Secure and Simplify Rabbitmq RBAC and Audit with Teleport

Teleport provides functionality to automatically register and manage access to RabbitMQ instances.12

The documentation demonstrates an example of a client application that:

• Watches for RabbitMQ containers running in Docker.
• Registers the RabbitMQ management API endpoints with Teleport.
• Creates Teleport Application Service instances to proxy these endpoints.1

Here's an example of how you can test this integration:

• First, ensure you have the Teleport container image:

docker image pull public.ecr.aws/gravitational/teleport-distroless:16.2.0

• Run the client application (assuming you've implemented it based on the provided example):

go run main.go

• Start some RabbitMQ containers:

for i in {1..3}; do docker run -d rabbitmq:3-management; done;

• The client application should automatically register these RabbitMQ instances with Teleport. You can verify this by running:

tsh apps ls

This should list the registered RabbitMQ applications.2

This integration allows you to manage access to your RabbitMQ instances through Teleport, providing secure, audited access to the RabbitMQ management API.

You can use Teleport VNet with RabbitMQ, as RabbitMQ is a TCP application. VNet is designed to automatically proxy connections from your computer to TCP apps available through Teleport.1