Skip to main content

RabbitMQ 3.13.8 is released

· One min read

RabbitMQ 3.13.8 is a new patch release in the 3.13.x series. This series is currently covered by commercial support only.

For publicly available open source releases, see the 4.0.x series.

Release Artifacts

Release artifacts for the 3.13.x series can be obtained via the Broadcom customer portal.

Upgrade Guidance

If upgrading from a version prior to 3.13.9, please consult the 3.13.0 release notes.

Security Best Practices: epmd

· One min read

Security Best Practices: epmd

The Erlang Port Mapper Daemon (epmd) is a built-in component that helps Erlang-based applications (including RabbitMQ) discover each other’s distribution ports. Together with DNS for hostname resolution, epmd is a piece of infrastructure RabbitMQ nodes rely on for clustering, inter-node communication and CLI tools connectivity.

While epm is very limited in scope, its exposure to the public Internet often means that Erlang distribution ports are also exposed. This creates a potential security risk: if attackers find these distribution ports, they'd be one secret value away from being able to run CLI commands against the node (or cluster).

Recent scans have revealed over 85,000 instances of publicly accessible epmd, with roughly half associated with RabbitMQ servers.

Fortunately, all it usually takes to mitigate this risk is limiting network access to a range of ports. epmd and inter-node communication can also be limited to local network interfaces, in particular for single node clusters used for running tests.

Read the full article on the Erlang Ecosystem Foundation blog.

AMQP 1.0 Filter Expressions

· 6 min read

RabbitMQ 4.1 introduces an exciting new feature: AMQP filter expressions for streams.

This feature enables RabbitMQ to support multiple concurrent clients, each consuming only a specific subset of messages while preserving message order. Additionally, it minimizes network traffic between RabbitMQ and its clients by dispatching only the messages that match the clients' interests.

In this blog post, we’ll explore what AMQP filter expressions are and walk through a simple Java example of how to use them.

Package Repository Updates

· 2 min read

Team RabbitMQ has two updates related to our Debian and RPM repositories:

  1. On August 18, 2024, Team RabbitMQ's PackageCloud account will be discontinued
  2. Cloudsmith mirror repositories now use *.rabbitmq.com domains, please update your repository definition files