📣 Virtual Clusters with Zilla: Simplifying Multi-Tenancy in Kafka
Read the Blog Post ➔
Secure Private Access for Amazon MSK Serverless with Zilla+

Secure access to MSK serverless clusters across VPCs & AWS accounts

Seamlessly establish a custom domain to connect Apache Kafka® clients to Amazon MSK Serverless clusters via IAM authentication over AWS PrivateLink.

Streamline Your MSK Serverless Setup

Amazon MSK serverless brokers are not sequentially numbered, which inhibits setting up a specific DNS record for each serverless broker. As a result, to expose these brokers to clients running in external VPCs or AWS accounts requires manually configuring 1000s of individual broker DNS records.

AWS Well-Architected security requirements
1.

Organize workloads in separate accounts, and group accounts based on function, compliance requirements, or a common set of controls.

2.

Provide secure cross-account VPC connectivity between Kafka clients and Amazon MSK clusters.

Secure, Scalable, Flexible

Zilla Plus enables Kafka clients to use a custom domain name to securely connect to your MSK Serverless clusters via IAM authentication over AWS PrivateLink, from as many different AWS accounts or VPCs as needed. It achieves this by overriding the format of the broker bootstrap server names, to make them compatible with wildcard DNS resolution

Custom Wildcard DNS & Route 53 Hosted Zone Integration
Unified Domain Name for Kafka clients, streamlining configuration
Eliminates the need to manually configure 1000s of individual broker DNS records to enable access

Existing approaches for cross-VPC connectivity to MSK clusters have limitations.

One-to-One Private Access

This setup establishes a fully private, secure, and scalable communication channel between Kafka clients and the Amazon MSK cluster by leveraging Zilla proxy.

Many-to-One Private Access

Multiple Kafka clients from different cross-account VPCs securely connect to a single Amazon MSK Serverless cluster. This approach simplifies multi-tenant access and ensures a unified, private connectivity model.

One-to-Many Private Access

Multiple Kafka clients from different cross-account VPCs securely connect to a single Amazon MSK Serverless cluster. This approach simplifies multi-tenant access and ensures a unified, private connectivity model.

Ready to Get Started?

Free trial available!
Available on
AWS Marketplace ➔
Deployment Guide
Get up and running in minutes.
Docs ➔
Solution Brief
Seamless cross-account MSK access.
Download ➔
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.