Serverless VPN — Zero Idle Cost Privacy on AWS Lambda MicroVMs

✅ Subscription Confirmed!

Follow the steps below to deploy and connect your VPN.

Why Serverless VPN?

No Compute When Idle

MicroVM terminates when you disconnect. Zero cost — no compute, no storage, nothing running until you start again.

~20s Cold Start

Fresh MicroVM launches from snapshot each session. No long provisioning — connected and routing traffic in about 20 seconds.

5 AWS Regions

Exit from US East, US West, Europe, or Tokyo. Choose your region for latency or geo-access.

Your Own Instance

Dedicated MicroVM in your AWS account. No shared servers. No traffic logging by us. ARM64 (Graviton).

One Command

./vpn.sh start connects. ./vpn.sh stop disconnects. 8-hour max session, auto-reconnects.

CloudTrail Auditable

All operations logged in your account. Enterprise compliance friendly. Full visibility.

Get Started in 10 Minutes

Subscribe on AWS Marketplace 7-day free trial. $5/mo after. Cancel anytime.
Deploy CloudFormation Stack One-click deploy creates IAM roles in your account. No servers, no VPC needed.
Launch Stack
Install wstunnel brew install wstunnel (Mac) or download from GitHub releases.
Run setup (one-time, ~5 min)
# Download vpn.sh
curl -sL https://waltsoft-marketplace-assets.s3.amazonaws.com/serverless-vpn/vpn.sh -o vpn.sh && chmod +x vpn.sh

# Build your MicroVM image (one-time)
./vpn.sh setup
Connect!
./vpn.sh start # All traffic through AWS
./vpn.sh stop # Back to normal ($0)
./vpn.sh status # Check exit IP

Transparent Pricing

$5/month

Software license (7-day free trial)

+ AWS compute costs in your account (you pay AWS directly)

Component	Cost	Notes
Active VPN (connected)	~$0.13/hr	2GB ARM MicroVM baseline (1 vCPU + 2GB memory, per-second billing)
Disconnected (terminated)	$0.00	MicroVM terminated — nothing running, no charges
Data transfer out	$0.09/GB	Standard AWS egress rates
Typical month (8hr/day)	~$24	Compute + data transfer
Light usage (2hr/day)	~$8	AWS costs only

Note: Suspend/resume is supported by the platform (~$0.01/cycle, $0.16/mo snapshot storage) but this product terminates on disconnect for zero idle cost. See AWS Lambda MicroVM Pricing for full platform pricing details.

Requirements

AWS account (Lambda MicroVMs available in us-east-1, us-east-2, us-west-2, eu-west-1, ap-northeast-1)
AWS CLI v2.27+ (brew upgrade awscli — required for lambda-microvms commands)
macOS or Linux (Windows via WSL2)
wstunnel binary (brew install wstunnel)

Before You Start

8-hour max session — As of today, MicroVMs have an 8-hour maximum lifetime. vpn.sh auto-reconnects when needed.
Streaming services may block AWS IPs — Netflix, Disney+, and some geo-restricted sites detect and block cloud provider IP ranges. Best suited for privacy, API testing, and general browsing.
Runs on Graviton (ARM64) — powered by AWS Graviton processors on Amazon Linux 2023.
Session VPN, not 24/7 — designed for work sessions, not always-on. Use for privacy during active browsing.
SOCKS5 proxy — routes TCP traffic (web, API). Does not tunnel UDP or raw IP traffic like a full WireGuard VPN.
macOS/Linux only — Windows supported via WSL2.
Terminates on disconnect — ./vpn.sh stop fully terminates the MicroVM. No ongoing charges. Fresh instance on next start (~20s).