Zilla Plus for Amazon MSK

Zilla Plus is a Kafka-native edge and service proxy. It is a flexible, secure, and reliable way of creating stateless API entry points into your Amazon MSK cluster for both native and non-native Kafka clients, removing the need for Kafka Connectors, integration pipelines, custom code, and VPNs.

Use Zilla Plus to securely expose your Amazon MSK cluster to external partners, decouple clients and brokers for disaster recovery, stream data to web/mobile apps for real-time experiences, turn Amazon MSK into an IoT broker, and more!

[SECURE PUBLIC ACCESS] Enable authorized clients to access your Amazon MSK cluster via a custom domain name over the internet with no changes to underlying brokers. Supports IAM, SASL and mTLS authentication via integrations with AWS Secrets Manager and AWS Certificate Manager (including AWS Nitro Enclaves for automated certificate renewal).

Multiple Zilla Plus instances require only a single NLB, even if there are multiple brokers. The presence of an NLB ensures that publicly reachable Zilla Plus endpoints to Amazon MSK can be DDoS-protected via AWS Shield.

[SECURE PRIVATE ACCESS (FOR MSK SERVERLESS)] Enable authorized clients deployed across VPCs (even cross-account) to securely connect, publish messages, and subscribe to topics in your Amazon MSK Serverless cluster. Eliminates the need to manually whitelist 1000 broker DNS names to enable broker access.

[DISASTER RECOVERY] Deploy Amazon MSK custom DNS name via Zilla Plus in both primary and secondary AWS regions to support seamless disaster recovery via DNS record update to secondary AWS region without needing to reconfigure Kafka clients due to consistent bootstrap server name.

[WEB STREAMING] Expose Amazon MSK topics via SSE (Server Sent Events) endpoints and stream messages to web and mobile clients at scale with reliability and security. Create REST endpoints for clients to POST and PUT updates back into Amazon MSK topics.

[IOT INGEST & CONTROL] Turn Amazon MSK into a fully-fledged IoT broker, enabling MQTT clients to directly publish and subscribe to topics. Both MQTT messages and client state are stored in Amazon MSK, removing the need for a separate dedicated MQTT broker.

[GRPC-KAFKA EVENT MESH] Turn Amazon MSK into a gRPC server and route service method requests and responses to and from topics. Fan out messages from an Amazon MSK topic to multiple gRPC clients or proxy messages between a gRPC client and server through Kafka, allowing them to communicate as if they are talking directly to each other.