What is EMQX and why use it as an MQTT broker?

EMQX is a powerful, open-source MQTT broker designed for high performance and massive scalability. It supports multiple operating systems including Linux, Windows, and containerized environments. EMQX is widely used in IoT and real-time applications due to its efficient publish-subscribe messaging system, making it ideal for scalable device communication.

How do I install EMQX on Ubuntu using APT?

To install EMQX on Ubuntu via APT, first configure the EMQX APT source by running the provided curl command. Then, install EMQX using 'sudo apt-get install emqx-enterprise'. After installation, start EMQX with 'sudo emqx start'. This method is recommended for ease and official support.

Can I install EMQX without public network access?

Yes, EMQX provides a tar.gz package for environments without public network access or for quick deployment. Download the appropriate tar.gz package from the EMQX website, extract it to a directory, and start EMQX using the executable script. This method is self-contained and does not rely on third-party dependencies.

How do I verify EMQX is running correctly after installation?

You can verify EMQX operation by checking port listening using the 'netstat -tunlp' command to ensure default MQTT ports are active. Additionally, access the EMQX Dashboard through a browser at 'http://localhost:18083/' to monitor and manage the broker. Testing MQTT connectivity via the Dashboard’s WebSocket client further confirms successful deployment.

How can I secure my EMQX MQTT broker on Ubuntu?

Securing EMQX involves configuring authentication so only authorized clients can connect. EMQX supports authentication using its built-in database or integration with databases like MySQL and Redis. You can create authentication rules and add users via the EMQX Dashboard under Access Control, ensuring clients provide valid credentials before connecting.

How to Install an MQTT Broker on Ubuntu

EMQX Team

Jul 14, 2025

EMQX

Introduction

The Message Queuing Telemetry Transport (MQTT) protocol is a lightweight, publish-subscribe messaging system widely used in IoT and real-time applications due to its efficiency and scalability. EMQX is a powerful, open-source MQTT broker designed for high performance and massive scalability, with robust support for multiple operating systems, including Linux, Windows, macOS, Raspbian, Ubuntu, and even containerized environments like Docker.

In this blog post, we’ll guide you through the process of installing EMQX on an Ubuntu system, providing a step-by-step tutorial to get your MQTT broker up and running quickly. Whether you’re building an IoT project or exploring real-time messaging, this guide will help you set up EMQX with ease.

Installing EMQX MQTT Broker on Ubuntu

The operating system used for this demonstration is Ubuntu 20.04 64-bit.

Option 1: Install EMQX with APT

APT is the package manager that comes with Ubuntu. It is recommended to prefer to install EMQX with APT. At the same time, EMQX also provides the official APT source and one-click configuration script to help users quickly install EMQX.

Configure the EMQX APT source.

curl -s https://packagecloud.io/install/repositories/emqx/emqx-enterprise5/script.deb.sh | sudo bash

Copy the above command to the Ubuntu terminal and execute it. The following figure indicates a successful configuration.
Install the latest version of EMQX.
```
sudo apt-get install emqx-enterprise
```
After successful installation, use the following command to start EMQX.
```
sudo emqx start
```
As illustrated below, a successful startup of EMQX Enterprise 5.10.0 will display a confirmation message. If the command yields no response, verify port availability as detailed in the Verifying EMQX Operation and Connectivity section.
EMQX management command.

EMQX offers command-line tools for essential operations like starting, stopping, and accessing the console. As shown below, you can view all available management commands by executing sudo emqx in your terminal.

Option 2: Install EMQX with tar.gz package

For environments without public network access or for rapid deployment and functional verification, the EMQX .tag.gz package offers a self-contained and easily manageable installation method, independent of third-party dependencies.

Download the Installation Package

Visit the EMQX download address. Select 5.10.0 for the Version and Ubuntu 22.04 amd64 / tar.gz for the Package Type. Then click the “copy” icon on the right to copy the complete wget command. Paste the copied command into your Ubuntu terminal and execute it to begin the download.

Unzip and Install

Execute the following command on the server terminal, extracting the compressed package to the emqx directory under the current directory.

