SSL/TLS encryption in Kafka - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is SSL/TLS encryption in Kafka?

SSL/TLS encryption in Kafka is a security protocol that encrypts data sent between Kafka clients and brokers to protect it from being read or tampered with by unauthorized parties.

intermediate

Which Kafka configuration properties enable SSL encryption?

Key properties include ssl.keystore.location, ssl.keystore.password, ssl.key.password, ssl.truststore.location, and ssl.truststore.password. These configure the certificates and keys for SSL communication.

intermediate

What is the difference between a keystore and a truststore in Kafka SSL?

A keystore holds the broker's own private key and certificate used to prove its identity. A truststore contains certificates of trusted parties to verify the identity of clients or brokers connecting to it.

beginner

Why is SSL/TLS encryption important in Kafka?

It protects sensitive data from being intercepted or altered during transmission, ensuring privacy and data integrity between Kafka clients and brokers.

advanced

How does Kafka verify the identity of clients using SSL?

Kafka can be configured to require client authentication by verifying client certificates against the truststore, ensuring only trusted clients can connect.

Which Kafka property specifies the location of the SSL keystore?

A ssl.enabled

B ssl.truststore.location

C ssl.key.password

D ssl.keystore.location

The ssl.keystore.location property tells Kafka where to find the keystore file containing the broker's private key and certificate.

What does the truststore contain in Kafka SSL configuration?

A Trusted certificates to verify clients

B Broker's private key

C Client's private key

D Kafka topic configurations

The truststore holds certificates of trusted parties used to verify the identity of clients or brokers.

Why use SSL/TLS encryption in Kafka?

A To speed up message delivery

B To compress data

C To secure data in transit

D To increase storage capacity

SSL/TLS encrypts data sent between clients and brokers to keep it secure from eavesdropping or tampering.

Which of these is NOT a typical SSL property in Kafka?

A ssl.keystore.password

B ssl.client.id

C ssl.truststore.password

D ssl.key.password

ssl.client.id is not a standard SSL configuration property in Kafka.

How does Kafka authenticate clients using SSL?

A By verifying client certificates against the truststore

B By checking client IP addresses

C By using username and password only

D By encrypting messages with a shared key

Kafka can require clients to present certificates that are verified against the truststore to authenticate them.

Explain how SSL/TLS encryption works in Kafka and why it is important.

Think about how data travels and how SSL keeps it safe.

Describe the roles of keystore and truststore in Kafka SSL configuration.

One stores your keys, the other stores keys you trust.