Sold by: OpenVPN Inc.
Deployed on AWS
Access Server is a self-hosted business VPN and ZTNA software developed by the creators of the OpenVPN protocol, deployed on EC2 and billed through AWS.
Get secure access to your VPCs and other connected networks, route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, SAML single sign-on via AWS IAM Identity Center, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Purchase connections through AWS as a monthly or yearly contract and consolidate your VPN software and infrastructure costs onto a single AWS invoice.
4.5
Overview
Video
Access Server on AWS
Video
Product video
Access Server is a self-hosted business VPN and Zero Trust Network Access (ZTNA) software solution, developed and maintained by OpenVPN Inc., the company behind the open-source OpenVPN protocol. It delivers secure, encrypted remote access to your business network and resources, with the controls needed to enforce least-privilege, zero-trust access policies.
On AWS, Access Server runs in your own environment on Amazon EC2, giving your remote, hybrid, and in-office workforce protected access to VPCs, private subnets, hybrid networks, and on-premises resources without surrendering control of your infrastructure to a third-party service.
Purchase Access Server connections directly through AWS Marketplace as a monthly or yearly contract. Choose the concurrent connection limit that fits your organization, adjust it at renewal as your needs change, and pay for your Zero Trust VPN and EC2 infrastructure on one AWS invoice.
Deployment Model:
- Self-hosted on Amazon EC2 within your AWS account and VPC, so data and configuration stay under your control.
- Deployed in minutes from a preconfigured AWS CloudFormation script, with license activation applied automatically at launch.
- Managed through an intuitive web-based Admin Web UI, with REST API, and command-line configuration options available for advanced administration.
- Supports remote-access and site-to-site VPN topologies.
Typical Use Cases on AWS:
- Provide secure remote access to applications and data hosted in your Amazon VPC.
- Connect AWS environments with other clouds and on-premise networks.
- Protect SaaS and internal applications by making them reachable only through the VPN, reducing exposure to the public internet.
- Enforce zero-trust access policies based on identity, device, and location.
- Secure connectivity for devices, IoT, and machine-to-machine use cases.
Key Features:
Zero-Trust Access Controls
- Zero Trust Application Broker: Access Server verifies user identity, location, and device ID during connection and assigns, during domain lookup, a synthetic intermediate IP scoped to a single authorized app - the device never gets a route to the entire private network, so lateral movement isn't merely limited; it's structurally impossible.
- Define identity-based, role-driven access to specific applications by domain name or hostname, subnets, and private resources.
- Enforce device verification and location-aware post-authentication checks to reject connections from unauthorized endpoints.
- Use Access Control Lists to segment network access and limit lateral movement across your environment.
Flexible Authentication
- Supports local authentication and external authentication with PAM, RADIUS, LDAP, and SAML.
- Supports a custom Python3 authentication module for non-standard identity requirements.
- Includes built-in multi-factor authentication using TOTP.
- Allows multiple authentication methods to be active simultaneously per user or user group.
- Includes built-in X.509 PKI and support for external PKI.
High-Performance Connectivity
- Supports OpenVPN DCO to move encryption and decryption into the OS kernel for improved VPN data-plane performance and reduced processing overhead.
- Supports multi-threaded operation for demanding, high-throughput AWS workloads.
- Supports NAT mode for remote-access deployments and routing mode for site-to-site deployments.
- Supports routing by IP CIDR ranges and domain names for defining access policies for cloud-hosted, SaaS, and internal applications.
- Supports split-tunnel and full-tunnel configurations.
Availability and Scale
- Supports clustering across multiple Access Server nodes to increase capacity and improve availability.
- Supports DNS-based traffic distribution for directing users to available cluster nodes.
- Deploy multiple Access Servers that draw from a single shared pool of contracted connections.
Broad Client Support
- OpenVPN Connect client is available for Windows, macOS, ChromeOS, iOS, and Android.
- Supports all OpenVPN protocol-compatible clients.
- Includes a Client Web UI for downloading connection profiles and client software.
- Supports connection profile distribution by URL to streamline user onboarding.
Highlights
- Self-hosted control, built by the protocol's creators: Deploy a self-hosted business VPN and ZTNA solution on EC2 in minutes, developed by OpenVPN Inc., the team behind the open-source OpenVPN protocol. Your access policies, configuration, and data stay entirely within your AWS account and VPC.
- Zero-trust access to your AWS resources: Enforce least-privilege access with ACLs to destination IP subnets and domain names. Use identity, device, and location controls. Authenticate with SAML, LDAP, RADIUS, PAM, or local accounts, with built-in MFA and route traffic by domain name for application-aware control.
- High-performance, scalable connectivity: Data Channel Offload (DCO) moves encryption into the OS kernel for near wire-speed throughput on demanding AWS workloads. Cluster multiple servers for high availability and load distribution as your usage grows.
