Sold by: Salient Engineering
Deployed on AWS
Free Trial
No license required, remote access VPN solution leveraging SSH to tunnel encrypted traffic. Supports Linux and Mac clients.
Overview
The Salient SSH VPN server is a remote access solution that differs from traditional VPNs by using an SSH tunnel to securely manage traffic, instead of PPTP, L2TP, or IPSEC. This server enables users to provision and support an unlimited number of clients, where performance is limited only by the selected instance size.
The Salient SSH VPN provides data encryption, ensuring that sensitive information remains secure during transmission. Additionally, this appliance enables secure access to on-premises and cloud resources, making it ideal for remote work and cloud migration scenarios. By leveraging the Salient SSH VPN server, users benefit from enhanced security, seamless remote access, and scalable connectivity to their resources.
Highlights
- The Salient SSH VPN provides remote access to your AWS VPC
- Provides a secure, encrypted tunnel to your VPC - providing protection from unscrupulous internet service providers or Wi-Fi hotspots
- Protects origin IP address from destination hosts
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
AmazonLinux Amazon Linux 2
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.03 |
t3a.small | $0.03 |
t3.small | $0.03 |
t2.xlarge | $0.03 |
t3a.large | $0.03 |
t3.large | $0.03 |
t2.large | $0.03 |
t2.2xlarge | $0.03 |
t2.medium | $0.03 |
t3a.medium | $0.03 |
Dimensions summary
You pay by the hour for the software, billed per running instance. The ten dimensions map to different EC2 instance sizes across the t2, t3, and t3a families. Each size offers a different balance of compute and memory, from smaller options like t3a.small and t3.medium up to larger ones like t2.xlarge and t2.2xlarge. Pricing scales with the instance size you choose to run. The software fee applies on top of the standard AWS compute charges for that instance. Pick the size that fits your access and performance needs.
Top-of-mind questions for buyers
Each dimension maps to an EC2 instance size in the t2, t3, or t3a family. Larger sizes give more compute and memory for handling more VPN client connections or heavier traffic. Smaller sizes suit light, single-user access. Pick the size matching your expected number of tunnels and throughput.
The software fee meters per running instance-hour. A fully stopped instance stops accruing the hourly software charge. Underlying AWS storage costs for the stopped instance may still apply, but the software licence bills only while the instance runs.
Yes. The appliance automatically checks for and installs security updates each day, so you do not patch it manually. This maintenance is part of the running software you pay for by the hour, on top of standard AWS compute charges for the instance.
salientengineering.com+1
Helpful?
Vendor refund policy
Refunds are considered on a case-by-base basis. To request a refund, please contact us at: support at salientengineering.com
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
This release of the Salient SSH VPN is a production-ready appliance. The operating system is fully-up-to-date and all supporting packages have been updated as well.
Additional details
Usage instructions
- Run the sshvpn command to create a new SSH VPN user. For this example, our client will be an Ubuntu machine, so we will call this client "ubuntu": sudo sshvpn -a ubuntu
- Exit the SSH session with the server: exit
- Update the hostname in this command and use SFTP to retrieve the client installer script: sftp -i ~/.ssh/Salient.pem ec2-user@ec2-54-91-77-201.compute-1.amazonaws.com :/home/ec2-user/SSHVPN-ubuntu-Client.sh ./SSHVPN-ubuntu-Client.sh
- Now, copy the script to the client machine using SCP: scp -i ~/.ssh/Salient.pem ./SSHVPN-ubuntu-Client.sh ubuntu@ec2-44-211-227-138.compute-1.amazonaws.com :/home/ubuntu/SSHVPN-ubuntu-Client.sh
- Make the client installer script executable: chmod +x SSHVPN-ubuntu-Client.sh
- Run the installer script: sudo ./SSHVPN-ubuntu-Client.sh
And that's it! The SSH VPN can now be toggled on with:
Linux: sudo service sshvpn-ubuntu start
MacOS: sudo launchctl load /Library/LaunchDaemons/org.salient.sshvpn.plist
To toggle off the SSH VPN, run:
Linux: sudo service sshvpn-ubuntu stop
MacOS: sudo launchctl unload /Library/LaunchDaemons/org.salient.sshvpn.plist
Full usage instructions here: https://www.salientengineering.com/blog/how-to-setup-salient-ssh-vpn-in-aws-and-azure/
- Deploy the Salient SSH VPN into your AWS VPC. Ensure the server has a publicly accessible IP address.
- Connect to the Salient SSH VPN via SSH.
- Create a new client using the "sshvpn" command: sudo sshvpn -a exampleclient
- Exit the SSH session with the server.
- Use SFTP to retrieve the client installer script.
- Make the client installer script executable and run it on the client.
The SSH VPN can now be toggled on with: Linux: sudo service sshvpn-exampleclient start MacOS: sudo launchctl load /Library/LaunchDaemons/org.salient.sshvpn.plist
To toggle off the SSH VPN, run: Linux: sudo service sshvpn-exampleclient stop MacOS: sudo launchctl unload /Library/LaunchDaemons/org.salient.sshvpn.plist
Resources
Vendor resources
Support
Vendor support
We offer responsive and friendly support available to all Salient SSH VPN customers. Just reach out to us via email at: support at salientengineering.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Salient SAST (Static Application Security Testing) is a security solution designed to analyze source code for vulnerabilities. Setup is easy and notifications are in Slack and Discord.
A self-hosted, production-ready Qwen 2.5 7B model deployed into your AWS environment with a single click. Because everything runs entirely within your private cloud, your data stays secure, isolated, and fully under your control. Best of all, unlimited tokens.
Multi-Port Forward Server that listens on multiple user-defined ports. Inbound TCP or UDP traffic can be routed to internal or external hosts, and the destination ports can be changed.
The Reverse SSH Server provides access in to networks behind firewalls via persistent reverse SSH connections back to the server.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.