SecureAnyCloud
Deployment guide

VPN proxy

Overview

This page is the entry point for the SecureAnyCloud Hardened WireGuard VPN & VPN, Proxy and Remote Access AMIs listing on AWS Marketplace. The listing is a single product that offers several products and releases as separate software versions.

Subscribe once, then choose the version you want from the Software version list at launch. Each product has its own guide below with the full setup and connection walk-through.

What SecureAnyCloud adds to every version:

  • Every image is built by SecureAnyCloud on a fully patched base, with the latest security updates applied at build time
  • Services are secure by default: administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret

Pricing is metered hourly per EC2 instance type and is the same for every version in this listing. The recommended instance type is m5.large.

How to pick a version

  • Open the listing on AWS Marketplace, choose View purchase options, then choose Subscribe. One subscription covers every product and release in the listing, and the free trial starts with it.
  • When the subscription is active, choose Launch your software.
  • Choose One-click launch from AWS Marketplace, or Launch from EC2 Console for full control. In Version, pick the product and release you want. Each version is a separate software version, named <product> <release> on <operating system> - <date>, for example 3proxy Proxy Server 0.9.9.1 on Ubuntu 24.04 - YYYY-MM-DD. The date is when that version was added to the listing.
  • Choose your Region, an instance type (m5.large is recommended), your EC2 key pair and a security group that opens the ports listed in the product's guide. Then choose Launch.
  • After launch, open the product's guide below for first login.

You can run several products from the same subscription. Launch one instance per product, each from its own software version.

Versions in this listing, newest release first:

  • 3proxy Proxy Server: 0.9.9.1 on Ubuntu 24.04
  • accel-ppp VPN Server: 1.14.0 on Ubuntu 24.04
  • Anubis: 1.28.2 on Ubuntu 24.04
  • Apache Guacamole: 1.6.0 + Keycloak on Ubuntu 24.04, 1.6.0 on Ubuntu 24.04
  • BFE: 1.8.8.6 on Ubuntu 24.04
  • dnscrypt-proxy: 2.1.20 on Ubuntu 24.04
  • E2guardian: 5.5.9r on Ubuntu 24.04
  • E2guardian Filtering Proxy: 5.5.9r on Ubuntu 24.04
  • EasyTier: 2.6.4 on Ubuntu 24.04
  • Expose: 3.2.0 on Ubuntu 24.04
  • Ferron: 2.8.1 on Ubuntu 24.04
  • Flexisip SIP Proxy: 2.6.2 on Ubuntu 24.04
  • freenginx: 1.31.4 on Ubuntu 24.04
  • frp Server: 0.71.1 on Ubuntu 24.04
  • G3 Proxy: 1.12.4 on Ubuntu 24.04
  • Headscale: 0.29.6 on Ubuntu 24.04
  • LanCache: 2026.10.09 on Ubuntu 24.04
  • Nginx UI: 2.9.3 on Ubuntu 24.04
  • OpenVPN Community: 2.7.8 on Ubuntu 24.04
  • Outline Server: 1.12.3 on Ubuntu 24.04
  • Privoxy: 4.2.0 on Ubuntu 24.04
  • sish: 4.0.0 on Ubuntu 24.04
  • Sozu Reverse Proxy: 2.3.3 on Ubuntu 24.04
  • spiped Secure Pipe Daemon: 1.6.4 on Ubuntu 24.04
  • Squid: 7.8 on Ubuntu 24.04
  • SSHPiper: 1.6.1 on Ubuntu 24.04
  • sslh: 2.3.1 on Ubuntu 24.04
  • stunnel TLS Proxy: 5.82 on Ubuntu 24.04
  • Termix: 26.10.6 on Ubuntu 24.04
  • Tinyproxy: 1.11.1 on Ubuntu 24.04
  • Tyk Gateway: 5.16.0 on Ubuntu 24.04
  • Vinyl Cache: 9.1.0 on Ubuntu 24.04
  • WebSSH: 1.6.3 on Ubuntu 24.04
  • Wiredoor Ingress: 1.8.0 on Ubuntu 24.04
  • WireGuard VPN: Ubuntu 24.04
  • X2Go Server: 4.1.0.6 on Ubuntu 24.04
  • Yggdrasil: 0.5.15 on Ubuntu 24.04
  • Zoraxy: 3.3.4 on Ubuntu 24.04

Security model

Every version in this listing follows the same model:

