Sold by: OpenVPN Inc.
Deployed on AWS
AWS Free Tier
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
4.5
Overview
This listing supports up to 50 concurrent VPN connections. For scaling flexibility, we recommend our AWS Marketplace: OpenVPN Access Server / Self-Hosted VPN (PAYG) listing instead.
Access Server is a self-hosted business VPN and Zero Trust Network Access (ZTNA) software solution, developed and maintained by OpenVPN Inc., the company behind the open-source OpenVPN protocol. It delivers secure, encrypted remote access to your business network and resources, with the controls needed to enforce least-privilege, zero-trust access policies.
On AWS, Access Server runs in your own environment on Amazon EC2, giving your remote, hybrid, and in-office workforce protected access to VPCs, private subnets, hybrid networks, and on-premises resources without surrendering control of your infrastructure to a third-party service.
Deployment Model:
- Self-hosted on Amazon EC2 within your AWS account and VPC, so data and configuration stay under your control.
- Deployed from a preconfigured AWS Marketplace image in minutes.
- Managed through an intuitive web-based Admin Web UI, with REST API, and command-line configuration options available for advanced administration.
- Supports remote-access and site-to-site VPN topologies.
Typical Use Cases on AWS:
- Provide secure remote access to applications and data hosted in your Amazon VPC
- Connect AWS environments with other clouds and on-premise networks.
- Protect SaaS and internal applications by making them reachable only through the VPN, reducing exposure to the public internet.
- Enforce zero-trust access policies based on identity, device, and location.
- Secure connectivity for devices, IoT, and machine-to-machine use cases.
Key Features:
Zero-Trust Access Controls
- Define identity-based, role-driven access to specific applications, subnets, and private resources.
- Enforce device verification and location-aware post-authentication checks to reject connections from unauthorized endpoints.
- Use Access Control Lists to segment network access and limit lateral movement across your environment.
Flexible Authentication
- Supports local authentication and external authentication with PAM, RADIUS, LDAP, and SAML
- Includes built-in multi-factor authentication using TOTP.
- Allows multiple authentication methods to be active simultaneously per user or user group.
- Includes built-in X.509 PKI and support for external PKI.
High-Performance Connectivity
- Supports OpenVPN Data Channel Offload (DCO) to move encryption and decryption into the OS kernel for improved VPN data-plane performance and reduced processing overhead.
- Supports multi-threaded operation for demanding, high-throughput AWS workloads.
- Supports NAT mode for remote-access deployments and routing mode for site-to-site deployments.
- Supports routing by IP CIDR ranges and domain names for defining access policies for cloud-hosted, SaaS, and internal applications.
- Supports split-tunnel and full-tunnel configurations.
Availability and Scale
- Supports clustering across multiple Access Server nodes to increase capacity and improve availability.
- Supports DNS-based traffic distribution for directing users to available cluster nodes.
Broad Client Support
- OpenVPN Connect client is available for Windows, macOS, ChromeOS, iOS, and Android.
- Supports all OpenVPN protocol-compatible clients.
- Includes a Client Web UI for downloading connection profiles and client software.
- Supports connection profile distribution by URL to streamline user onboarding.
Highlights
- Self-hosted control, built by the protocol's creators: Deploy a self-hosted business VPN and ZTNA solution on EC2 in minutes, developed by OpenVPN Inc., the team behind the open-source OpenVPN protocol. Your access policies, configuration, and data stay entirely within your AWS account and VPC.
- Zero-trust access to your AWS resources: Enforce least-privilege access with ACLs to destination IP subnets and domain names. Use identity, device, and location controls. Authenticate with SAML, LDAP, RADIUS, PAM, or local accounts, with built-in MFA and route traffic by domain name for application-aware control.
- High-performance, scalable connectivity: Data Channel Offload (DCO) moves encryption into the OS kernel for near wire-speed throughput on demanding AWS workloads. Cluster multiple servers for high availability and load distribution as your usage grows.
Details
Sold by
Delivery method
Delivery option
Quick deploy with CloudFormation (single instance)
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 26.04 LTS
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $0.616 |
t2.micro | $0.616 |
t3.micro | $0.616 |
c6ad.4xlarge | $0.616 |
t2.nano | $0.616 |
g5.48xlarge | $0.616 |
r6i.24xlarge | $0.616 |
m3.xlarge | $0.616 |
r4.16xlarge | $0.616 |
r5a.2xlarge | $0.616 |
Dimensions summary
You pay by the hour for this Access Server appliance, which supports up to 50 connected devices. A connected device means one active connection at a time. Pricing is tied to the EC2 instance type you choose, so the many options listed are hardware size choices, not feature tiers. Larger instances give you more compute and memory but do not change the 50-connection limit. You add as many users as you like; only 50 can connect simultaneously. Your AWS infrastructure charges are billed separately from the software. Data speed and features stay the same across every instance size.
