RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-11 Thread Dave Ariens
: dev@kafka.apache.org Subject: RE: Interacting with a secured Kafka cluster via GSS-API > Interested to find out if the new producer and consumer fare > better Regarding that, what's the best way to use the new producer with as little overhead as p

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
day, December 10, 2015 1:10 PM To: dev@kafka.apache.org Subject: Re: Interacting with a secured Kafka cluster via GSS-API On Thu, Dec 10, 2015 at 6:06 PM, Dave Ariens wrote: > Sure, the custom producer and consumer library I'm updating is Krackle: > https://github.com/blackberry/Kra

Re: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Ismael Juma
On Thu, Dec 10, 2015 at 6:06 PM, Dave Ariens wrote: > Sure, the custom producer and consumer library I'm updating is Krackle: > https://github.com/blackberry/Krackle > ... > We found that neither the Kafka proper producers nor Kafka could keep up > with the stock packages when we initially looked

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
From: isma...@gmail.com [isma...@gmail.com] on behalf of Ismael Juma [ism...@juma.me.uk] Sent: Thursday, December 10, 2015 12:44 PM To: dev@kafka.apache.org Subject: Re: Interacting with a secured Kafka cluster via GSS-API On Thu, Dec 10, 2015 at 5:24 PM, Dave Ariens wrote: > Absolutely, currently

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
___ > From: Andrew Schofield [andrew_schofi...@uk.ibm.com] > Sent: Thursday, December 10, 2015 10:52 AM > To: dev@kafka.apache.org > Subject: RE: Interacting with a secured Kafka cluster via GSS-API > > Wouldn't you use TLS to secure the connections? Encrypting just th

Re: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Ismael Juma
On Thu, Dec 10, 2015 at 5:24 PM, Dave Ariens wrote: > Absolutely, currently I'm hoping to get authentication working and then > ultimately work towards encryption. We're also testing performance of > more out-of-the-box Kafka components but I fear our message volume will > require us to maintai

Re: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Flavio Junqueira
uk.ibm.com] > Sent: Thursday, December 10, 2015 10:52 AM > To: dev@kafka.apache.org > Subject: RE: Interacting with a secured Kafka cluster via GSS-API > > Wouldn't you use TLS to secure the connections? Encrypting just the > credentials but not the connection seems brave.

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
consumers. From: Andrew Schofield [andrew_schofi...@uk.ibm.com] Sent: Thursday, December 10, 2015 10:52 AM To: dev@kafka.apache.org Subject: RE: Interacting with a secured Kafka cluster via GSS-API Wouldn't you use TLS to secure the connections? Encrypting just the cred

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Andrew Schofield
Wouldn't you use TLS to secure the connections? Encrypting just the credentials but not the connection seems brave. Andrew From: Dave Ariens To: "dev@kafka.apache.org" Date: 10/12/2015 15:43 Subject:RE: Interacting with a secured Kafka cluster via GSS-API

RE: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
.@juma.me.uk] Sent: Thursday, December 10, 2015 10:36 AM To: dev@kafka.apache.org Subject: Re: Interacting with a secured Kafka cluster via GSS-API Hi Dave, Is there a reason why you are using GSS-API directly instead of via SASL? It should still work, but if you do the latter, you can potentially

Re: Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Ismael Juma
Hi Dave, Is there a reason why you are using GSS-API directly instead of via SASL? It should still work, but if you do the latter, you can potentially reuse the existing code (or at least use it as inspiration), see `org.apache.kafka.common.security.authenticator.SaslClientAuthenticator`. Also, p

Interacting with a secured Kafka cluster via GSS-API

2015-12-10 Thread Dave Ariens
Hi devs! I'm working on enhancing a custom 0.8.2.1 producer/consumer to support establishing connections a secured 0.9.0 cluster with strict ACLs on each topic. I'm pretty new to (read: first day working with) GSS-API/JAAS and not really sure how to approach this problem. Our existing impleme