KIP-252 — Extend ACLs to allow filtering based on ip ranges and subnets

Discussion Security

Extends the Kafka ACL model to support CIDR-based IP range matching in the `host` field of an ACL entry, in addition to exact IP addresses and the `*` wildcard. Currently, granting access to a subnet requires creating one ACL entry per individual IP address, which is unmanageable in environments with dynamic or numerous client IP addresses.

Details