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
2 Connection Plan | FREE. Up to 2 concurrent connections to your Access Server | $0.00 |
5 Connection Plan | up to 5 concurrent connections to your Access Server | $70.00 |
10 Connection Plan | up to 10 concurrent connections to your Access Server | $90.00 |
15 Connection Plan | up to 15 concurrent connections to your Access Server | $135.00 |
20 Connection Plan | up to 20 concurrent connections to your Access Server | $180.00 |
25 Connection Plan | up to 25 concurrent connections to your Access Server | $225.00 |
30 Connection Plan | up to 30 concurrent connections to your Access Server | $270.00 |
35 Connection Plan | up to 35 concurrent connections to your Access Server | $315.00 |
40 Connection Plan | up to 40 concurrent connections to your Access Server | $360.00 |
45 Connection Plan | up to 45 concurrent connections to your Access Server | $405.00 |
Dimensions summary
You pick one plan based on the number of simultaneous connections you need. A connection is one actively connected device, such as a laptop, tablet, or server. Plans scale from 2 connections up to 750, with the 2 Connection Plan offered free. You add more devices and users than your limit, but only the subscribed number can connect at the same time. All plans deliver the same features and performance; only the connection cap differs. You commit to a contract term of one month or one year, with optional auto-renewal.
Top-of-mind questions for buyers
A connection is one actively connected device, such as a headless server, a mobile tablet, or a remote laptop. You may add more devices and users than your plan allows, but only the subscribed number can be connected at the same moment.
You can start with a smaller plan and upgrade as usage nears the cap. Email notifications warn you when usage crosses a set threshold. When you upgrade, the change takes effect immediately, giving you the higher connection count right away.
No. There is no difference in data speeds or performance based on the plan you choose. All plans include the same features. Only the number of devices that can connect at the same time changes between plans.
openvpn.net+1
Helpful?
Vendor refund policy
Refund within 30 days of purchase, contact support@openvpn.net to request a refund
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Visit the OpenVPN Support Center for access to technical support resources, troubleshooting guidance, and the option to submit a support ticket.
For AWS-specific setup and troubleshooting information, review the Access Server PAYG on AWS quick start guide and support documentation .
For answers to common AWS deployment, connectivity, configuration, licensing, and administration questions, review the Access Server on AWS FAQ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, SAML single sign-on via AWS IAM Identity Center, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
After installation, get a free 2-connection key or start a trial from https://myaccount.openvpn.com/signup
Customer reviews
Primary/Secondary Education
Easy Setup, Stable Performance, and Flexible Internal Network Access
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It's easy to use and set up. It's very stable and consistent. You can set up access to both internal networks and force connections over the internal VPN endpoint where needed.
What do you dislike about the product?
The connection between the server itself and the licensing makes sense now but it's a little disjointed. It would be easier if it were easier to manage licensing overall.
What problems is the product solving and how is that benefiting you?
Access to internal resources securely without public facing access to those resources. Assigning permissions variably to people based on roles or groups.
Oz G.
Simple VPN Management with Powerful Controls—Despite Some Setup Delays
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I really like how simple OpenVPN Access Server is. The admin page is pretty simple, and I don’t need a master’s degree to understand how to use it. I can keep track of all the users in my system and check for suspicious activity, which is really helpful. I also find full tunneling for specific users, websites, or endpoints useful. It lets me whitelist the VPN IP and easily access customer or internal endpoints that don’t connect to the VPN. I can connect to different company VPCs through one tunnel. I use AWS and Google Workspace SSO so users can get their profiles directly, and that has really helped adoption across the team. After the initial installation, it’s a great product.
What do you dislike about the product?
I find that applying changes can be a bit delayed. Installing OpenVPN Access Server also has a little bit of complexity.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to connect to the different VPCs we have in the company through one tunnel.
Rahul G.
Easy, Reliable Secure Access—With Room to Improve Troubleshooting
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I like the easy setup, reliable connectivity, and security. Installation and configuration are straightforward, and client setup is simple. Remote access is simple, and we can connect to our infrastructure from anywhere. I also appreciate the easier user management and cost-effectiveness, and that OpenVPN Access Server provides secure access to our internal infrastructure and cloud environment.
What do you dislike about the product?
I think the UI could be more intuitive, and troubleshooting connectivity issues could be simpler. I’d also like clearer error messages and more detailed connection logs.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to securely access our internal infrastructure and cloud environment, protect sensitive resources, and control user access.
Anurag C.
Reliable Secure Remote Access, But Setup and UI Could Be Easier
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
it is easy to set up and manage. It provides secure remote access to company resources and helps users connect to the network from anywhere. I also like its centralized management, user access control and reliable connection.
What do you dislike about the product?
setup and configuration can be a bit challenging for beginners, especially when managing certificates and network settings. and user interface could also be more modern and user-friendly. Apart from that, it works well for secure remote access.
What problems is the product solving and how is that benefiting you?
OpenVPN Access Server helps us securely access internal company resources from different locations. It makes remote work easier by providing a secure connection to the company network without exposing internal services to the public internet. It also helps manage user access nd maintain security which is useful for our daily work and infrastructure management.
