accel-ppp - Remote Access VPN Server

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Overview

accel-ppp is a fast, multithreaded PPP server for Linux, used to terminate remote-access VPN sessions and authenticate users. This image builds accel-ppp 1.14.0 from its upstream source tag and configures it as a remote-access VPN gateway, ready to terminate encrypted client sessions the moment the instance boots. It leads with SSTP on TCP 443 (encrypted, single well-known port, works with the built-in Windows SSTP client and with sstp-client on Linux) and also enables L2TP on UDP 1701. The current release available is accel-ppp 1.14.0.

## Every Credential Is Unique to Your Instance

Nothing sensitive is baked into the image. On the first boot of your own instance a one-shot service generates the VPN user password, the management console password, the L2TP tunnel secret and a fresh self-signed SSTP TLS keypair, then records the connection details in a file only the root user can read. The published image ships with no VPN users and an empty TLS key directory, and the build proves this with five independent checks before capture. No two deployments of this image share a credential or a server identity.

## Durable Across Kernel Upgrades

accel-ppp can build out-of-tree kernel modules, which would break the first time the distribution moved the kernel. This image deliberately builds none of them: everything it needs from the kernel is in-tree and ships with the distribution's own kernel packages, upgraded in lockstep with the kernel. There is no DKMS and no kernel pinning, so unattended security upgrades are safe.

## Secure by Default

• The management console is bound to the local host only and is password protected per instance
• Every session must present a credential that exists in the secrets file, so the server is never an open relay
• IP forwarding and NAT are switched off, so the image is a private remote-access endpoint rather than an open internet gateway until you deliberately enable egress
• Security group scoping guidance is documented prominently in the deployment guide so VPN ports are reachable only from your own client source ranges

## Proven, Not Just Installed

The build does not accept a green service as proof. It establishes a real authenticated PPP session, gives the client an address from the pool, passes a packet across the tunnel to the gateway, and confirms the server lists the session, then proves that a wrong password, an unknown user and an empty password are each refused. The SSTP listener is checked to serve the per-instance certificate and complete the SSTP handshake.

## Get Started Quickly

Deploy the AMI, wait for first-boot credential generation to complete, then retrieve your connection details from the secrets file. Connect using the built-in Windows SSTP client or sstp-client on Linux. For advanced configurations, including RADIUS integration, CA-issued certificate replacement, full-tunnel egress, and multi-user setups, consult the included deployment guide or contact cloudimg support for a guided walkthrough.

## What You Get

• accel-ppp 1.14.0 built from the pinned upstream source tag
• SSTP (TCP 443) with a per-instance TLS certificate, and L2TP (UDP 1701)
• Per-instance credentials and a per-instance SSTP keypair generated at first boot
• Password-protected, loopback-only management console
• The latest operating-system security patches applied at build time
• A step-by-step deployment guide covering security-group scoping, RADIUS integration, and CA certificate replacement
• 24/7 cloudimg support by email and live chat

## cloudimg Support

24/7 technical support by email and chat. Help with client configuration, adding VPN users, pointing accel-ppp at your own RADIUS server, replacing the self-signed certificate with a CA-issued one, enabling full-tunnel egress, security-group scoping, and guided deployment walkthroughs for new customers.

## Licensing

accel-ppp is licensed under the GNU General Public License, version 2. The cloudimg charge covers packaging, security patching, image maintenance and 24/7 support.

All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.