|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/apache-kafka-security/
课程评论：没有评论
**Apache Kafka 系列课程：Kafka 安全 SSL SASL Kerberos ACL 总结** 本课程专为在设置 Kafka 安全方面遇到困难或难以理解官方文档的学生而设计。一个不安全的 Kafka 集群会带来严重问题，包括任何人都可以读写任何主题、泄露数据、无法追踪连接者、以及数据在传输过程中未加密可能被截获。 **课程核心内容：** * **SSL 加密 (Encryption):** * 确保数据在机器之间安全传输。 * 防止中间人攻击 (Man-in-the-Middle attacks)。 * 消除网络中明文传输的数据。 * **SSL & SASL 认证 (Authentication):** * 确保只有拥有有效凭证的客户端才能访问集群。 * 为每个客户端分配唯一的用户 ID，便于通过 ACL 进行访问控制。 * 特别关注 SASL Kerberos GSSAPI 的认证机制。 * **ACL 授权 (Authorization):** * 根据管理员设定的规则，限制客户端只能读写特定主题。 * 阻止客户端创建或删除主题。 * 为审计团队提供集群安全的保证。 **课程特点：** * **理论与实践相结合：** 课程将理论知识与实际动手操作相结合。 * **重点关注：** 该课程仅涵盖 SSL 用于加密和认证，以及 SASL Kerberos 认证。 * **多节点集群概述：** 提供启用多节点集群安全性的概述，但让学生自行探索和实践具体细节。 * **独家内容：** 这是目前网络上唯一一门专门讲解 Kafka 安全的课程。 * **讲师实力：** 由在 Kafka 领域拥有丰富实践经验的 Stephane Maarek 和 Gerd Koenig 讲授。 **课程大纲：** 1. **课程介绍：** 讲解 Kafka 安全的重要性。 2. **Kafka 环境搭建：** 在 AWS EC2 上快速搭建 Kafka 环境，作为安全设置的前置步骤。 3. **Kafka SSL 加密：** 设置证书颁发机构 (CA)，创建 Kafka Broker 和客户端证书。 4. **Kafka SSL 认证：** 配置客户端强制使用 SSL 进行身份验证。 5. **Kafka SASL 认证 - Kerberos GSSAPI：** 在 EC2 上设置 Kerberos，为 Kafka 和客户端创建凭证。 6. **Kafka 授权：** 学习应用 ACL 规则，并通过命令行工具 (CLI) 进行客户端授权。 7. **ZooKeeper 安全：** 学习如何通过 Kerberos 保护 ZooKeeper。 **讲师介绍：** * **Stephane Maarek：** Apache Kafka 领域的资深讲师，拥有百万级学生和大量好评，是 Conduktor 的联合创始人。 * **Gerd Koenig：** Apache Kafka 专家，拥有丰富的生产部署和安全配置经验，负责课程的实践操作部分。 **课程福利：** * 终身访问所有未来更新的内容。 * 讲师积极回应问答区的提问。 * 提供相关文章链接和代码示例。 * 可下载 Udemy 结业证书。 * 提升职业技能，增加收入和机会，成为公司中的 Kafka 专家。 **进阶学习推荐：** 课程还提供了 Apache Kafka 系列的其他进阶课程，涵盖 Kafka 基础、Kafka Connect、Kafka Streams、ksqlDB、集群搭建与管理、Confluent Schema Registry & Kafka REST Proxy、Kafka 监控与运维等。
If you've struggled setting up Kafka Security, or can't make sense of the documentation, this course is for youFirst of all, an insecure cluster is a big problem:anyone can read / write to any topic, and this can lead to bad data or data leakyou don't know who is connected to your clusterdata isn't encrypted in flight and could be intercepted by hackersIn this course, you'll learn Kafka Security, with Encryption (SSL), Authentication (SSL & SASL), and Authorization (ACL). Over 1800 students and 160 reviews later, we're convinced this course can save you a lot of time.--------------Kafka Security is important for the following reasons:Encryption (SSL) for Apache Kafka> Ensure data is securely transported from machine to machine> Prevent MIDM (man-in-the-middle attacks) on your Kafka Cluster> No more PLAINTEXT data going around in your networkAuthentication (SSL & SASL) for Apache Kafka > Ensure only clients with credentials can access your clusters> Give each of your clients a user-id, therefore enabling the possibility of controlling their access using ACLAuthorization (ACL) for Apache Kafka> Ensure the clients can only read / write topics based on administrator rules> Ensure clients cannot create / delete topics> Provide the audit team the guarantee that the cluster is secureHands On & Theory Based CourseNote: This course only deals with SSL for encryption & Authentication and SASL Kerberos, not other mechanisms. It also does provide an overview to enable security in a multi-broker setup, but that last part is left for the student to investigate and practice. This course is the first and only available Kafka Security Course on the web. Get it now to become an Apache Kafka expert!Section outline:Course Introduction: Let's learn why we need Security in Apache KafkaKafka Setup: Quickly setup Kafka in AWS EC2 and test it, as a pre-requisite to setting up security on itSSL Encryption in Kafka: Setup a Certificate Authority and create certificates for your Kafka broker and Kafka clientSSL Authentication in Kafka: Learn how to force clients to authenticate using SSL to connect to your Kafka ClusterSASL Authentication - Kerberos GSSAPI in Kafka: Setup Kerberos on an EC2 machine and create credentials for Kafka and Clients. Authorization in Kafka: Learn how to enforce ACLs in Kafka and use the CLI to authorize clients. Zookeeper Security: Learn how to secure Zookeeper using Kerberos===============================InstructorMy name is Stephane Maarek, and I'll be your instructor in this course. I teach about Apache Kafka, the Kafka ecosystem and Kafka Certifications with my focus always on helping my students improve their professional proficiencies. I am also the co-founder of Conduktor: an enterprise Apache Kafka platform & UI to help everyone use Kafka.Throughout my career in designing and delivering these certifications and courses, I have already taught 1,000,000+ students and gotten 350,000+ reviews!Gerd Koenig is one of the instructors of this course. He is an Apache Kafka Expert, and has done countless of production deployments and security setup at many of his clients. He will be taking the leads on all the Hands-On Lecture. With Apache Kafka becoming much more than a buzzword out there, I've decided it's time for students to properly learn how to be a Kafka professional. So, let's kick start the course! You are in good hands!===============================This Course Also Comes With:Lifetime Access to All Future UpdatesA responsive instructor in the Q & A SectionLinks to interesting articles, and lots of good code to base your next applications ontoUdemy Certificate of Completion Ready for DownloadThis is the course that could improve your career!Apache Kafka is a skill in high demand and there are not enough people to fulfill all the open positions. You can boost your income, take on new roles and fun challenges. Many of my students are now the Kafka experts of their companies! You can be the next!I hope to see you inside the course!=======================Note: Looking for more advanced Kafka concepts? There are many volumes in the Apache Kafka Series:Learn Kafka for Beginners v2 (great to start)Kafka Connect Hands-On LearningKafka Streams for Data ProcessingKSQL on ksqlDB - Hands On!Kafka Cluster Setup & AdministrationConfluent Schema Registry & Kafka REST ProxyKafka Security (SSL SASL ACL)Kafka Monitoring and OperationsHappy learning!