Gavin P.
Flexible, Enterprise-Ready VPN with a Strong UI and Solid Performance
Reviewed on Oct 27, 2026
Review provided by G2
What do you like best about the product?
OpenVPN Access Server has been a good fit for us because it sits in a nice middle ground between an overly simplified VPN product and a completely DIY OpenVPN deployment.
The UI is good for the day-to-day work, and most routine configuration can be handled without dropping to the command line. Once you get into more complicated configurations, however, you quickly find yourself working in Linux and troubleshooting services, certificates, packages, and configuration directly. I don't necessarily consider that a negative, but administrators should know that the friendly web UI doesn't eliminate the need to understand what's happening underneath it.
Integration and flexibility are probably the biggest strengths. It works well in an existing enterprise environment and gives an administrator quite a bit of control over how authentication, networking, certificates, and client access are handled.
Performance has been solid, and once the environment is configured correctly it mostly stays out of the way. High availability and failover are valuable features, but this is also where the complexity increases substantially. I would like to see the product give administrators better visibility into node health, replication/state, failover problems, and configuration inconsistencies.
From a pricing and ROI perspective, I think Access Server makes sense when you want a purpose-built remote-access VPN without buying an entire firewall/security platform just for VPN connectivity. The ability to run it on standard infrastructure is also valuable.
Support and onboarding are decent, particularly for a basic deployment. Documentation covers most common tasks, but troubleshooting unusual problems can send you down some fairly deep rabbit holes. Better diagnostic tooling would go a long way.
As for AI, it isn't something I currently associate strongly with the product, and that's fine. I would much rather see OpenVPN invest in useful operational intelligence than bolt on a generic chatbot. Give me automated log analysis, certificate-expiration warnings, configuration drift detection, authentication failure correlation, and actionable HA/failover diagnostics. Those are AI capabilities that would actually make an administrator's life easier.
Overall, I would recommend OpenVPN AS to organizations that want flexibility and don't mind having some Linux expertise available. It is easy to use when things are working, powerful when you need to customize it, but could be much better at telling you what is wrong when something isn't working.
The UI is good for the day-to-day work, and most routine configuration can be handled without dropping to the command line. Once you get into more complicated configurations, however, you quickly find yourself working in Linux and troubleshooting services, certificates, packages, and configuration directly. I don't necessarily consider that a negative, but administrators should know that the friendly web UI doesn't eliminate the need to understand what's happening underneath it.
Integration and flexibility are probably the biggest strengths. It works well in an existing enterprise environment and gives an administrator quite a bit of control over how authentication, networking, certificates, and client access are handled.
Performance has been solid, and once the environment is configured correctly it mostly stays out of the way. High availability and failover are valuable features, but this is also where the complexity increases substantially. I would like to see the product give administrators better visibility into node health, replication/state, failover problems, and configuration inconsistencies.
From a pricing and ROI perspective, I think Access Server makes sense when you want a purpose-built remote-access VPN without buying an entire firewall/security platform just for VPN connectivity. The ability to run it on standard infrastructure is also valuable.
Support and onboarding are decent, particularly for a basic deployment. Documentation covers most common tasks, but troubleshooting unusual problems can send you down some fairly deep rabbit holes. Better diagnostic tooling would go a long way.
As for AI, it isn't something I currently associate strongly with the product, and that's fine. I would much rather see OpenVPN invest in useful operational intelligence than bolt on a generic chatbot. Give me automated log analysis, certificate-expiration warnings, configuration drift detection, authentication failure correlation, and actionable HA/failover diagnostics. Those are AI capabilities that would actually make an administrator's life easier.
Overall, I would recommend OpenVPN AS to organizations that want flexibility and don't mind having some Linux expertise available. It is easy to use when things are working, powerful when you need to customize it, but could be much better at telling you what is wrong when something isn't working.
What do you dislike about the product?
My biggest complaint is the gap between how simple the product looks in the web interface and how complicated it can become when something goes wrong. Troubleshooting failover, certificates, upgrades, or package compatibility can require digging through Linux services and logs, and the error messages don't always make the root cause obvious. Better built-in diagnostics and health reporting would make administration significantly easier.
What problems is the product solving and how is that benefiting you?
OpenVPN Access Server solves our need for secure remote access to internal resources while giving us direct control over the infrastructure. We can centrally manage authentication, VPN configuration, certificates, routing, and client connectivity instead of depending on individual devices or a more expensive all-in-one security platform.
For us, the main benefit is that it is flexible and largely stays out of the way once configured. We can host it ourselves, integrate it with our existing environment, and design for failover so VPN access isn't dependent on a single server. That gives us a good balance between security, availability, administrative control, and cost.
For us, the main benefit is that it is flexible and largely stays out of the way once configured. We can host it ourselves, integrate it with our existing environment, and design for failover so VPN access isn't dependent on a single server. That gives us a good balance between security, availability, administrative control, and cost.