Category: Apache ActiveMQ®
Blog
10 Questions to Ask an Apache ActiveMQ® Support Vendor
Deciding to buy open source support for Apache ActiveMQ® is the easy part. Working out which vendor can actually keep a broker alive at three in the morning is considerably harder, because nearly every vendor in this market is vague in exactly the same places.
Blog
Apache ActiveMQ® CVE-2023-46604: DripDropper Exploit Explained
When a CVSS 10.0 vulnerability is published, the expectation is that affected software gets patched within days. When it involves an open-source broker that processes business-critical transactions in enterprise environments, the expectation is that the security teams responsible for those brokers treat it as an emergency. “The attacks exploit a maximum-severity security flaw in Apache
Blog
Apache ActiveMQ® CVE Guide: Complete Vulnerability Reference
This Apache ActiveMQ® CVE guide is the maintained reference for every significant Apache ActiveMQ® vulnerability: what it does, how it is scored, which versions it affects, which release fixes it, and whether it is being exploited.
Blog
Event-Driven Architecture Patterns: The ActiveMQ Practitioner’s Guide
"Event-driven architecture" has become one of the most overloaded phrases in software engineering. The phrase simultaneously means a simple pub/sub notification system, a full event-sourced domain model, a saga for distributed transaction coordination, and a CQRS read/write separation. These are architecturally distinct event-driven architecture patterns with different trade-offs, different failure modes, and different operational complexity requirements.
Blog
Message Broker Compliance: HIPAA Security Rule, PCI-DSS & SOC 2 for Apache ActiveMQ®
A healthcare technology company routes patient appointment notifications through ActiveMQ. A payment processing firm uses ActiveMQ to bridge its order management system to its payment gateway. A SaaS provider includes ActiveMQ in the architecture scope for its annual SOC 2 Type II audit.
Blog
Open Source vs. Commercial Apache ActiveMQ® Support
The finance team sees the "Apache License 2.0" on the ActiveMQ download page and concludes the software is free. The engineering team knows the broker requires configuration, monitoring, tuning, CVE patching, and incident response. All of those things cost engineering time, whether or not a license fee appears on the invoice.