An open API service indexing awesome lists of open source software.

https://github.com/hectorifc/malachimq

MalachiMQ High-performance message queue system built with Elixir/OTP.
https://github.com/hectorifc/malachimq

beam broker elixir elixir-lang elixir-language elixir-programming-language erlang erlang-distribution erlang-otp message-queue queue

Last synced: 12 days ago
JSON representation

MalachiMQ High-performance message queue system built with Elixir/OTP.

Awesome Lists containing this project

README

          


MalachiMQ Logo

# MalachiMQ

High-performance message queue system built with Elixir/OTP.

[![CI](https://github.com/HectorIFC/malachimq/actions/workflows/ci.yml/badge.svg)](https://github.com/HectorIFC/malachimq/actions/workflows/ci.yml)
[![Release](https://github.com/HectorIFC/malachimq/actions/workflows/release.yml/badge.svg)](https://github.com/HectorIFC/malachimq/actions/workflows/release.yml)
[![Docker Image](https://img.shields.io/docker/v/hectorcardoso/malachimq?label=Docker%20Hub)](https://hub.docker.com/r/hectorcardoso/malachimq)
[![Docker Pulls](https://img.shields.io/docker/pulls/hectorcardoso/malachimq.svg)](https://hub.docker.com/r/hectorcardoso/malachimq)
[![Sponsor](https://img.shields.io/badge/sponsor-❤-ff69b4)](https://github.com/sponsors/HectorIFC)

## 💖 Sponsors

Become a sponsor and get your logo on our README on GitHub with a link to your site. [[Become a sponsor](https://github.com/sponsors/HectorIFC)]

### Backers

Support us with a monthly donation and help us continue our activities. [[Become a backer](https://github.com/sponsors/HectorIFC)]

---

## Demo

Watch MalachiMQ in action:

[![MalachiMQ Demo](https://img.youtube.com/vi/hn26zgRoOUI/0.jpg)](https://www.youtube.com/watch?v=hn26zgRoOUI)

## 🚀 Quick Start with Docker

**Multi-Architecture Support**: Works on AMD64 (Intel/AMD) and ARM64 (Apple Silicon, AWS Graviton)

### Pull and Run

```bash
docker pull hectorcardoso/malachimq:latest

docker run \
--name malachimq \
-p 4040:4040 \
-p 4041:4041 \
-e MALACHIMQ_ADMIN_PASS=your_secure_password \
hectorcardoso/malachimq:latest
```

### Using Docker Compose

```bash
git clone https://github.com/HectorIFC/malachimq.git
cd malachimq
docker-compose up -d
```

Access the dashboard at: http://localhost:4041

### Build Locally (All Platforms)

```bash
# Build for your current architecture
make docker-build

# Build for multiple architectures (requires Docker Buildx)
make docker-buildx-setup
make docker-buildx

# Build and push to Docker Hub (multi-arch)
make docker-buildx-push
```

See [Multi-Architecture Build Guide](docs/MULTI_ARCH_BUILD.md) for detailed instructions.

## 📦 Ports

| Port | Description |
|------|-------------|
| 4040 | TCP Message Queue |
| 4041 | Web Dashboard |

## 🔐 Authentication

MalachiMQ requires authentication for all producers and consumers.

### Default Users

| Username | Password | Permissions |
|----------|----------|-------------|
| admin | admin123 | Full access |
| producer | producer123 | Produce only |
| consumer | consumer123 | Consume only |
| app | app123 | Produce & Consume |

> ⚠️ **Important**: Change default passwords in production!

