KIP-753 — ACL authentication, Host field support IP network segment
Discussion Security
Extends the Kafka ACL `host` field syntax to support CIDR IP network ranges (e.g., `192.168.1.0/24`) in addition to individual IPs and the wildcard `*`. Currently, granting access to a block of IP addresses requires creating one ACL entry per IP, which is operationally burdensome for large subnets.
Details
| Author | loboxu |
| Status | Discussion |
| JIRA | KAFKA-12715 |
| Wiki | View on Apache Wiki |
| Created | 2021-06-07 |
| Last Modified | 2021-06-07 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.