November 2022
Beginner to intermediate
346 pages
11h
Chinese
Content preview from Kafka权威指南（第2版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
198
｜
第
11
章
匿名连接
User:ANONYMOUS
这个主体被用于未经身份验证的连接，包括
PLAINTEXT
监
听器接受的客户端连接和
SSL
监听器接受的未经身份验证的客户端连接。
11.3.1
SSL
如果监听器的安全协议配置的是
SSL
或
SASL_SSL
，那么监听器连接的安全传输层就会
使用
TLS
。建立
TLS
连接需要一个握手过程
，在这个过程中会执行身份验证、协商加密
参数，并生成用于加密的共享密钥。客户端通过验证服务器的数字证书来确定服务器的身
份。如果启用了
SSL
客户端身份验证
，则服务器也会通过验证客户端数字证书来确定客户
端的身份。所有的
SSL
流量都是加密的，适合用在不安全的网络中。
SSL
的性能
因为
SSL
通道是加密的
，所以会增加
CPU
方面的开销。
SSL
目前不支持零
复制传输。根据流量模式的不同，增加的开销可能会高达
20%~30%
。
1.
配置
TLS
如果配置了
SSL
或
SASL_SSL
的
broker
监听器启用了
TLS
，则还需要为
boker
配置一个
密钥存储，其中包含
broker
的
私有密匙和证书。同时，客户端也需要配置一个信任存储，
其中包含
broker
证书或签署了
broker
证书的证书颁发机构
（
CA
）的证书。
broker
证书需
要包含作为主体别名（
subject
alternative name
，
SAN
）扩展或公用名称（
common name
，
CN
）的
broker
主机名
，客户端可以用它验证服务器的主机名。也可以使用通配符证书，
为同一域名下的所有
broker
使用相同的密钥存储，以此来简化配置。
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.