The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Install RabbitMQ from Team RabbitMQ’s signed repositories on a supported Ubuntu or Debian VPS, then manage it with systemd and RabbitMQ’s command-line tools. Before production traffic, replace the default guest account, create a dedicated virtual host with least-privilege permissions, restrict firewall access, and add the management and Prometheus plugins only when you need them.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
The procedure below covers package installation, first-run security, browser administration, monitoring, resource limits, troubleshooting, and the operational choices between a single VPS, a cluster, and a managed service.
As an Amazon Associate I earn from qualifying purchases.
Choose a supported VPS operating system
RabbitMQ and Erlang must come from mutually compatible repositories. The current Team RabbitMQ Debian/Ubuntu guide lists these supported releases:
| Distribution | Supported releases in the current guide |
|---|---|
| Ubuntu | 22.04, 24.04, 26.04 |
| Debian | 11, 12, 13 |
Confirm the operating system and architecture before changing APT sources. The quick-start examples target amd64. An arm64 VPS needs an Erlang source that explicitly supports arm64; do not point an arm64 machine at an amd64 repository.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
cat /etc/os-release
dpkg --print-architecture
uname -aUse the release codename reported by the operating system when creating repository entries. Keep the Erlang and RabbitMQ lines aligned with that same supported release. Mixing codenames, distributions, or unrelated Erlang packages can produce dependency conflicts or an unsupported combination.
Prepare the VPS
Install repository prerequisites
Log in with an account that can use sudo. Install the tools needed to fetch repository metadata and verify its signing key:
sudo apt-get update -y
sudo apt-get install -y curl gnupg apt-transport-httpsImport Team RabbitMQ’s signing key into the dedicated keyring location:
/usr/share/keyrings/com.rabbitmq.team.gpgUse the current Team RabbitMQ quick-start instructions for the key URL and fingerprint, and verify the fingerprint before trusting the key. A keyring stored in /usr/share/keyrings lets APT authenticate only the repositories that reference it instead of trusting a globally installed key.
Create aligned APT sources
Create /etc/apt/sources.list.d/rabbitmq.list and add the Erlang and RabbitMQ repository entries specified for your distribution codename. The Erlang and RabbitMQ entries should use the same supported Ubuntu or Debian release and the same architecture policy. Do not copy a line for a different codename merely because it is newer.
sudo editor /etc/apt/sources.list.d/rabbitmq.list
sudo apt-get update -yIf APT reports an unsigned repository, a missing key, a release-file mismatch, or a distribution that has no matching repository, stop and correct the source configuration. Do not bypass signature verification with insecure APT options.
Recommended Free Tools
Install Erlang and RabbitMQ
Install the Erlang packages selected by the guide
Team RabbitMQ’s installation guide lists the Erlang packages required for the supported repository combination. Install that package set first, using the exact package names for your release, then install the server:
sudo apt-get install -y <Erlang packages listed by the current Team RabbitMQ guide>
sudo apt-get install -y rabbitmq-serverThe angle-bracket text above is a reminder to use the package list from the current guide, not a literal package name. The list can change as supported Erlang components change. Repository installation is preferable to downloading a standalone .deb: APT can resolve dependencies and deliver updates, while a manually downloaded package leaves dependency and update management to you.
Verify the package service
The Debian package normally starts RabbitMQ automatically. Check the unit immediately after installation:
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
sudo systemctl status rabbitmq-serverA healthy unit reports an active running service. The daemon runs under the non-privileged rabbitmq account rather than as root. That account owns the broker’s runtime data and log locations created by the package.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Use these commands for normal lifecycle operations:
sudo systemctl start rabbitmq-server
sudo systemctl stop rabbitmq-server
sudo systemctl restart rabbitmq-server
sudo systemctl enable rabbitmq-serverStarting and stopping the unit does not create users, virtual hosts, permissions, plugins, or firewall rules. Those are separate configuration tasks.
