kafka security_protocol Does kafka support SASL_SSL?

[liuwenzhi0318]

Description

[zccabb]

Yes, Kafka does support SASL_SSL as one of its security protocols.You need to configure it in the broker's server.properties file, as well as in the clients' configuration. You also need to set up the appropriate authentication mechanisms, such as Kerberos, LDAP, or OAuth, depending on your organization's security requirements.

[kingluo]

@liuwenzhi0318 Is your question related to apisix? Do you use apisix as a Kafka proxy and you're wondering does it support SASL_SSL?

[macdoor]

I also need this function, I want to use in kafka logger

[kingluo]

@liuwenzhi0318 @macdoor
The Kafka logger or pubsub in apisix supports SASL_SSL, but for the time being, no configuration is provided.

SASL_SSL simply means that the client authentication (SASL) is used over a protected connection (SSL) to prevent interception instead of over a plain connection.

[macdoor]

@liuwenzhi0318 Would you please provide an example using kafka logger with sasl_ssl?

[kingluo]

APISIX uses lua-resty-kafka, which has cosocket ssl options for ssl usage. But APISIX did not export them into the plugin configuration, so you can not use SSL now. Maybe we will add them later.

[macdoor]

@kingluo This feature is very useful.