Supondo que seus clientes rabbitmq possam tolerar uma conexão perdida, você pode considerar o que está descrito aqui .
our cluster is behind a VIP. When we want to upgrade a cluster, we spin up an alternate cluster and switch the VIP over to the alternate cluster. Meanwhile, we have tooling that moves messages between clusters. When the 'master' cluster's update is done, we reverse the process.