Diagnose a service that will not start
Read the unit’s recent journal entries first:
sudo journalctl -u rabbitmq-server --no-pager -n 200
sudo journalctl -u rabbitmq-server -fRabbitMQ also writes its own logs. The exact path depends on the package and configuration, so inspect the service status and RabbitMQ diagnostics rather than assuming a fixed filename. Common causes include an invalid repository mix, a stale node identity, a permissions problem in the data directory, a port already in use, or an Erlang/RabbitMQ version mismatch.
When the service is running, use RabbitMQ’s diagnostic CLI to inspect node state:
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutesudo rabbitmq-diagnostics status
sudo rabbitmq-diagnostics environmentRun diagnostics with the same host and node settings as the service. If a command cannot contact the node, check that the daemon is active, the local hostname resolves consistently, and the Erlang cookie and file permissions have not been changed accidentally.
Harden the first-run installation
Why the default account is unsafe for applications
A blank RabbitMQ node creates a guest user with password guest. The account is intended for host-local use; remote connections made with that default account are refused by default. Production environments should not use predictable default credentials. Create a named user with generated credentials before allowing an application to connect.
Create a virtual host and service user
A virtual host (vhost) provides a namespace for exchanges, queues, bindings, and permissions. Give each application or trust boundary its own vhost when practical. Create one with a name that does not reveal a password or contain shell-special characters:
sudo rabbitmqctl add_vhost custom-vhost
sudo rabbitmqctl add_user app_user '<generated-password>'Generate the password with a password manager or a cryptographically secure generator. Do not put a real password in shell history, a ticket, or a public provisioning script. If the password must be supplied non-interactively, protect the secret store and rotate the credential after migration.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Grant only the permissions the application needs
RabbitMQ checks authentication, the requested vhost, and resource permissions on every connection. Permissions are regular expressions in three categories: configure, write, and read. The official full-access example for one vhost is:
sudo rabbitmqctl set_permissions -p "custom-vhost" "app_user" ".*" ".*" ".*"That pattern allows the user to configure, publish to, and consume from every resource in the vhost. It is convenient for a development node but broader than necessary for most production services. Narrow each expression to the exchanges and queues the application actually owns. For example, a publisher might receive write access to an exchange and read access to no queues, while a worker might receive read access to a queue and only the configure rights needed to declare its bindings.
Inspect the result before connecting an application:
sudo rabbitmqctl list_users
sudo rabbitmqctl list_vhosts
sudo rabbitmqctl list_permissions -p custom-vhostRemove or rotate the guest account
After creating and testing the named account, choose one of these production controls:
- Remove
guestwhen no local tool requires it. - Change its password to a generated value and keep it restricted to local administration.
- Leave it disabled for application traffic and verify that no deployment secret still contains
guest/guest.
Do not attempt to make the default account a remote application identity. A dedicated user makes rotation, auditing, and permission reviews possible.
Enable the management UI only when needed
The rabbitmq_management plugin provides a browser interface and HTTP API for listing and administering queues, exchanges, users, vhosts, and permissions. Enable it with:
sudo rabbitmq-plugins enable rabbitmq_managementThe default UI and API endpoint is TCP port 15672. This is an HTTP administration endpoint, not the AMQP protocol listener. An AMQP client cannot use port 15672 simply because the browser UI is reachable.
Bind and expose the management endpoint according to your VPS firewall policy. Prefer access from a private network, VPN, or a tightly restricted administrator address range. If the interface must be reachable over an untrusted network, put it behind TLS termination and an access-control layer appropriate to your environment. Never publish an unrestricted administration port to the entire internet.
Assign management tags deliberately
Management tags determine which users can use administrative views and operations. Messaging permissions still apply: a management user does not automatically gain access to every queue or vhost. Give an operator only the tag and vhost permissions required for the job, and keep application users free of administrative tags.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
After enabling the plugin, sign in with the named administrative account and confirm that the UI lists the expected node, vhost, and resources. If the page loads but shows no application queues, check that the account has permissions on the vhost where those queues exist.
Add metrics for production monitoring
The management UI is useful for immediate inspection, but its short-term views are not a substitute for retained history and alerting. Enable RabbitMQ’s Prometheus plugin when you have an external monitoring system:
sudo rabbitmq-plugins enable rabbitmq_prometheusThe Prometheus-compatible endpoint listens on port 15692 by default. It exposes node, connection, queue, and message-rate metrics. Configure your Prometheus-compatible collector to scrape that endpoint, then build dashboards and alerts in the monitoring platform you already operate.
