You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@kafka.apache.org by 张祥 <18...@163.com> on 2019/09/29 06:27:52 UTC
Only use SSL to encrypt the authentication messages
Hi everyone !
I am enabling SASL/PLAIN authentication for our Kafka and I am aware it should be used with SSL encryption. But it may bring a performance impact. So I am wondering whether it is possible that we only use SSL to encrypt the authentication messages but leave the data unencrypted. Thanks.
| |
张祥
|
|
18133622460@163.com
|
签名由网易邮箱大师定制
Re: Only use SSL to encrypt the authentication messages
Posted by Pere Urbón Bayes <pe...@gmail.com>.
not that I'm aware of, but my experience in the field is really true. it
would be nice to write such article
On Sun, 29 Sep 2019, 11:56 M. Manna <ma...@gmail.com> wrote:
> Hello,
>
> Just curious, is there any article about Java 11 reducing SSL perf impact
> ?
>
> Thanks,
>
> On Sun, 29 Sep 2019 at 10:38, Pere Urbón Bayes <pe...@gmail.com>
> wrote:
>
>> Hi,
>> if you're worried about the performance impact i would suggest :
>>
>> * first benchmark the impacts, by experience i would see around 30 to 40%
>> performance degradation.
>>
>> * use java 11, and you will see a lot less performance impact when using
>> ssl.
>>
>> -- Pere
>>
>> On Sun, 29 Sep 2019, 08:28 张祥 <18...@163.com> wrote:
>>
>> > Hi everyone !
>> >
>> >
>> > I am enabling SASL/PLAIN authentication for our Kafka and I am aware it
>> > should be used with SSL encryption. But it may bring a performance
>> impact.
>> > So I am wondering whether it is possible that we only use SSL to encrypt
>> > the authentication messages but leave the data unencrypted. Thanks.
>> >
>> >
>> > | |
>> > 张祥
>> > |
>> > |
>> > 18133622460@163.com
>> > |
>> > 签名由网易邮箱大师定制
>> >
>> >
>>
>
Re: Only use SSL to encrypt the authentication messages
Posted by "M. Manna" <ma...@gmail.com>.
Hello,
Just curious, is there any article about Java 11 reducing SSL perf impact ?
Thanks,
On Sun, 29 Sep 2019 at 10:38, Pere Urbón Bayes <pe...@gmail.com> wrote:
> Hi,
> if you're worried about the performance impact i would suggest :
>
> * first benchmark the impacts, by experience i would see around 30 to 40%
> performance degradation.
>
> * use java 11, and you will see a lot less performance impact when using
> ssl.
>
> -- Pere
>
> On Sun, 29 Sep 2019, 08:28 张祥 <18...@163.com> wrote:
>
> > Hi everyone !
> >
> >
> > I am enabling SASL/PLAIN authentication for our Kafka and I am aware it
> > should be used with SSL encryption. But it may bring a performance
> impact.
> > So I am wondering whether it is possible that we only use SSL to encrypt
> > the authentication messages but leave the data unencrypted. Thanks.
> >
> >
> > | |
> > 张祥
> > |
> > |
> > 18133622460@163.com
> > |
> > 签名由网易邮箱大师定制
> >
> >
>
Re: Only use SSL to encrypt the authentication messages
Posted by 张祥 <18...@163.com>.
So, is this a no ?
| |
|
|
|
签名由网易邮箱大师定制
On 09/29/2019 17:38，Pere Urbón Bayes<pe...@gmail.com> wrote：
Hi,
if you're worried about the performance impact i would suggest :
* first benchmark the impacts, by experience i would see around 30 to 40%
performance degradation.
* use java 11, and you will see a lot less performance impact when using
ssl.
-- Pere
On Sun, 29 Sep 2019, 08:28 张祥 <18...@163.com> wrote:
Hi everyone !
I am enabling SASL/PLAIN authentication for our Kafka and I am aware it
should be used with SSL encryption. But it may bring a performance impact.
So I am wondering whether it is possible that we only use SSL to encrypt
the authentication messages but leave the data unencrypted. Thanks.
| |
张祥
|
|
18133622460@163.com
|
签名由网易邮箱大师定制
Re: Only use SSL to encrypt the authentication messages
Posted by Pere Urbón Bayes <pe...@gmail.com>.
Hi,
if you're worried about the performance impact i would suggest :
* first benchmark the impacts, by experience i would see around 30 to 40%
performance degradation.
* use java 11, and you will see a lot less performance impact when using
ssl.
-- Pere
On Sun, 29 Sep 2019, 08:28 张祥 <18...@163.com> wrote:
> Hi everyone !
>
>
> I am enabling SASL/PLAIN authentication for our Kafka and I am aware it
> should be used with SSL encryption. But it may bring a performance impact.
> So I am wondering whether it is possible that we only use SSL to encrypt
> the authentication messages but leave the data unencrypted. Thanks.
>
>
> | |
> 张祥
> |
> |
> 18133622460@163.com
> |
> 签名由网易邮箱大师定制
>
>