Sold by: ProvenCloud
Deployed on AWS
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use WireGuard-protocol VPN server with the wg-easy 15.5.0 web admin panel. Create VPN users in your browser and connect phones and laptops with a QR code or config file, with unique keys and passwords for every instance.
Overview
This is a personal and team VPN server that uses the modern WireGuard protocol, with wg-easy, an open source web admin panel, for managing users. You create a client in the browser, scan its QR code with the free WireGuard app on a phone or download its config file for a laptop, and the device connects. Use it to protect traffic on public Wi-Fi, give remote staff a fixed exit IP address, or reach private resources in your cloud.
What is included: wg-easy 15.5.0 (the unmodified upstream release, pinned by digest) on Ubuntu 24.04 LTS, the kernel WireGuard module and tools, Docker CE 29.9, nginx publishing the admin panel on HTTPS (port 80 redirects), and Webmin 2.670 for server administration. The VPN endpoint follows the instance's public IP at every boot. Security is on by default: no password or key ships in the image. On first boot every instance generates its own VPN server key pair, admin password, HTTPS certificate and Webmin password. The admin panel listens only behind nginx, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. wg-easy is open source software licensed under AGPL-3.0; its source code is linked from this listing. WireGuard is a registered trademark of Jason A. Donenfeld. This image is an independent build by ProvenCloud.
Highlights
- Ready in minutes: launch the instance, open the admin page over HTTPS and create your first VPN client. The VPN server, web admin panel, HTTPS and Webmin are already installed and configured.
- Secure by default: every instance generates its own VPN server key pair, admin password and HTTPS certificate on first boot, and the admin panel is served over HTTPS only. SSH is key-only.
- Private, fast connections: add, disable or remove users in a click, connect with the free WireGuard apps by QR code or config file, and route your traffic through your own server's IP address.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3a.small Recommended | $0.03 |
c1.xlarge | $0.06 |
c3.2xlarge | $0.10 |
c3.4xlarge | $0.10 |
c3.8xlarge | $0.10 |
c3.large | $0.04 |
c3.xlarge | $0.06 |
c4.2xlarge | $0.10 |
c4.4xlarge | $0.10 |
c4.8xlarge | $0.10 |
Dimensions summary
You pay an hourly software charge that is the same across every option, plus your own EC2 compute costs billed by AWS. The many dimensions are not tiers or feature levels. Each one maps to a specific EC2 instance type, grouped into compute, memory, storage, GPU, and general-purpose families with sizes from small to very large. You choose the instance that fits your workload; larger instances raise your EC2 cost, not the software price. A free trial period applies before hourly software billing begins.
Top-of-mind questions for buyers
Each dimension maps to one EC2 instance type you run. One unit means one running instance of that type for one hour. The instance provides the CPU, memory, and other resources tied to that family and size. You pick the instance that fits the VPN workload you plan to run.
The hourly software charge meters running time. A stopped instance does not accrue the software charge. AWS may still bill for attached storage while the instance is stopped. Note a stop and start changes the public IP, so re-download client configs or attach an Elastic IP.
Two charges apply at once on the same AWS bill. The software charge is the same hourly rate across every instance type. The EC2 charge varies by the instance you choose. Picking a larger instance raises your EC2 cost while the software charge stays flat.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
wg-easy 15.5.0 (WireGuard protocol) on Ubuntu 24.04 LTS with Docker CE 29.9, nginx (HTTPS admin panel) and Webmin 2.670.
A unique VPN server key pair, admin password, HTTPS certificate and Webmin password are created for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, wait for the instance health checks to pass, then allow about two minutes for the first-boot setup to finish. Make sure the instance's security group allows UDP port 51820, which carries the VPN tunnel. Open https://<instance-public-ip>/ in your browser and accept the one-time warning for the server's self-signed certificate. Sign in to the VPN admin page with admin as username and your instance ID as password.
Click New client and give it a name. On a phone, install the free WireGuard app and scan the client's QR code; on a computer, download the client's configuration file and import it into the WireGuard app. Turn the tunnel on: your traffic now leaves the internet from this server's IP address. You can access the Webmin page at port 8000, so your URL will be http://<instance-public-ip>:8000 and use admin as username and your instance ID as password. You can also access your instance via SSH using the username ubuntu and your Amazon private key.
Required inbound ports: 51820 UDP (VPN tunnel), 22 (SSH), 80 and 443 (admin page; port 80 only redirects to HTTPS) and 8000 (Webmin). For security, allow ports 22 and 8000 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Allow about two minutes after launch for the first-boot setup to finish before you sign in. Every instance sets its own passwords on first boot, so no two instances share a password.
Change your passwords after the first sign-in: connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_vpnadmin.sh for the VPN admin page or pass_webmin.sh for Webmin, from the same folder. To check the server and connected clients, run sudo bash /home/ubuntu/iscripts/vpn_status.sh.
If you stop and start the instance its public IP changes. The server follows it automatically, but re-download each client's configuration, or attach an Elastic IP so client configurations never change.
Resources
Support
Vendor support
Email: support@provencloud.io
Support page: https://www.provencloud.io/support
Hours: Monday to Friday, 10:00 to 19:00 IST (UTC+05:30)
Billing and refunds for this subscription are handled by AWS Marketplace.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
![Nginx Web Server on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/e31d75a2-3e3f-4931-a32e-cd7231692e83.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Nginx 1.30 web server with easy free-SSL setup scripts. Host websites or run a reverse proxy in minutes, with a unique status-page password for every instance.
![Squid Caching Proxy Server on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/f10d9b69-dc3e-4fd5-95b0-bdec8b87c470.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Squid 6.14 caching web proxy. Control and speed up web access for your team or servers with a proxy that requires a login for every request, with unique passwords for every instance.
![Vaultwarden Password Manager on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/8016aaa2-77c8-42a2-af26-4985e4b8478d.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Vaultwarden 1.37.4 password manager server. Keep your team's passwords, notes and cards in your own encrypted vault, served over HTTPS with sign-ups closed by default and unique credentials for every instance.
![MariaDB with phpMyAdmin on Ubuntu 24.04 LTS by ProvenCloud [IN]](https://d7umqicpi7263.cloudfront.net/img/product/19bd0105-bfaa-4197-91cf-b824fa63c88c.com/4c173b409be2aeb8869f955151e879be)
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use MariaDB 12.3 LTS database server with phpMyAdmin. Get a tuned, MySQL-compatible database for your applications in minutes, sized to your instance automatically, with unique passwords for every instance.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.