kroxylicious.io

Kroxylicious 0.25.1 has been released with critical security fixes. We squashed a security issue in our own Azure KMS provider which you'll want if you use Record Encryption. We've also bumped Netty for some CVE of its own. Read more.. kroxylicious.io/blog/kroxyli...

Post 2 in the routing series: Connection Switching. Pick the cluster on connection. Org-wide front door to all the Kafkas. Full details on our blog: kroxylicious.io/blog/kroxyli... Building up to @samturtelbarker.bsky.social's session at Current SF. current.confluent.io/san-francisc... #Kafka

Kroxylicious 0.25.0 has surfaced🐊! What's new? Kube-based auth for HashiCorp Vault, control of the Kube Service resources created for Load Balancers, ability to configure the Service Account used to run the proxy pods, OpenRewrite recipes to aid config migrations and more. bit.ly/4e4aJoV

Ever wondered what our community is working on? Now @oss-ip.bsky.social tracks our design proposals and announces them to the world!

Kroxylicious 0.24.0 lives! 0.24.0 delivers **SASL Termination** where the proxy takes charge of authenticating the client rather than the brokers, and a significant evolution of the Filter/Router APIs as we prepare the ground ready for Kroxylicious 1.0. kroxylicious.io/blog/kroxyli...

kroxylicious.io/blog/kroxyli... Kroxylicious 0.23.0 hatched🐊. PEM keys for KMS, CipherTrust KMS improvement, cross-namespace Strimzi references, Router API implementation continues

Kroxylicious 0.22.0 is here! New Record Encryption implementation for Thales CipherTrust Manager. Improved operator resilience. Foundations laid for Routing and Hot Reload. kroxylicious.io/blog/kroxyli...

We've just taken a big step for the Kroxylicious project! Proposal 70 has merged — the result of a lot of hard work shaping the Routing API. There's plenty of code to follow before it's a usable thing, but this lays the foundation. github.com/kroxylicious... #ApacheKafka

We promised more details on those Kroxylicious numbers kroxylicious.io/benchmarking... Shortest possible summary: we built a second cluster because the first one was lying to us. The full story catching that lie, and how complicated reliable numbers really are: kroxylicious.io/benchmarking...

Just how fast does a crocodile swim? New post: measuring the overhead Kroxylicious adds to Apache Kafka. Passthrough: below measurement noise. Record encryption: ~25% throughput hit, but Kafka never sees the plaintext. Open source benchmark harness — run it yourself. kroxylicious.io/benchmarking...

Big news: kroxylicious.io/blog/kroxyli... While we've had ideas around routing, one virtual cluster fronting multiple target clusters, for a while we have recently turned them into something tangible! Check out the blog & tell us how that fits your use cases, what things it allows you!

This #Current26 talk uses very Confluent specific tooling (unsurprisingly) but if you want encryption at rest you can use the OSS @kroxylicious.io Kafka proxy kroxylicious.io/use-cases/#e... Kroxy has a pluggable architecture so record masking and other privacy features can be added in easily

Kroxylicious 0.21.0 has been released. Check out the video and blog! youtu.be/BuDJfMufm60?... kroxylicious.io/blog/kroxyli...

Kroxylicious Record Encryption: Shifting the Trust Boundary www.youtube.com/watch?v=A8bz...

The Kroxylicious team is pleased to announce the 0.20.0 release (kroxylicious.io/blog/kroxyli...). Significant new features include a new Connection Expiration filter, Entity Isolation filter, and OpenShift Route integration.

Kroxylicious is the snappy open source proxy for Apache Kafka®. See how it works in 3 minutes: youtu.be/xLOjKScpJ3Q #ApacheKafka #Kroxylicious #EventStreaming #DataEngineering

Kroxylicious is a growing project so we are looking to scale things up, check out our latest blog post for the full details kroxylicious.io/2026/03/04/e...

Kroxylicious is a growing project so we are looking to scale things up, check out our latest blog post for the full details kroxylicious.io/2026/03/04/e...

As always the Kroxylicious team are very pleased to announce the release the 0.19.0 release (kroxylicious.io/blog/kroxyli...). Kroxylicious will now bite down on Kafka 4.2 RPC calls, snack on idle connections and other quality of life improvements.

