KIP-1276 — CIDR-based Host Patterns for ACLs

Accepted Kafka 4.4 Security

Adds CIDR notation support to Kafka ACL host patterns, allowing a single ACL entry to cover an entire subnet (e.g., 10.0.0.0/8) rather than requiring one entry per IP address. Today Kafka ACLs only accept exact IP addresses or wildcard (*) for host-based access control, forcing administrators to create and maintain O(n) ACL entries for n clients sharing a subnet.

Details