  • No default login. Administrator passwords, database passwords and application secrets are generated on the first boot of each instance and written to a root-only file. No two instances share a secret.
  • Only the documented ports. Each guide lists the ports the product needs. Open only those in your security group.
  • Internal services on localhost. Databases and caches listen on 127.0.0.1 only. Never open database ports (3306, 5432, 6379) to the internet.
  • Patched base. The operating system is fully patched when the image is built.
  • HTTPS on first boot for Anubis 1.28.2 on Ubuntu 24.04, Apache Guacamole 1.6.0 + Keycloak on Ubuntu 24.04, Apache Guacamole 1.6.0 on Ubuntu 24.04, BFE 1.8.8.6 on Ubuntu 24.04, Expose 3.2.0 on Ubuntu 24.04, Ferron 2.8.1 on Ubuntu 24.04, Headscale 0.29.6 on Ubuntu 24.04, Nginx UI 2.9.3 on Ubuntu 24.04, Sozu Reverse Proxy 2.3.3 on Ubuntu 24.04, Termix 26.10.6 on Ubuntu 24.04, Tyk Gateway 5.16.0 on Ubuntu 24.04, WebSSH 1.6.3 on Ubuntu 24.04, Wiredoor Ingress 1.8.0 on Ubuntu 24.04, Zoraxy 3.3.4 on Ubuntu 24.04, freenginx 1.31.4 on Ubuntu 24.04, frp Server 0.71.1 on Ubuntu 24.04, sish 4.0.0 on Ubuntu 24.04 and sslh 2.3.1 on Ubuntu 24.04. These versions serve HTTPS with a per-instance certificate from first boot. Vinyl Cache 9.1.0 on Ubuntu 24.04 serves HTTP. Its guide shows how to add a certificate on the instance or behind an Application Load Balancer with AWS Certificate Manager. The following versions open no web port (80/443): 3proxy Proxy Server 0.9.9.1 on Ubuntu 24.04, E2guardian 5.5.9r with Squid on Ubuntu 24.04, E2guardian Filtering Proxy 5.5.9r on Ubuntu 24.04, EasyTier 2.6.4 on Ubuntu 24.04, Flexisip SIP Proxy 2.6.2 on Ubuntu 24.04, G3 Proxy 1.12.4 on Ubuntu 24.04, LanCache 2026.10.09 on Ubuntu 24.04, OpenVPN Community 2.7.8 on Ubuntu 24.04, Privoxy 4.2.0 on Ubuntu 24.04, SSHPiper 1.6.1 on Ubuntu 24.04, Squid 7.8 on Ubuntu 24.04, Tinyproxy 1.11.1 on Ubuntu 24.04, WireGuard VPN on Ubuntu 24.04, X2Go Server 4.1.0.6 on Ubuntu 24.04, Yggdrasil 0.5.15 on Ubuntu 24.04, accel-ppp VPN Server 1.14.0 on Ubuntu 24.04, dnscrypt-proxy 2.1.20 on Ubuntu 24.04 and spiped Secure Pipe Daemon 1.6.4 on Ubuntu 24.04. You manage them over SSH, and their guide lists the ports they use.
  • TLS on first boot for Outline Server 1.12.3 on Ubuntu 24.04 and stunnel TLS Proxy 5.82 on Ubuntu 24.04. These versions encrypt client connections with their own protocol over TLS (not HTTPS), using a per-instance certificate from first boot. Their guide gives the port and explains how to trust the certificate.

Choose your product

Product Software version OS Guide

3proxy Proxy Server 3proxy Proxy Server 0.9.9.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

accel-ppp VPN Server accel-ppp VPN Server 1.14.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Anubis Anubis 1.28.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Apache Guacamole Apache Guacamole 1.6.0 + Keycloak on Ubuntu 24.04 Ubuntu 24.04 Open guide

Apache Guacamole Apache Guacamole 1.6.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

BFE BFE 1.8.8.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide

dnscrypt-proxy dnscrypt-proxy 2.1.20 on Ubuntu 24.04 Ubuntu 24.04 Open guide

E2guardian E2guardian 5.5.9r with Squid on Ubuntu 24.04 Ubuntu 24.04 Open guide

E2guardian Filtering Proxy E2guardian Filtering Proxy 5.5.9r on Ubuntu 24.04 Ubuntu 24.04 Open guide

EasyTier EasyTier 2.6.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Expose Expose 3.2.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Ferron Ferron 2.8.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Flexisip SIP Proxy Flexisip SIP Proxy 2.6.2 on Ubuntu 24.04 Ubuntu 24.04 Open guide

freenginx freenginx 1.31.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

frp Server frp Server 0.71.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

G3 Proxy G3 Proxy 1.12.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Headscale Headscale 0.29.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide

LanCache LanCache 2026.10.09 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Nginx UI Nginx UI 2.9.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide

OpenVPN Community OpenVPN Community 2.7.8 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Outline Server Outline Server 1.12.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Privoxy Privoxy 4.2.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

sish sish 4.0.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Sozu Reverse Proxy Sozu Reverse Proxy 2.3.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide

spiped Secure Pipe Daemon spiped Secure Pipe Daemon 1.6.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Squid Squid 7.8 on Ubuntu 24.04 Ubuntu 24.04 Open guide

SSHPiper SSHPiper 1.6.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

sslh sslh 2.3.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

stunnel TLS Proxy stunnel TLS Proxy 5.82 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Termix Termix 26.10.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Tinyproxy Tinyproxy 1.11.1 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Tyk Gateway Tyk Gateway 5.16.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Vinyl Cache Vinyl Cache 9.1.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

WebSSH WebSSH 1.6.3 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Wiredoor Ingress Wiredoor Ingress 1.8.0 on Ubuntu 24.04 Ubuntu 24.04 Open guide

WireGuard VPN WireGuard VPN on Ubuntu 24.04 Ubuntu 24.04 Open guide

X2Go Server X2Go Server 4.1.0.6 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Yggdrasil Yggdrasil 0.5.15 on Ubuntu 24.04 Ubuntu 24.04 Open guide

Zoraxy Zoraxy 3.3.4 on Ubuntu 24.04 Ubuntu 24.04 Open guide

How to tell which version you launched

The EC2 console shows the version you chose on the instance's launch record (AMI name and description). Your AWS Marketplace subscription shows it too.

On the instance itself, the login message after you connect over SSH names the product and its credentials file. Open the matching guide above for the rest of the walk-through.

Support

SecureAnyCloud provides 24/7 support for every version in this listing through the AWS Marketplace support channel. Raise a ticket in the Marketplace console or email sales@secureanycloud.com.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Deploy on AWS

Launch Hardened WireGuard VPN & VPN, Proxy and Remote Access AMIs with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com

Deploy on AWS