Accessing the RabbitMQ Management UI

Introduction

This article covers how to access the RabbitMQ Management Console on your AutoPilot deployment.

SSH Tunnel

Using an SSH tunnel is the most secure method. This allows you to access the RabbitMQ Management UI without publicly exposing it to the Internet. The exact command to use will depend on if your deployment is All-In-One or an Auto-Scaling Cluster.

All-in-One

ssh -L 127.0.0.1:15672:127.0.0.1:15672 -t jrc-abcd-1234@123.123.123.123

Auto-Scaling Cluster

ssh -L 127.0.0.1:15672:127.0.0.1:15672 -t jrc-abcd-1234@123.123.123.123 "ssh -L 127.0.0.1:15672:127.0.0.1:15672 queue.internal"

Replace jrc-abcd-1234@123.123.123.123 with your AutoPilot username and jump host IP address. This can be found in the Overview tab of your AutoPilot deployment in the Shell Access section.

After running the appropriate command, you should be able to access the RabbitMQ Management UI at the following URL: http://127.0.0.1:15672/ 

Nginx Proxy

Instead of using an SSH tunnel you can also configure an Nginx proxy_pass directive. For example, you can create an Nginx configuration file named:

/etc/nginx/conf.d/DOMAIN.COM/rabbitmq.conf

Replace DOMAIN.COM with your domain name.

Add the following contents to the file:

location /rabbitmq/ {
    proxy_pass http://queue.internal:15672/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_buffering off;
}

Restart Nginx to apply the change.

You can then access the RabbitMQ Management Console at https://domain.com/rabbitmq/.

Important: If you use this method, you should secure the login page with HTTP authentication or a service such as Cloudflare Access.