What happens when a message is published with QoS=1? - mqtt

I would like to have a better understanding of the behavior of this library.
Specifically: let's say I have an open connection (over WSS, if this change anything) with an MQTT server.
I publish a message with QoS=1.
My understanding is that mqtt awaits for a PUBACK message. After the ack has been received, the done callback is called and the flow is ended.
What is not clear to me is the low-level stuff: how much "time" do the library awaits for the ack? what happen if the ack doesn't come? the message is resent? the connection is closed/reopened? something else?
Is this behavior tunable?

Prior to answering your specific question I feel its worth outlining what the protocol requires (I'll highlight the key term). The MQTT 3.1.11 spec says:
When a Client reconnects with CleanSession set to 0, both the Client and Server MUST re-send any unacknowledged PUBLISH Packets (where QoS > 0) and PUBREL Packets using their original Packet Identifiers [MQTT-4.4.0-1]. This is the only circumstance where a Client or Server is REQUIRED to redeliver messages.
The v5 spec tightens this:
When a Client reconnects with Clean Start set to 0 and a session is present, both the Client and Server MUST resend any unacknowledged PUBLISH packets (where QoS > 0) and PUBREL packets using their original Packet Identifiers. This is the only circumstance where a Client or Server is REQUIRED to resend messages. Clients and Servers MUST NOT resend messages at any other time [MQTT-4.4.0-1].
So the only time the spec requires that the publish be resent is when the client reconnects. v3.1.1 does not prohibit resending at other times but I would not recommend doing this (see this answer for more info).
Looking specifically at mqtt.js I have scanned through the code and the only resend mechanism I can see is when the connection is established (backed up by this issue). So to answer your specific questions:
how much "time" do the library awaits for the ack?
There is no limit; the callback is stored and called when the flow completes (for example).
what happen if the ack doesn't come? the message is resent? the connection is closed/reopened? something else?
Nothing. However in reality the use of TCP/IP means that if a message is not delivered then the connection should drop (and if the broker receives the message, but is unable to process it, then it should really drop the connection).
Is this behavior tunable?
I guess you could implement a timed resend but this is unlikely to be a good idea (and doing so would breach the v5 spec). A better approach might be to drop the connection if a message is not acknowledged within a set time frame. However there really should be no need to do this.

