Hi Rajini, Quick question (sorry if this was already discussed). How were the following chosen?
Name: password.encoder.keyfactory.algorithm Type: String Default: PBKDF2WithHmacSHA512 if available, otherwise PBKDF2WithHmacSHA1 (e.g. Java7) Name: password.encoder.cipher.algorithm Type: String Default: AES/CBC/PKCS5Padding Name: password.encoder.key.length Type: Integer Default: 128 Name: password.encoder.iterations Type: Integer Default: 2048 Also, was a AES/GCM variant considered as the default cipher algorithm? Ismael On Mon, Nov 20, 2017 at 1:57 PM, Rajini Sivaram <rajinisiva...@gmail.com> wrote: > Hi all, > > I have submitted KIP-226 to enable dynamic reconfiguration of brokers > without restart: > > https://cwiki.apache.org/confluence/display/KAFKA/KIP- > 226+-+Dynamic+Broker+Configuration > > The KIP proposes to extend the current dynamic replication quota > configuration for brokers to support dynamic reconfiguration of a limited > set of configuration options that are typically updated during the lifetime > of a broker. > > Feedback and suggestions are welcome. > > Thank you... > > Regards, > > Rajini >