Zilla Plus for HAQM MSK

Zilla Plus is a Kafka-native edge and service proxy. It is a flexible, secure, and reliable way of creating stateless API entry points into your HAQM MSK cluster for both native and non-native Kafka clients, removing the need for Kafka Connectors, integration pipelines, custom code, and VPNs.

Use Zilla Plus to securely expose your HAQM MSK cluster to external partners, decouple clients and brokers for disaster recovery, stream data to web/mobile apps for real-time experiences, turn HAQM MSK into an IoT broker, and more!

[SECURE PUBLIC ACCESS] Enable authorized clients to access your HAQM MSK cluster via a custom domain name over the internet with no changes to underlying brokers. Supports IAM, SASL and mTLS authentication via integrations with AWS Secrets Manager and AWS Certificate Manager (including AWS Nitro Enclaves for automated certificate renewal).

Multiple Zilla Plus instances require only a single NLB, even if there are multiple brokers. The presence of an NLB ensures that publicly reachable Zilla Plus endpoints to HAQM MSK can be DDoS-protected via AWS Shield.

[SECURE PRIVATE ACCESS (FOR MSK SERVERLESS)] Enable authorized clients deployed across VPCs (even cross-account) to securely connect, publish messages, and subscribe to topics in your HAQM MSK Serverless cluster. Eliminates the need to manually whitelist 1000 broker DNS names to enable broker access.

[DISASTER RECOVERY] Deploy HAQM MSK custom DNS name via Zilla Plus in both primary and secondary AWS regions to support seamless disaster recovery via DNS record update to secondary AWS region without needing to reconfigure Kafka clients due to consistent bootstrap server name.

[WEB STREAMING] Expose HAQM MSK topics via SSE (Server Sent Events) endpoints and stream messages to web and mobile clients at scale with reliability and security. Create REST endpoints for clients to POST and PUT updates back into HAQM MSK topics.

[IOT INGEST & CONTROL] Turn HAQM MSK into a fully-fledged IoT broker, enabling MQTT clients to directly publish and subscribe to topics. Both MQTT messages and client state are stored in HAQM MSK, removing the need for a separate dedicated MQTT broker.

[GRPC-KAFKA EVENT MESH] Turn HAQM MSK into a gRPC server and route service method requests and responses to and from topics. Fan out messages from an HAQM MSK topic to multiple gRPC clients or proxy messages between a gRPC client and server through Kafka, allowing them to communicate as if they are talking directly to each other.