Monitor at least:
- Node availability and restart count.
- Connection and channel counts.
- Queue depth, consumer count, and message rates.
- Unacknowledged messages and consumer delivery failures.
- Memory and disk alarms.
- File-descriptor usage and approaching process limits.
RabbitMQ recommends external Prometheus/Grafana-style systems or an ELK-style stack for longer retention, alerting, and lower coupling than relying only on built-in UI metrics. Protect the metrics endpoint as operational data; it can reveal queue names, traffic patterns, and node details.
Configure the VPS firewall and network listeners
Open only the client and administration ports required by the deployment. The AMQP protocol listener is separate from the management UI/API on port 15672, and the Prometheus endpoint is separate again on port 15692. Do not assume that opening 15672 enables messaging.
First inspect what RabbitMQ is actually listening on:
Free tools Windows power users keep installed
One-click scans. No signup required.
sudo rabbitmq-diagnostics listeners
sudo ss -lntpThen compare those listeners with the VPS firewall policy. Restrict application traffic to the application network or known client addresses. Restrict management traffic to administrators, a bastion host, or a VPN. If the broker and application share one VPS, keep administration bound to a local or private interface where possible.
After changing firewall rules, test from the same network path used by the application and from an explicitly unauthorized network. A successful browser connection to the management port proves only that HTTP administration is reachable; it does not prove that AMQP authentication, vhost selection, or resource permissions work.
Raise file-descriptor limits before production load
RabbitMQ needs file descriptors for sockets, files, logs, and other runtime resources. Check the limit before load testing or onboarding a large number of connections. The official Debian/Ubuntu procedure uses a systemd drop-in:
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
sudo mkdir -p /etc/systemd/system/rabbitmq-server.service.d
sudo editor /etc/systemd/system/rabbitmq-server.service.d/limits.confPut an appropriate limit in the file. The guide’s example is:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches[Service]
LimitNOFILE=64000Apply and verify the change:
sudo systemctl daemon-reload
sudo systemctl restart rabbitmq-server
sudo rabbitmq-diagnostics statusInspect the running process limits as well as the unit file, because a typo or a restart omission can leave the old value active. Values above 65536 also require attention to the Erlang ERL_MAX_PORTS setting; raising only the systemd limit does not guarantee that Erlang can use the additional ports.
Set the limit from observed connection, channel, queue, and file usage rather than copying a large number blindly. Recheck it after package upgrades, image changes, or a move to a different VPS distribution.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Back up definitions and plan recovery
A RabbitMQ deployment has two different recovery concerns: the broker’s definitions and the messages stored in queues. Export definitions regularly so users, vhosts, permissions, exchanges, queues, and bindings can be recreated on a replacement node. Keep the export outside the VPS and protect it because it contains identity and topology information.
Message recovery depends on queue durability, publisher confirms, consumer acknowledgements, and the application’s ability to replay or regenerate work. A definitions export alone is not a message backup. Decide how the application handles an unavailable broker, partially processed jobs, duplicate delivery, and a restored queue before treating a VPS snapshot as a complete recovery plan.
Test restoration on an isolated node. Verify that the exported vhosts and permissions load correctly, that credentials can be rotated, and that applications reconnect without accidentally publishing production traffic into the test environment.
Operate RabbitMQ safely day to day
Useful inspection commands
sudo rabbitmq-diagnostics status
sudo rabbitmq-diagnostics listeners
sudo rabbitmqctl list_vhosts
sudo rabbitmqctl list_users
sudo rabbitmqctl list_permissions -p custom-vhost
sudo rabbitmqctl list_queues -p custom-vhost name messages messages_ready messages_unacknowledged consumersUse queue depth together with consumer count and message age. A queue that is growing while consumers are connected may indicate slow processing, a permission failure, a dead-letter loop, or a downstream dependency rather than a broker outage.
