kafka内外网和安全配置

内外网不通集群部署模式

       分别给kafka配置不同网段的监听

        broker.id=70

       listener.security.protocol.map=INTERNAL:SASL_PLAINTEXT,EXTERNAL:SASL_PLAINTEXT
       #SASL_PLAINTEXT 表示需要先经过安全认证,如果没有安全认证就会启动失败

      listeners=INTERNAL://0.0.0.0:19091,EXTERNAL://0.0.0.0:19092
      advertised.listeners=INTERNAL://10.30.92.7:19091,EXTERNAL://10.255.206.22:19092
      inter.broker.listener.name=INTERNAL

      

    无需安全认证

       listener.security.protocol.map=INTERNAL:PLAINTEXT,EXTERNAL:PLAINTEXT

      listeners=INTERNAL://0.0.0.0:19091,EXTERNAL://0.0.0.0:19092
      advertised.listeners=INTERNAL://10.30.92.7:19091,EXTERNAL://10.255.206.22:19092
      inter.broker.listener.name=INTERNAL

      这样可以实现可以实现两个不同的网段的主机都能连接同一个kafka集群

     10.30.92.0/24网段和10.255.206.0/24网段两者之间的主机互不相通,但是他们却可以通过10.30.92.78:19091和10.255.206.22:19092来连接到同一台主机上的kafka

broker.id=70

listener.security.protocol.map=INTERNAL:PLAINTEXT,EXTERNAL:PLAINTEXT
listeners=INTERNAL://0.0.0.0:19091,EXTERNAL://0.0.0.0:19092
advertised.listeners=INTERNAL://10.30.92.7:19091,EXTERNAL://10.255.206.22:19092
inter.broker.listener.name=INTERNAL

num.network.threads=3
num.io.threads=8
socket.send.buffer.bytes=4194304
socket.receive.buffer.bytes=4194304
socket.request.max.bytes=104857600
log.dirs=/data/soc/logs/kafka/log
num.partitions=1
num.recovery.threads.per.data.dir=1
log.retention.hours=96
log.retention.bytes=-1
log.segment.bytes=1073741824
log.retention.check.interval.ms=300000
zookeeper.connect=10.30.92.70:2181,10.30.92.71:2181,10.30.92.73:2181
zookeeper.connection.timeout.ms=6000000
delete.topic.enable=true
auto.create.topics.enable=true
default.replication.factor=1
offsets.topic.replication.factor=1

配置样例1