...

Current state: Under Discussion

Discussion thread:

JIRA:

Please keep the discussion on the mailing list rather than commenting on the wiki (wiki discussions get unwieldy fast).

Motivation

When Kafka is configured to use SSL, the broker will typically support multiple cipher suites.  During the SSL handshake, the client and the server negotiate which cipher suite gets used by the connection.

...

However, currently, it is difficult to know what cipher suite is actually in use.  There are log messages that describe it, but they are logged at DEBUG or TRACE level, and the information is not aggregated anywhere.  We would like to create a metric to address this gap.

Public Interfaces

We will add a new metric in the Selector to surface information about what cipher suites are in use.  The mbean will be:

kafka.server:listener=(listener),networkProcessor=(processor-index),type=(type),ssl-cipher=(ssl-cipher-name)

...