6.2. Managing AMQ Broker using JMX

Procedure

1. Open the <broker_instance_dir>/etc/broker.xml configuration file.

2. Set <jmx-management-enabled>.

   <jmx-management-enabled>true</jmx-management-enabled>

   If JMX is enabled, the broker can be managed locally using jconsole.

   注意

   Remote connections to JMX are not enabled by default for security reasons.

3. If you want to manage multiple brokers from the same MBeanServer, configure the JMX domain for each of the brokers.

   By default, the broker uses the JMX domain org.apache.activemq.artemis.

   <jmx-domain>my.org.apache.activemq</jmx-domain>

   注意

   If you are using AMQ Broker on a Windows system, system properties must be set in artemis, or artemis.cmd. A shell script is located under <install_dir>/bin.

Procedure

1. Open the <broker-instance-dir>/etc/management.xml configuration file.

2. Define a connector for the JMX agent. The connector-port setting establishes an RMI registry that clients such as jconsole query for the JMX connector server. For example, to allow remote access on port 1099:

   <connector connector-port="1099"/>

3. Verify the connection to the JMX agent using jconsole:

   service:jmx:rmi:///jndi/rmi://localhost:1099/jmxrmi

4. Define additional properties on the connector, as described below.

   connector-host

   The broker server host to expose the agent on. To prevent remote access, set connector-host to 127.0.0.1 (localhost).

   rmi-registry-port

   The port that the JMX RMI connector server binds to. If not set, the port is always random. Set this property to avoid problems with remote JMX connections tunnelled through a firewall.

   jmx-realm

   JMX realm to use for authentication. The default value is activemq to match the JAAS configuration.

   object-name

   Object name to expose the remote connector on. The default value is connector:name=rmi.

   secured

   Specify whether the connector is secured using SSL. The default value is false. Set the value to true to ensure secure communication.

   key-store-path

   Location of the keystore. Required if you have set secured="true".

   key-store-password

   Keystore password. Required if you have set secured="true". The password can be encrypted.

   key-store-provider

   Keystore provider. Required if you have set secured="true". The default value is JKS.

   trust-store-path

   Location of the truststore. Required if you have set secured="true".

   trust-store-password

   Truststore password. Required if you have set secured="true". The password can be encrypted.

   trust-store-provider

   Truststore provider. Required if you have set secured="true". The default value is JKS

   password-codec

   The fully qualified class name of the password codec to use. See the password masking documentation, linked below, for more details on how this works.

   注意

   The RMI registry picks an IP address to bind to. If you have multiple IP addresses/NICs present on the system, then you can choose the IP address to use by adding the following to the artemis.profile file: -Djava.rmi.server.hostname=localhost

5. Set an appropriate value for the endpoint serialization using jdk.serialFilter as described in the Java Platform documentation.