AMQP Client Access

Protocol Version

For details on AMQP, see AMQP.

The IoT platform supports only AMQP 1.0.

Connection Establishment and Authentication

1. The AMQP client establishes a TCP connection with the platform and performs TLS handshake verification.
   

   To ensure security, the AMQP client must use TLS1.2 or a later version for encryption. Non-encrypted TCP transmission is not supported. The difference between the client time and standard time cannot be greater than 5 minutes. Otherwise, the connection will fail.

2. The client requests to set up a connection.
3. The client sends a request to the platform to establish a receiver link (a unidirectional channel for the platform to push data to the client). The receiver link must be set up within 15 seconds after the connection is set up on the client. Otherwise, the platform will close the connection. After the receiver link is set up, the client is connected to the platform.
   

   A maximum of 10 receiver links can be created for a connection, and sender links cannot be created. Therefore, the platform can push messages to the client, but the client cannot send messages to the platform.

Connection Configuration Parameters

The table below describes the connection address and connection authentication parameters for the AMQP client to connect to the platform.

• AMQP access domain name: amqps://${UUCID}.iot-amqps.cn-north-4.myhuaweicloud.com

• Connection string: amqps://${UUCID}.iot-amqps.cn-north-4.myhuaweicloud.com :5671?amqp.vhost=default&amqp.idleTimeout=8000&amqp.saslMechanisms=PLAIN

  Parameter	Description
  UUCID	Short for unique user connect ID, which is automatically generated for each account. Log in to the IoTDA console. In the navigation pane, choose Overview and click Access Details under Instance Information to obtain the UUCID.
  amqp.vhost	Currently, AMQP uses the default host. Only the default host is supported.
  amqp.saslMechanisms	Connection authentication mode. Currently, PLAIN-SASL is supported.
  amqp.idleTimeout	Heartbeat interval, in milliseconds. If the heartbeat interval expires and no frame is transmitted on the connection, the platform closes the connection.

• Port: 5671
• Client identity authentication parameters

  username ="accessKey=${accessKey}|timestamp=${timestamp}|instanceId=${instanceId}"

  password = "${accessCode}"

  Parameter	Mandatory or Optional	Description
  accessKey	Mandatory	An accessKey can be used to establish a maximum of 32 concurrent connections. When establishing a connection for the first time, preset the parameter by following the instructions provided in Obtaining the AMQP Access Credential.
  timestamp	Mandatory	Indicates the current time. The value is a 13-digit timestamp, accurate to milliseconds. The server verifies the client timestamp. There is a 5-minute difference between the client timestamp and server timestamp.
  instanceId	Optional	Instance ID. This parameter is mandatory when multiple instances of the Standard Edition are purchased in the same region. For details, see Viewing Instance Details.
  accessCode	Mandatory	The value can contain a maximum of 256 characters. When establishing a connection for the first time, preset the parameter by following the instructions provided in Obtaining the AMQP Access Credential. If the accessCode is lost, you can call the API Generating an Access Credential or follow the instructions provided in Obtaining the AMQP Access Credential to reset the accessCode.

Obtaining the AMQP Access Credential

If an application uses AMQP to access the platform for data transfer, preset an access credential. You can call the API Generating an Access Credential or use the console to preset an access credential. The procedure for using the console to generate an access credential is as follows:

1. Choose IoTDA Instances, select the edition of your instance, and click Details to go to the instance details page.
2. Click Preset Access Credential to preset the accessCode and accessKey.

   

   

   If you already have an access credential, the accessKey cannot be used after you preset the access credential again.

Connection Specifications

Receiving Push Messages

After the receiver link between the client and platform is established, the client can proactively pull data or register a listener to enable the platform to push data. The proactive mode is recommended, because the client can pull data based on its own capability.