HiveMQ 4.7 was released on September 15th 2021. In this webinar, Dominik Obermaier, CTO and co-founder of HiveMQ, and Georg Held, Engineering Manager at HiveMQ, will showcase the new features of HiveMQ 4.7 and discuss how you can benefit from upgrading to the new release.

1. What's New in HiveMQ: Inside the
HiveMQ 4.7 Release

2. Copyright © by HiveMQ. All Rights Reserved.
Dominik Obermaier Georg Held
CTO and Co-founder at HiveMQ Engineering Manager at HiveMQ
dominik.obermaier@hivemq.com
linkedin.com/in/dobermai
@dobermai
georg.held@hivemq.com
linkedin.com/in/sauroter
Speakers

3. AGENDA
❏ HiveMQ Platform Portfolio Updates
❏ Overview of 4.7 Release
❏ Easier Operations for Cloud Native
Deployments
❏ Improved Enterprise Security
❏ Major HiveMQ Swarm Upgrade
❏ Q&A

4. HiveMQ Platform
Portfolio Updates

5. Copyright © by HiveMQ. All Rights Reserved.
Broker
Clients
Tools &
Ecosystem
HiveMQ Docker
Images
HiveMQ DCOS
Integration
HiveMQ
AMI
Mosquitto
to HiveMQ
Enterprise
Extensions
HiveMQ PRODUCT PORTFOLIO

6. Copyright © by HiveMQ. All Rights Reserved.
Introducing

7. Copyright © by HiveMQ. All Rights Reserved.
• Distributed platform able to create millions of unique network
connections
• Simulating millions of devices, messages and MQTT topics
• Develop reusable scenarios that simulate device behaviours
• Custom data generator that simulate complex use cases
• Resource friendly and easy deployment to public clouds (AWS, Azure,
etc.) and Kubernetes
HiveMQ Swarm Features

8. Copyright © by HiveMQ. All Rights Reserved.
Distributed IoT Testing and Simulation

9. Copyright © by HiveMQ. All Rights Reserved.
Predefined Helm Charts
Useful defaults to get started
quickly
Managed HiveMQ Extension
Lifecycle
Integrated Prometheus
Monitoring
Zero-downtime upgrades
Integrated Disaster Recovery

10. Copyright © by HiveMQ. All Rights Reserved.
Introducing

11. Copyright © by HiveMQ. All Rights Reserved.
Built for
Production
Automatic
Scalability &
Reliability
Enterprise-
grade
Security
100% MQTT
Specification
compliant
Observability
for IoT Devices
Cloud
Agnostic
Completely
managed
HiveMQ Cloud
Completely managed MQTT broker service in the cloud

12. Release Cadence

13. Copyright © by HiveMQ. All Rights Reserved.
4.5
Release
4.6
Release
4.7
Release
4.8
Release
January
2021
April
2021
September
2021
LTS
Release
Target:
January
2022
Predictable Release Cadence

14. Copyright © by HiveMQ. All Rights Reserved.
HiveMQ 4.7 Themes
Major HiveMQ Swarm Upgrade
Easier Operations for Cloud Native Deployments
Improved Enterprise Security

15. Copyright © by HiveMQ. All Rights Reserved.
Overview
Supported until 14. September 2022
Released version 4.7.0
Release date 14. September 2021

16. Improvements to
Cloud-Native Operations

17. Copyright © by HiveMQ. All Rights Reserved.
Easier Cloud-Native Operations
Reduced Complexity

18. Machine Readable Logs

19. Copyright © by HiveMQ. All Rights Reserved.
Machine Readable Logs
Before
2021-09-14 09:45:23,583 - Client ID:
myClient, IP: 127.0.0.1, Clean Start: true,
Session Expiry: 0 connected.
After
{
"time": "2021-09-14T07:47:36.521Z",
"message": "Client ID: myClient, IP: 127.0.0.1, Clean
Start: true, Session Expiry: 0 connected.",
"thread": "hivemq-eventloop-child-1,TZuIQ",
"hivemqId": "TZuIQ",
"event": "CLIENT_CONNECTED",
"clientId": “myClient",
"ip": "127.0.0.1",
"cleanStart": true,
"sessionExpiryInterval": 0
}
Supported for:
● HiveMQ log
● Event log
● Audit log
● Migration log

20. Copyright © by HiveMQ. All Rights Reserved.
Centralized Log Shipping
Shipping logs from multiple nodes to a centralized location
{
"time": "2021-09-14T07:47:36.521Z",
"message": "Client ID: myClient,
IP: 127.0.0.1, Clean Start: true,
Session Expiry: 0 connected.",
"thread":
"hivemq-eventloop-child-1,TZuIQ",
"hivemqId": "TZuIQ",
"event": "CLIENT_CONNECTED",
"clientId": “myClient",
"ip": "127.0.0.1",
"cleanStart": true,
"sessionExpiryInterval": 0
}
Data Multiple Nodes Centralized Logs

