A high performance distributed MQTT broker written in Rust, secure by default with per instance credentials generated on first boot.
RMQTT is an open source, high performance distributed MQTT message broker written in Rust. It implements the MQTT v3.1, v3.1.1 and v5.0 protocols over plain TCP, TLS and WebSocket transports, and is designed to handle very large numbers of concurrent client connections with low latency. It supports retained messages, shared subscriptions, a $SYS system topic metrics tree and pluggable authentication and access control, making it a solid message backbone for IoT fleets, device telemetry, real time messaging and event driven applications.
It ships as a single self contained binary with no language runtime and no external services, so the broker starts instantly and needs no database to run. Because it speaks the standard MQTT protocol it works as a drop in message backbone with any standard MQTT client library.
The cloudimg image installs RMQTT under systemd and configures it to be secure by default. There is no default MQTT password: a unique broker username and password, and a unique self signed TLS certificate for the encrypted listener, are generated on each instance's first boot and stored in a root only file, never baked into the image. Anonymous access is disabled on every listener, authentication is enforced through a local backend, and sensible topic access control rules are applied out of the box. The management API is bound to loopback only, the operating system ships fully patched with unattended security updates enabled, and a paired step by step deploy guide plus 24/7 cloudimg support are included.
This is a repackaged open source software product wherein additional charges apply for cloudimg support services.
Stop spending hours compiling, configuring and hardening an MQTT broker from source. This image delivers RMQTT 0.22, a high-performance, distributed MQTT message broker written in Rust, fully installed and running under systemd. A working, secured MQTT broker is listening within minutes of launch with no manual compilation, no dependency troubleshooting and no configuration required to get started.
Eliminate insecure defaults. Unlike bare deployments that ship with default passwords, this image generates a unique broker username and password plus a unique self-signed TLS certificate on every instance's first boot. Nothing sensitive is ever baked into the image. Anonymous access is disabled on every listener, authentication is enforced through a local backend, and sensible topic access-control rules are applied out of the box.
Reduce operational burden. systemd manages the broker for automatic restarts and clean logging, and the operating system ships fully patched with unattended security updates enabled. RMQTT is designed to handle very large numbers of concurrent client connections with low latency, making it a solid message backbone for IoT fleets, device telemetry, real-time messaging and event-driven applications.
Protocol and transport support:
Key features include full MQTT v5.0 support with retained messages and shared subscriptions, a $SYS system-topic metrics tree for monitoring broker health, pluggable authentication and access control, a loopback-bound HTTP management API, and a single self-contained binary with no external dependencies. Because RMQTT speaks the standard MQTT protocol, it works as a drop-in message backbone with any standard MQTT client library and with common MQTT tooling such as Node-RED, Grafana and Home Assistant, and it can bridge edge devices to AWS IoT Core.
Getting started: launch the image, SSH into the instance and retrieve your generated MQTT credentials, then connect any MQTT client to port 1883 (TCP) or 8883 (TLS) and complete a publish and subscribe round-trip. The paired deployment guide walks you through first login, credential retrieval, authentication and ACL configuration, and TLS termination.
This is a repackaged open source software product with additional charges for cloudimg support services. RMQTT is distributed under the MIT license (dual-licensed MIT OR Apache-2.0). cloudimg is not affiliated with or endorsed by the RMQTT project. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.