lightweight, fault-tolerant message streaming, a durable replicated log with consumer groups built on NATS, ready to stream on first boot
Liftbridge provides lightweight, fault-tolerant message streams by implementing a durable, replicated log directly on top of NATS. It gives Kafka-style semantics, consumer groups, at-least-once delivery, message replay and log compaction, without the operational weight of a JVM-based streaming platform. A single Liftbridge node embeds its own NATS server, so it runs as a complete, self-contained streaming system with no external broker to operate.
cloudimg ships Liftbridge preconfigured as a single self-contained streaming node, with its embedded NATS server bound to loopback so the only exposed surface is Liftbridge's own API. Every instance mints its own certificate authority and a fresh server and client certificate on first boot, so the streaming API is protected by mutual TLS from the moment it starts and no two deployments ever share credentials or a baked default. The base is fully patched with unattended security updates enabled, and every image comes with a step by step deploy guide tested against the exact build and 24/7 cloudimg support.