A private MQTT broker for devices and services. Eclipse Mosquitto v2.1.2 on Ubuntu 24.04 with TLS, per-user topic permissions, message persistence and a built-in walkthrough. Certificates and passwords are generated on each instance.
Run a private MQTT broker in your own account. This image runs Eclipse Mosquitto v2.1.2 over TLS, with three example users and a topic ACL already set up, file persistence and the mosquitto command-line clients.
Launch this version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager Session Manager. You land as ssm-user; run sudo -iu ubuntu to switch to the ubuntu account. SSH is off: no key pair is attached and no inbound rule is needed. First boot creates TLS material, local MQTT users and topic ACL; nothing sensitive is baked into the image. Mosquitto listens on mqtts://127.0.0.1:8883. Use Session Manager port forwarding or a private proxy for client access. Keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. IAM is optional unless you add AWS-targeted automation. This recipe includes no browser dashboard.
Reach it from other machines: To serve devices in your VPC, issue a server certificate that includes the private IP or DNS name your clients use, change the listener line in /etc/mosquitto/mosquitto.conf to listener 8883 and allow TCP 8883 only from your clients. Keep TLS on.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. The Eclipse Foundation publishes Mosquitto under EPL-2.0 OR BSD-3-Clause; Software Sushi supplies the AMI recipe, pinned source build compiled with TLS, first-boot identity and setup documentation without claiming upstream endorsement.
Highlights
Pinned Mosquitto v2.1.2 built from official source with TLS enabled.
Loopback mqtts defaults with automatic per-instance TLS, users and ACL.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
This listing uses one pricing dimension: an hourly software fee for running the broker on a t3.medium EC2 instance. You pay this fee for each hour the instance runs, so your cost scales with uptime. There are no tiers or quantity choices to compare. AWS charges you separately for the underlying infrastructure, including EC2, EBS storage, and data transfer. Those charges are not part of the software fee shown in the pricing table.
Top-of-mind questions for buyers
What hardware does the t3.medium hourly fee cover, and what specs are recommended?
The hourly fee covers running the broker on a t3.medium EC2 instance. The vendor recommends an encrypted gp3 root volume of at least 16 GiB and at least 2 GiB of memory. You connect through AWS Systems Manager Session Manager, so no inbound security group rules are needed.
Am I charged the software fee when the instance is stopped?
The hourly software fee applies only while the instance runs. If you stop the instance, the software fee stops accruing. Stopped instances may still incur AWS storage charges for the attached EBS volume, but those are separate from the software fee shown in the pricing table.
What costs are not included in the hourly software fee?
The software fee covers only the broker image. AWS bills EC2 compute, EBS storage, and data transfer separately. The image uses loopback TLS defaults and runs headless, so there is no browser dashboard or external service dependency bundled into the fee.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are billed by AWS and are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Eclipse Mosquitto v2.1.2 on Ubuntu 24.04 LTS for t3.medium. Includes loopback TLS MQTT on 127.0.0.1:8883, username/password identity, topic ACL, file persistence, and first-boot TLS and credential setup. Connect with Session Manager as ubuntu and run bash /opt/sushi/docs/demo.sh after first boot.
Additional details
Usage instructions
Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Connect MQTT clients to mqtts://127.0.0.1:8883 through port forwarding.
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include Eclipse Foundation or Mosquitto project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
A private, TLS-secured NATS message broker for service-to-service messaging in your own AWS account. Includes per-user subject permissions, the nats CLI and a built-in walkthrough. Certificates and passwords are generated on each instance at first boot.
Mosquitto is an open-source MQTT message broker. MQTT is a lightweight publish/subscribe messaging protocol, suitable for IoT devices and low-bandwidth network environments.
LiteLLM Proxy gives all your applications one OpenAI-compatible API in front of the LLM providers you use, so you can switch or combine models and keep provider keys in one place without changing application code. This Ubuntu 24.04 image starts the open source LiteLLM 1.104.2 gateway on first boot, with loopback-only HTTPS and a per-instance master key.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.