Skip to main content
Quick navigation

Configuration

Configuring Conduktor Gateway involves making decisions regarding several subjects.

  1. Choose your Networking / Load Balancing requirements
  2. Configure how the Gateway connects to your Backing Kafka Cluster
  3. Configure the Gateway to accept Client connections
  4. Decide whether you need Virtual Cluster capabilities

Authentication and Authorization Flows

caution

This is a conceptual view of the authentication and authorization flows. It does not reflect the actual implementation of the Gateway.

Gateway Security with Credentials managed by Gateway

Security protocol: SASL_PLAINTEXT or SASL_SSL
Authentication mechanism: PLAIN

Gateway Security with Oauth

Security protocol: SASL_PLAINTEXT or SASL_SSL
Authentication mechanism: OAUTHBEARER

Backing Kafka Security with SASL User

Security protocol: DELEGATED_SASL_PLAINTEXT or DELEGATED_SASL_SSL
Authentication mechanism: PLAIN (ie Confluent Cloud) or SCRAM-SHA-256 or SCRAM-SHA-512

Backing Kafka Security with OAuth

Security protocol: DELEGATED_SASL_PLAINTEXT or DELEGATED_SASL_SSL
Authentication mechanism: OAUTHBEARER