Related

MQTT 3.1.1 broker QoS=1 ("at least once") message redelivery

I am trying to find out the reality about MQTT 3.1.1 message re-delivery for messages received by a MQTT subscriber with "at least once" (QoS 1) configuration:
Do MQTT brokers re-deliver un-acknowledged "QoS 1" messages from subscribers?
How much time must pass until MQTT broker re-deliver?
Does the MQTT broker try endlessly to re-deliver an unacknowledged message?
Are there other ways to trigger a re-delivery?
Assuming that a MQTT subscriber does not respond with a PUBACK message to a received MQTT message, the MQTT broker needs (at least from my understanding) re-deliver the message which must be received "at least once" until the subscriber sends a PUBACK for that message.
To get more concrete on what I am trying to achieve:
Is it a good/valid idea to postpone sending the PUBACK until a received message was successfully persisted - effectively enlarging the QoS level until my subscribing application guaranteed that the message was processed.
And whether for e.g. persistence errors (timeouts to the database) no PUBACK would be send which would automatically result in a re-delivery of such messages.
Thx & best regards
Do MQTT brokers re-deliver un-acknowledged "QoS 1" messages from subscribers?
From [the spec]:
When a Client reconnects with CleanSession set to 0, both the Client and Server MUST re-send any unacknowledged PUBLISH Packets (where QoS > 0) and PUBREL Packets using their original Packet Identifiers [MQTT-4.4.0-1]. This is the only circumstance where a Client or Server is REQUIRED to redeliver messages.
So, yes, unacknowledged QOS1 messages will be redelivered but the only time the spec REQUIRES this to happen is when a client reconnects.
While you specificity state you are using MQTT v3.1.1 I believe it is worth noting that MQTT v5 expressly prohibits re-delivery other than following a reconnect:
When a Client reconnects with Clean Start set to 0 and a session is present, both the Client and Server MUST resend any unacknowledged PUBLISH packets (where QoS > 0) and PUBREL packets using their original Packet Identifiers. This is the only circumstance where a Client or Server is REQUIRED to resend messages. Clients and Servers MUST NOT resend messages at any other time
How much time must pass until MQTT broker re-deliver?
As per the above automatic retry is not required by the spec. Some brokers may retransmit after a period of time. emqx supports this; mosquitto used to have an option but this was removed in version 1.5 with the change log explaining:.
Outgoing messages with QoS>1 are no longer retried after a timeout period.
Messages will be retried when a client reconnects. This change in behaviour
can be justified by considering when the timeout may have occurred.
If a connection is unreliable and has dropped, but without one end
noticing, the messages will be retried on reconnection. Sending
additional PUBLISH or PUBREL would not have changed anything.
If a client is overloaded/unable to respond/has a slow connection then
sending additional PUBLISH or PUBREL would not help the client catch
up. Once the backlog has cleared the client will respond. If it is not
able to catch up, sending additional duplicates would not help either
Does the MQTT broker try endlessly to re-deliver an unacknowledged message?
The 3.11 spec does not provide any guidance (so, in theory, yes) but many brokers provide some control over this (maximum number of messages queued, max size of queue etc).
Are there other ways to trigger a re-delivery?
Yes - disconnect and reconnect.
Is it a good/valid idea to postpone sending the PUBACK until a received message was successfully persisted
There was a discussion re this on the paho-dev group a couple of months ago. Its something that is being considered in the Go v5 Client (currently that client automatically acknowledges messages).
One thing to note is that the MQTT spec does have requirements with regards to the order acknowledgments are sent. Many clients ignore this requirement (and just send the acknowledgments whenever the handler returns) but some (e.g. the HiveMQ Java client) queue up ACKs so they can be sent in the correct order.

MQTT - How to know is message received by device

We have mqtt producer and consumer.
MQTT producer is at client level.
When we push message to producer, if the device is switched on, then it will receive the message.
If the device is switched off, then it wont receive the message until it turned on.
We need to know, when message sent to MQTT in server, if server is switched off, then we need to know the status as, it is queued or not received by server.
Based on it, we will send message for the user as, Please turn on device to do specific action.
Is there any better approach to know the status in MQTT to find is message is delivered or failed or queued to know server is active or not.
There is no end to end delivery notification in the MQTT protocol. Part of the pub/sub paradigm is that the publisher should be decoupled from the subscriber, there can be anywhere from 0 to many subscribers to a given topic.
There are 2 approaches to how to potentially work round this.
Have the subscriber respond on a separate topic to acknowledge that it has received the message. You will need to include a unique identifier in the message payload so it can be used in the response message.
You can use the Last Will and Testament feature of MQTT to have the subscriber maintain it's current status. When it starts it publishes a retained message to a known topic, e.g. publishes true to consumer/12345/status and sets a LWT to publish false if the device goes offline unexpectedly. It should also publish false if it cleanly shuts down. That way the publisher can check the status of the subscriber before deciding to publish the message.
I don't know which broker you are using. But in EMQ X MQTT broker, when QoS > 1, the message terminated delivered or ack broker will notify the server
The plugin: emqx-web-hook

What is the best way to implement application level acknowledgement to the broker in mqtt?

