KafkaIQ

10.10.2 – Security Considerations

Module: Section 10 – Kafka Ecosystem & Tools
Section: 10.10 – REST Proxy Operations & Ecosystem Tools
Goal: Secure REST Proxy deployments

Basic Authentication

# kafka-rest.properties
authentication.method=BASIC
authentication.realm=KafkaRest
authentication.roles=user,admin

Request:

curl -u username:password http://localhost:8082/topics

TLS/SSL

listeners=https://0.0.0.0:8082
ssl.keystore.location=/path/to/keystore.jks
ssl.keystore.password=keystore-password
ssl.key.password=key-password
ssl.truststore.location=/path/to/truststore.jks
ssl.truststore.password=truststore-password

CORS Configuration

access.control.allow.origin=https://myapp.example.com
access.control.allow.methods=GET,POST,DELETE

Key Takeaways

  1. Basic Auth: Username/password authentication
  2. TLS: HTTPS for encrypted transport
  3. CORS: Enable for browser clients

What's Next?

Next Module: 10.10.3 – Troubleshooting REST Proxy