This demonstration will be installed under the current user's home directory, that is ~/emqx/

mkdir -p emqx && tar -zxvf emqx-enterprise-5.10.0-ubuntu22.04-amd64.tar.gz -C emqx

Next, use the following command to start EMQX.

cd emqx ./bin/emqx start

If the startup is successful, you'll see the message EMQX Enterprise 5.10.0 is started successfully! appear. Should the command not return a response after a significant delay, please refer to the Verifying EMQX Operation and Connectivity section to verify if any relevant ports are already in use.

Verifying EMQX Operation and Connectivity

Port listening Check

Use the command netstat -tunlp to check the operation of the EMQX port. By default, EMQX will start the following ports. Check the port occupancy in case of exceptions.

This command can also be executed before the EMQX installation to ensure that the relevant port is not occupied.

Port	Description
1883	MQTT/TCP port
8883	MQTT/SSL port
8083	MQTT/WS port
8084	MQTT/WSS port
18083	EMQX Dashboard port
4370	Erlang distributed transmission port
5370	Cluster RPC port. By default, each EMQX node has a RPC listening port.

Access the EMQX Dashboard

EMQX provides a Dashboard for users to manage and monitor EMQX and configure required functions through Web pages. The Dashboard can be accessed via a browser at http://localhost:18083/ (Replace the localhost with the actual IP address) after EMQX has been successfully started.

Before accessing Dashboard, make sure that port 18083 is opened in the server firewall

The default user name of Dashboard is admin, and the password is public. After the first successful login, you will be prompted to change the password.

MQTT Connection Test

Click the Diagnostics Tools -> WebSocket Client in the left menu bar. This allows you to test MQTT over WebSocket, confirming the successful deployment of your MQTT broker.

It is required that the firewall should have opened the right for access to port 8083

Connect

As shown in the figure below, the tool has automatically filled in the host according to the access address. You can click the Connect button directly. The figure below indicates a successful connection.

Subscribe to a testtopic as shown in the figure below.

Publish

As shown in the figure below, we have published two messages to testtopic, which have been received successfully, indicating that the MQTT broker has been successfully deployed and is running normally.

At this point, we have successfully deployed and tested the MQTT broker's basic connectivity. However, this setup is currently suitable only for testing purposes. To prepare the MQTT broker for a production environment, the crucial next step is to implement robust authentication configurations.

Securing Your MQTT Broker on Ubuntu: Authentication Configuration

By default, EMQX will allow any client connection until the user creates an authenticator, which will authenticate a client according to the authentication information provided by the client. A client can connect successfully only when it passes the authentication. Next, we will demonstrate how to use the built-in database of EMQX for the authentication of username and password.

EMQX also provides authentication integration support with a variety of back-end databases, including MySQL, PostgreSQL, MongoDB, and Redis.

Check the documentation for more authentication methods:

https://docs.emqx.com/en/emqx/latest/access-control/authn/authn.html

Create Authentication

EMQX has supported the authentication configuration in Dashboard since version 5.0, allowing users to create secure MQTT services more conveniently and quickly. Click Authentication under the Access Control menu to enter the Authentication Configuration page, and then click the Create button on the far right.

Select the Password-Based option, and then click Next.

Select Built-in Database for the database and click Next.

Next, select the UserID Type, Password Hash and Salt Position, then click Create.

Here the default configuration is used, while readers may make selection according to the actual business needs.

Add a User

The figure below shows the successful creation of the authentication. Next, click Users to add a user.

After entering the User Management page, click the Add button on the far right, set the Username and Password in the pop-up box, and then click Save.

The figure below shows the successful creation.

Test Authentication

Next, we use the Websocket tool provided by Dashboard to test whether the authentication has been successfully configured. Enter the username and password you just created in the Connect configuration, and then click Connect. A pop-up window on the right indicates that it is connected.

Next, use the user name test1 that has not been created. Click Connect, and you will see the following Connection Failed information.

So far, we have completed the authentication configuration for EMQX and set up a single-node MQTT broker available in the production environment. To ensure the high availability of the MQTT broker, you need to create a multi-node EMQX cluster. The cluster creation will not be detailed in this document. You can refer to the EMQX Cluster documentation for configuration.

Talk to an Expert

How to Install an MQTT Broker on Ubuntu

Introduction