Blogs›Confluent›Apache Kafka Security Features
This release details the foundational security features added in Apache Kafka 0.9, including client authentication (TLS/Kerberos), authorization (ACLs), network encryption (TLS), and broker-ZooKeeper authentication. It details the configuration steps for TLS and Kerberos, including certificate generation and JAAS configuration, laying the groundwork for secure Kafka deployments. Confluent Cloud enforces TLS for all traffic, encrypts data at rest with support for BYOK, and uses SASL PLAIN for Kafka authentication. It also supports SSO for centralized identity management and RBAC for management operations, complementing Kafka ACLs for data access. An audit log tracks changes to clusters.
10/7/2020
This post details Confluent Cloud's security features, including mandatory TLS encryption for all traffic (Kafka and HTTP), encryption at rest with BYOK support on AWS, enforced SASL PLAIN authentication for Kafka, SSO integration via SAML IdP, Role-Based Access Control (RBAC) for management operations, and Access Control Lists (ACLs) for data access. It also introduces an Audit Log for tracking cluster changes.
2/1/2016
This post details the introduction and configuration of key security features in Apache Kafka 0.9, including TLS/Kerberos client authentication, ACL-based authorization, TLS network encryption, and broker-ZooKeeper authentication. It provides practical guidance on generating TLS certificates and configuring JAAS for Kerberos, enabling secure communication for Kafka clusters.