21. Copyright © by HiveMQ. All Rights Reserved.
Integrations

22. Kubernetes Operator

23. Copyright © by HiveMQ. All Rights Reserved.
https://www.redhat.com/en/technologies/cloud-computing/openshift
Openshift Support

24. Copyright © by HiveMQ. All Rights Reserved.
● Container in rootless mode
● Environment variables directly from
k8s secret objects
State-of-the-Art Security
Security is ever evolving... HiveMQ’s container security updated to the
latest standards

25. Copyright © by HiveMQ. All Rights Reserved.
● General availability of stateful set support for
better disk provisioning control
● Better parameterization of scheduling options
(labels, annotations, sidecars, …)
Kubernetes Operator Flexibility

26. Improved Enterprise
Security

27. Copyright © by HiveMQ. All Rights Reserved.
HiveMQ Security Architecture

28. Control Center OAuth
Authentication (SSO)

29. Copyright © by HiveMQ. All Rights Reserved.
What’s in it?
● Seamless integration into any jwt based OAuth
2.0 SSO platform (Forgerock, Okta, Auth0,
Keycloak, …)
● Pure web technology-based authentication
● Combination with SQL-, LDAP- or file-based
systems for authorization

30. Copyright © by HiveMQ. All Rights Reserved.
Video
https://youtu.be/NiEY_1k_wTQ

31. Copyright © by HiveMQ. All Rights Reserved.

32. File Authorization

33. Copyright © by HiveMQ. All Rights Reserved.
What’s in it?
● File based authorization for the HiveMQ Control
Center and for mqtt clients
● Role and user based permission structures
● Combination with SQL, LDAP, JWT, or OAuth
systems for authentication

34. Copyright © by HiveMQ. All Rights Reserved.
One Time Provisioning

35. Copyright © by HiveMQ. All Rights Reserved.
File Realm Structure MQTT
<ese-file-realm>
<mqtt>
<users>
<user>
<name>georg.held@hivemq.com</name>
<permissions>
<permission>
<topic>#</topic>
<activity>SUBSCRIBE</activity>
<qos>ONE_TWO</qos>
</permission>
</permissions>
</user>
</users>
<roles>
<role>
<id>admins</id>
<permissions>
<permission>
<topic>#</topic>
<activity>SUBSCRIBE</activity>
<qos>ONE_TWO</qos>
</permission>
</permissions>
</role>
</roles>
</mqtt>
</ese-file-realm>
● Utilize one or multiple XML files
● Allow for user and role based permission
structures
● Have very granular permission structures
on a topic filter basis e.g. publish,
subscribe, retain, qos, ...

36. Copyright © by HiveMQ. All Rights Reserved.
<ese-file-realm>
<control-center>
<users>
<user>
<name>georg.held@hivemq.com</name>
<permissions>
<permission>HIVEMQ_SUPER_ADMIN</permission>
</permissions>
</user>
</users>
<roles>
<role>
<id>admins</id>
<permissions>
<permission>HIVEMQ_SUPER_ADMIN</permission>
</permissions>
</role>
</roles>
</control-center>
</ese-file-realm>
File Realm Structure Control Center
● Combine with MQTT permissions or use
separate files
● Allow for user and role based permission
structures
● Use a semantic permission structure e.g.
[..]_CLIENT_LIST, [..]_CLIENT_DETAIL,...

37. Case Conversion Preprocessor

38. Copyright © by HiveMQ. All Rights Reserved.

39. Copyright © by HiveMQ. All Rights Reserved.
Case Conversion Preprocessor
● Example: The MQTT Client identifier is case sensitive, but LDAP is not

40. Major Upgrades to
HiveMQ Swarm

41. Copyright © by HiveMQ. All Rights Reserved.
Additional Use Case
https://youtu.be/hBvw-V3VfMA

42. Copyright © by HiveMQ. All Rights Reserved.
● Client behavior for testing is usually very synthetic
● This leads to blind spots in test cases
● Swarm now has real-world disconnect:
○ <disconnect method="with-disconnect-message"/>
○ <disconnect method="close-tcp-socket"/>
○ <disconnect method="simulate-keepalive-timeout"/>
Real-world Disconnect

43. Copyright © by HiveMQ. All Rights Reserved.
● Message Expiry
● Last Will and Testament (MQTT5 Will)
● Websocket & Secure Websocket Transport
Additional Features

44. Download HiveMQ 4.7 Now!
Thank You!

45. Try HiveMQ Cloud!
https://www.hivemq.com/mqtt-cloud-broker/
Know more about HiveMQ Swarm
https://www.hivemq.com/hivemq-swarm/
Get Your MQTT Essentials Ebook Now!
https://www.hivemq.com/download-mqtt-ebook/
Know More About HiveMQ Kubernetes Operator
https://www.hivemq.com/docs/operator/4.6/kubernetes-operator/operator-intro.html
Additional Resources

46. ANY
QUESTIONS?

47. THANK YOU
Contact Details
dominik.obermaier@hivemq.com
linkedin.com/in/dobermai
@dobermai
Dominik Obermaier
georg.held@hivemq.com
linkedin.com/in/sauroter
Georg Held