Emergency Incident Response
Cluster partitioned, publishers blocked, or a node that won't rejoin. A senior RabbitMQ engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Tanzu RabbitMQ Support
Last reviewed by Scott Sternloff
AceMQ is the number one RabbitMQ partner globally with direct access to the RabbitMQ core team, and Broadcom's VMware Expert Advantage Partner of the Year for the Americas, 2025. We support Tanzu RabbitMQ on both the Kubernetes and OVA deployment models — Cluster Operator reconcile loops, quorum queues short of members, Erlang distribution broken by cert rotation, and the entitlement problems that block your upgrade.
Planning a build, upgrade or migration instead? See AceMQ Tanzu RabbitMQ consulting and services.
Customers




Partners


Incident Triage
These are real symptoms from real Tanzu RabbitMQ production environments — and the first thing our engineers check when one comes in.
| Symptom you're seeing | What we check first | Typical resolution |
|---|---|---|
| Cluster Operator stuck in a reconcile loop, cluster never reaches ready | Operator logs against the CRD version and the StatefulSet's current spec. An immutable field edited on the RabbitmqCluster resource, or an operator upgraded ahead of its CRDs, makes reconcile retry forever while the cluster sits partially rolled. | 1-3 hours |
| Quorum queue running with fewer members than expected after node replacement | The queue's member list against current cluster membership. Quorum queue membership does not follow node replacement automatically — a replaced node leaves the queue on two of three members, still writable and one failure away from losing quorum entirely. | Under 2 hours |
| Nodes won't rejoin after a cert-manager certificate rotation | Whether the Erlang distribution certificates rotated without the nodes reloading them, and whether the new cert's SANs still cover the pod DNS names. Inter-node TLS fails independently of client TLS, so clients keep connecting while the cluster itself sits partitioned. | 2-4 hours |
| Upgrade blocked — Broadcom portal says you aren't entitled | Which site account the Tanzu RabbitMQ entitlement landed on after the portal migration. Perpetual VMware entitlements, subscription SKUs, and support contracts routinely split across accounts, so the engineer doing the download sees no entitlement to a product you own. | Same day |
| Memory alarm triggered, publishers blocked, memory usage looks moderate | The high-watermark against the container or VM limit rather than the host, plus binary heap and mailbox growth. On Kubernetes the default watermark calculated from node memory is meaningless against a pod limit, and a slow consumer with large messages pins binaries long after the queue drains. | Under 1 hour |
| Rolling upgrade between Tanzu RabbitMQ versions stalls mid-flight | The supported upgrade path and feature-flag state. RabbitMQ requires all mandatory feature flags enabled before moving major versions, and a mixed-version cluster where one node cannot enable a flag halts the rollout with nodes on both versions. | 2-4 hours |
| Classic mirrored queues behaving unpredictably after migration to quorum | Whether producer and consumer semantics were carried over unchanged. Quorum queues do not support the same priority, TTL, and lazy behaviors as mirrored queues, and applications that relied on those silently change behavior rather than erroring. | Same day |
| Shovel or federation link flapping between foundations | Link state, credential validity, and network path between sites. Expired credentials, a firewall dropping idle AMQP connections, and heartbeat settings tuned for a LAN are the three causes we see repeatedly on cross-site links. | 1-3 hours |
Resolution times reflect typical Tanzu RabbitMQ engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.
What's Included
No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.
Cluster partitioned, publishers blocked, or a node that won't rejoin. A senior RabbitMQ engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Every P1 closes with a written RCA: what failed, why, the fix applied, and the configuration, manifest, or client change that prevents recurrence. Delivered as standard, not on request.
Direct access to the RabbitMQ core team plus partner-level escalation into Broadcom engineering. When an issue is a genuine defect rather than configuration, it goes upstream through a channel you do not have directly.
Quorum versus classic queue selection, prefetch and publisher-confirm strategy, memory watermarks against real container limits, and disk sizing for the write-ahead log under your actual message profile.
Broadcom portal migrations, split site accounts, subscription conversions, and support contract mapping. We get the download and the entitlement working again instead of handing you a portal link.
Version upgrades with feature-flag sequencing, mirrored to quorum queue migration, OVA to Kubernetes moves, and migration between open-source and Tanzu RabbitMQ in either direction.
Why AceMQ
Direct access to the RabbitMQ core team. When an incident turns out to be a genuine broker defect — and occasionally it does — we escalate to the people who maintain the code rather than filing a ticket and waiting with you.
Americas, 2025. Our engineers hold current Broadcom certification across the Tanzu portfolio, and we escalate through partner channels on product defects and entitlement problems alike.
The same senior engineers stay on your account. They know your cluster size, your queue types, and your client libraries — so a P1 call starts with diagnosis, not twenty minutes of you explaining your topology.
You reach a senior RabbitMQ engineer directly by phone, email, or Slack. No help desk collecting information to pass along, and no escalation approval process standing between you and someone who can actually fix it.
Most Tanzu RabbitMQ incidents on Kubernetes have a platform cause and a broker symptom: a storage class that can't sustain the write-ahead log, a PodDisruptionBudget that permitted the drain that cost you quorum, a NetworkPolicy blocking Erlang distribution. We diagnose both layers.
Engineers across 26+ countries and every time zone. Your 3am cluster partition is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.
Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.
Escalation Path
Every tier reaches a senior Tanzu RabbitMQ engineer. There is no tier-1 triage layer to get through.
P1 escalation path
A replay of one P1, from the first page to the written root-cause analysis
15-minute P1 response, 24/7.
A response time, not a resolution time.
P1 opened, on-call engineer paged
Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.
Senior engineer on your bridge
A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.
Specialists across the stack join
When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.
