Does Kafka support SSL/HMAC/Kerberos?

[#1 · Accepted solution]

Yes Kafka supports SSL/HMAC/Kerberos.

Support for Kerberos was introduced with Kafka 0.8.2 (HDP 2.3.2). See instructions on how to enable in link the below

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_secure-kafka-ambari/content/ch_secure-ka...

Kafka SSL communication has been introduced with Kafka 0.9 (HDP 2.3.4). See instructions on how to enable in link the below

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_Security_Guide/content/ch_wire-kafka.htm...

Also, find below a few more interesting Kafka security links and articles that are worth reading

http://henning.kropponline.de/2016/02/21/secure-kafka-java-producer-with-kerberos/

http://www.confluent.io/blog/apache-kafka-security-authorization-authentication-encryption

http://henning.kropponline.de/2015/11/15/kafka-security-with-kerberos/

[#2]

Thank you Eyad. Kafka 0.8.2 was installed on my machine, so I can't apply SSL/HMAC.

In order to apply SSL/HMAC need to upgrade Kafka from 0.8.2 to 0.9, right? Please confirm

[#3]

That's correct. To use SSL you'd need Kafka 0.9 (HDP 2.3.4)