iPerf3 Network Throughput Server - Pre-Configured

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

## Why a pre-configured iPerf3 AMI

Installing iPerf3 on a bare instance takes seconds, but hardening it for repeatable measurement takes longer. You need a systemd unit, a restricted service account, a locked-down filesystem, unattended security updates, a sensible security group, and a set of client commands to hand out. This image does all of that for you: launch it and a hardened iPerf3 throughput server is listening on TCP and UDP port 5201 within minutes, with no manual setup.

## How it works

iPerf3 is the de-facto open source tool for actively measuring the maximum achievable bandwidth on IP networks. This image delivers it as a production-ready measurement endpoint:

• Instant readiness: iPerf3 runs as a hardened systemd service with automatic restarts and clean logging, so the server accepts connections as soon as the instance is running.
• Secure by default: the service runs under a dedicated unprivileged system user with NoNewPrivileges and a restricted filesystem, so a network test never runs with elevated privileges.
• Per-instance details file: on first boot the image writes a file with the server public IP, the port, and ready-to-paste TCP, UDP and reverse client commands, so you can start testing immediately.
• Fully patched OS: the operating system ships with all security updates applied and unattended security updates enabled.

## Working within your AWS environment

• Amazon VPC: deploy into any VPC and subnet to measure throughput across Availability Zones, VPC Peering connections, and AWS Transit Gateway or Direct Connect paths.
• Security groups: the documented configuration opens SSH on port 22 and iPerf3 on port 5201 for TCP and UDP. The deployment guide shows how to restrict inbound 5201 to specific source CIDRs so only your authorised test clients can connect.

## Typical use cases

• Cloud-to-cloud and region-to-region throughput benchmarking
• On-premises to AWS path validation before and after a migration
• Capacity, MTU and jumbo frame testing
• Troubleshooting slow or degraded links
• Validating Transit Gateway or Direct Connect performance

## Security

iPerf3 has no built-in authentication, so exposure is controlled at the network layer. The deployment guide shows how to restrict inbound port 5201 to only the source networks you test from, and how to stop the service when you are not actively measuring, so an open measurement endpoint does not let arbitrary clients consume bandwidth.

## Getting started

A deployment guide is included covering instance type selection, security group configuration, and step-by-step instructions for running your first throughput test.

## About this product

This is a repackaged open source software product with additional charges for cloudimg support services. iPerf3 is distributed under a BSD-3-Clause permissive license. cloudimg is not affiliated with or endorsed by ESnet or Lawrence Berkeley National Laboratory. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.