Put a load balancer in front of your servers. HAProxy 3.4.6 LTS on Ubuntu 24.04 starts with two sample backends and a password-protected stats page, so you can watch balancing and failover, then swap in your own servers and serve your VPC.
Put a load balancer in front of your application servers. This image runs HAProxy 3.4.6 LTS, built from the official source, with two sample backends and an authenticated stats page, so you can see round-robin balancing and failover before you point it at your own servers.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot writes this instance's stats password and configuration, then HAProxy listens on loopback. Nothing sensitive is baked into the image. The frontend is 127.0.0.1:8080/ and authenticated stats are 127.0.0.1:8404/stats. There is no inbound service port. Keep the stats password out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. A single AMI is not high availability for the balancer itself.
Reach it from other machines: To serve clients in your VPC, change the frontend bind line to the instance's private IP, reload HAProxy and allow that port in the security group only from your client ranges. Keep the stats page on loopback.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Willy Tarreau and the HAProxy contributors publish HAProxy under GPL-2.0 with an OpenSSL linking exception; exportable headers are LGPL-2.1. Software Sushi supplies the AMI recipe, a pinned 3.4.6 LTS source build, a first-boot stats password, loopback-only defaults, and setup documentation without claiming upstream endorsement.
Highlights
Pinned HAProxy 3.4.6 LTS built from the official source tarball.
Localhost HTTP balancer with authenticated loopback stats.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
This listing uses a single usage-based pricing dimension. You pay an hourly software fee while the instance runs on the t3.medium instance type. There are no tiers or sizes to choose between — the one dimension covers the running software. Billing is tied to hours of use, so costs scale with how long you keep the instance active. AWS charges for EC2, EBS, and data transfer separately from this software fee.
Top-of-mind questions for buyers
What do I get for the hourly fee on the t3.medium instance type?
You get HAProxy 3.4.6 LTS preinstalled on the t3.medium instance, built from the official source. It includes a loopback HTTP load balancer, a password-protected stats page, two sample backends you replace with your own, and bundled operations documentation.
Am I charged when the instance is stopped or powered off?
The software fee applies by the hour only while an instance is running. A fully stopped instance does not accrue the software charge. AWS may still bill underlying resources such as EBS storage while the instance is stopped.
What costs are separate from the hourly software fee?
AWS bills EC2 compute, EBS storage, and data transfer separately from this software fee. The software charge covers only the running HAProxy image. Review the current listing and offer terms before subscribing to confirm separate infrastructure charges.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
HAProxy 3.4.6 on Ubuntu 24.04 LTS, packaged by Software Sushi. The guided demo is repeatable and survives a service restart; all listeners are loopback-only by default. The documentation under /opt/sushi/docs is root-owned and a first-login guide appears after sudo -iu ubuntu. Connect with Session Manager, run sudo -iu ubuntu, then bash /opt/sushi/docs/demo.sh. Configure your own provider keys and models privately after launch.
Additional details
Usage instructions
Launch t3.medium (16 GiB or larger encrypted gp3, IMDSv2) with an instance profile that has AmazonSSMManagedInstanceCore and outbound HTTPS. No inbound rules are needed. Copy-paste launch kit (role, security group, run-instances, CloudFormation): https://docs.softwaresushi.com/launch-kit/
Connect: aws ssm start-session --target <instance-id>. You land as ssm-user; sudo -iu ubuntu switches to the ubuntu account and shows the first-login guide. After cloud-init finishes, run: sudo -iu ubuntu bash /opt/sushi/docs/demo.sh (expect a final line ending in DEMO_PASSED).
Use it: On the instance: curl 127.0.0.1:8080 repeatedly and watch the answer alternate between backend-a and backend-b. Replace the two server lines in /etc/haproxy/haproxy.cfg with your own servers, check with sudo haproxy -c -f /etc/haproxy/haproxy.cfg and apply with sudo systemctl reload haproxy.
Secrets and access: The stats page user is pilot. Read its password with: sudo cat /var/lib/haproxy/stats.password. To open it in your browser, forward port 8404 and browse to /stats: aws ssm start-session --target <instance-id> --document-name AWS-StartPortForwardingSession --parameters '{"portNumber":["8404"],"localPortNumber":["8404"]}'
Reach it from another host: change the frontend's bind line to the instance's private IP, reload HAProxy and allow that port only from your client ranges. Keep the stats page on loopback and reach it through port forwarding.
Guide: https://docs.softwaresushi.com/haproxy/ . Support: info@softwaresushi.com
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include HAProxy project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, with loopback-only HTTPS and a per-instance master key.
A Caddy v2.11.7 reverse proxy on Ubuntu 24.04 with HTTPS from its own internal CA, a password-protected sample route and a guide to proxy your own application. Public domain certificates need a few documented changes.
Pre-installed and security-hardened OpenClaw AI agent AMI. Launch an EC2 instance, add your credentials, and start using your agent. Ready to configure out of the box.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.