Pool PostgreSQL connections to cut load on your database. PgBouncer 1.26.0 on Ubuntu 24.04 starts with TLS for clients, a generated app user and admin user, and a guide for pointing it at your database and serving your VPC.
Cut connection overhead on your PostgreSQL database. This image runs PgBouncer 1.26.0 with TLS for client connections and passwords generated per instance, and walks you through pointing it at your own database and choosing a pool mode.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot creates TLS material and passwords; nothing sensitive is baked into the image. PgBouncer listens on loopback only (port 6432). PostgreSQL packages are a localhost smoke helper only and stay disabled as a permanent service. Keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations.
Reach it from other machines: To accept clients from other hosts, set listen_addr to the instance's private IP, issue a server certificate that includes that address, restart PgBouncer and allow TCP 6432 only from your application's security group.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Marko Kreen, Skype Technologies OU, and PgBouncer contributors publish PgBouncer under the ISC License; Software Sushi supplies the AMI recipe, pinned official source tarball, compiled pooler with OpenSSL and systemd, first-boot CA/TLS and SCRAM userlist, loopback-only defaults, and setup documentation without claiming upstream endorsement.
Highlights
Pinned PgBouncer 1.26.0 source build with OpenSSL and provenance receipts.
First-boot client TLS, SCRAM userlist and loopback-only pooler defaults.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
This listing uses one usage-based dimension billed hourly on a t3.medium instance. You pay for the software by the hour that the instance runs, so your cost scales directly with runtime. There are no tiers or separate feature levels to choose from. The software deploys as a machine image that runs on Amazon EC2 in your own AWS account. AWS infrastructure costs such as compute, storage, and data transfer are billed separately from this hourly software charge.
Top-of-mind questions for buyers
What resources does the t3.medium hourly dimension cover, and what is billed separately?
The hourly charge covers the connection pooler software running on a t3.medium Amazon EC2 instance in your AWS account. AWS infrastructure such as compute, storage, networking, and data transfer is billed separately. You retain control of the instance, region, and connected services.
Am I charged when the instance is stopped or powered off?
The hourly software charge applies while the t3.medium instance runs. When you stop the instance, the hourly software charge stops accruing. Stopped instances may still incur AWS storage fees for attached volumes, but those are AWS charges separate from the software price.
Do I need to add credentials or extra setup after launching the image?
The software deploys as a machine image on Amazon EC2 in your account. You add your own configuration after launch and manage the environment yourself. The pricing covers only the running software; connected external services may require their own accounts and charges.
softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
PgBouncer 1.26.0 on Ubuntu 24.04 LTS, packaged by Software Sushi. The guided demo is repeatable and survives a service restart; the pooler listens on loopback only and requires TLS. The documentation under /opt/sushi/docs is root-owned and a first-login guide appears after sudo -iu ubuntu. Connect with Session Manager, run sudo -iu ubuntu, then bash /opt/sushi/docs/demo.sh. Configure your own provider keys and models privately after launch.
Additional details
Usage instructions
Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed. Copy-paste launch kit (role, security group, run-instances, CloudFormation): https://docs.softwaresushi.com/launch-kit/
Connect: aws ssm start-session --target <instance-id>. You land as ssm-user; sudo -iu ubuntu switches to the ubuntu account and shows the first-login guide. After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect a final line ending in DEMO_PASSED).
Use it: Edit /etc/pgbouncer/pgbouncer.ini to point at your PostgreSQL server (Configuration guide), then connect clients to port 6432 as user app over TLS. The backend database must accept the same user name and password.
Secrets and access: Passwords are in /var/lib/pgbouncer/credentials/app.password and admin.password (root only: sudo cat to read). Give clients /usr/local/share/sushi/pgbouncer/ca.pem. To test from your computer, forward port 6432: aws ssm start-session --target <instance-id> --document-name AWS-StartPortForwardingSession --parameters '{"portNumber":["6432"],"localPortNumber":["6432"]}'
Reach it from another host: set listen_addr to the instance's private IP, issue a server certificate that includes that address (see the Configuration guide), restart PgBouncer and allow TCP 6432 only from your application's security group. Never use * or 0.0.0.0 behind an open security group.
Guide: https://docs.softwaresushi.com/pgbouncer/ . Support: info@softwaresushi.com
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include PgBouncer project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
PgCache is a smart read replica for PostgreSQL that caches the hot data driving most of your traffic. Stop paying to replicate cold data. Try it for free on a small workload, then scale as you grow. Change one connection string. Never serves stale data.
Finds and removes Brazilian personal data (CPF, CNPJ, RG, names, addresses, phones, bank details, vehicle plates and more) from Portuguese text, inside your own AWS account, with no network access. Real-time endpoints and batch jobs over JSON Lines, CSV and plain-text files.
An AI-powered PostgreSQL monitoring and management platform that combines real-time metrics, proactive anomaly detection, and an agentic AI assistant to help teams diagnose and resolve issues faster.
LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, with loopback-only HTTPS and a per-instance master key.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.