Securing Apache Kafka Wire Protocol Service

Describes the security mechanisms that Apache Kafka Wire Protocol Service does and does not support.

Authentication

Starting from Data Access Gateway 5.1, Apache Kafka Wire Protocol Service supports SASL/PLAIN and SSL authentication between clients and file servers.

Authorization

Kafka Wire Protocol Service does not support ACLs. The topic owner has all permissions.

On-Wire Encryption

Starting from Data Access Gateway 5.1, on-wire encryption for Apache Kafka Wire Protocol Service is supported using SSL. See Enabling SSL for Apache Kafka Wire Protocol Service.