ejabberd XMPP Messaging Server - AMI by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Deploying an XMPP messaging server from scratch means installing Erlang, configuring ejabberd, setting up a reverse proxy, hardening credentials, and separating data storage - hours of work before the first message is sent. This AMI eliminates that complexity. Within minutes of launch you have a fully configured ejabberd server accepting client connections, with its web admin console accessible behind nginx, a unique administrator account generated automatically, and your database on a dedicated resizable disk. Unlike hosted chat platforms, you retain full data sovereignty on your own AWS infrastructure while speaking the open XMPP standard.

ejabberd is a robust, massively scalable self-hosted XMPP (Jabber) real-time messaging server. It powers instant messaging, presence, multi-user chat rooms (MUC), publish-subscribe and push notifications for your own users and applications. Any standards-compliant XMPP client - desktop, mobile or web - can connect. The current release available is ejabberd .

• ejabberd installed from the official ProcessOne binary package with bundled Erlang/OTP runtime
• systemd managed service account, starting on boot and restarting on failure
• nginx reverse proxy fronting the web admin console on loopback, with WebSocket upgrade configured for XMPP-over-WebSocket and BOSH clients
• XMPP ports 5222 (client-to-server) and 5269 (server-to-server) exposed directly; only ports 5222, 5269, and 443 are open by default
• Dedicated data disk holds configuration, Mnesia database (accounts, rosters, rooms), and generated certificates - independently resizable and separate from the OS disk

Register users, create multi-user chat rooms, and manage rosters, shared roster groups and PubSub nodes from the web admin console or the command line. ejabberd handles client-to-server and federated server-to-server connections, offline message storage, message archive management, and push notifications. It clusters across multiple nodes for high availability and horizontal scale.

• Hardened first boot: A one-shot service generates a fresh administrator account with a password unique to that instance, grants it server-administration rights, and records the credentials in a file only the root user can read. No shared or default messaging account ships in the image.
• TLS enforcement: nginx is configured with TLS 1.2+ and modern cipher suites for the web admin console. Configure your trusted certificate for client and federation connections.
• Minimal attack surface: Only ports 5222, 5269, and 443 are open by default. Combine with AWS Security Groups and VPC network isolation for defense in depth.

1. Launch the AMI in your chosen AWS region and instance type
2. Ensure your Security Group allows inbound on ports 443, 5222, and 5269
3. SSH into the instance and read the generated admin credentials from the root-only file
4. Open the web admin console at https://your-instance-ip  in your browser
5. Sign in with the full Jabber ID and generated password
6. Register your first users and create chat rooms
7. For production, set your real XMPP domain and install a trusted TLS certificate

A built-in health endpoint answers on the reverse proxy for load-balancer and uptime checks.

• Healthcare messaging: A private, self-hosted messaging backbone for clinical teams requiring data sovereignty and network isolation on AWS
• Application-embedded chat: Real-time chat and notification service for your SaaS platform, delivering messages to thousands of concurrent users via standard XMPP clients
• Enterprise collaboration: Multi-user chat rooms and group messaging on your own infrastructure as a self-hosted alternative to third-party platforms
• Federated communications: An XMPP server that interoperates with other Jabber servers across organizational boundaries
• IoT and push notifications: PubSub-based event distribution to mobile and embedded devices at scale

24/7 technical support by email and live chat. Our engineers help with deployment, XMPP domain and certificate configuration, client and federation setup, chat-room and access-control design, clustering, storage and upgrade planning. Book a guided setup session by contacting our team to get your production deployment running with expert assistance.