Sold by: Lynxroute
Deployed on AWS
Free Trial
This product has charges associated with it for hardening, security configuration, and support.
WSO2 Integrator: MI (formerly WSO2 Micro Integrator) is a configuration-driven enterprise service bus that mediates REST and SOAP APIs, JMS and RabbitMQ queues, file transfers and scheduled tasks, running as a JVM service alongside the WSO2 Integration Control Plane web console. This Lynxroute build is hardened and ready out of the box: per-instance admin passwords generated at first launch for both the console and the management API, regenerated TLS keystores, HTTPS-only administration, TLS 1.2 and 1.3 only, UFW firewall pre-configured, and a CIS Level 1 hardened Ubuntu 24.04 LTS base.
Apache-2.0 license - fully auditable, no vendor lock-in.
Overview
This is a repackaged software product wherein additional charges apply for hardening, security configuration, and support.
WHAT IS WSO2 INTEGRATOR: MI
WSO2 Integrator: MI (formerly WSO2 Micro Integrator) is an open-source enterprise service bus and integration runtime that connects APIs, services, databases, SaaS platforms and legacy systems. It runs on the JVM (Eclipse Temurin 21) and mediates messages between protocols and formats: REST and SOAP services, JMS and RabbitMQ queues, file and FTP transfers, scheduled tasks, and database-backed data services. Integrations are declared as Synapse artifacts - REST APIs, proxy services, sequences, endpoints, message stores and message processors - and are deployed either as composite applications built with the WSO2 Integrator extension for Visual Studio Code or by dropping a Synapse XML file into the runtime's hot-deploy directory. Configuration and artifacts persist on the instance filesystem; no external database is required. This image also bundles the WSO2 Integration Control Plane, a web console for monitoring the runtime, browsing its deployed artifacts and reading its logs. Apache-2.0 license, no vendor lock-in, no separate enterprise edition and no feature gating.
WHAT THIS AMI ADDS
Security hardening:
- Per-instance admin passwords generated at first launch - one for the control plane console, a separate one for the runtime management API; the upstream default administrator account is replaced and verified to no longer authenticate
- TLS keystores regenerated at first launch - upstream ships keystores containing a publicly known private key behind a published password; this image generates a fresh 2048-bit key pair and re-secures both trust stores
- All web console signing keys replaced with per-instance random secrets, so console sessions cannot be forged
- Administration is HTTPS-only - the plaintext management port is disabled outright, and TLS is restricted to 1.2 and 1.3 on every listener
- Control plane internal listeners are reachable only from the instance itself, never from the network
- CVE scan - every image is scanned for vulnerabilities before release
OS hardening (CIS Level 1):
- CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
- auditd, SSH hardening, Kernel hardening, IMDSv2 enforced
- fail2ban and AppArmor pre-configured
- UFW firewall pre-configured - only TCP 22, 8253, 9164 and 9446 are open
Compliance artifacts:
- SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
- CIS Conformance Report at /etc/lynxroute/cis-report.html
- CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md
Highlights
- WSO2 Integrator MI security baked in: separate admin passwords generated per instance for the console and the management API, TLS keystores regenerated at first launch, HTTPS-only administration with the plaintext management port disabled, TLS 1.2 and 1.3 only, UFW firewall pre-configured.
- CIS Level 1 hardened Ubuntu 24.04 LTS: auditd, fail2ban, AppArmor, SSH key-only, IMDSv2 enforced. CVE-scanned before every release. SBOM (CycloneDX) and CIS Conformance Report included.
- Integration runtime plus a web control plane in one image: mediate REST and SOAP APIs, JMS and RabbitMQ queues, file transfers and scheduled tasks, then monitor the runtime, its artifacts and its logs from a browser. The runtime registers itself with the console automatically. Apache-2.0 license - fully auditable, no vendor lock-in.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $0.03 |
m6i.2xlarge | $0.05 |
m6i.xlarge | $0.05 |
m6i.large | $0.05 |
Dimensions summary
You pay by the hour for the EC2 instance size you run. Four instance types are offered, so pricing scales with the compute capacity you choose. The t3.large is a general-purpose burstable option. The m6i.large, m6i.xlarge, and m6i.2xlarge step up in CPU and memory, with the 2xlarge holding the most resources. Each hourly rate reflects the underlying instance size, letting you match cost to your workload. All four options run the same hardened, pre-configured image, so your choice affects capacity and price, not the software included.
