Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
Aha , got it. So thats where I got confused. > On Feb 1, 2016, at 3:04 PM, Ismael Juma wrote: > > Hi Nazario, > > The problem in the original post is that you were setting > advertised.host.name, which means that advertised.listeners won't fall back > to listeners anymore. Yes, it's bit con

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Ismael Juma
Hi Nazario, The problem in the original post is that you were setting advertised.host.name, which means that advertised.listeners won't fall back to listeners anymore. Yes, it's bit confusing given how the configs evolved over time. I have configured several clusters to use SSL by setting listen

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Ismael Juma
On Mon, Feb 1, 2016 at 7:15 PM, Nazario Parsacala wrote: > So it looks like you need both listeners and advertised.listeners ..? > No, you always need to set `listeners` (`advertised.listeners` defaults to `listeners`). If you want `advertised.listeners` to be different than `listeners`, then yo

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
I dont think that is the behavior I have seen. If I set listeners only ( as per my original post) , SSL will never get registered. [2016-02-01 11:27:49,712] INFO Registered broker 0 at path /brokers/ids/0 with addresses: PLAINTEXT -> EndPoint(servername,9092,PLAINTEXT) (kafka.utils.ZkUtils)

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
So it looks like you need both listeners and advertised.listeners ..? When I set both configs .. It finally worked. Maybe we can update the docs ..? > On Feb 1, 2016, at 1:59 PM, Nazario Parsacala wrote: > > So I made the port 9092 but SSL. But it seems like it is just openning it for > PL

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
So I made the port 9092 but SSL. But it seems like it is just openning it for PLAINTEXT. Even though it has registered it as SSL [2016-02-01 13:42:20,536] INFO Registered broker 0 at path /brokers/ids/0 with addresses: SSL -> EndPoint(reactor.us.cixsoft.net,9092,SSL) (kafka.utils.ZkUtils) ope

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
Hmm. So I removed port 9092 and just use port 9093. So no PLAINTEXT just SSL advertised.listeners=SSL://reactor.us.cixsoft.net:9093 Cleared Zookeeper and Kafka store and restart .. You see that it is registering 9093 onbly [2016-02-01 13:35:51,729] INFO Registered broker 0 at path /brokers/ids/0

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
Ok, This is getting interesting .. On the broker side, it is saying that it is registering 9092 as PLAINTEXT and 9093 as SSL [2016-02-01 13:26:33,796] INFO Registered broker 0 at path /brokers/ids/0 with addresses: PLAINTEXT -> EndPoint(servername,9092,PLAINTEXT),SSL -> EndPoint(servername,909

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
No juice. /kafka-topics.sh --describe --topic anotherone --zookeeper localhost:2181 Topic:anotheronePartitionCount:4ReplicationFactor:1 Configs: Topic: anotherone Partition: 0Leader: 0 Replicas: 0 Isr: 0 Topic: anotherone Partition: 1

Fwd: Re: Kafka SSL Configuration Problems

2016-02-01 Thread Anirudh P
Hello Nazario, Could you try it by creating a new topic? Thank you, Anirudh That works. At least it is saying that it is registering now with the SSL side. [2016-02-01 12:29:40,184] INFO Registered broker 0 at path /brokers/ids/0 with addresses: PLAINTEXT -> EndPoint(servername,9092,PLAINTEXT),

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
That works. At least it is saying that it is registering now with the SSL side. [2016-02-01 12:29:40,184] INFO Registered broker 0 at path /brokers/ids/0 with addresses: PLAINTEXT -> EndPoint(servername,9092,PLAINTEXT),SSL -> EndPoint(servername,9093,SSL) (kafka.utils.ZkUtils) Thank you. Now

Re: Kafka SSL Configuration Problems

2016-02-01 Thread Ismael Juma
Please use advertised.listeners instead of advertised.host.name. See this comment: https://github.com/apache/kafka/pull/793#issuecomment-174287124 Ismael On Mon, Feb 1, 2016 at 4:44 PM, Nazario Parsacala wrote: > Hi, > > We were using kafka for a while now. We have been using the binary releas

Kafka SSL Configuration Problems

2016-02-01 Thread Nazario Parsacala
Hi, We were using kafka for a while now. We have been using the binary release 2.10-0.8.2.1 . But we have been needing a encrypted communication between our publishers and subscribers. So we got 2.10-0.9.0.0. This works very well with no SSL enabled. But currently have issues with SSL enabled.