Apache Kafka Security 101 | Confluent

This post introduces the security features added in Apache Kafka 0.9, including client authentication (Kerberos, TLS), authorization (Unix-like permissions/ACLs), network encryption (TLS), and broker/ZooKeeper authentication. It provides detailed guidance on generating TLS keys and certificates, configuring Kerberos principals, and setting up ZooKeeper and Kafka broker configurations for these security protocols. The post emphasizes that these features are disabled by default and are backward-compatible.