[KAFKA-4985] kafka-acls should resolve dns names and accept ip ranges

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Assignee: Unassigned
• Reporter: Ryan P
• Created: 30/Mar/17 17:10
• Updated: 31/Jan/18 22:29

Description

Per KAFKA-2869 it looks like a conscious decision was made to move away from using hostnames for authorization purposes.

This is fine however IP addresses are terrible inconvenient compared to hostname with regard to configuring ACLs.

I'd like to propose the following two improvements to make managing these ACLs easier for end-users.

1. Allow for simple patterns to be matched

i.e --allow-host 10.17.81.11[1-9]

2. Allow for hostnames to be used even if they are resolved on the client side. Simple pattern matching on hostnames would be a welcome addition as well

i.e. --allow-host host.name.com

Accepting a comma delimited list of hostnames and ip addresses would also be helpful.

Issue Links

• mentioned in: Page Loading...