Hello, I am new to Kafka and am looking for a way for consumers to be able to identify the producer of each message in a topic. There are a large number of producers (lets say on the order of millions), and each producer would be connecting via SSL and using a unique client certificate. Essentially I'd like consumers to know the certificate of the producer of any given message.
The producer identify of the message must not be forgeable, i.e. producer A must not be allowed to generate records that appear to consumers to be from producer B. Is it possible for Kafka to be configured to perform this type of identity validation? For example: * reject records that contain a certificate identity that differs from the producer connection’s client certificate * inject the producer connection’s certificate identity into each record Or would a proxy application need to sit in front of Kafka to perform one of these functions? Thank you in advance for offering any advice, Matt