Sold by: EASYCLOUD
Deployed on AWS
Free Trial
This is a repackaged open source software product wherein additional charges apply for a hardened, AWS-optimized image with verification reports and maintenance. This AMI delivers Langflow 1.12.1 behind an HTTPS reverse proxy with per-instance credentials, on an Ubuntu 24.04 LTS base tuned for EC2 by Easycloud-with a provenance evidence pack and SBOM.
Overview
This is a repackaged open source software product wherein additional charges apply for a hardened, AWS-optimized image with verifiable provenance evidence and maintenance. Langflow 1.12.1 runs on an Ubuntu 24.04 LTS base tuned for Amazon EC2, with a documented set of security settings applied on top and a complete provenance evidence pack including a Software Bill of Materials (SBOM).
Value-Added Features
Langflow 1.12.1 Deployment:
-
HTTPS From First Boot: An nginx reverse proxy terminates TLS on port 443 and redirects port 80 to it, while Langflow itself listens on the loopback interface only, so the application is never exposed directly.
-
Per-Instance Credentials: On the first boot of each instance the administrator password is set to that instance's own ID and a fresh application secret key is generated, then written to /usr/local/langflow/readme. Two instances launched from this image never share credentials.
-
Isolated Environment: Langflow runs from its own virtual environment under /usr/local/langflow, with Torch CPU and EasyOCR preinstalled for the components that need them, leaving the system Python untouched.
Comprehensive Evidence Pack:
Every AMI carries an 8-file provenance evidence pack under /opt/optimization-report/:
- Tuning_Parameters.txt: Every tuning change, shown against its base-image value, with the reasoning and how to reverse it.
- Security_Parameters.txt: All 31 security settings in the same format; the 10 already at the wanted value are marked unchanged rather than presented as improvements.
- package_changes.txt: Packages upgraded, installed and removed on this image.
- sbom.spdx.json: Software Bill of Materials in SPDX format, generated from the dpkg database.
- cve_scan.txt / cve_scan_full.txt.gz: Vulnerability scan grouped by whether an upstream fix exists, so unfixable findings are not counted against the image.
- key_files.sha256: SHA-256 checksums of all 7 settings files this image changed, so the delivered state can be verified in one command.
- README.txt: Index of artifact contents and operational guidance.
Security & Attack Surface:
-
Kernel Network Hardening: 19 network-related kernel parameters are fixed in /etc/sysctl.d/99-security.conf: ICMP redirects are neither accepted nor sent, source-routed packets are rejected, and the rest are pinned at safe values so they cannot drift.
-
Unused Kernel Modules Disabled: 12 rarely used filesystem and network protocol modules are blocked from loading via /etc/modprobe.d/99-disable-unused.conf. squashfs stays available so snap-packaged agents keep working.
-
SSH Login Window Tightened: LoginGraceTime is reduced from 120 to 60 seconds. Root login policy, authentication retries and forwarding are left as the base image ships them.
-
Fully Patched at Release: Zero packages carried an available upstream fix at build time, including updates Ubuntu was still phasing in.
Reliability Validation:
- First-Boot Path Verified: The credential unit is ordered before the application, so the database is created with the instance's own password rather than a placeholder. This was verified end to end on a clean first boot: log in with the instance ID succeeds and the placeholder is rejected.
AWS Network & Kernel Tuning:
-
Network Stack: TCP BBR congestion control with fair queueing, increased connection backlogs, raised socket buffer ceilings, and MTU probing enabled.
-
System Tuning: tuned daemon active with an aws-optimized profile whose bootloader section is deliberately empty, so the network interface keeps its original name after a reboot.
-
Reliability: The systemd journal is capped so logs cannot fill the root filesystem.
Operational Tools:
- Preinstalled Tools: AWS SSM Agent active, CloudWatch Agent installed (disabled by default).
Maintenance:
- Maintenance Specifications: Rebuilt and updated bi-weekly to monthly incorporating upstream Langflow and Ubuntu 24.04 security updates, with artifact documentation refreshed per release.
About Langflow
A visual builder for LLM applications: drag-and-drop components chain prompts, models, vector stores and tools into flows that can be exported or served as APIs. It suits RAG pipelines, AI agents and multi-model workflows, and works with the open-source model and vector-store ecosystem.
About Ubuntu 24.04 LTS
The most widely deployed Linux distribution in the cloud, built on the Debian foundation, with a five-year maintenance window for LTS releases.
Highlights
- Langflow 1.12.1 on an AWS-Optimized Ubuntu 24.04 Base: 19 security-related kernel parameters, 12 blocked modules and a tightened SSH login window applied on top, with Langflow reachable only through the nginx HTTPS proxy.
- Verifiable Evidence Pack and SBOM: An 8-file evidence pack ships inside the image, with an SPDX Software Bill of Materials, a CVE scan grouped by upstream fix availability, a package delta report, and SHA-256 checksums of every settings file the image changed.