Upgrade procedure
- Record the current RabbitMQ and Erlang package versions, enabled plugins, listeners, vhosts, users, and permissions.
- Confirm that the target RabbitMQ release supports the Erlang version available in the aligned Team RabbitMQ repositories.
- Export definitions and verify that your recovery copy is readable.
- Drain or pause publishers and consumers according to the application’s delivery guarantees.
- Run
sudo apt-get update -yand upgrade through APT rather than replacing packages with an unrelated manual download. - Restart the service, inspect
systemctl status rabbitmq-server, and review the journal for warnings. - Check listeners, plugins, permissions, queue movement, and application reconnect behavior before resuming normal traffic.
When a queue or node is unhealthy
- Authentication failure: verify the username, generated password, vhost name, and whether the user has permissions on that exact vhost.
- Access refused: compare the requested exchange or queue name with the user’s configure, write, and read regular expressions.
- Management page unavailable: confirm that
rabbitmq_managementis enabled, the service is active, port 15672 is listening, and the firewall permits the administrator’s source address. - Metrics unavailable: confirm that
rabbitmq_prometheusis enabled and that the collector can reach port 15692 without crossing a blocked interface. - Connection or descriptor errors: inspect effective process limits, systemd’s
LimitNOFILE, kernel limits, and, for values above 65536,ERL_MAX_PORTS. - Startup failure after an APT change: inspect the journal and package versions for an Erlang/RabbitMQ mismatch before changing data directories or deleting node files.
Choose the right deployment model
A single VPS is often the simplest starting point, but it is also a single failure domain. Compare the operational trade-offs before putting a critical workload on it:
| Model | Operational ownership | Failure tolerance | Latency | Monitoring and backup work | Cost pattern |
|---|---|---|---|---|---|
| Single-node VPS | You patch RabbitMQ and Erlang, manage the firewall, and perform recovery. | A host, disk, or maintenance failure can interrupt the broker. | Usually lowest when applications share the VPS or nearby network. | You configure metrics, alerts, definition exports, snapshots, and restore tests. | One server charge plus storage, backup, and monitoring resources. |
| Clustered deployment | You operate multiple nodes, membership, upgrades, quorum or mirrored data strategy, and network identity. | Can tolerate selected node failures when designed and tested correctly; it does not remove application or network failure modes. | Inter-node traffic and cross-zone placement can add latency. | Monitoring and recovery are more involved because node, partition, and replication health all matter. | Multiple compute instances, storage, networking, and operational overhead. |
| Managed RabbitMQ service | The provider handles much of the patching and platform recovery; you still own credentials, topology, clients, and data policy. | Depends on the provider’s architecture, service tier, region, and recovery guarantees. | Depends on the service region and network path to applications. | Integrate the provider’s metrics and exports with your own retention and alerting requirements. | Recurring service charges based on the provider’s plan and usage. |
Make the decision using measured message rates, payload sizes, queue durability, connection counts, memory and disk observations, recovery objectives, and application location. There is no reliable universal VPS size or performance benchmark for RabbitMQ; load-test the workload you actually plan to run.
Quick Recap
A practical go-live checklist
- The VPS runs Ubuntu 22.04, 24.04, or 26.04, or Debian 11, 12, or 13, on an architecture supported by the chosen Erlang source.
- Team RabbitMQ’s signing key and aligned Erlang/RabbitMQ repositories are configured and APT updates succeed without signature warnings.
rabbitmq-serveris active under the non-privilegedrabbitmqaccount.- A named user with generated credentials owns application access; the default
guestaccount is removed or rotated. - The application uses a dedicated vhost and narrowly scoped configure, write, and read permissions.
- Management access on port 15672 is restricted to administrators, and AMQP traffic is configured on its own listener.
- Prometheus scraping on port 15692 is enabled only when an external monitoring system is ready to collect and protect the metrics.
- Firewall rules expose only required client and administration paths.
- The effective file-descriptor limit is adequate, and
ERL_MAX_PORTShas been considered for values above 65536. - Definitions are exported, backups are stored off the VPS, and a restoration test has a documented owner and schedule.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
