Hardened WireGuard VPN & VPN, Proxy and Remote Access

AWS Networking
Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

This listing is a collection of separate, one per product and version, chosen from the Software version dropdown at launch.

Why the cloudimg image

This image arrives installed, configured and hardened, so there is no manual setup before you can use it. It is built on a patched base, runs with credentials generated uniquely for your instance on first boot, and passes an automated health check before every release. Every deployment is backed by 24/7 support from cloudimg engineers.

Key features

  • No default login: administrator passwords, database credentials and application secrets are generated uniquely on each instance's first boot
  • Fully patched at build time, with internal services such as databases and caches bound to localhost; each product's guide covers HTTPS and the ports it needs
  • WireGuard VPN, wg-easy WireGuard VPN, OpenVPN Community, Apache Guacamole, 3proxy Proxy Server, 3X-UI, accel-ppp VPN Server and more: pick one as the software version at launch

Description

This is a repackaged open source software product wherein additional charges apply for security hardening, secure-by-default configuration and per-instance setup.

What cloudimg adds to every version

  • Every image is built by cloudimg on a fully patched base with the latest security updates applied at build time.
  • Services ship secure by default: administrator passwords, database credentials and application secrets are generated uniquely on the first boot of each instance, so no default login exists and no two instances share a secret.

Included products

  • 3proxy Proxy Server 0.9.7
  • 3X-UI 3.5.0
  • accel-ppp VPN Server 1.14.0
  • Anubis 1.25.0
  • Apache Guacamole 1.6.0
  • Apache Guacamole 1.6.0 + Keycloak
  • Apache ShenYu 2.6.1
  • BFE 1.8.4
  • Dante SOCKS Proxy Server 1.4.4
  • dnscrypt-proxy 2.1.18
  • E2guardian 5.5.9r with Squid
  • E2guardian Filtering Proxy 5.5.9r
  • EasyTier 2.6.4
  • Expose 3.2.0
  • Ferron 2.8.1
  • Flexisip SIP Proxy 2.6.1
  • freenginx 1.30.1
  • frp Server 0.69.1
  • G3 Proxy 1.12.3
  • Headscale 0.29.2
  • LanCache 2026.08.01
  • Nexterm
  • Nginx UI 2.4.2
  • OpenIKED 7.3
  • OpenVPN Community 2.6
  • Outline Server 1.12.3
  • Privoxy 3.0.34
  • sish 2.23.0
  • Sozu Reverse Proxy 2.2.0
  • spiped Secure Pipe Daemon 1.6.4
  • Squid 6.14
  • SSHPiper 1.5.4
  • sslh 2.3.1
  • stunnel TLS Proxy 5.79
  • Tengine 3.1.0
  • Termix 2.5.1
  • Tinyproxy 1.11.1
  • Tyk Gateway 5.14.0
  • Vinyl Cache 9.0.1
  • WebSSH 1.6.3
  • wg-easy WireGuard VPN 15.3.0
  • Wiredoor Ingress 1.7.3
  • WireGuard VPN
  • X2Go Server 1.0
  • Yggdrasil 0.5.14
  • Zoraxy 3.3.3

Network and access defaults

  • Internal services such as databases and caches are bound to localhost, and each product's guide covers enabling HTTPS, the ports it needs and day-two operations.

This listing is a collection of separate AMIs, one per product and version, chosen from the Software version dropdown at launch.

Support

cloudimg provides 24/7 technical support for every version in this listing by email and live chat, 365 days a year, with a 24-hour response SLA: support@cloudimg.co.uk.

Trademarks

All product names are trademarks of their respective owners. cloudimg is not affiliated with or endorsed by any of them.

Related technologies

openvpn communityapache guacamole3x-uianubisapache shenyubfee2guardianeasytierexposeferronfreenginxfrp serverheadscalelancachenexterm