Manage Security

This page describes how to manage the various security aspects of WarpStream's Kafka product.

ACLs

WarpStream supports standard Kafka ACL functionality. More details are available in the ACLs documentation.

TLS

WarpStream Agents have native support for TLS termination. More details are available in the TLS documentation.

Authentication

By default, WarpStream Agents are configured without authentication. WarpStream supports the following authentication mechanisms and protocols for WarpStream Agents.

SASL

SASL (Simple Authentication Security Layer) is a framework that provides developers of applications and shared libraries with mechanisms for authentication, data integrity-checking, and encryption. The following topic explains how to configure SASL in WarpStream.

• SASL Authentication

• SASL/OAUTHBEARER Authentication

Mutual TLS (mTLS)

With mTLS (mutual TLS) authentication, both Kafka clients and servers use TLS certificates to verify each other’s identities to ensure that traffic is secure and trusted in both directions. The following topic explains how to configure mTLS in WarpStream.

• Mutual TLS