processone/ejabberd
Ejabberd
ejabberd is a multi-protocol communication gateway and scalable server that implements XMPP for instant messaging and presence. It serves as a federated messaging platform, enabling interoperable communication and user discovery between different remote servers.
The project functions as an MQTT message broker for lightweight IoT device communication and a SIP signaling server for managing voice and multimedia signaling traffic. It allows for the hosting of multiple domains on a single instance using virtual hosting to isolate configurations and prevent username conflicts.
The system provides broad capabilities across enterprise identity integration via LDAP, SQL, and PAM, as well as automated SSL certificate management. It includes tools for traffic management through connection throttling and session limiting, alongside a database-agnostic persistence layer for storing user profiles and application data.
Features
- XMPP Communication Systems - Provides a scalable, federated infrastructure for secure real-time communication based on the XMPP protocol.
- Virtual-Host Isolation - Isolates users and configurations by assigning distinct database connections and authentication methods to specific domain names.
- Configuration Isolation - Isolates configurations and authentication methods by virtual host to prevent username conflicts.
- MQTT Message Brokers - Functions as an MQTT message broker to facilitate communication with lightweight IoT devices.
- Client Connectivity Management - Handles incoming client connections with integrated secure authentication and traffic shaping.
- XMPP Federation - Enables interoperable communication between independent messaging servers across different domains.
- Federated Private Messaging - Implements a federated platform for secure one-on-one and group communication across decentralized servers.
- Message Routing - Orchestrates and directs messages between local users and remote servers to enable global XMPP federation.
- Multi-Protocol Communication Bridges - Routes and bridges traffic across XMPP, MQTT, and SIP communication standards.
- Server Connection Managers - Coordinates incoming server connections to enable messaging federation between different remote servers.
- Virtual Hosting - Supports hosting multiple independent domains on a single instance using virtual hosting.
- Enterprise Identity Providers - Integrates with corporate directories via LDAP, SQL, and PAM for centralized identity management.
- Identity-Based Authentication - Verifies user credentials against a built-in internal database.
- LDAP Authentication - Integrates with directory services to verify user credentials via LDAP for centralized authentication.
- SQL Credential Verifications - Verifies user credentials by querying relational database tables storing usernames and hashed passwords.
- Actor-Based Concurrency - Utilizes an Erlang-based actor model with isolated processes to handle concurrent client connections and message routing.
- Authentication Backends - Provides a modular system to delegate identity verification to external backends such as LDAP, SQL, or PAM.
- SIP Integrations - Processes Session Initiation Protocol requests to manage voice and multimedia signaling traffic.
- Database Abstraction Layers - Implements a database abstraction layer that allows swapping between different SQL engines or directory services for user profile storage.
- External State Stores - Persists application data and user records in external database engines.
- Real-Time Runtime Updates - Applies configuration changes and module updates to the running system without requiring a restart.
- Server Administration APIs - Hosts administrative interfaces and web APIs via a built-in web server for remote management.
- Traffic Throttling - Limits incoming data rates in bytes per second to maintain stability during traffic spikes.
- IoT Device Management Platforms - Functions as an MQTT broker to manage lightweight messaging traffic for IoT devices.
- Media Relays - Implements media relays to route real-time audio and video traffic and bypass network restrictions.
- Network Listeners - Provides the ability to configure network listeners for client and server traffic on specific ports using HTTP and SIP.
- Protocol-Agnostic Message Routing - Standardizes internal message routing while supporting multiple network protocols including XMPP, MQTT, and SIP.
- SIP Signaling - Handles session initiation and routing for real-time voice and video calls using the SIP protocol.
- SIP Signaling Servers - Acts as a server for managing voice and multimedia signaling traffic using the Session Initiation Protocol.
- Traffic Routing - Manages and routes real-time multimedia traffic for voice and video calling.
- XMPP Protocol Gateways - Provides a gateway to translate WebSocket traffic into XMPP protocol messages for web browser compatibility.
- PAM Credential Validators - Verifies user identities against the system's Pluggable Authentication Modules stack.
- Access Control Lists - Implements access control lists to permit or deny actions based on user, server, or IP patterns.
- External Authentication - Delegates credential verification to custom external programs written in any language.
- Directory Service Integrations - Integrates with external directory servers to manage user identities and authentication.
- LDAP Profile Automation - Uses LDAP directory services as the primary information store for user profiles.
- JWT Token Validators - Verifies the authenticity and expiration of JSON Web Tokens for passwordless authentication.
- SSL Certificate Automation - Automatically obtains and renews SSL/TLS certificates using the ACME protocol.
- User Access Management - Provides administrative tools to regulate system connection permissions and authentication methods.
- Hot Reconfigurations - Allows updating server settings and modular components at runtime without requiring a system restart.
- Chat And Messaging - Listed in the “Chat And Messaging” section of the Awesome Selfhosted awesome list.
- Media and Communication - Robust XMPP server for real-time chat and messaging.
- XMPP Servers - Robust XMPP server for instant messaging and presence.
