Apache Qpid Broker-J on Ubuntu 24.04 LTS
by cloudimg
Pure Java AMQP message broker, authenticated and TLS secured on first boot
Apache Qpid Broker-J is an open source, production grade message broker from the Apache Software Foundation, written in pure Java. It implements every major version of the AMQP wire protocol, 0-8, 0-9, 0-91, 0-10 and 1.0, so clients written for almost any AMQP library connect to one broker. It provides durable queues, topics and exchanges for reliable asynchronous messaging between applications and services, and ships with an HTTP web management console for creating queues, browsing messages, managing users and watching live broker activity. This cloudimg image runs Qpid Broker-J 10.0.1 from the official Apache release on Ubuntu 24.04 LTS, on the OpenJDK 17 runtime, under systemd as an unprivileged service user.
The broker answers AMQP on port 5672 and TLS AMQPS on port 5671. The web management console binds to loopback and is fronted by an nginx reverse proxy on port 443 with a per instance TLS certificate, so the console is encrypted and never exposed in clear text. Connect any AMQP client, such as Qpid Proton, Apache Qpid JMS or pika, with the broker address and the generated credential.
Security is built in. A stock Qpid Broker-J install ships with a known guest login that works on both the messaging port and the console; this image closes that gap. It ships a single password based authentication provider bound to every port, with no guest user and no anonymous access. On the first boot of every VM a unique administrator password and a per instance TLS certificate are generated, and the login is written to a root only file. As a result an anonymous or wrong credential connection is refused, no two instances share a credential, and no known credential is ever baked into the image.
Apache Qpid Broker-J is distributed under the Apache License 2.0, free and open source with no per CPU or per deployment fee. cloudimg is not affiliated with or endorsed by the Apache Software Foundation; Apache Qpid is a mark of its owner. cloudimg provides packaging, systemd hardening, the secure by default authentication configuration, per instance credential and TLS automation, security patching, and 24/7 support with a guaranteed 24 hour response SLA.