Hi All,

I would like to start a discussion thread about the KIP-1144: Exposing a
new public REST API for MirrorMaker2
<https://cwiki.apache.org/confluence/display/KAFKA/KIP-1144%3A+Exposing+a+new+public+REST+API+for+MirrorMaker+2>

This KIP introduces a new REST API tailored for MirrorMaker2 operational
requirements. Tries to make the interaction with MirrorMaker2 easier by
providing a new abstraction layer on top of Connect, that can hide the
implementation details, and avoid managing the connectors directly.

The original REST API implementation (before KIP-710 removed the complete
public REST API) exposed the full Connect API, including features like
creating, modifying and removing connectors, manipulating tasks. This is
not only increased the operational complexity of MirrorMaker2 but allowed
users to manipulate the underlying connect clusters in an unintended way,
and also opened up attack vectors for malicious actors.

This proposal introduces a set of REST endpoints for MirrorMaker2 to expose
operational status and control information for replication flows. The
design greatly reduce the amount of endpoints compared to the Connect REST
API, and keep only the essential ones. Built on top of the Connect
functionality, this KIP introduces new endpoints built specifically for
MirrorMaker2 while applying the same BasicAuthSecurityRestExtension based
on JAAS.
With these endpoints, operators and tools can query the state of
MirrorMaker2 deployments, enabling easier monitoring.

I appreciate all your feedbacks and comments.

Thank you,
Berci

-- 
*Bertalan Kondrat*





------------------------------

Reply via email to