> For the complete documentation index, see [llms.txt](https://kb.rport.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kb.rport.io/install-the-rport-server/install-on-aws-ec2.md).

# Install on AWS EC2

### Start a new instance

{% hint style="danger" %}
Do not install the RPort server on an existing instance where other applications are already running. You will very likely create conflicts.
{% endhint %}

Because RPort has almost no dependencies, it will run flawlessly on any halfway modern Linux. We recommend using Debian 11 Bullseye. Debian is lightweight and secure.

* Log in to your AWS console, go to ECS and select your preferred region.
* Click "Launch Instances" and type `Debian Bullseye` into the search bar. 
* Click on "N results in AWS Marketplace"
* Look for the official Debian logo and select `Debian 11` provided by Debian.<br>

<div align="left"><img src="/files/2LIb4cScK36PWzHGi83O" alt="Use the marketplace"> <img src="/files/Irpd4MCjNepQ9rSTsEyv" alt="Select the official Debian image"></div>

The RPort server doesn't require a lot of CPU, disk, or memory resources. \
Selecting a `t2.micro` instance is perfect.\
✋**Do not launch the instance yet.** Click "Next: Configure Instance Details".

![Select a micro instance.](/files/-Mess0pvYHEdQ05WyCvQ)

On "Step 3: Configure Instance Details" you don't have to change anything. Take over all the pre-selected defaults. Click "Next: Add Storage".&#x20;

On "Step 4: Add Storage" you don't have to change anything. 8 GiB is fairly enough disk storage. Take over all the pre-selected defaults. Click "Next: Add Tags".&#x20;

On "Step 5: Add Tags" you don't have to change anything. But feel free to add tags to keep your ECS instance well organized. Click "Next: Configure Security Group".&#x20;

On "Step 6: Configure Security Group" setting up the security group is crucial. Enter the following settings.

| Type           | Protocol | Port Range    | Source           | Description        |
| -------------- | -------- | ------------- | ---------------- | ------------------ |
| SSH            | TCP      | `22`          | `0.0.0.0/0`      | SSH                |
| All ICMP -IPv4 | ICMP     | `0-65535`     | `0.0.0./0, ::/0` | ICMP PING          |
| HTTP           | TCP      | `80`          | `0.0.0./0, ::/0` | HTTP               |
| HTTPS          | TCP      | `443`         | `0.0.0./0, ::/0` | HTTPS              |
| Custom TCP     | TCP      | `20000-30000` | `0.0.0./0, ::/0` | RPort Tunnel Range |

![Security Group](/files/-MesuG8I8xusGQx_Stk_)

{% hint style="warning" %}
**Do not skip the ICMP IPv4 rule.** Your server must respond to ICMP ping echo requests. Otherwise, the automated setup of DNS and SSL will fail.
{% endhint %}

After creating the security group click "Review and launch".&#x20;

{% hint style="success" %}
Don't worry about the warning "Your security group, RPort Server, open to the world. That's intended.&#x20;
{% endhint %}

Now click "Launch" to launch the instance. On the last step select which SSH keys to use. The decision is up to you. Finally, launch the instance.&#x20;

### Install the RPort server on your new ECS2 instance

From the list of instances, grab the public ipv4 address of your newly created instance.&#x20;

![Grab the IP address of the new instance.](/files/-MesySYRDb5glz_MY1-R)

Connect over SSH to the instance using the `admin` user. Usually, you must specify the private key created for the instance or the region. For example, `ssh -i .ssh/ec2-ohio.pem admin@18.221.7.172`

After the login, change to the root account by typing in `sudo -i`.

👉 Now proceed to [Install RPort on any virgin cloud VM](/install-the-rport-server/install-rport-on-any-virgin-cloud-vm.md)