Written root-cause analysis
Root cause, the fix applied and the prevention steps, delivered after every P1.
Pricing
AceMQ Tanzu RabbitMQ support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, cloud-managed or Kubernetes).
| What moves the price | How it changes the contract |
|---|---|
| SLA level | Business-hours cover costs less than 24/7 cover with a 15-minute emergency response. |
| Scope | More clusters or nodes, and more environments, make a larger contract. |
| Deployment | Self-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work. |
Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.
Support In Practice
Tanzu RabbitMQ support and managed-services work from AceMQ. Each card links to the full write-up: the environment, what AceMQ diagnosed or changed, and the result.
Fortune 500 Software Company
Migration to supported RabbitMQ versions with managed services, standardization, compliance posture, and Tanzu commercial licensing.
Government IT Services Firm
Support and compliance alignment for healthcare, finance, government, and defense with supported releases, audit posture, and vendor-backed escalation.
Global Payments Provider
Ongoing operational support and expert escalation with portal-based support, advisory sessions, ticketing, and recurring health checks.
Central Bank
Moving from community support risk to enterprise-backed support with patch access, compliance posture, and procurement guidance.
IT Distribution Company
Moving from unsupported versions to supported LTS or enterprise versions with compatibility validation and rollback design.
Support options
AceMQ offers Tanzu RabbitMQ support in four tiers, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for clusters your team runs, proactive monitoring that finds quorum membership, watermark and entitlement problems first, managed Tanzu RabbitMQ in your own environment, and fully managed RabbitMQ on AceMQ's platform. Kubernetes and OVA deployments are covered.
You run it, we back you up
Best for: Platform teams that run Tanzu RabbitMQ themselves and need senior cover when a cluster partitions.
You run it, we watch it with you
Best for: Estates where a queue one failure from losing quorum, or an upgrade blocked by entitlement, is not an acceptable surprise.
We run it in your cloud or data centre
Best for: Regulated estates that must keep messaging inside their own boundary.
We host it and run it, as a service
Best for: Teams that want RabbitMQ specialists behind the console and no cluster to run.
| Who does what | Tier 1 24/7 support | Tier 2 Proactive monitoring | Tier 3 Managed, your infrastructure | Tier 4 Fully managed by AceMQ |
|---|---|---|---|---|
| Who runs Tanzu RabbitMQ day to day? | Your team | Your team, with AceMQ reviews | AceMQ | AceMQ |
| Where does it run? | Your infrastructure | Your infrastructure | Your cloud account or data centre | AceMQ infrastructure |
| 24/7 incident response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response |
| Health checks and CVE alerts | On request | Scheduled | Included | Included |
| Patching and upgrades | Your team, AceMQ advises | Planned with AceMQ | Done by AceMQ | Done by AceMQ |
| Monitoring and on-call | Your team | Your team | AceMQ | AceMQ |
| Data, keys and accounts | Yours | Yours | Yours | Your data, hosted by AceMQ |
Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.
One partner for Tanzu RabbitMQ
Support is one part of what AceMQ does for Tanzu RabbitMQ. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.
Our Tanzu RabbitMQ support covers 24/7 emergency incident response with a 15-minute SLA, root cause analysis on every P1, queue design and performance tuning, upgrade and migration support, Broadcom licensing and entitlement resolution, and quarterly health checks. Every ticket is handled by a named senior engineer assigned to your account. There is no tier-1 triage layer and no per-incident charge.
Two things that are hard to replicate. We are the number one RabbitMQ partner globally with direct access to the RabbitMQ core team, so genuine broker defects go to the maintainers rather than into a queue. And we are Broadcom's VMware Expert Advantage Partner of the Year for the Americas, 2025, which gives us partner-level escalation on the Tanzu and licensing side. Most vendors have one relationship or the other. Tanzu RabbitMQ problems regularly need both.
Yes. On Kubernetes we support the RabbitMQ Cluster Operator and Messaging Topology Operator across TKG, OpenShift, EKS, AKS, and GKE, including the StatefulSet, storage, and network policy layers underneath. On the OVA model we support vSphere-deployed clusters including resource contention diagnosis at the host level. We also handle migration from OVA to Kubernetes, which is the direction most estates are now moving.
It is expected behavior, and it is one of the most common quiet risks we find. Quorum queue membership is tied to specific nodes and does not automatically follow a node replacement, so after one replacement a three-member queue runs on two members. The queue stays fully writable and nothing alerts, but you are now one failure from losing quorum. Membership needs to be explicitly restored after every node replacement, and that step belongs in your runbook.
Yes, and it is one of our most common opening tickets since the portal migration. Entitlements moved, and perpetual licenses, subscription SKUs, and support contracts frequently ended up under separate site accounts, so the engineer trying to download a patch sees no entitlement to a product the company clearly owns. We resolve this through the partner channel rather than leaving you in a portal support queue while an upgrade window closes.
In most cases yes, since classic queue mirroring has been removed in current RabbitMQ versions and quorum queues offer materially better data safety. The migration is not a drop-in replacement, though. Quorum queues handle priorities, per-message TTL, and lazy behavior differently, they are more disk and memory intensive per queue, and applications relying on mirrored-queue semantics can change behavior without erroring. We plan the migration against your actual queue inventory and client code rather than converting everything and hoping.
Yes. AceMQ works on Tanzu RabbitMQ in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.
Every AceMQ proposal is tailored to your requirements: your Tanzu RabbitMQ environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how Tanzu RabbitMQ is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.
Let's talk
Reactive cover, proactive reviews, or AceMQ running Tanzu RabbitMQ for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.
Production incident right now?Email a Tanzu RabbitMQ Architect
Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.
305-204-2607info@acemq.comPrefer to talk now? Call us directly or use the consultation tab to find a time that works.