RabbitMQ rabbitmq_auth_mechanism_ssl plugin usage with stream clients

Products

• RabbitMQ

Issue/Introduction

There may be scenarios where RabbitMQ clusters are enforcing certificate based authentication via TLS for AMQP clients using the rabbitmq_auth_mechanism_ssl plugin. This is perfectly normal and supported, but can the same work with stream clients using the dedicated stream protocol?

Cause

This question can come up when comparing RabbitMQ core vs Stream plugin protocols.

Resolution

Confirmed: Stream clients utilizing the dedicate stream protocol can use the rabbitmq_auth_mechanism_ssl plugin for certificated based authentication over TLS.

Please see the below links to get more information about TLS and stream protocol ports, listeners, and certificate formats.

Additional Information

Reference:

• Stream Plugin
• RabbitMQ Streams Protocol Reference
• RabbitMQ core vs Stream Plugin
• rabbitmq_auth_mechanism_ssl plugin
• Authentication, Authorisation, Access Control