Top-of-mind questions for buyers
A connected device is one active, simultaneous connection to the server. You may register any number of users and devices, but only 50 can be connected at the same moment. When a device disconnects, that slot frees up for another.
Software charges accrue per instance-hour while the instance runs. A stopped instance does not accrue hourly software charges. Underlying AWS storage or other resource fees may still apply, since those are billed separately by AWS from the Access Server software.
No. The 50-connection limit stays the same across every instance size. Data speeds and features do not change based on the instance you pick. Larger instances give more compute and memory only. You choose an instance to match your hardware needs, not to unlock more connections.
openvpn.net+1
Helpful?
Vendor refund policy
Refunds are not provided, but you can cancel at any time.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Additional details
Usage instructions
For instructions on using the OpenVPN Access Server appliance on the AWS Marketplace, please visit the Quick Start Guide .
Resources
Vendor resources
Support
Vendor support
Visit the OpenVPN Support Center for access to technical support resources, troubleshooting guidance, and the option to submit a support ticket.
For AWS-specific setup and troubleshooting information, review the Access Server on AWS support documentation .
For answers to common AWS deployment, connectivity, configuration, licensing, and administration questions, review the Access Server on AWS FAQ .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Access Server is a self-hosted business VPN and ZTNA software solution developed by the creators of the OpenVPN protocol. Deploy on EC2 and get secure access to VPCs and other connected networks. Route traffic by domain name for application-aware access control, and leverage Data Channel Offload (DCO) for kernel-accelerated throughput that keeps pace with demanding AWS workloads. With MFA, granular access controls, and Zero Trust-ready policies, Access Server is trusted by businesses to protect AWS infrastructure and beyond.
Customer reviews
Rahul G.
Easy, Reliable Secure Access—With Room to Improve Troubleshooting
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
I like the easy setup, reliable connectivity, and security. Installation and configuration are straightforward, and client setup is simple. Remote access is simple, and we can connect to our infrastructure from anywhere. I also appreciate the easier user management and cost-effectiveness, and that OpenVPN Access Server provides secure access to our internal infrastructure and cloud environment.
What do you dislike about the product?
I think the UI could be more intuitive, and troubleshooting connectivity issues could be simpler. I’d also like clearer error messages and more detailed connection logs.
What problems is the product solving and how is that benefiting you?
I use OpenVPN Access Server to securely access our internal infrastructure and cloud environment, protect sensitive resources, and control user access.
Anurag C.
Reliable Secure Remote Access, But Setup and UI Could Be Easier
Reviewed on Oct 28, 2026
Review provided by G2
What do you like best about the product?
it is easy to set up and manage. It provides secure remote access to company resources and helps users connect to the network from anywhere. I also like its centralized management, user access control and reliable connection.
What do you dislike about the product?
setup and configuration can be a bit challenging for beginners, especially when managing certificates and network settings. and user interface could also be more modern and user-friendly. Apart from that, it works well for secure remote access.
What problems is the product solving and how is that benefiting you?
OpenVPN Access Server helps us securely access internal company resources from different locations. It makes remote work easier by providing a secure connection to the company network without exposing internal services to the public internet. It also helps manage user access nd maintain security which is useful for our daily work and infrastructure management.
Gavin P.
Flexible, Enterprise-Ready VPN with a Strong UI and Solid Performance
Reviewed on Oct 27, 2026
Review provided by G2
What do you like best about the product?
OpenVPN Access Server has been a good fit for us because it sits in a nice middle ground between an overly simplified VPN product and a completely DIY OpenVPN deployment.
The UI is good for the day-to-day work, and most routine configuration can be handled without dropping to the command line. Once you get into more complicated configurations, however, you quickly find yourself working in Linux and troubleshooting services, certificates, packages, and configuration directly. I don't necessarily consider that a negative, but administrators should know that the friendly web UI doesn't eliminate the need to understand what's happening underneath it.
Integration and flexibility are probably the biggest strengths. It works well in an existing enterprise environment and gives an administrator quite a bit of control over how authentication, networking, certificates, and client access are handled.
Performance has been solid, and once the environment is configured correctly it mostly stays out of the way. High availability and failover are valuable features, but this is also where the complexity increases substantially. I would like to see the product give administrators better visibility into node health, replication/state, failover problems, and configuration inconsistencies.
From a pricing and ROI perspective, I think Access Server makes sense when you want a purpose-built remote-access VPN without buying an entire firewall/security platform just for VPN connectivity. The ability to run it on standard infrastructure is also valuable.
