Rabbitmq on 443

[srinivas vellanki]

Hi 

We have installed rabbitmq on centos6.5 version.  default configuration works fine.  we want expose rabbitmq quesues on port 443(instead of defaul) with mutual certification

did all the googling and necessary configuration settings has been done.   

Is it possible to use rabbitmq to expose on 443 with mutaul authentications? and can some one share the steps for doing it on centos 6.5

Regards

Srinivas

[Michael Klishin]

TLS configuration is covered in http://www.rabbitmq.com/ssl.html.
http://www.rabbitmq.com/networking.html can be useful as well .
--
MK

Staff Software Engineer, Pivotal/RabbitMQ

[Gotthard, Petr]

Please note that 443 is (or at least may be) a privileged port and if you run rabbitmq as non-root, the rabbitmq may have troubles binding that port directly.

One can either listen on 5671 and setup port forwarding from 443 to 5671, e.g. by
*nat
:PREROUTING ACCEPT [0:0]
-A PREROUTING -i eth0 -p tcp --dport 443 -j REDIRECT --to-port 5671

Or you need to enable rabbit to listen on 443, e.g. by something like
setcap cap_net_bind_service=+ep /usr/lib/erlang/erts-5.9.1/bin/beam.smp
semanage port -m -t rabbitmq_port_t -p tcp 443


Petr

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To post to this group, send an email to rabbitm...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Gotthard, Petr]

Madhavi,

 

I think that the [rabbitmq-users] list is the right place to discuss the RabbitMQ issues and solutions.

 

Could you please describe the symptoms?

·         Does RabbitMQ starts correctly? Does it display some error message?

·         Does `netstat` indicate that RabbitMQ listens for TCP connections on 5671? 443?

·         Does something appear in the log when you establish a connection to Rabbit?

 

 

Petr

 

From: Madhavi Chilla [mailto:madh...@hcl.com]
Sent: 13. srpna 2015 14:43
To: Gotthard, Petr; sup...@rabbitmq.com
Subject: RE: [rabbitmq-users] Rabbitmq on 443

 

Petr,

 

Our team tried the steps suggested by you that are shared by Srini,  but no luck. […], who else can help us.

 

Please advise.

 

RabbitMQ team, Do you have any solution for below mentioned port 443 issue?

 

Thanks,

Madhavi

 

 

From: srinivas vellanki [mailto:vellan...@gmail.com]
Sent: Thursday, August 13, 2015 11:02 AM
To: Srinivas Vellanki - ERS, HCL Tech
Subject: FW: [rabbitmq-users] Rabbitmq on 443

 

---

::DISCLAIMER::
----------------------------------------------------------------------------------------------------------------------------------------------------

The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only.
E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted,
lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents
(with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates.
Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the
views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification,
distribution and / or publication of this message without the prior written consent of authorized representative of
HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately.
Before opening any email and/or attachments, please check them for viruses and other defects.

----------------------------------------------------------------------------------------------------------------------------------------------------

[Michael Klishin]

 On 13 August 2015 at 17:14:43, Gotthard, Petr (petr.g...@honeywell.com) wrote:
> Madhavi,
>
> I think that the [rabbitmq-users] list is the right place to discuss
> the RabbitMQ issues and solutions.
>
> Could you please describe the symptoms?
> · Does RabbitMQ starts correctly? Does it display some error
> message?
> · Does `netstat` indicate that RabbitMQ listens for TCP connections
> on 5671? 443? 
> · Does something appear in the log when you establish a connection
> to Rabbit?

In addition to Petr's sound  suggestions, I'd question the whole idea.

RabbitMQ can run on port 443 with TLS (or even without it) but it *not* a commonly
used port for RabbitMQ protocols and running RabbitMQ on that port is not a common
thing to do.

Why do you need to run specifically on 443? Or do you simply want to have TLS enabled
(potentially TLS only)?

[Michael Klishin]

On 13 August 2015 at 18:32:44, Durga Bhattacharjee (durga...@hcl.com) wrote:
> We have tried with changing iptables entry by redirection but
> nothing works as of now . Please let us know if anything needs to
> be checked from OS end .

Durga,

I'm afraid asking the RabbitMQ community to investigate generic *nix system
administration issues you're having is a bit too much to ask for, at least for rabbitmq-users.

Beyond that, "nothing works" is not terribly specific. We don't have access to your
environment, so please put in some effort of your own into investigating this.

We've mentioned the doc guides that explain how to run RabbitMQ with TLS, including
port configuration. Just in case, here they are one more time:

http://www.rabbitmq.com/ssl.html
http://www.rabbitmq.com/networking.html 

[John F]

On Thursday, August 13, 2015 at 4:17:11 PM UTC+2, Michael Klishin wrote:

RabbitMQ can run on port 443 with TLS (or even without it) but it *not* a commonly
used port for RabbitMQ protocols and running RabbitMQ on that port is not a common
thing to do.

Why do you need to run specifically on 443? Or do you simply want to have TLS enabled
(potentially TLS only)?

In a lot of corporate environments outgoing ports above 1024 are blocked, and sometimes you can't get the IT guys/girls to open the ports. This would be one way of going below the radar.

[Michael Klishin]

So after I asked you to not post generic networking questions on rabbitmq-users, you figured contacting me directly is OK.

Yes, just like any other port that's not used by another process, e.g. httpd or nginx (443 is the standard https port, one of yhe reasons to not use it for RabbitMQ).

MK

> On 14/8/2015, at 21:57, Sandeep vasudevan Variyathkadavil <sandeepva...@hcl.com> wrote:
>
> We are able to configure all ports for rabbitmq on Linux servers except 443 port. Is it possible(any option) to configure 443 port for rabbitmq on Linux servers?