Default Values & Credentials
This page provides a quick reference for all default credentials, URLs, network configurations, and other default values used in Waveshift deployments.
Security Notice
Always change default credentials immediately after first login. Default credentials are publicly documented and pose a significant security risk if left unchanged.
Default Credentials
Waveshift Console
URL: http://console.waveshift.internal
| Field |
Default Value |
| Username |
admin |
| Password |
admin123 |
| Port |
80 (HTTP) |
Change Immediately
Change the default admin password immediately after first login to secure your Waveshift deployment.
Kasm Workspaces
URL: https://workspaces.waveshift.internal
| Field |
Default Value |
| Username |
admin |
| Password |
Waveshift2025! |
| Port |
443 (HTTPS) |
Change Immediately
Change the default admin password immediately after first login to secure your Kasm deployment.
Control Hub Router
| Field |
Default Value |
| Username |
root |
| Password |
Waveshift2025! |
| Default IP |
10.34.0.1 |
| SSH Port |
22 |
| Web UI |
http://10.34.0.1 |
Router Access
Router credentials are used during the wavectl configure-hub process. After configuration, SSH access may be restricted.
Default URLs & Endpoints
Internal Domain
All Waveshift services use the internal domain:
Service URLs
| Service |
URL |
Protocol |
| Waveshift Console |
http://console.waveshift.internal |
HTTP |
| Kasm Workspaces |
https://workspaces.waveshift.internal |
HTTPS |
| wavectl Proxy |
http://localhost:8080 |
HTTP |
API Endpoints
Default Network Configuration
VPC and Subnets
| Component |
Default CIDR/Value |
| VPC CIDR |
10.32.0.0/23 |
| Public Subnet |
10.32.0.x/24 |
| Private Subnet |
10.32.1.x/24 |
Control Hub Networks
| Component |
Default Value |
| Control Hub CIDR |
10.34.0.0/24 |
| Control Hub IP |
10.34.0.1 |
WireGuard Configuration
| Setting |
Default Value |
| WireGuard Port |
51820 |
| Interface Name |
wg0 |
| MTU |
1420 |
VPN Bearer MTU Issue
Control hubs cannot currently connect through internet bearers that use VPN due to MTU mismatch. This will be fixed in a future release.
Default Instance Types
AWS EC2 Instances
| Component |
Default Instance Type |
Configurable |
| Waveshift Controller |
t3a.medium |
No |
| Kasm Workspaces |
m6a.2xlarge |
Yes (via --kasm-instance-type) |
| Access Servers |
t3a.small |
No |
| Egress Servers |
t4g.nano |
No |
Instance Specifications
t3a.medium (Waveshift Controller)
- vCPUs: 2
- Memory: 4 GiB
- Network Performance: Up to 5 Gbps
m6a.2xlarge (Kasm Workspaces - Default)
- vCPUs: 8
- Memory: 32 GiB
- Network Performance: Up to 12.5 Gbps
t3a.small (Access Servers)
- vCPUs: 2
- Memory: 2 GiB
- Network Performance: Up to 5 Gbps
t4g.nano (Egress Servers)
- vCPUs: 1
- Memory: 512 MiB
- Network Performance: Up to 5 Gbps
Default Ports
Waveshift Services
| Service |
Port |
Protocol |
Purpose |
| Waveshift Console |
80 |
TCP |
Web interface |
| Kasm Workspaces |
443 |
TCP |
Web interface (HTTPS) |
| SSH (AWS SSM) |
N/A |
SSM |
AWS Systems Manager sessions |
Control Hub
| Service |
Port |
Protocol |
Purpose |
| SSH |
22 |
TCP |
Remote administration |
| HTTP |
80 |
TCP |
Web UI |
| WireGuard |
51820 |
UDP |
VPN tunnel |
| DNS |
53 |
UDP/TCP |
Local DNS |
| DHCP |
67 |
UDP |
DHCP server |
Access Server
| Service |
Port |
Protocol |
Purpose |
| WireGuard |
51820 |
UDP |
VPN tunnel to Waveshift |
| SSH |
22 |
TCP |
AWS SSM access only |
Configuration File Defaults
wavectl.json Location
| Platform |
Default Location |
| All Platforms |
Current working directory |
| File Name |
wavectl.json |
Configuration Location
wavectl always uses wavectl.json in the current directory. Create separate directories for different deployments to keep configurations isolated.
AWS Configuration
| Setting |
Default Behavior |
| AWS Region |
Must be specified during wavectl init |
| AWS Profile |
Uses default profile if not specified |
| Identity Provider |
Must be specified during wavectl init |
Default Timeouts
Deployment Timeouts
| Operation |
Default Timeout |
| Infrastructure Deployment |
~10-15 minutes |
| Access Server Creation |
~3-5 minutes |
| Site Registration |
~1-2 minutes (includes automatic health check) |
| Router Configuration |
~2-3 minutes |
Default IAM Roles & Policies
Role Names
| Role |
ARN Pattern |
| Waveshift Controller |
arn:aws:iam::ACCOUNT:role/waveshift_controller_role |
| Kasm Workspaces |
arn:aws:iam::ACCOUNT:role/waveshift_kasm_role |
| Access Server |
arn:aws:iam::ACCOUNT:role/waveshift_wg_access_role |
| SSM Policy |
arn:aws:iam::ACCOUNT:policy/waveshift-ssm-policy |
Instance Profiles
| Profile |
Purpose |
| waveshift_controller_profile |
Attached to Waveshift controller EC2 |
| waveshift_kasm_profile |
Attached to Kasm EC2 |
| waveshift_wg_access_profile |
Attached to Access Server EC2 |
Default DNS Configuration
Route53 Configuration
| Setting |
Value |
| Private Hosted Zone |
waveshift.internal |
| DNS Records |
Auto-created for services |
DNS Records Created
| Record |
Type |
Purpose |
console.waveshift.internal |
A |
Waveshift Console |
workspaces.waveshift.internal |
A |
Kasm Workspaces |
Default Storage
S3 Buckets
| Bucket Purpose |
Naming Pattern |
| Kasm Persistent Profiles |
{account-id}-waveshift-workspaces-persistent-profiles |
Bucket Configuration
- Encryption: Enabled by default
- Versioning: Disabled by default
- Public Access: Blocked
Default Logging
CloudWatch Configuration
| Setting |
Default |
| CloudWatch Logs |
Enabled |
| VPC Endpoint |
Created for private access |
| Log Retention |
Per AWS default (indefinite) |
wavectl Command Defaults
Global Flags
| Flag |
Default Behavior |
--help |
Shows help for command |
Command-Specific Defaults
| Command |
Default Behavior |
wavectl init |
Creates wavectl.json in current directory |
wavectl deploy |
Uses region/profile from wavectl.json |
wavectl proxy |
Opens browser at http://localhost:8080 |
wavectl sites --add |
Assigns sites to access servers sequentially |
wavectl configure-hub |
Uses router IP 10.34.0.1 if not specified |
Quick Reference Card
Print-Friendly Quick Reference
Essential Credentials
- Waveshift Console: admin / admin123
- Kasm Workspaces: admin / Waveshift2025!
- Control Hub Router: root / Waveshift2025!
URLs
Default IPs
- Control Hub: 10.34.0.1
- Hub Network: 10.34.0.0/24
Ports
- WireGuard: 51820/UDP
- SSH: 22/TCP
- HTTP: 80/TCP
- HTTPS: 443/TCP
See Also