SCALE AND SECURE MOBILE / IOT MQTT TRAFFIC

Size: px

Start display at page:

Download "SCALE AND SECURE MOBILE / IOT MQTT TRAFFIC"

Blanche Butler
6 years ago
Views:

1 APPLICATION NOTE SCALE AND SECURE MOBILE / IOT TRAFFIC Connecting millions of devices requires a simple implementation for fast deployments, adaptive security for protection against hacker attacks, and scalability for optimized connectivity across multiple datacenters including disaster recovery sites. Elastic Beam software and HiveMQ combine to address these needs with: HiveMQ brokers for sharing information via instant, bi-directional publish/subscribe messages and forwarding data to backend systems in real time over Internet connections. Elastic Beam secure proxy for routing/load balancing to massively scale mobile and IOT device traffic across brokers while applying security to block rogue device attacks. + TLS + TLS IOT DEVICES SECURE PROXY ROUTER BROKER CLUSTER ELASTIC BEAM AND HIVEMQ SOFTWARE ADVANTAGES: Fully integrated solution scales from a few to millions of devices High availability implementation supports 24x7 operations Multi-layer security protects against malicious attacks and misbehaving devices Low cost of ownership from automation, open standards, commodity hardware, and cloud support

2 FEATURES SIMPLE Automated deployment with orchestration engines or JSON configuration files Live update allows adding/removal of proxy nodes, brokers, and topics with zero down time Real-time session information is automatically propagated across data centers. No complex policy configuration required. Comprehensive reporting available to customer management systems via a REST API. SCALABLE Software architected to scale concurrent connections and deliver extreme message throughput with minimal latency Clustering brings stability and speed to mission-critical deployments through vertical and horizontal scalability Sessions supported across datacenters and Clouds with clusters spanning multiple sites Non-disruptive session recovery through any node at any location for true availability N-Way active clustering delivers scaling on-demand with self-configuring nodes and real time sync of session information Device TLS processing, error handling, and traffic buffering offloaded from broker over WebSocket proxy supports cookie-based session stickiness to maintain availability even for roaming devices. over TCP supports client-id based strategies for directing clients to specific brokers. SECURE Strong, high performance SSL/TLS security with ECDHE and perfect forward security Advanced options for authentication and authorization mechanisms including OATH2.0 broker private identities and ports are hidden from the outside world WebSocket URL mapping hides HiveMQ names

3 DEPLOYMENT BLUEPRINT IoT Devices with TLS 1.2 over Websockets with TLS 1.2 API Proxy Cluster Broker Cluster Other Enterprise Applications Application Servers Databases Microservices Datacenter MESSAGING ARCHITECTURE The messaging architecture includes three components: Client Layer consists of any device from a microcontroller up to a server running a library and connecting to a broker. Several types of IoT devices and enterprise applications are shown. Elastic Beam Secure Proxy Cluster is a set of logically connected proxy nodes which terminate all client connections, block compromised clients, and route traffic to brokers across datacenters. HiveMQ Enterprise Broker authenticates clients and is responsible for receiving all messages, filtering the messages, determining interested parties, and sending to all subscribed clients.

4 BENCHMARK SERVER TYPES AND CONFIGURATION Elastic Beam software is installed on RHEL7 or Ubuntu 14 Linux running on bare-metal servers, containers, AWS, or VMware ESX in your private, hybrid, or public cloud environment. HiveMQ runs on Linux, Windows and OS X. Deploy HiveMQ with ease on server hardware, Virtual Machines or containers (like Docker) in your private, hybrid or public cloud on IaaS providers including AWS, Azure, or Google Cloud Platform. TESTED CONFIGURATION Elastic Beam Configuration: Hardware: AWS EC2 Type: c3.8xlarge 32vCPU, 60GB Memory, 10Gbps SR-IOV, 640GB SSD Software: Ubuntu 14LTS HiveMQ Configuration: Hardware: AWS EC2 Type: c3.4xlarge 16vCPU, 30GB Memory, 10Gbps SR-IOV, 320GB SSD Software: AWS Linux BENCHMARK RESULTS SSL/TLS Security Concurrent connections Round Trip Time (RTT) over TCP TLS 1.2 w/pfs 80,000 3 ms over WebSocket TLS 1.2 w/pfs 80, ms Benchmark testing was performed to test throughput and scaling with two setups: over Secure WebSocket (TLS 1.2 with ECHDE PFS) over TCP (TLS 1.2 with ECHDE PFS) Test environment consisted of multiple client traffic generators which simulated up to 10,000 simultaneous clients each, sending 128 byte messages to the broker. Configuration consisted of the following: Elastic Beam: 2 API Proxy node cluster performing load balancing with health checking HiveMQ: 3 Brokers Benchmark testing showed consistently low mean latency for the traffic.

5 ABOUT ABOUT ELASTIC BEAM Elastic Beam s IOT Secure Proxy Router secures and optimizes traffic delivery across local and hybrid Cloud data centers. Developed for scalability and performance, Elastic Beam software routes and load balances traffic over TCP and WebSocket sessions. Its self-learning architecture simplifies deployments and enables automated day-to-day operations for maximum security and availability. ABOUT HIVEMQ HiveMQ is a reliable and resilient high-performance Broker designed for the cloud. It s a dedicated Broker with unique features like clustering and an open plugin system and is optimized for millions of concurrent connections. The broker is highly event-driven and multi-threaded to ensure lowest latency and highest throughput even for the most ambitious projects. CONTACT US To learn more about how Elastic Beam can bring intelligent routing and security to your environment, please request a trial at or us at sales@elasticbeam.com. To learn more about how HiveMQ can empower your organization connecting all your devices and services with minimal effort by using the de-facto IoT standard protocol, visit or us at sales@hivemq.com Elastic Beam and Elastic Beam logo are the trademarks of Elastic Beam Inc. HiveMQ is a trademark of dc-square GmbH

CLUSTERING HIVEMQ. Building highly available, horizontally scalable MQTT Broker Clusters

CLUSTERING HIVEMQ. Building highly available, horizontally scalable MQTT Broker Clusters CLUSTERING HIVEMQ Building highly available, horizontally scalable MQTT Broker Clusters 12/2016 About this document MQTT is based on a publish/subscribe architecture that decouples MQTT clients and uses