- Langflow 1.12.1: Best-practice deployment. HTTPS from first boot, the application bound to loopback, and a per-instance administrator password written to a readme file on the instance itself.
Details
Sold by
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
Dimension | Cost/hour |
|---|---|
t3.large Recommended | $0.01 |
t3.micro | $0.01 |
r8a.2xlarge | $0.19 |
d3.xlarge | $0.04 |
x8aedz.3xlarge | $0.19 |
c6a.32xlarge | $0.29 |
r8i.metal-96xl | $0.29 |
c7i.8xlarge | $0.29 |
i7ie.metal-48xl | $0.29 |
m6in.32xlarge | $0.29 |
Dimensions summary
You pay by the hour for the EC2 instance you run this software on. Each dimension maps to a specific EC2 instance type, so your rate depends only on the instance size and family you choose. General-purpose, compute-optimized, memory-optimized, storage-optimized, and GPU or accelerator instances are all available. Rates scale with instance capacity, meaning larger sizes within a family cost more per hour. The software itself is the same Langflow build across every instance; you select the instance that fits your workload and budget. Billing is usage-based with no term commitment.
Top-of-mind questions for buyers
Each rate covers one running EC2 instance of the named type, billed per hour. The rate bundles the Langflow software with that specific instance size and family. You pay for the hours the instance runs, so an instance with more vCPU and memory carries a higher hourly rate.
The software fee meters running hours only. A fully stopped instance does not accrue the hourly software charge. Stopped instances may still incur separate AWS storage fees for attached volumes, but those are AWS infrastructure costs, not the Langflow software charge shown in the pricing table.
Every instance runs the same prebuilt image: Langflow 1.6.9 on Ubuntu 22.04, with CPU Torch, EasyOCR, HTTPS through a reverse proxy, password login, and auto-start. Only the instance type changes your rate. The software build stays identical across all instance choices.
www.easyclouds.io
Helpful?
Vendor refund policy
No refunds. 5-day free trial available. Cancel anytime.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Update to the latest version
Additional details
Usage instructions
System Requirements: Recommended to run on instances with 2 Cores and 8GB RAM or higher. Running on lower specifications may cause abnormal crashes.
Connection Methods:
Access the instance via SSH using the 'ubuntu' user. Use 'sudo' to run commands requiring root privileges. To switch to the root user, use 'sudo su - root'.
Install Information:
OS: Ubuntu 22.04 LTS
Langflow version: 1.6.9
Langflow Install Directory: /usr/local/langflow
Langflow Service Management:
To start langflow Service: sudo systemctl start langflow
To stop langflow Service: sudo systemctl stop langflow
To status langflow Service: sudo systemctl status langflow
Accessing Langflow:
Visit 'https://YOUR_IP' to start using langflow. Note: The service may take a few minutes to start on the first boot. If the page fails to load or shows a 502 Bad Gateway error, please wait patiently.
Web username and password:
View via the command: 'sudo cat /usr/local/langflow/readme'
How to change administrator password:
After logging into the web interface: Click Profile Icon (Top Right) ---> Select Admin Page ---> Click the Pencil Icon (Edit) on the far right of the administrator row ---> Enter New Password and click Save
Firewall Configuration:
Please allow SSH port 22 and Langflow port 443. For security, it is recommended to limit access to trusted IPs only.
Documentation:
For a detailed installation and management guide, please visit: https://www.easyclouds.io/docs/langflow-guide
Resources
Vendor resources
Support
Vendor support
Should you encounter any issues while using the system, please do not hesitate to contact us via email at: support@easyclouds.io ,Thank you!
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The solution goes beyond compliance by offering a Ubuntu server with comprehensive security hardening by default, covering everything from applications to the Linux kernel. With VED threat mitigation, you can rest assured that your digital assets are protected against advanced threats.
This is a repackaged open source software product wherein additional charges apply for security hardening, optimization, and pre-integration of the Go toolchain provided by Hanwei. AppArmor is active, SSH is hardened and key-only, auditd is active, kernel and resource limits are tuned for EC2, and the go toolchain is preinstalled and on PATH.
This product has charges associated with the pre-built hardening to the CIS Benchmarks™ and recurring maintenance. The CIS Hardened Images® are hardened in accordance with the associated CIS Benchmarks, an industry best practice for secure configuration. Reduce cost, time, and risk by building your AWS solution with CIS AMIs.
This is a repackaged software product wherein additional charges apply for a pre-hardened, SI Core STIG Hardened image and seller support. Wordpress on Ubuntu 24.04 LTS combines the robustness of Ubuntu with the power of Wordpress, providing an ideal platform for building and deploying websites quickly and securely. This AMI offers a fully optimized environment with pre-installed dependencies, ensuring seamless performance and reduced setup time. With Wordpress on Ubuntu 24.04 LTS, users can leverage enhanced security features, simplified updates, and a familiar interface to create everything from blogs to complex websites. Experience the full potential of web hosting with Wordpress on Ubuntu 24.04 LTS for your development needs.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.