CVE-2017-12610: Authenticated Kafka clients may impersonate other users

2018-07-26 Thread Rajini Sivaram
CVE-2017-12610: Authenticated Kafka clients may impersonate other users Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Kafka 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.1 Description: Authenticated Kafka clients may use impersonation via a manually cra

CVE-2018-1288: Authenticated Kafka clients may interfere with data replication

2018-07-26 Thread Rajini Sivaram
CVE-2018-1288: Authenticated Kafka clients may interfere with data replication Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, 1.0.0 Description: Authenticated Kafka users may per

Re: INVALID_FETCH_SESSION_EPOCH after upgrade to 1.1.0

2018-07-26 Thread Mark Anderson
Ted, Below are examples of the DEBUG entries from FetchSession [2018-07-26 11:14:43,461] DEBUG Created a new error FetchContext for session id 1139872548: expected epoch 13719, but got epoch 13718. (kafka.server.FetchManager) [2018-07-26 11:24:35,339] DEBUG Created a new error FetchContext for se

Re: Debugging message timestamps in Sarama

2018-07-26 Thread Dmitriy Vsekhvalnov
Interesting. Well, i'd say open issue in Sarama's github, probably you'll find answers/ideas faster. On Wed, Jul 25, 2018 at 7:51 PM Craig Ching wrote: > This didn’t fix my problem unfortunately. Both time stamps are 0. > > > > On Jul 24, 2018, at 15:22, Craig Ching wrote: > > > > Hey, thanks

RE: How many producers can publish to same topic concurrently?

2018-07-26 Thread Koushik Chitta
We had ~75000 producers writing to a single topic on 10 broker cluster in Windows environment, yet to reach the max. limit considering the system resources used. I guess our bottleneck might be the no. of tcp connections to a broker. -Original Message- From: Pulkit Manchanda Sent: T

RE: How many producers can publish to same topic concurrently?

2018-07-26 Thread Opara, P. (Piotr)
Hi Koushik Will you share the information about hardware you have? Pozdrawiam / Kind Regards Piotr Opara DevOps Engineer -Original Message- From: Koushik Chitta [mailto:kchi...@microsoft.com.INVALID] Sent: 26 lipca 2018 20:58 To: users@kafka.apache.org Subject: RE: How many producers c