why not try using internal vs external traffic https://cwiki.apache.org/confluence/display/KAFKA/KIP-103%3A+Separation+of+Internal+and+External+traffic
if you set EXTERNAL enndpoints and map it to SSL - you clients should only receive EXTERNAL endpoints for comms. Does this sound okay for you? Thanks, On Fri, 13 Sep 2019 at 06:41, Akshay Das <aks...@fivetran.com> wrote: > We cannot use external endpoints because of security reasons. > Is there an option to tell zookeeper/broker not to send broker host detail > metadata to its clients? > > On Thu, Sep 12, 2019 at 3:05 PM M. Manna <manme...@gmail.com> wrote: > >> Have you tried using EXTERNAL endpoints for your Kafka broker to separate >> TLS from internal traffic? Also, have you checked zk admin whether the >> broker metadata is exposing your TLS endpoints to clients ? >> >> >> On Thu, 12 Sep 2019 at 10:23, Akshay Das <aks...@fivetran.com.invalid> >> wrote: >> >> > Hi Team, >> > >> > I'm trying to consume from a kafka cluster using java client, but the >> kafka >> > server can only be accessed via jumphost/ssh tunnel. But even after >> > creating ssh tunnel we are not able to read because once conusmer >> fetches >> > metadata it uses original hosts to connect to broker. Is it possible to >> > stop this behaviour? >> > >> > Thanks, >> > Akshay Das >> > >> >
