Kroxylicious on Ubuntu 24.04

Azure Streaming & Messaging

Kroxylicious, the protocol aware proxy for Apache Kafka, authenticated and ready to forward traffic on first boot.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

Kroxylicious is an open source proxy that sits between Kafka clients and Kafka brokers and understands the Kafka protocol itself. Because it speaks the protocol rather than merely forwarding bytes, it can apply encryption, multi tenancy, filtering and policy enforcement centrally, without changing a single client application.

Why the cloudimg image

cloudimg delivers Kroxylicious fully patched and preconfigured with a backing Kafka broker, so the proxy is genuinely usable the moment it boots. Client facing SASL authentication is on by default, every credential is generated per VM at first boot rather than shipped in the image, the backing broker is reachable only through the proxy, and the image is backed by 24/7 support and a paired deployment guide.

Common uses

  • Centralised Kafka policy enforcement
  • Multi tenant Kafka platforms
  • Adding encryption without client changes