Me

Mercure on Ubuntu 24.04 LTS

Azure Streaming & Messaging

Mercure, a real time hub that pushes live updates to browsers and clients over server sent events, ready to authorise publish and subscribe with JSON web tokens the moment it boots.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Mercure is an open protocol and hub for pushing live data updates from a server to web browsers and other clients in real time, built on top of server sent events. Applications publish an update to a topic with a simple HTTP request, and every client subscribed to that topic receives it instantly over a single long lived connection, with no polling and no custom websocket code to maintain. Access is controlled with JSON web tokens: publishers present a token that grants the right to publish and subscribers present a token that grants the right to subscribe, so each side is authorised independently and private updates reach only the intended clients.

It suits adding live notifications, activity feeds, collaborative updates, progress indicators and dashboards to an existing application, whatever language or framework it is written in, because any client that speaks HTTP and server sent events can talk to the hub.

Why the cloudimg image

cloudimg delivers Mercure secure by default with no baked credential: the hub authorises every publish and every subscribe with a JSON web token, and on the first boot of every instance a fresh publisher signing key and a separate subscriber signing key are generated and written to a root only file, so no two instances share a secret and no upstream demo key ever governs a running hub. The demo and anonymous modes are left disabled, so the hub never accepts an unauthenticated publish or subscribe, and a web server in front terminates TLS with a certificate generated uniquely for each instance. The event stream is tuned so live updates are never held back, the base is fully patched with unattended security upgrades enabled, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.

Common uses

  • Add live notifications and activity feeds to an existing web or mobile application
  • Push real time progress, dashboards and collaborative updates over server sent events
  • Run a self hosted, JSON web token authorised real time hub on infrastructure you control