conduktor.io ↗

KIP-965 — Support disaster recovery between clusters by MirrorMaker

Discussion MirrorMakerSecurity

Adds sync.full.acl.enabled to MirrorMaker2 configuration, enabling full replication of topic read/write ACLs, consumer group ACLs, and user SCRAM credentials to the target cluster for disaster recovery standby scenarios. By default MM2 downgrades ALLOW ALL ACLs to ALLOW READ to prevent writes to the mirror, which breaks transparent failover when the target cluster needs to become the active cluster.

Details

Authorhudeqi
StatusDiscussion
JIRAKAFKA-15172
WikiView on Apache Wiki
Created2023-08-08
Last Modified2023-08-09
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.