Hi Ismael, Thank you for the KIP. This is a very useful change.
Once you allow multiple interfaces with the same security protocol, you will soon also need to be able to configure protocol-specific properties for each of the interfaces. To use SSL on internal and external networks, you would almost definitely want different keystores with different hostname/IP addresses. Similarly for SASL, you might want to enable different mechanisms, use a different authentication server etc. This is listed under future work.But it may be worth thinking about what a fully configurable 'label' looks like. Would every property now become a list/map like listeners - you would then end up with maps of lists for some properties. It will good if all properties corresponding to a label including listener and advertised.listener are configured consistently - if that is possible, On Wed, Dec 21, 2016 at 8:56 PM, Ismael Juma <ism...@juma.me.uk> wrote: > Hi all, > > We've posted "KIP-103: Separation of Internal and External traffic" for > discussion: > > *https://cwiki.apache.org/confluence/display/KAFKA/KIP- > 103%3A+Separation+of+Internal+and+External+traffic > <https://cwiki.apache.org/confluence/display/KAFKA/KIP- > 103%3A+Separation+of+Internal+and+External+traffic>* > > Please take a look. Your feedback is appreciated. > > Thanks, > Ismael >
