R0

RMQTT 0.22 on Ubuntu 24.04

AWS Applications

A high performance distributed MQTT broker written in Rust, secure by default with per instance credentials generated on first boot.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

RMQTT is an open source, high performance distributed MQTT message broker written in Rust. It implements the MQTT v3.1, v3.1.1 and v5.0 protocols over plain TCP, TLS and WebSocket transports, and is designed to handle very large numbers of concurrent client connections with low latency. It supports retained messages, shared subscriptions, a $SYS system topic metrics tree and pluggable authentication and access control, making it a solid message backbone for IoT fleets, device telemetry, real time messaging and event driven applications.

It ships as a single self contained binary with no language runtime and no external services, so the broker starts instantly and needs no database to run. Because it speaks the standard MQTT protocol it works as a drop in message backbone with any standard MQTT client library.

Why the cloudimg image

The cloudimg image installs RMQTT under systemd and configures it to be secure by default. There is no default MQTT password: a unique broker username and password, and a unique self signed TLS certificate for the encrypted listener, are generated on each instance's first boot and stored in a root only file, never baked into the image. Anonymous access is disabled on every listener, authentication is enforced through a local backend, and sensible topic access control rules are applied out of the box. The management API is bound to loopback only, the operating system ships fully patched with unattended security updates enabled, and a paired step by step deploy guide plus 24/7 cloudimg support are included.

Common uses

  • Run a secure MQTT message backbone for an IoT fleet or device telemetry pipeline in minutes
  • Publish and subscribe over TCP, TLS or WebSocket with per instance credentials and anonymous access disabled
  • Back real time, event driven applications with a single self contained broker and no external dependencies

Key features

  • RMQTT, the open source high-performance distributed MQTT broker written in Rust - MQTT v3.1, v3.1.1 and v5.0 over TCP, TLS and WebSocket, with retained messages, shared subscriptions and a $SYS metrics tree, running under systemd within minutes of launch
  • Secure by default: anonymous access disabled on every listener - a per-instance MQTT password and a self-signed TLS certificate are generated on first boot and never baked into the image
  • 24/7 technical support from cloudimg for deployment, upgrades, authentication and ACL configuration, and TLS termination

Description

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Stop spending hours compiling, configuring and hardening an MQTT broker from source. This image delivers RMQTT 0.22, a high-performance, distributed MQTT message broker written in Rust, fully installed and running under systemd. A working, secured MQTT broker is listening within minutes of launch with no manual compilation, no dependency troubleshooting and no configuration required to get started.

Eliminate insecure defaults. Unlike bare deployments that ship with default passwords, this image generates a unique broker username and password plus a unique self-signed TLS certificate on every instance's first boot. Nothing sensitive is ever baked into the image. Anonymous access is disabled on every listener, authentication is enforced through a local backend, and sensible topic access-control rules are applied out of the box.

Reduce operational burden. systemd manages the broker for automatic restarts and clean logging, and the operating system ships fully patched with unattended security updates enabled. RMQTT is designed to handle very large numbers of concurrent client connections with low latency, making it a solid message backbone for IoT fleets, device telemetry, real-time messaging and event-driven applications.

Protocol and transport support:

  • MQTT v3.1, v3.1.1 and v5.0
  • Plain TCP on port 1883
  • MQTT over TLS on port 8883 (certificate generated on first boot)
  • MQTT over WebSocket on port 8080

Key features include full MQTT v5.0 support with retained messages and shared subscriptions, a $SYS system-topic metrics tree for monitoring broker health, pluggable authentication and access control, a loopback-bound HTTP management API, and a single self-contained binary with no external dependencies. Because RMQTT speaks the standard MQTT protocol, it works as a drop-in message backbone with any standard MQTT client library and with common MQTT tooling such as Node-RED, Grafana and Home Assistant, and it can bridge edge devices to AWS IoT Core.

Getting started: launch the image, SSH into the instance and retrieve your generated MQTT credentials, then connect any MQTT client to port 1883 (TCP) or 8883 (TLS) and complete a publish and subscribe round-trip. The paired deployment guide walks you through first login, credential retrieval, authentication and ACL configuration, and TLS termination.

This is a repackaged open source software product with additional charges for cloudimg support services. RMQTT is distributed under the MIT license (dual-licensed MIT OR Apache-2.0). cloudimg is not affiliated with or endorsed by the RMQTT project. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Related technologies

rmqttmqttmqtt brokermessage brokeriotpub subrustopen source