Kafka SSL Configuration | Zookeeper Security | Kafka Security | Apache Kafka Series - Part 04

Описание: For serverless Kafka solutions, please check below:
1. https://sovrn.co/1ebjyv7
2. https://sovrn.co/1gc3rjz

𝑅𝑒-𝑑𝑖𝑠𝑡𝑟𝑖𝑏𝑢𝑡𝑖𝑜𝑛 𝑜𝑓 𝑡ℎ𝑖𝑠 𝑣𝑖𝑑𝑒𝑜 𝑜𝑛 𝑎𝑛𝑦 𝑜𝑡ℎ𝑒𝑟 𝑝𝑙𝑎𝑡𝑓𝑜𝑟𝑚 𝑖𝑠 ℎ𝑖𝑔ℎ𝑙𝑦 𝑝𝑟𝑜ℎ𝑖𝑏𝑖𝑡𝑒𝑑.

Hi Folks, if you find my contents useful to your professional career and would like to support my effort, please buy me a coffee at https://www.buymeacoffee.com/vinodclv.
Thanks in advance :)

------------------- Connect with me -------------------
Bio - https://bio.link/vinodclv
Instagram -   / dataengineeringminds  
GitHub - https://github.com/vinclv
Medium -   / vinod.chelladuraiv  
Twitter -   / vintechie​  
Linkedin -   / vinod-chelladurai-v  
Quora Space - https://www.quora.com/q/dataengineeri...
---------------------------------------------------------------------

Please check the config files for zookeepers, brokers, producers, and consumers on my git repo - https://github.com/vinclv/data-engine...

P.S: I mentioned as Part-3 inside the video instead of Part-4. Excuse me for that. If you experience any noise in the background, please change the video quality from 4K to HD.

𝐃𝐄𝐒𝐂𝐑𝐈𝐏𝐓𝐈𝐎𝐍:
This is the 4th part of my Apache Kafka series (in English). In this video, you will learn how to implement the below SSL security in a 3-node Kafka Cluster with 1 Zookeeper:
𝟏. 𝐙𝐨𝐨𝐤𝐞𝐞𝐩𝐞𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 - Configuring Zookeeper, zookeeper-shell.sh and Kafka brokers to implement SSL encryption & authentication while launching the Zookeeper and connecting zookeeper-shell.sh & Kafka brokers to the zookeeper.
𝟐. 𝐊𝐚𝐟𝐤𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 - Configuring Kafka brokers, console producers and consumers to implement SSL encryption & authentication while launching the brokers and connecting producers & consumers to the brokers.

Please check the below videos in my Apache Kafka series as a prerequisite to this video:
1. Setup a 3-node Kafka Cluster locally -    • How to launch a Kafka Cluster | Kafka Topi...  
2. SSL/TLS concepts in Apache Kafka with example -    • What is SSL security in Apache Kafka? | Ap...  

Useful Links:
1. Download JCE files for Java 8 - https://www.oracle.com/java/technolog...

Example steps to implement CA, truststore and keystore for zookeeper SSL security :
𝟏. 𝐆𝐞𝐧𝐞𝐫𝐚𝐭𝐞 𝐂𝐀 == openssl req -new -x509 -keyout ca-key -out ca-cert -days 3650
𝟐. 𝐂𝐫𝐞𝐚𝐭𝐞 𝐓𝐫𝐮𝐬𝐭𝐬𝐭𝐨𝐫𝐞 == keytool -keystore kafka.zookeeper.truststore.jks -alias ca-cert -import -file ca-cert
𝟑. 𝐂𝐫𝐞𝐚𝐭𝐞 𝐊𝐞𝐲𝐬𝐭𝐨𝐫𝐞 == keytool -keystore kafka.zookeeper.keystore.jks -alias zookeeper -validity 3650 -genkey -keyalg RSA -ext SAN=dns:localhost
𝟒. 𝐂𝐫𝐞𝐚𝐭𝐞 𝐜𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐬𝐢𝐠𝐧𝐢𝐧𝐠 𝐫𝐞𝐪𝐮𝐞𝐬𝐭 (𝐂𝐒𝐑) == keytool -keystore kafka.zookeeper.keystore.jks -alias zookeeper -certreq -file ca-request-zookeeper
𝟓. 𝐒𝐢𝐠𝐧 𝐭𝐡𝐞 𝐂𝐒𝐑 == openssl x509 -req -CA ca-cert -CAkey ca-key -in ca-request-zookeeper -out ca-signed-zookeeper -days 3650 -CAcreateserial
𝟔. 𝐈𝐦𝐩𝐨𝐫𝐭 𝐭𝐡𝐞 𝐂𝐀 𝐢𝐧𝐭𝐨 𝐊𝐞𝐲𝐬𝐭𝐨𝐫𝐞 == keytool -keystore kafka.zookeeper.keystore.jks -alias ca-cert -import -file ca-cert
𝟕. 𝐈𝐦𝐩𝐨𝐫𝐭 𝐭𝐡𝐞 𝐬𝐢𝐠𝐧𝐞𝐝 𝐜𝐞𝐫𝐭𝐢𝐟𝐢𝐜𝐚𝐭𝐞 𝐢𝐧𝐭𝐨 𝐊𝐞𝐲𝐬𝐭𝐨𝐫𝐞 == keytool -keystore kafka.zookeeper.keystore.jks -alias zookeeper -import -file ca-signed-zookeeper


Thanks for watching !!
நன்றி /\
#kafkassl #kafkasecurity #ssl
0:00 Purpose of this video
1:35 Kafka Security & SSL concepts
4:51 What is Zookeeper security?
7:16 What is Kafka/Broker security?
7:43 Steps for SSL security
8:54 Configure zookeeper for Zookeeper security
37:19 Configure zookeeper-shell.sh for Zookeeper security
50:21 Configure Kafka brokers for Zookeeper security
1:05:44 Configure Kafka brokers for Kafka security
1:15:58 Configure producer for Kafka security
1:25:30 Configure consumer for Kafka security
1:30:29 Summary
1:31:03 What is nexte