msgyard
Open source for message brokers

Tools for the brokers you already run.

Independent, community-built plugins and services for authentication, access analytics and day-to-day operations — on unmodified official releases, free to use.

Projects

On the main line

Each project lives in its own repository, works on its own and releases on its own schedule.

The Access tab in the RabbitMQ management UI: accounts by activity, authentication methods, history on each node
Released · v0.1.0RabbitMQ pluginMPL-2.0

Access Insightrabbitmq_access_insight

Who connects to RabbitMQ, from where, and how they authenticate — every account against actual logins, every login by result and method, every session. An Access tab in the management UI, an HTTP API and Prometheus metrics, with history that survives restarts and lost nodes.

# the same account, two kinds of credential
username: orders-service
password: token:eyJhbGciOiJSUzI1NiJ9.eyJzdWIi…
# rabbitmq.conf
auth_backends.1 = internal
auth_backends.2.authn =
    rabbit_auth_backend_aoptoken
auth_backends.2.authz = internal
Released · v0.3.0RabbitMQ pluginMPL-2.0

aoptokenrabbitmq_auth_backend_aoptoken

Log in with a pre-issued signed token in the password field, next to ordinary passwords — same account, no client changes. HS, RS and ES algorithms; an audit event for every verified token.

Principles

How the tools are built

Official releases, unmodified

No patched or repackaged broker. Plugins install into the stock distribution and are enabled or disabled at runtime.

Each tool stands alone

No project needs another to work. Where tools meet, they meet through a published convention.

Observe, never decide

Analytics only watch and record; they never allow or refuse a connection, and never store passwords, tokens or message bodies.

Verified on real clusters

Every release is tested end to end on multi-node clusters across the supported broker and Erlang/OTP versions.

MPL-2.0Plugins and specifications — the same license as RabbitMQ.
AGPL-3.0Standalone services, so hosted versions stay open too.
DCOContributions signed off with git commit -s; no CLA.