goflow icon indicating copy to clipboard operation
goflow copied to clipboard

[Kafka SSL] Custom truststore and keystore.

Open mcvity opened this issue 1 year ago • 0 comments

I have a network monitoring stack set up as follows:

SFLOW DATA -> GOFLOW -> KAFKA INSTANCE -> ETC

It's currently operational, but I need to enable SSL encryption on Kafka to ensure that I'm not transmitting sflow data in plaintext. Since I'm using my own CA for certificates, Goflow will need the truststore and keystore to connect. However, it seems that Goflow doesn't support this option.

Here are the consumer properties I'm using to connect to the Kafka instance with SSL enabled:

sasl.mechanism=PLAIN 
security.protocol=SASL_SSL
sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="U" password="P";
ssl.endpoint.identification.algorithm=
ssl.truststore.type=PEM
ssl.truststore.location=/opt/truststore.pem

mcvity avatar Oct 02 '23 07:10 mcvity