Performance and Security Analysis of MQTT over TLS on ESP32-Based IoT Systems
DOI:
https://doi.org/10.30871/jaic.v10i4.13355Keywords:
Internet of Things (IoT), ESP32, Message Queuing Telemetry Transport (MQTT), Network SecurityAbstract
The Message Queuing Telemetry Transport (MQTT) protocol is widely used in Internet of Things (IoT) systems due to its lightweight communication mechanism and low resource consumption. However, MQTT does not provide built-in security features, making data transmission vulnerable to packet sniffing and data manipulation attacks. This study aims to analyze the impact of Transport Layer Security (TLS) implementation on the security and performance of MQTT communication in an ESP32-C3 Super Mini-based IoT system. An experimental method was employed by comparing MQTT communication without TLS (port 1883) and with TLS (port 8883) using the HiveMQ Cloud broker. Performance evaluation was conducted by measuring latency and packet size, while security analysis was performed through packet sniffing using Wireshark. The results show that TLS successfully encrypts MQTT payloads, preventing unauthorized access to transmitted data. However, TLS introduces communication overhead, increasing the average latency from 45.25 ms to 51.76 ms (14.39%) and the average packet size from 79 bytes to 103.2 bytes (30.63%) due to the TLS handshake process and encryption mechanism. Despite these increases, the communication performance remained stable and consistent, indicating an acceptable trade-off between security and performance. These findings demonstrate that TLS is a feasible solution for securing MQTT communication in ESP32-based IoT systems while maintaining reliable communication performance.
Downloads
References
[1] N. Crysostomus, K. Dewi, and D. P. Kesuma, “Perkembangan dan Implementasi Internet of Things di Berbagai Sektor : Systematic Literature Review,” vol. 5, no. 1, pp. 1–11, 2025.
[2] I. Imam and M. N. Z. M. N. Zamzami, “Integrasi WSN dan IoT Untuk Sistem Monitoring Rumah Cerdas Berbasis MQTT,” Karapan Netw. J. J. Comput. Technol. Mob. Ad Hoc Netw., vol. 1, no. 01, 2025.
[3] M. Y. A. Saputra and Y. Yulindon, “Kajian Pustaka Komparatif Protokol Komunikasi Internet of Things Berdasarkan Latensi, Efesiensi Energi, dan Skalabilitas,” J. Ilm. Penelit. Mhs., vol. 4, no. 2, pp. 275–288, 2026.
[4] N. F. Junior, A. A. A. Silva, A. E. Guelfi, and S. T. Kofuji, “Performance evaluation of publish-subscribe systems in IoT using energy-efficient and context-aware secure messages,” 2022.
[5] M. N. Nashir, E. S. Ni’mah, M. Fathurahman, R. D. Pramudya, and A. Arfriandi, “Evaluasi Protokol Komunikasi Berbasis Web dan Non-Web pada Sistem IoT: Suatu Systematic Literature Review: Web-based and Non-Web-based IoT Communication Protocols: A Systematic Literature Review,” SISFOTENIKA, vol. 16, no. 1, pp. 70–81, 2026.
[6] M. Hamdi, S. Rifka, and R. Dewi, “Implementasi Security Offloading Pada Iot Gateway Menggunakan Mqtt Over Tls Dan Firewall Untuk Mengatasi Keterbatasan Keamanan Perangkat IoT,” J. Inform. dan Tek. Elektro Terap., vol. 14, no. 2, 2026.
[7] K. Monika, D. Pertiwi, and A. D. Azahra, “Deteksi Serangan DoS pada IoT Berbasis MQTT Menggunakan XGB dan PSO,” pp. 2272–2282, 2025, doi: 10.33364/algoritma/v.22-2.2623.
[8] S. U. Anggono, E. Siswanto, and L. R. H. A. Fajri, “User interface berbasis web pada perangkat Internet of Things,” Tek. J. Ilmu Tek. dan Inform., vol. 3, no. 1, pp. 35–54, 2023.
[9] R. Singh, A. Gehlot, S. Vaseem, A. Kumar, and D. Buddhi, “Forest 4 . 0 : Digitalization of forest using the Internet of Things ( IoT ),” J. King Saud Univ. - Comput. Inf. Sci., vol. 34, no. 8, pp. 5587–5601, 2022, doi: 10.1016/j.jksuci.2021.02.009.
[10] M. Reihan, I. Rafi, U. B. Hanafi, T. Irfan, and K. Kunci, “Implementasi TLS Sebagai Metode Keamanan Protokol Jaringan Pada MQTT Berbasis Raspberry PI,” pp. 13–14, 2022.
[11] A. M. Rivai and M. R. Setiawan, “Internet of Things ( IoT ) Sebagai Pilar Keamanan Data Pada Sistem Distribusi Di Indonesia,” vol. 3, no. 12, pp. 332–341, 2025.
[12] R. S. Siregar et al., “Implementasi Internet of Thing ( IOT ) untuk Monitoring dan Pengaman Beban Listrik 3 Phase Menggunakan Fuzzy Sugeno,” pp. 1013–1025, 2025, doi: 10.33364/algoritma/v.22-1.2343.
[13] H. Azwar, F. Gary, and H. Azwar, “Implementasi Transport Layer Security dengan Algoritma AES untuk Meningkatkan Keamanan Komunikasi pada Jaringan IoT Berbasis MQTT Menggunakan ESP32,” vol. 11, no. 1, 2025, doi: 10.35143/elementer.v11i1.
[14] N. Indrasari, A. S. Rohman, T. Genarsih, A. Dwinanda, and S. L. Putri, “Analisis Performa Protokol Mqtt Pada Sistem Monitoring Gas Berbahaya Menggunakan Sensor Mq135 Terintegrasi Android,” vol. XV, no. 1, pp. 16–25, 2026, doi: 10.35508/jme.v0i0.28118.
[15] F. K. Sinaga, A. Rabiula, and U. Jambi, “Evaluasi Sistem Penyiraman Tanaman Berbasis ESP32 Hamparan Di Kelurahan Bakung Jaya,” vol. 10, no. 1, pp. 351–362, 2026.
[16] K. J. Eldho, T. J. John, D. J. V, and R. V Balakrishnan, “Optimizing Data Transfer Speed and the Performance Evaluation of MQTT in IoT : A Study on MQTT for Atmospheric Condition Monitoring,” vol. 10, pp. 231–244, 2025, doi: 10.1109/ICC.2015.7248826.
[17] L. P. Antoro, A. I. Rizal, A. S. Wardhana, M. Zaky, and Z. Muhtadi, “Implementasi Sistem Keamanan Untuk Mendeteksi Gerakan Berbasis Iot Menggunakan ESP32 -CAM,” vol. 4, no. November, pp. 1120–1131, 2024.
[18] V. Seoane, C. Garcia-rubio, F. Almenares, and C. Campo, “Performance evaluation of CoAP and MQTT with security support for IoT environments,” vol. 197, no. June, 2021.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 M. Azhar Azhar, Muhamad Azwar, Ondi Asroni
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.
Authors who publish with this journal agree to the following terms:
- Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution License (Attribution-ShareAlike 4.0 International (CC BY-SA 4.0) ) that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
- Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the journal's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgement of its initial publication in this journal.
- Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See The Effect of Open Access).
