Kerberos with Kafka

Kerberos with Kafka

(Course duration: 3 days)

Course Overview: Learn Kafka Security, with encryption (SSL), authentication (SSL & SASL), and authorization (ACL). Join hundreds of knowledge savvy students into learning some of the most important security concepts in a typical Apache Kafka stack. Kafka Security is important for the following reasons:

Encryption (SSL) for Apache Kafka

Authentication (SSL & SASL) for Apache Kafka

Authorization (ACL) for Apache Kafka

What you’ll learn: By the end of the course the trainees should be able to set up a robust and fault-tolerant security system using the Kerberos Protocol.

1. Course Introduction
   1. Kafka Security Overview
   2. Course Structure & Prerequisites
2. Kafka Setup
   1. Kafka + Zookeeper Setup
   2. Hands-On: Setup Kafka & Zookeeper Service
   3. Producer / Consumer test
   4. Kafka Setup: Producer / Consumer test
3. SSL Encryption in Kafka
   1. The need for SSL Encryption
   2. What is SSL?
   3. SSL in Kafka
   4. Hands-On: Creating a Certificate Authority (CA)
   5. Hands-On: SSL Setup in Kafka
   6. Hands-On: SSL Setup for Clients
   7. SSL Encryption in Kafka
4. SSL Authentication in Kafka
   1. What is SSL Authentication?
   2. Hands-On: SSL Authentication
5. SASL Authentication - Kerberos / GSSAPI in Kafka
   1. What is SASL in Kafka?
   2. What is Kerberos?
   3. Hands-On Kerberos - Part 1: Setup
   4. Hands-On Kerberos - Part 2: Principals & Keytabs
   5. Hands-On Kerberos - Part 3: Kafka Configuration
   6. Hands-On Kerberos - Part 4: Client Configuration
6. Authorization in Kafka
   1. ACLs in Kafka
   2. Hands-On: ACL demo
7. Zookeeper Security
   1. Introduction
   2. Zookeeper Create Principal
   3. Zookeeper Configure Kerberos
   4. Hands-On: ZNode General
   5. Zookeeper Authorisation Config
   6. Hands-On: Zookeeper SuperUser
   7. Zookeeper Security Migration Tool and Summary
8. Cluster Security