### Environment Variables

| Variable | Default | Description |
|----------|---------|-------------|
| `MALACHIMQ_TCP_PORT` | 4040 | TCP server port |
| `MALACHIMQ_DASHBOARD_PORT` | 4041 | Dashboard port |
| `MALACHIMQ_LOCALE` | en_US | Language (en_US, pt_BR) |
| `MALACHIMQ_ADMIN_PASS` | admin123 | Admin password |
| `MALACHIMQ_PRODUCER_PASS` | producer123 | Producer password |
| `MALACHIMQ_CONSUMER_PASS` | consumer123 | Consumer password |
| `MALACHIMQ_APP_PASS` | app123 | App password |
| `MALACHIMQ_SESSION_TIMEOUT_MS` | 3600000 | Session timeout (1h) |
| `MALACHIMQ_ENABLE_TLS` | false | Enable TLS encryption |
| `MALACHIMQ_TLS_CERTFILE` | - | TLS certificate file path |
| `MALACHIMQ_TLS_KEYFILE` | - | TLS private key file path |
| `MALACHIMQ_TLS_CACERTFILE` | - | TLS CA certificate (optional) |

### Custom Users

```bash
docker run \
-e MALACHIMQ_DEFAULT_USERS="user1:pass1:produce,consume;user2:pass2:admin" \
hectorcardoso/malachimq:latest
```

Format: `username:password:permission1,permission2;...`

Permissions: `admin`, `produce`, `consume`

## 🔒 TLS/SSL Encryption

**⚠️ IMPORTANT**: For production deployments, always enable TLS to encrypt credentials and messages.

### Quick Start with TLS

#### 1. Generate Development Certificates

```bash
./scripts/generate-dev-certs.sh
```

#### 2. Run with TLS Enabled

```bash
docker run \
-p 4040:4040 \
-v $(pwd)/priv/cert:/certs \
-e MALACHIMQ_ENABLE_TLS=true \
-e MALACHIMQ_TLS_CERTFILE=/certs/server.crt \
-e MALACHIMQ_TLS_KEYFILE=/certs/server.key \
hectorcardoso/malachimq:latest
```

#### 3. Connect with TLS Client (Node.js)

```javascript
const tls = require('tls');

const client = tls.connect({
host: 'localhost',
port: 4040,
rejectUnauthorized: false // For self-signed certs (dev only)
}, () => {
console.log('TLS connected');
client.write(JSON.stringify({
action: 'auth',
username: 'producer',
password: 'producer123'
}) + '\n');
});
```

### Production TLS Setup

For production, use certificates from:
- **Let's Encrypt** (free, automated)
- **DigiCert**, **GlobalSign** (commercial CAs)
- **Internal PKI** (corporate environments)

See [TLS Security Advisory](docs/SECURITY_ADVISORY_TLS.md) for complete documentation.

### TLS Features

- ✅ TLS 1.2 and 1.3 support
- ✅ Strong cipher suites (ECDHE, AES-GCM)
- ✅ Perfect Forward Secrecy
- ✅ Mutual TLS (mTLS) support
- ✅ Backward compatible (TLS is optional)

## 📡 Client Example (Node.js)

```javascript
const net = require('net');

const client = net.createConnection(4040, 'localhost', () => {
client.write(JSON.stringify({
action: 'auth',
username: 'producer',
password: 'producer123'
}) + '\n');
});

client.on('data', (data) => {
const response = JSON.parse(data.toString().trim());

if (response.token) {
// Publish to queue
client.write(JSON.stringify({
action: 'publish',
queue_name: 'my-queue',
payload: { hello: 'world' },
headers: {}
}) + '\n');

// Or publish to channel (best-effort, no buffering)
client.write(JSON.stringify({
action: 'channel_publish',
channel_name: 'news',
payload: { breaking: 'news!' },
headers: {}
}) + '\n');
}
});
```

#### Channel Subscribe

```javascript
// Subscribe to channel
client.write(JSON.stringify({
action: 'channel_subscribe',
channel_name: 'news'
}) + '\n');

// Response: {"s":"ok"}

// Receive messages
client.on('data', (data) => {
const msg = JSON.parse(data.toString().trim());

if (msg.channel_message) {
console.log('Channel message:', msg.channel_message);
// {
// payload: {...},
// headers: {...},
// timestamp: 1234567890,
// channel: "news"
// }
}

if (msg.kicked_from_channel) {
console.log('Kicked from:', msg.kicked_from_channel);
}
});
```

