rumqttd Lightweight MQTT Broker by cloudimg

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Stop spending hours compiling, configuring and hardening an MQTT broker from source. This image delivers rumqttd, a lightweight, high performance MQTT message broker written in Rust, fully installed and running under systemd. A working, secured MQTT broker is listening within minutes of launch with no manual compilation, no dependency troubleshooting and no configuration required.

Unlike C-based MQTT brokers such as Mosquitto, rumqttd is built in Rust, a memory-safe language that eliminates entire classes of buffer-overflow and use-after-free vulnerabilities common in C broker implementations. It is a single self-contained static binary with no runtime dependencies, so there are no shared libraries that break during OS upgrades and no plugin ecosystem to patch independently. The upstream rumqtt project is actively maintained, and rumqttd is designed to handle large numbers of concurrent client connections with low latency.

Many competing MQTT broker images ship with anonymous access enabled or a shared default password documented in public guides. This image takes the opposite approach:

• A unique broker username and password are generated on every instance's first boot
• Nothing sensitive is ever baked into the image: the shipped configuration carries only a placeholder
• Anonymous connections and wrong-credential connections are rejected with a constant-time credential comparison
• The broker runs as a dedicated unprivileged system user
• The operating system ships fully patched with unattended security updates enabled

• MQTT v3.1.1
• Plain TCP on port 1883, authentication required

Because rumqttd speaks the standard MQTT protocol, it works as a drop-in message backbone with any standard MQTT client library and with common MQTT tooling such as mosquitto clients, Node-RED, Grafana and Home Assistant, and it can bridge edge devices to AWS IoT Core.

Point a fleet of edge devices and sensors at the broker on port 1883, each authenticating with the per-instance credential, and publish telemetry to topic hierarchies that your backend services subscribe to for real-time processing, dashboards and alerting. Evaluate on a small instance with metered pricing and scale the instance size up as your connection count and message throughput grow.

Launch the image, SSH into the instance and retrieve your generated MQTT credentials, then connect any MQTT client to port 1883 with the username 'cloudimg' and complete a publish and subscribe round-trip. The paired deployment guide walks you through first login, credential retrieval, the authenticated round-trip, and adding further MQTT users. cloudimg support can advise on instance sizing for your expected connection count and throughput.

This is a repackaged open source software product with additional charges for cloudimg support services. rumqttd is distributed under the Apache-2.0 license. cloudimg is not affiliated with or endorsed by the rumqtt project. All product and company names are trademarks or registered trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.