KIP-702 — The control plane needs to force the validation of requests from the controller

Discussion ProtocolBroker

KIP-702 proposes a `control.plane.force.controller.requests.enable` broker config that, when enabled, causes the control-plane listener to reject all non-controller requests (`LeaderAndIsr`, `UpdateMetadata`, `StopReplica`, `ControlledShutdown` are the only allowed types). Without enforcement, a misconfigured client pointing its `bootstrap.servers` at the control-plane listener can mix data traffic with controller traffic, degrading controller performance and violating the isolation designed by KIP-291.

Protocol Impact

Metadata · LeaderAndIsr · StopReplica · UpdateMetadata

Details