asdaraujo opened a new pull request #9281:
URL: https://github.com/apache/kafka/pull/9281


   Remove the requirement for unique port numbers for the advertised.listener 
parameters.
   This restriction makes for the listeners parameter but there's not reason to 
apply the
   same logic for advertised.listeners.
   
   Being able to do this opens possibilities for some practical applications 
when using
   Kerberos authentication. For example, when configuring Kafka using Kerberos 
authentication
   and a Load Balancer we need to have two SASL_SSL listeners: (A) one running 
with the
   kafka/hostname principal and (B) another using kafka/lb_name, which is 
necessary for
   proper authentication when using the LB FQDN. After bootstrap, though, the 
client receives
   the brokers' addresses with the actual host FQDNs advertised by the brokers. 
To connect
   to the brokerd using the hostnames the client must connect to the listener A 
to be able to
   authenticate successfully with Kerberos.
   
   All unit/integration tests have passed.
   
   ### Committer Checklist (excluded from commit message)
   - [X] Verify design and implementation 
   - [X] Verify test coverage and CI build status
   - [X] Verify documentation (including upgrade notes)
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to