New Release: kroxylicious.io/releases/jun.... We’ve refreshed our dependencies, including an essential upgrade to Apache Kafka 4.2.0. We’ve also smoothed out the setup process, ensuring the new Kafka Queues feature works seamlessly straight out of the box. #ApacheKafka #UnitTesting

The Kroxylicious projects is excited to announce v0.18.0. This release focused on supporting authentication both from the broker and in proxy! Release announcement: kroxylicious.io/blog/kroxyli... GitHub: github.com/kroxylicious... Maven Central: central.sonatype.com/search?q=g:i...

The Kroxylicious projects is excited to announce v0.18.0. This release focused on supporting authentication both from the broker and in proxy! Release announcement: kroxylicious.io/blog/kroxyli... GitHub: github.com/kroxylicious... Maven Central: central.sonatype.com/search?q=g:i...

Kroxylicious is pleased to announce that 0.17.1[1] is now generally available! This is a patch release to allow older librdkafka clients to enable compression. We are working on many more interesting features in v0.18.0 [1] kroxylicious.io/blog/kroxyli...

We are discussing a proposal to release Kroxylicious 1.0.0. The aims are: - Move to 1.0.0 to signal production-readiness - Stronger API/config stability guarantees until 2.0.0 - Policy for patch releases We'd welcome feedback on the proposal bit.ly/4od83s9

We are happy to announce the release of Kroxylicious v0.17.0 bit.ly/4oGt3HG. The main improvements in this release: the project is now based on Netty 4.2 and the project now publishes a Maven archetype, making it easy to start writing your own filter implementation.

The Kroxylicious project is very pleased to announce the release of v0.16.0 bit.ly/3IpOflV. Main changes bit.ly/4o3Eby5 are Kafka 4.1 compatibility and observabilty improvements. Happy proxying🐊.

Kroxylicious 0.15.0 released This is a fast-tracked release to address a key resilience issue: - Improved Bootstrap Resilience: The proxy now defaults to round-robin between brokers in bootstrapServers. - New record encryption 🔒quickstart Check out the full details kroxylicious.io/blog/kroxyli...

📣 Kroxylicious 0.14.0 - new AuthN APIs (more to come here) - new metrics for tracking network stalls - Fixing support for encrypting messages over 1mb (we don't judge the messages we proxy...) - Better support for negotiating protocol versions kroxylicious.io/blog/kroxyli...

The Kroxylicious project is very pleased to announce the release of Kroxylicious 0.13.0. bit.ly/4efdZws The big news - the first release of the Kroxylicious with an Operator. If you are deploying Kroxylicious to Kubernetes we hope this will simplify your life. Check it out. Feedback welcome.

It’s great to see someone organically recognise the value of Record Encryption. mostafahussein.medium.com/kafka-encryp...

Gunnar’s not wrong…

Whats that? You want a version of Kroxylicious thats supports Kafka 4? We got ya! kroxylicious.io/blog/kroxyli... #apacheKafka

The Kroxylicious project is very pleased to announce the release of Kroxylicious 0.12.0. bit.ly/4k6HnGZ The main changes - Apache Kafka 4.0.0 compatibility and a changes to the defaults affecting downstream mTLS connections.

Yay! We are now part of the @commonhaus.org family! kroxylicious.io/commonhaus/2...

New Release: kroxylicious.io/releases/jun... our JUnit extension nows supports Kafka 4.0.0 (along with older versions and Zookeeper). #ApacheKafka #UnitTesting

The Kroxylicious project is very pleased to announce the release of Kroxylicious 0.11.0. bit.ly/4iCP0nZ The main change - a revamped configuration file. This will have you up and running in a.... snap🐊! We've also added new policy controls to Record Encryption.

We’ve been spotted swimming in the wild. callistaenterprise.se/blogg/teknik... Really pleased to see people noticing the effort we are putting into simplifying developing and deployment as we go along!

The Kroxylicious project is as pleased as always to announce v0.10.0 kroxylicious.io/blog/kroxyli.... This release tightens our security posture by allowing more control over the TLS protocol & ciphers used when accepting and making connections. We also add support for Fortanix DSM as a Key manager

Just in time for the holidays Kroxylicious 0.9.0 is available from all reputable sources of Jars. Now with added #ApacheKafka 3.9 support! Full details at: kroxylicious.io/blog/kroxyli... We look forward to hearing your feedback.