Book Image

Learning RabbitMQ

By : Martin Toshev
Book Image

Learning RabbitMQ

By: Martin Toshev

Overview of this book

RabbitMQ is Open Source Message Queuing software based on the Advanced Message Queue Protocol Standard written in the Erlang Language. RabbitMQ is an ideal candidate for large-scale projects ranging from e-commerce and finance to Big Data and social networking because of its ease of use and high performance. Managing RabbitMQ in such a dynamic environment can be a challenging task that requires a good understanding not only of how to work properly with the message broker but also of its best practices and pitfalls. Learning RabbitMQ starts with a concise description of messaging solutions and patterns, then moves on to concrete practical scenarios for publishing and subscribing to the broker along with basic administration. This knowledge is further expanded by exploring how to establish clustering and high availability at the level of the message broker and how to integrate RabbitMQ with a number of technologies such as Spring, and enterprise service bus solutions such as MuleESB and WSO2. We will look at advanced topics such as performance tuning, secure messaging, and the internals of RabbitMQ. Finally we will work through case-studies so that we can see RabbitMQ in action and, if something goes wrong, we'll learn to resolve it in the Troubleshooting section.
Table of Contents (18 chapters)
Learning RabbitMQ
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Authentication


Let's consider the default setup of a RabbitMQ instance. It comes with a default guest user (with a guest password) known by anyone with basic knowledge about the broker. Moreover, this user has an administrator tag giving them full access to administer the broker, and, even worse, if the RabbitMQ instance port is visible to the outside world, remote commands can be executed using the rabbitmqctl utility on that workstation using the eval command. For this reason, it is advisable (not to say mandatory) to remove the guest user in production deployments. Although the latest versions of RabbitMQ allow only localhost access for the guest user, this still imposes a high risk for insider attacks. RabbitMQ stores information about users in an internal database (in the same location where Mnesia stores information about transient and persistent messages by default). RabbitMQ authentication is provided by means of the SASL (Simple Authentication and Security Layer) framework that...