Re: Can I maintain several open connection mechanisms in a Secure cluster?

2017-02-13 Thread Manikumar
Yes, it is possible. For PLAINTEXT port, we can add ACLs for principal "User:ANONYMOUS". For SSL port, we can add ACLs for SSL username. For SASL port, we can add ACLs for SASL username. Each of these users can have their own ACLs permissions. On Tue, Feb 14, 2017 at 6:37 AM, Stephane Maarek < st

Can I maintain several open connection mechanisms in a Secure cluster?

2017-02-13 Thread Stephane Maarek
Hi, We have a Kafka cluster in dev, and ideally I’d like the following ports to be opened: 9092 -> PLAINTEXT 9093 -> SSL 9094 -> SASL_PLAINTEXT 9095 -> SASL_SSL The goal is to allow applications to slowly evolve toward 9095 and then migrate to prod where 9095 is the only port opened. *Is it poss