What's changing
The next UH Message Broker upgrade will bring the following changes:
| Item | Previously | Changed to… | Comments |
|---|---|---|---|
| Software version | RabbitMQ 3.7.12 Erlang 21.2.6 | RabbitMQ 3.11.13 Erlang 25.3 | Going forward, RabbitMQ and Erlang will be updated to the most recent versions as part of our monthly patching. |
| Test server | Host: esb-test2.its.hawaii.edu | Host: esb-test1.its.hawaii.edu | All settings have been copied from esb-test2 to esb-test1 |
| Production server | Host: esb.hawaii.edu | Host will remain the same but IP address will change. Firewall rules will be copied but you should verify that your production host for your application can reach esb.hawaii.edu at port 5671. | |
| SSL Certificate | 2048-bit cert | 4096-bit Subject Alternative Name (SAN) extension to support host name associated with our perceived IP address. Please update the Intermediate(s)/Root cert bundle as described in TLS and RabbitMQ Java Client | |
| TLS | Versions 1.1 and 1.2 only. No peer verification if your TLS client sends an optional client cert. Secure renegotiation allowed. | Versions 1.2 and 1.3 only. Peer verification performed if your TLS client sends an optional client cert. Secure renegotiation disabled. | |
| RabbitMQ Java Client | Java client 3.6.6 or higher | Although we expect older clients to work, we recommend that you upgrade to the latest client | You should add code to verify the server cert and check the hostname. See TLS and RabbitMQ Java Client |
| RabbitMQ Perl Client | AnyEvent::RabbitMQ v1.16 | AnyEvent::RabbitMQ v1.16 or latest version Must also patch Net::AMQP::Common and add this line after line 239: l => \&unpack_long_long_integer | |
Queues | Classic queues which are mirrored and synchronized across all 3 nodes unless the queue name begins with an underscore. | All queues will be converted to quorum queues. | You do not need to change anything in your application. More on quorum queues: https://www.rabbitmq.com/quorum-queues.html |
Timeline
The upgrade is tentatively set for middle of June 2023
How to prepare
Point your test environment to esb-test1.its.hawaii.edu to verify that your application can publish and/or consume messages. Do not point your production environment to our test environment as you do not want to mix production data with test data.
If you have never used our test environments in the past, we may need to add your IP address to our firewall. If you have been using TLS 1.1, you must now use TLS 1.2 or 1.3. Other than that, you should be able to connect to this test broker and publish and/or consume messages as applicable. Several applications have already tested successfully against this new version of the broker.
Please contact its-iam-help@lists.hawaii.edu if you run into any issues.