### Using the Node.js Scripts

The `scripts/` directory contains Node.js clients for testing and development.

```bash
cd scripts
npm install
```

#### Producer Script

Send messages to a queue:

```bash
# Send 10 messages (default)
node producer.js

# Send 100 messages
node producer.js 100

# Send messages continuously (1/second)
node producer.js --continuous

# Send 1000 messages in parallel (fast mode)
node producer.js 1000 --fast

# Show help
node producer.js --help
```

#### Consumer Script

Receive messages from a queue:

```bash
# Consume from 'test' queue (default)
node consumer.js

# Consume from a specific queue
node consumer.js orders

# Verbose mode (show full payload and headers)
node consumer.js --verbose

# Combine options
node consumer.js orders --verbose

# Show help
node consumer.js --help
```

#### Environment Variables (Scripts)

| Variable | Default | Description |
|----------|---------|-------------|
| `MALACHIMQ_HOST` | localhost | Server host |
| `MALACHIMQ_PORT` | 4040 | Server port |
| `MALACHIMQ_QUEUE` | test | Default queue name |
| `MALACHIMQ_USER` | producer/consumer | Username |
| `MALACHIMQ_PASS` | producer123/consumer123 | Password |
| `MALACHIMQ_LOCALE` | pt_BR | Locale (pt_BR, en_US) |

#### Example: Producer + Consumer

**Terminal 1** - Start the consumer:
```bash
node consumer.js --verbose
```

**Terminal 2** - Send messages:
```bash
node producer.js 10
```

### Channel Pub/Sub

MalachiMQ supports Pub/Sub channels with best-effort delivery. Messages are broadcast to all active subscribers without persistence.

#### Channel Publisher Script

Publish messages to channels:

```bash
# Publish 10 messages to 'news' channel (default)
node channel-publisher.js

# Publish to a specific channel
node channel-publisher.js sports 20

# Publish continuously (1 msg/second)
node channel-publisher.js alerts --continuous

# Show help
node channel-publisher.js --help
```

#### Channel Subscriber Script

Subscribe to channels and receive messages in real-time:

```bash
# Subscribe to 'news' channel (default)
node channel-subscriber.js

# Subscribe to a specific channel
node channel-subscriber.js sports

# Subscribe to multiple channels
node channel-subscriber.js news sports alerts

# Verbose mode (show full payloads)
node channel-subscriber.js --verbose

# Show help
node channel-subscriber.js --help
```

#### Channel Behavior

- **Best-effort delivery**: Messages are only delivered to active subscribers
- **No buffering**: Messages are dropped if no subscribers are connected
- **Broadcast**: All subscribers receive every message
- **Real-time**: Messages delivered immediately to connected clients

#### Example: Channel Pub/Sub

**Terminal 1** - Start subscriber:
```bash
node channel-subscriber.js news
```

**Terminal 2** - Publish messages:
```bash
node channel-publisher.js news 10
```

**Terminal 3** - Add another subscriber:
```bash
node channel-subscriber.js news sports
```

**Note**: Subscribers only receive messages published *after* they subscribe. Messages published before subscription are lost (no buffering).

## 🛠️ Development

### Prerequisites

- Elixir 1.19+
- Erlang/OTP 28+

**Note**: While MalachiMQ is optimized for Elixir 1.19+ and OTP 28+, it may work with earlier versions (1.16+/OTP 26+) but is not officially tested or supported.