Support and onboarding are decent, particularly for a basic deployment. Documentation covers most common tasks, but troubleshooting unusual problems can send you down some fairly deep rabbit holes. Better diagnostic tooling would go a long way.
As for AI, it isn't something I currently associate strongly with the product, and that's fine. I would much rather see OpenVPN invest in useful operational intelligence than bolt on a generic chatbot. Give me automated log analysis, certificate-expiration warnings, configuration drift detection, authentication failure correlation, and actionable HA/failover diagnostics. Those are AI capabilities that would actually make an administrator's life easier.
Overall, I would recommend OpenVPN AS to organizations that want flexibility and don't mind having some Linux expertise available. It is easy to use when things are working, powerful when you need to customize it, but could be much better at telling you what is wrong when something isn't working.
The UI is good for the day-to-day work, and most routine configuration can be handled without dropping to the command line. Once you get into more complicated configurations, however, you quickly find yourself working in Linux and troubleshooting services, certificates, packages, and configuration directly. I don't necessarily consider that a negative, but administrators should know that the friendly web UI doesn't eliminate the need to understand what's happening underneath it.
Integration and flexibility are probably the biggest strengths. It works well in an existing enterprise environment and gives an administrator quite a bit of control over how authentication, networking, certificates, and client access are handled.
Performance has been solid, and once the environment is configured correctly it mostly stays out of the way. High availability and failover are valuable features, but this is also where the complexity increases substantially. I would like to see the product give administrators better visibility into node health, replication/state, failover problems, and configuration inconsistencies.
From a pricing and ROI perspective, I think Access Server makes sense when you want a purpose-built remote-access VPN without buying an entire firewall/security platform just for VPN connectivity. The ability to run it on standard infrastructure is also valuable.
Support and onboarding are decent, particularly for a basic deployment. Documentation covers most common tasks, but troubleshooting unusual problems can send you down some fairly deep rabbit holes. Better diagnostic tooling would go a long way.
As for AI, it isn't something I currently associate strongly with the product, and that's fine. I would much rather see OpenVPN invest in useful operational intelligence than bolt on a generic chatbot. Give me automated log analysis, certificate-expiration warnings, configuration drift detection, authentication failure correlation, and actionable HA/failover diagnostics. Those are AI capabilities that would actually make an administrator's life easier.
Overall, I would recommend OpenVPN AS to organizations that want flexibility and don't mind having some Linux expertise available. It is easy to use when things are working, powerful when you need to customize it, but could be much better at telling you what is wrong when something isn't working.
What do you dislike about the product?
My biggest complaint is the gap between how simple the product looks in the web interface and how complicated it can become when something goes wrong. Troubleshooting failover, certificates, upgrades, or package compatibility can require digging through Linux services and logs, and the error messages don't always make the root cause obvious. Better built-in diagnostics and health reporting would make administration significantly easier.
What problems is the product solving and how is that benefiting you?
OpenVPN Access Server solves our need for secure remote access to internal resources while giving us direct control over the infrastructure. We can centrally manage authentication, VPN configuration, certificates, routing, and client connectivity instead of depending on individual devices or a more expensive all-in-one security platform.
For us, the main benefit is that it is flexible and largely stays out of the way once configured. We can host it ourselves, integrate it with our existing environment, and design for failover so VPN access isn't dependent on a single server. That gives us a good balance between security, availability, administrative control, and cost.
For us, the main benefit is that it is flexible and largely stays out of the way once configured. We can host it ourselves, integrate it with our existing environment, and design for failover so VPN access isn't dependent on a single server. That gives us a good balance between security, availability, administrative control, and cost.
Computer & Network Security
OpenVPN Made Easy
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
OpenVPN made easy. The full power of Open Source OpenVPN with the ease of a graphical UI.
Very responsive and high quality technical and sales support!
Very responsive and high quality technical and sales support!
What do you dislike about the product?
High Availability setup takes some work and does not seamlessly fail over. Or maybe I need to spend some more time with the documentation, as this might already be solved in the many years we're running this setup now.
(Update: It has improved indeed, but for now we use the "If it works, don't fix it" strategy.)
(Update: It has improved indeed, but for now we use the "If it works, don't fix it" strategy.)
What problems is the product solving and how is that benefiting you?
We need a secure VPN setup that is easily manageable and not tied to manufacturer-specific client software. OpenVPN AS provides that for us at a reasonable price.
Bibhor D.
Easy Setup and User Management Made Simple
Reviewed on Aug 19, 2026
Review provided by G2
What do you like best about the product?
It was easy to set up and add users, and it’s also straightforward to manage.
What do you dislike about the product?
The pricing isn’t competitive compared with other VPN services.
What problems is the product solving and how is that benefiting you?
It gives access to people who are working remotely.