KIP-7 — Security - IP Filtering

Discussion SecurityBroker

KIP-7 proposed adding IP-based connection filtering to Kafka brokers to restrict which client hosts can connect, enforced at the socket accept level. Without network-layer access control, any client that knows the broker address and port can attempt to connect, relying solely on SASL/SSL for authentication rather than having a connection-level IP allowlist.

Details