I am using esp32 mqtt client library. In this, whenever a valid mqtt message is received with QoS1, mqtt_client library sends a Puback message automatically without waiting for application layer to authenticate the payload. There are two ways to overcome this situation -
Holding Puback message untill application layer process it
Opening a new topic between client and broker to implement application level authentication mechanism?
Could you guys please suggest the best approach ?
This is the right behavior because the ack is at protocol level. Holding PUBACK, if the MQTT library you are using allows doing that is not the right thing to do imho because you break somehow the contract at protocol level and if the application spends too much time processing the message without sending the PUBACK, the broker will resend the message not receiving the PUBACK on time.
Imho the best solution is relying on a different topic on which the client publish an "ack at application level".
Puback ack packet is being sent without validation from Application level because that's how it is supposed to work. Quality of Service (QoS) factor in MQTT doesn't mean that ack packet is sent when data content in packet is validated. It is meant to acknowledge the reception. That's all.
For what you are trying to do, you need to implement an application level protocol to serve or discard the packets after validating the data (and then notify the sender with another packet).

Does the Mosquitto change from 1.4.15 to 1.5 cancelled out the benefit of QoS 1 and 2?

I just noticed from the change in mosquitto 1.4.5 to 1.5 that the retry_interval variable was removed given with the justification written below. Written in the change_log.txt. see github link.
This change in behaviour can be justified by considering when the
timeout may have occurred.
If a connection is unreliable and has dropped, but without one end
noticing, the messages will be retried on reconnection. Sending
additional PUBLISH or PUBREL would not have changed anything.
If a client is overloaded/unable to respond/has a slow connection then
sending additional PUBLISH or PUBREL would not help the client catch
up. Once the backlog has cleared the client will respond. If it is not
able to catch up, sending additional duplicates would not help either.
The rational of the removal is if the client is overloaded and cannot respond anyway so there is no need to resend. But according the the QoS 1 and 2 definition of the protocol in Oasis. mqtt-v3.1.1-os
4.4 Message delivery retry
When a Client reconnects with CleanSession set to 0, both the Client and Server MUST re-send any unacknowledged
PUBLISH Packets (where QoS > 0) and PUBREL Packets using their
original Packet Identifiers.
I tried reading the source code change and it does remove the retry. I get the rational of the change but does it not broke the protocol compliance of the software? If the network is down for a long time, retrying to send would be useless but if the network failure is intermittent, removing the retry would make the QoS > 0 to be unreliable for this broker?
The retry_interval option controlled the case where a message was not acknowledged during normal operation, i.e. the client didn't appear to have disconnected but wasn't sending acknowledgements.
The message delivery retry discussed in the spec covers the case where the client reconnects. This behaviour is present in Mosquitto, so there is no violation of the spec, and the messages will be retried.

Failed PUBLISH Delivery in QoS1 MQTT

I am using the moquette mqtt broker, and I am trying to understand the implementation as well as the MQTT broker. I hope to make some modifications to the broker for a personal project.
I am curious what should happen when a device sends a PUBLISH msg to the broker, and the broker is unable to deliver the message to the subscribers. The protocol says that a PUBACK is sent back to the publisher. In the moquette source code this PUBACK seems to be sent after forwarding the message to any subscribers.
I commented out the sendPubAck() function to simulate that the message was not successfully published, so I assumed the publisher would publish the message again. However, when I add a print statement next to the incoming message handler function, I only see PINGREQ messages that are sent periodically from the publisher to the broker. I do not see any publish messages.
My question is the following: How exactly does a client device decide when to re-publish a message? Because commenting out the sendPubAck() function doesnt seem to make the publisher resend the message.
There are two choices. Firstly, you could add a message timeout parameter to trigger sending your PUBLISH again if a PUBACK is not received. Secondly, you could resend your PUBLISH only on reconnect.
I believe the second choice is the best option. The reason for this is down to the possible reasons why the broker (or client of course, depending on the direction of communication) hasn't responded.
You could have a buggy broker, which is effectively what you have created
There could have been a network failure (connection lost but not detected),
The broker could be overloaded.
For the first case there is nothing we can do, other than get the broker fixed. For the second case, the client must retry the publish when it reconnects. For the third case, sending a duplicate PUBLISH won't help the broker respond, it will just overload it further.
It's worth noting that the broker should not be waiting for the subscribing clients to respond before sending a PUBACK to the publishing client.

Resources