KIP-103 — Separation of Internal and External traffic

Accepted Kafka 1.0 BrokerSecurity

Introduces named listener configurations (listener.security.protocol.map) that decouple listener names from security protocols, allowing multiple listeners with the same security protocol and enabling separate named listeners for client, internal, and replication traffic. The existing model allowed at most one listener per security protocol, preventing operators from isolating inter-broker replication traffic onto a dedicated network interface.

Protocol Impact

Metadata · UpdateMetadata

Details