Port 8883 — MQTT over TLS

• MQTT 5.0 (2019) — shared subscriptions, enhanced auth, user properties
• QoS 0/1/2: fire-and-forget, at-least-once, exactly-once
• Retained messages: broker keeps the latest per topic
• Will message: notifies of client disconnect
• mTLS: client-cert for device authentication — IoT industry standard

# mosquitto_pub with TLS
$ mosquitto_pub -h broker.example.com -p 8883 \
    --cafile ca.crt --cert client.crt --key client.key \
    -t sensor/temperature -m "23.5"

# Python paho-mqtt
import paho.mqtt.client as mqtt
c = mqtt.Client()
c.tls_set('ca.crt', 'client.crt', 'client.key')
c.connect('broker.example.com', 8883)
c.publish('sensor/temperature', '23.5')

• MQTT plain
• Modbus

Port 8883 is specifically designated for MQTT over TLS, ensuring secure communication between devices in the Internet of Things (IoT) ecosystem. The use of TLS (Transport Layer Security) adds a robust layer of encryption, protecting data transmitted between MQTT clients and brokers.

When utilizing port 8883, two primary security features are implemented:

• Encryption: All data transmitted over this port is encrypted using TLS 1.2 or 1.3, preventing eavesdropping and tampering during transmission.
• Authentication: Mutual TLS (mTLS) is often employed, which requires both the client and server to authenticate each other using X.509 certificates. This ensures that only authorized devices can connect to the MQTT broker.

To configure MQTT clients for secure communication using port 8883, developers must ensure that their client libraries support TLS and that they have the necessary certificates available. Most popular MQTT client libraries, such as Paho and Eclipse Mosquitto, provide built-in support for TLS configurations.

Port 8883 is widely adopted in various IoT applications due to its secure communication capabilities. Below are several common use cases:

• Smart Home Automation: Devices such as smart thermostats, security cameras, and lighting systems utilize MQTT over TLS to communicate securely with a central hub or cloud service, ensuring user data and control commands remain private.
• Industrial IoT: In manufacturing, sensors and machines communicate critical operational data to cloud services over port 8883, allowing for real-time monitoring and control while maintaining strict security protocols.
• Healthcare Monitoring: Medical devices that collect patient data can transmit sensitive information securely to healthcare providers using MQTT over TLS, ensuring compliance with data protection regulations.

These use cases highlight the importance of choosing the right communication protocol and port for secure data transmission in IoT environments, with port 8883 being a preferred choice for many developers.

Setting up an MQTT client to communicate over port 8883 requires specific configurations to enable TLS. Below are practical examples for popular MQTT clients:

Paho MQTT Client (Python)

import paho.mqtt.client as mqtt

# Define the callback functions

def on_connect(client, userdata, flags, rc):
    print('Connected with result code ' + str(rc))

client = mqtt.Client()

# Configure TLS
client.tls_set(ca_certs='path/to/ca.pem',
               certfile='path/to/client_cert.pem',
               keyfile='path/to/client_key.pem')

client.on_connect = on_connect

# Connect to the broker
client.connect('broker.example.com', 8883, 60)

# Start the loop
client.loop_forever()

Eclipse Mosquitto (Command Line)

mosquitto_pub -h broker.example.com -p 8883 -t 'test/topic' -m 'Hello World' -v --cafile path/to/ca.pem --cert path/to/client_cert.pem --key path/to/client_key.pem

In these examples, it's essential to replace path/to/ with the actual paths to your certificate files. The Paho MQTT client in Python demonstrates how to set up a secure connection programmatically, while the Mosquitto command-line tool shows how to publish a message securely using TLS.