### Run Locally

```bash
mix deps.get
mix run --no-halt
```

### Run Tests

```bash
mix test
```

### Build Docker Image Locally

```bash
make docker-build
make docker-run
```

### Available Make Commands

```bash
make build # Install deps and compile
make run # Run locally
make test # Run tests
make release # Build production release
make docker-build # Build Docker image
make docker-run # Run Docker container
make docker-stop # Stop Docker container
make docker-push # Push to Docker Hub
make compose-up # Start with docker-compose
make compose-down # Stop docker-compose
make clean # Clean build artifacts
```

### Code Quality Checks

```bash
# Format code
mix format

# Check formatting
mix format --check-formatted

# Run static analysis
mix credo --strict

# Check for security issues
mix deps.audit

# Check for unused dependencies
mix deps.unlock --check-unused
```

### CI/CD

The project uses GitHub Actions for continuous integration:

- ✅ **Automated Tests** - Run on every commit
- ✅ **Multiple Elixir/OTP Versions** - Tested on 3 versions
- ✅ **Code Quality** - Credo, formatting, security checks
- ✅ **Docker Build** - Verified on every PR
- ✅ **Automatic Releases** - On merge to main

See [CI/CD Documentation](docs/CI_CD.md) for details.
make docker-push # Push to Docker Hub
make compose-up # Start with docker-compose
make compose-down # Stop docker-compose
make clean # Clean build artifacts
```

## 🌍 Internationalization (i18n)

MalachiMQ supports **Brazilian Portuguese (pt_BR)** and **American English (en_US)**.

### Configuration

```elixir
config :malachimq, locale: "pt_BR"
```

### Runtime Change

```elixir
MalachiMQ.I18n.set_locale("en_US")
MalachiMQ.I18n.locale()
```

## 📊 User Management (Elixir)

```elixir
MalachiMQ.Auth.list_users()
MalachiMQ.Auth.add_user("myuser", "mypass", [:produce, :consume])
MalachiMQ.Auth.remove_user("myuser")
MalachiMQ.Auth.change_password("myuser", "newpass")
```

## 🏗️ Architecture

- **ETS Tables**: In-memory storage for maximum performance
- **GenServer**: OTP processes for reliability
- **TCP Server**: Custom protocol for low latency
- **Partitioning**: Automatic load distribution across CPU cores

## 📄 License

MIT License

## 🤝 Contributing

We welcome contributions! Please follow these guidelines:

### Before You Start

1. Check existing issues and PRs
2. Discuss major changes in an issue first
3. Read [CI/CD Documentation](docs/CI_CD.md)

### Development Process

1. **Fork** the repository
2. **Create** a feature branch (`git checkout -b feat/amazing-feature`)
3. **Make** your changes with tests
4. **Run** quality checks:
```bash
mix format
mix test
mix credo --strict
```
5. **Commit** using [Conventional Commits](https://www.conventionalcommits.org/):
```bash
git commit -m "feat: add amazing feature"
```
6. **Push** to your fork (`git push origin feat/amazing-feature`)
7. **Open** a Pull Request

### PR Requirements

- ✅ **Tests** - All new features must include tests
- ✅ **Documentation** - Update relevant docs
- ✅ **CI Passing** - All checks must pass
- ✅ **Conventional Commits** - Follow commit format
- ✅ **Code Review** - Address review feedback

### Commit Message Format

```
:

Examples:
- feat: add TLS support
- fix: resolve authentication bug
- docs: update README
- test: add unit tests for Auth module
- chore: update dependencies
```

**Types:**
- `feat:` - New feature (→ minor version)
- `fix:` - Bug fix (→ patch version)
- `docs:` - Documentation
- `test:` - Tests
- `refactor:` - Code refactoring
- `chore:` - Maintenance

**Breaking Changes:**
- Add `[major]` to title or `BREAKING CHANGE:` in body

## 🔖 Versioning

This project uses [SEMVER](https://semver.org/) with automated releases.

- **Patch**: Bug fixes → Add `patch` label or default
- **Minor**: New features → Add `minor` label or use `feat:` prefix
- **Major**: Breaking changes → Add `major` label or use `[major]` in title

See [VERSIONING.md](docs/VERSIONING.md) for details.