majialong
4db4074033
Adds short descriptions under section titles on documentation pages. Reviewers: Mickael Maison <mickael.maison@gmail.com>
2.1 KiB
title, description, weight, tags, aliases, keywords, type
| title | description | weight | tags | aliases | keywords | type | ||
|---|---|---|---|---|---|---|---|---|
| Security Overview | Supported security protocols and features available in Kafka. | 1 |
|
docs |
The following security measures are currently supported:
-
Authentication of connections to brokers from clients (producers and consumers), other brokers and tools, using either SSL or SASL. Kafka supports the following SASL mechanisms:
- SASL/GSSAPI (Kerberos) - starting at version 0.9.0.0
- SASL/PLAIN - starting at version 0.10.0.0
- SASL/SCRAM-SHA-256 and SASL/SCRAM-SHA-512 - starting at version 0.10.2.0
- SASL/OAUTHBEARER - starting at version 2.0
-
Encryption of data transferred between brokers and clients, between brokers, or between brokers and tools using SSL (Note that there is a performance degradation when SSL is enabled, the magnitude of which depends on the CPU type and the JVM implementation.)
-
Authorization of read / write operations by clients
-
Authorization is pluggable and integration with external authorization services is supported
It's worth noting that security is optional - non-secured clusters are supported, as well as a mix of authenticated, unauthenticated, encrypted and non-encrypted clients. The guides below explain how to configure and use the security features in both clients and brokers.