OpenVPN AWS images (ami's) expired?

BrianDX

The OpenVPN Access Server images in the AWS Marketplace (ex: https://aws.amazon.com/marketplace/pp/prodview-y3m73u6jd5srk?sr=0-1&ref_=beagle&applicationId=AWS-EC2-Console) have a deprecation date that has passed:

"Description": "OpenVPN Access Server 2.8.3 publisher image from https://www.openvpn.net/.",
"EnaSupport": true,
"Hypervisor": "xen",
"ImageOwnerAlias": "aws-marketplace",
"Name": "OpenVPN Access Server Community Image-fe8020db-5343-4c43-9e65-5ed4a825c931-ami-06585f7cf2fb8855c.4",
"RootDeviceName": "/dev/sda1",
"RootDeviceType": "ebs",
"SriovNetSupport": "simple",
"VirtualizationType": "hvm",
"DeprecationTime": "2022-07-31T17:45:49.000Z"

This makes them unavailable to lookups in automation like Terraform. Are there newer replacements for these?

openvpn_inc

Hi Brian,

I just asked about that. The new images are planned for this year, but there's no firm date yet. Sorry.

regards, rob0

BrianDX

Thanks for the update. In case it helps anyone else, since 4.21.0 terraform-provider-aws has supported an include_deprecated option to aws_ami lookups that will return deprecated images as well.

openvpn_inc

Thanks Brian,

That is good information. I have a bit more also. The new image is of course on the way but not immediately. If you or any other user needs it urgently for some reason please open a ticket at https://openvpn.net/support/ and ask; if necessary, development resources can be reallocated.

That said, it should not be urgent. It's just a few simple steps to upgrade the Ubuntu and the Access Server software on the 18.04 AMI. That can be done before initial use, and if needed you can import saved databases.

regards, rob0

BrianDX

Thanks. We attempted that with https://support.openvpn.com/hc/en-us/requests/424561, but they sent us here. I think we can work with the existing deprecated ami using the flag mentioned earlier, as long as it doesn't get removed from aws-marketplace.