Top-of-mind questions for buyers
You pay for each hour the EC2 instance runs the hardened image. One unit equals one running virtual machine of the chosen size, metered by the hour. The rate matches the instance type's CPU and memory. The t3.large is burstable; the m6i sizes are fixed general-purpose compute.
The software charge meters running hours only. A fully stopped instance does not accrue the hourly software fee. You may still pay underlying AWS storage costs for the volume while the instance is stopped. Charges resume when you start the instance again.
No. All four instance types run the same hardened Ubuntu 24.04 LTS image with CIS Level 1 hardening, CVE scanning, a CycloneDX SBOM, and a CIS Conformance Report. Your instance choice affects compute capacity and hourly cost, not the bundled software or security configuration.
lynxroute.com
Helpful?
Vendor refund policy
We do not offer refunds for this product. AWS infrastructure charges (EC2, EBS, data transfer) are billed separately by AWS and are not refundable by us.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
WSO2 Integrator MI 4.6.0 - Initial release (August 2026)
- WSO2 Integrator: MI 4.6.0 with Integration Control Plane 2.0.0 on Ubuntu 24.04 LTS
- Eclipse Temurin 21 JDK - the runtime requires JDK 21 or later
- CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)
- CVE-scanned before every release
- Separate admin passwords generated per instance for the console and the management API
- TLS keystores regenerated at first launch, trust stores re-secured
- Web console signing keys replaced with per-instance random secrets
- Management API restricted to HTTPS; plaintext management port disabled
- TLS 1.2 and 1.3 only on every listener
- The runtime registers itself with the control plane console automatically
- No external database required - artifacts and configuration persist on the instance
- UFW firewall pre-configured (ports 22, 8253, 9164, 9446 only)
- fail2ban, auditd, AppArmor pre-configured
- SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json
- CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html
- IMDSv2 enforced
Additional details
Usage instructions
- Launch instance (t3.large recommended - this image runs two JVM services)
- Open Security Group - allow TCP 9446, 9164 and 8253 from your IP
- SSH: ssh -i key.pem ubuntu@<PUBLIC_IP>
- Read credentials: sudo cat /root/wso2mi-credentials.txt
- Open https://<PUBLIC_IP>:9446/ in your browser - accept the self-signed certificate warning - and sign in to the control plane console as admin
- The runtime is already listed in the console under project "default" and environment "prod", with its deployed artifacts and logs - no setup required
- Deploy your first integration by copying a Synapse XML file into /opt/wso2mi/repository/deployment/server/synapse-configs/default/api/ - it deploys within seconds, with no restart - then call it over TLS on port 8253
The console and the management API have SEPARATE admin passwords; both are generated at first launch and printed in /root/wso2mi-credentials.txt. Allow two to three minutes after launch for both services to finish starting; the login banner shows their status. Replace the self-signed TLS certificate with a CA-signed certificate for production use, and restrict the Security Group so only your network reaches ports 9446 and 9164.
Resources
Vendor resources
Support
Vendor support
Visit us online: https://lynxroute.com
For WSO2 Integrator: MI documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
WSO2 API Manager is an industry-leading full lifecycle API management platform for building, integrating, securing, and exposing an enterprise's digital services as managed APIs in cloud, on-premises, and hybrid architectures. Fast-track your API strategy with all the capabilities needed by API designers, product managers, operations, and consumers.
WSO2 Identity Server is a powerful, modern identity and access management solution for your on-premises or cloud environment. It enables organizations to deliver exceptional, trusted digital experiences to all types of users: internal workforce, external consumers, business customers or API consumers. Preferred by customer reviewers over Okta, WSO2 Identity Server offers a more compelling technical direction, better feature updates, and superior support quality.
WSO2 Private Identity Cloud is an individual, secure SaaS instance of our AI-powered open source IAM suite, enabling secure access for every type of identity: B2C customers, B2B SaaS applications, workforce, and APIs.
OpenChoreo is a complete, open-source Internal Developer Platform (IDP) for Kubernetes. It provides reusable platform and developer abstractions as APIs, a Backstage-powered developer portal, built-in CI/CD, GitOps workflows, RBAC and observability. OpenChoreo is a CNCF project.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.