WireGuard VPN Server
Self-hosted WireGuard VPN with an admin dashboard and a self-service user portal
What you get
WireGuard access to your VPC for laptops and phones, without a managed VPN bill
Admin dashboard and a self-service QR portal - users add devices, no config-file editing
OIDC and LDAP/AD SSO or local accounts; runs on a small CPU instance (t3.small)
About this product
Launch a self-hosted WireGuard VPN in minutes.
- Guided browser setup wizard on first launch over HTTPS (port 443) - no SSH or user-data editing required
- Admin dashboard: create, disable or delete VPN users and their devices, view connected peers, last handshake, bytes transferred and uptime
- Self-service user portal: each user signs in with their own account to download a ready-to-import config file or scan a QR code from their phone
- Local accounts out of the box, or single sign-on through your own identity provider: OIDC (Okta, Microsoft Entra ID, Google Workspace, Auth0 or any compliant provider) or LDAP / Active Directory, with users provisioned on first sign-in or pre-created by an admin, and optional admin groups that grant /admin from IdP group membership
- Optional trusted TLS certificate from Let's Encrypt, or a self-signed fallback if you only have a public IP address
- Full-tunnel or split-tunnel routing, configurable DNS, optional client isolation and NAT egress toggle
- Optional S3-backed backup and recovery: on every change the server can back itself up to a bucket you control, and a replacement instance can recover its users, devices and server key through the setup wizard
How it ships
- EC2 AMIEC2 AMI
WireGuard VPN Server
View on AWS Marketplace
Categories and keywords
- Categories
- Infrastructure SoftwareSecurityApplication Stacks
- Keywords
- wireguardvpnnetworkingsecurityremote-access