Back to all use cases
RabbitMQLeaving a commercial distribution

Keeping community RabbitMQ patched after leaving Tanzu

A team on Tanzu RabbitMQ faces a licence renewal it does not want to sign. Community RabbitMQ is the open source path, but leaving a commercial distribution should not mean running an unpatched broker while the move is planned.

Challenge

Tanzu RabbitMQ is licensed by CPU core count with minimum commitments, so the bill tracks the size of the hosts rather than the support used. For mid-size clusters that is hard to justify at renewal. The alternative, the community build under the Mozilla Public License 2.0, has a different catch: once a series leaves community support, its patch releases go only to Broadcom's commercial customers.

So the exit has two parts that run on different clocks. Procurement wants a decision before the renewal date. Engineering needs time to list the Tanzu-specific features in use, test community builds against the applications and move clusters without dropping messages. The broker has to stay patched through all of it, including the Erlang/OTP runtime underneath.

Environment

RabbitMQ on a Tanzu distribution, on virtual machines or Kubernetes, heading toward community RabbitMQ. Some clusters use Tanzu-only features; others run plain broker configuration that would work unchanged on a community build.

Versions range from 3.12 or 3.13 to the 4.x line, and each cluster has its own application owners and its own change calendar. Many of the older clusters also carry the classic mirrored queues that RabbitMQ 4.0 removed, so the exit and the 4.x upgrade are easy to confuse. They are separate decisions: a cluster can leave Tanzu on 3.13 and move to quorum queues later.

Options

Renew Tanzu RabbitMQ. Broadcom's commercial support covers 3.13 until 31 December 2029 and includes the Tanzu feature set. It is the simplest path if the estate uses those features heavily and the licence cost fits.

Move to community RabbitMQ with no support contract. The licence costs nothing, but there is no SLA, and fixes for older series are not public.

Move to community RabbitMQ with third-party support. The broker becomes community RabbitMQ, and a provider supplies patched builds for the versions you run, current and end of life, while the migration happens.

Change brokers entirely. Sometimes right for new systems, but a broker swap touches every client, and that is rarely worth doing just to leave a licence.

Approach

OSSeva covers community RabbitMQ from the first day of the exit, on 3.8.x through 4.3.x, with patched builds for the series that are out of community support. Patches are applied to upstream community source and delivered as signed Helm charts, OCI images or Maven artifacts through your registry, with the matching Erlang/OTP release patched alongside.

The migration starts with a fixed-price discovery engagement that sizes the work before any commitment, listing which Tanzu-specific configuration extensions each cluster uses. For most Tanzu customers the migration is a configuration change and a cluster migration, planned to avoid downtime. Where a Tanzu-only feature has no direct community equivalent, OSSeva Assure designs the replacement, alongside version upgrade planning and a reference architecture.

Clusters move one at a time, and each one runs patched community RabbitMQ from the moment it leaves Tanzu. OSSeva Operate can run the migrated clusters on your own infrastructure with 24/7 monitoring and a 15-minute P1 incident response SLA.

What this delivers

CVE coverage on community RabbitMQ with no gap during the exit, a migration sized by discovery before the renewal decision, and one contract for the clusters as they move. OSSeva for RabbitMQ is priced per application cluster, so the cost no longer tracks host size; book a discovery call for a quote.

Go deeper

Questions

Frequently asked questions

Book a 15-minute call

What do we give up by leaving Tanzu RabbitMQ?

The Tanzu feature set and Broadcom's commercial patch releases for older series. The community server and its core plugins are MPL 2.0 and can run in production at no cost. The discovery engagement lists which Tanzu features your clusters actually use.

How hard is the migration from Tanzu RabbitMQ to community RabbitMQ?

It depends on how many Tanzu-specific configuration extensions are in use. For most Tanzu customers it is a configuration change and a cluster migration, planned to avoid downtime. A fixed-price discovery engagement sizes it before any commitment.

Will community RabbitMQ get security patches after we leave?

Community releases fix series that are still in community support. For older series, fixes go only to commercial customers, so you need a provider. OSSeva ships patched builds for 3.8.x to 3.13.x and 4.0.x to 4.2.x, alongside the current 4.3.x.

Is the Erlang runtime included?

Yes. Each OSSeva release ships with a validated Erlang/OTP version, and the Erlang/OTP builds receive CVE patches independently of the RabbitMQ release cycle.

How is OSSeva RabbitMQ support priced?

Per application cluster, so the price does not change with the size of the hosts underneath. The tier you choose, Patch, Assure or Operate, sets what is included. Book a discovery call for a quote.

See every EOL & CVE-patching use case

All use cases
Book a call