Skip to content

Commit 8e6ad90

Browse files
committed
Content fixes
Co-authored-by: Grace Grimwood <[email protected]> rh-pre-commit.version: 2.0.1 rh-pre-commit.check-secrets: ENABLED Signed-off-by: Sam Barker <[email protected]>
1 parent 3e4355a commit 8e6ad90

File tree

1 file changed

+10
-8
lines changed

1 file changed

+10
-8
lines changed

_posts/2024-12-17-release-0_9_0.md

Lines changed: 10 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,19 @@ The Kroxylicious project is very pleased to announce the release of [Kroxyliciou
1212

1313
We generally expect Kroxylicious to be both forwards- and backwards-compatible across Kafka versions just like the Apache Kafka client and broker. While we tested with pre-release versions of Apache Kafka 3.9 we discovered after it was released that we had missed a case in the protocol version negotiation. When the `APIVersionsRequest` version was updated we were unable to decode the response. In the 0.9.0 release we adopt the same behaviour as the Kafka broker and respond with API version 0 if we do not support the protocol version requested by the client - we have also expanded our test coverage to get earlier warnings of similar issues in the future.
1414

15-
This release also marks the introduction of our new connection handling state machine at the core of the proxy. We have evolved the state machine at the core of the proxy to separate out the state carried at various stages of the connection life cycle and provide stronger rules around transitions between states. This is still a work in progress as its implications are rather wide-ranging however we think it gives us a stronger core to base everything else around. This does, for the moment, limit our ability to offer authentication offload support, we do intend to restore this eventually (please do get in touch if this use case is important to you).
15+
This release also marks the introduction of our new state machine for handling connections. We have evolved the state machine at the core of the proxy to separate out the state carried at various stages of the connection lifecycle and provide stronger rules around transitions between states. This is still a work in progress due to the wide-ranging implications it has, however we think it gives us a stronger core to base everything else around. This does, for the moment, limit our ability to offer authentication offload support, we do intend to restore this eventually (please do get in touch if this use case is important to you via [Slack](https://kroxylicious.slack.com) or [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)).
1616

1717
There are many quality of life improvements in [this release](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.9.0) (in no particular order)
1818

19-
- Ensure we now respond with errors instead of closing the connection when there are problems encrypting records
20-
- We've made it easier for Filter authors to generate error responses of their own.
21-
- We realised forwarding partial requests from the record validation filter in the face of validation failures was a bad idea so it now rejects the whole batch.
22-
- We can now use EC2 instance metadata to authenticate against AWS Key Management Service.
23-
- We now support mutual TLS authentication on the downstream (or client side) of the proxy.
24-
- Key Management Systems (KMS) now have more lifecycle callbacks to better manage shared resources.
25-
- We now default to Log4J 2 [Async logging](https://logging.apache.org/log4j/2.x/manual/async.html) - this is mostly a performance optimisation, but we think it should address some issues we have observed with logging in kubernetes environments.
19+
- Ensure we now respond with errors instead of closing the connection when there are problems encrypting records ([#1630](https://github.com/kroxylicious/kroxylicious/pull/1630)).
20+
- We've made it easier for Filter authors to generate error responses of their own ([#1630](https://github.com/kroxylicious/kroxylicious/pull/1630)).
21+
- We realised forwarding partial requests from the record validation filter in the face of validation failures was a bad idea so it now rejects the whole batch ([#1657](https://github.com/kroxylicious/kroxylicious/pull/1657)).
22+
- We can now use EC2 instance metadata to authenticate against AWS Key Management Service ([#1442](https://github.com/kroxylicious/kroxylicious/pull/1442)).
23+
- We now support mutual TLS authentication on the downstream (or client side) of the proxy ([#1631](https://github.com/kroxylicious/kroxylicious/pull/1631)).
24+
- Key Management Systems (KMS) now have more lifecycle callbacks to better manage shared resources ([#1498](https://github.com/kroxylicious/kroxylicious/pull/1498)).
25+
- We now default to Log4J 2 [Async logging](https://logging.apache.org/log4j/2.x/manual/async.html) - this is mostly a performance optimisation, but we think it should address some issues we have observed with logging in kubernetes environments ([#1673](https://github.com/kroxylicious/kroxylicious/pull/1673).
26+
27+
See the [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#090) for a full list of changes and summary of Deprecations, Changes and Removals.
2628

2729
Lastly, we are very pleased to announce that this Kroxylicious release contains first time contributions from:
2830
- [Calum Murray](https://github.com/Cali0707)

0 commit comments

Comments
 (0)