration Path: /etc/haproxy/haproxy.cfg
- CloudWatch Config: /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/haproxy.json (editable to add log files or metrics)
- Security: No AWS credentials stored on the image; build-time credentials and cloud-init state scrubbed
Security Hardening Details
This AMI is built with security as a priority for production load balancer deployments:
- CIS benchmark hardening applied to the OS
- SSH key-only authentication (password auth disabled)
- Root remote login disabled
- X11 forwarding disabled
- No baked-in keys, passwords, or shell history
- Build-time credentials and cloud-init state scrubbed
Get Started
Deploy this AMI, attach the required IAM role, and configure your backends in /etc/haproxy/haproxy.cfg. For a detailed walkthrough of HAProxy configuration and best practices on AWS, visit the Solve DevOps getting-started guide. Contact Solve DevOps for a guided setup consultation or architecture review for your specific use case.
Highlights
- Production-tuned HAProxy server with file-descriptor limits raised to 65,535 for high connection counts, CIS benchmark OS hardening, SSH key-only authentication, root remote login disabled, X11 forwarding off, and no baked-in credentials. Built on Ubuntu with a dedicated /var/log/haproxy.log via rsyslog for clean log separation and operational quick-start banner showing config paths.
- Observability built in: CloudWatch Agent pre-configured to ship HAProxy, syslog, and auth logs to CloudWatch Logs (30-day retention) and publish CPU, memory, disk, and TCP connection-state metrics under the SolveDevOps/HAProxy namespace tagged with instance ID, instance type, and Auto Scaling group. Attach an IAM role with CloudWatchAgentServerPolicy and monitoring activates automatically with no manual agent setup required.
- AWS Systems Manager Agent enabled for Session Manager shell access without opening SSH ports, plus Patch Manager and Run Command for fleet operations. Includes Solve DevOps vendor email support for the image and its configuration. No AWS credentials stored on the image - attach AmazonSSMManagedInstanceCore IAM policy to activate. Configuration editable at /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.d/haproxy.json.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.small Recommended | $0.027 |
t3.micro | $0.027 |
t2.micro | $0.027 |
r6i.metal | $0.027 |
r6idn.large | $0.027 |
r5.metal | $0.027 |
r6idn.8xlarge | $0.027 |
t3a.small | $0.027 |
r5dn.large | $0.027 |
r5d.metal | $0.027 |
Vendor refund policy
Cancel Anytime
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updates to the latest Security Patches for HAProxy and Ubuntu 26.04
Additional details
Usage instructions
Getting Started:
- Provision a VM with a suitable capacity for your needs.
- Access EC2 instance over SSH username: ubuntu password: EC2instance ID More advanced use cases can be found here: https://solvedevops.com/blog/getting-started-with-haproxy-server-in-the-cloud/
Support and Suggestions: support@solvedevops.com
Resources
Vendor resources
Support
Vendor support
Solve DevOps Vendor Support
Solve DevOps provides email support for this AMI image and its configuration.
Support Channel: support@solvedevops.com
Scope of Support:
- Assistance with the pre-configured image and its included components (HAProxy, CloudWatch Agent, SSM Agent, rsyslog configuration)
- Guidance on activating CloudWatch logging and metrics via IAM role attachment
- Help with Systems Manager integration and Session Manager access
- Troubleshooting issues related to the AMI's production tuning and security hardening
How to Get Help: Email support@solvedevops.com with your instance ID, a description of the issue, and any relevant log output from /var/log/haproxy.log or CloudWatch Logs. For configuration questions, reference the operational quick-start banner displayed at login or consult the HAProxy config at /etc/haproxy/haproxy.cfg.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
This is a repackaged open source software product wherein additional charges apply for a pre-configured, SSH-hardened Squid forward-proxy image with a tuned ready-to-use proxy configuration, Amazon CloudWatch log and metric shipping, AWS Systems Manager integration, and vendor support from Solve DevOps.
This is a repackaged open source software product wherein additional charges apply for the pre-configured Jenkins LTS server with Java 21, file-based Jenkins logging, a configured Amazon CloudWatch agent shipping the Jenkins log and host metrics, Amazon SSM Agent for Session Manager access, security hardening, and vendor support.
This is a repackaged open source software product wherein additional charges apply for the pre-configured Jenkins LTS server with Java 21, file-based Jenkins logging, a configured Amazon CloudWatch agent shipping the Jenkins log and host metrics, Amazon SSM Agent for Session Manager access, security hardening, and vendor support.
This is a repackaged open-source software product with additional charges for a ready-to-run FreePBX® and Asterisk PBX, pre-tuned PHP and web server settings, Amazon CloudWatch log and metric shipping, AWS Systems Manager agent integration, SSH hardening, and vendor support.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.