Gravitee Kafka Gateway

The Gravitee Kafka Gateway brings full API management discipline to Apache Kafka. It sits in front of one or more Kafka clusters and applies authentication mediation, ACLs, quotas, message filtering and routing, schema and serialization policies, virtual topics, and subscription workflows — exposing Kafka as a governed, productized event streaming surface for internal and external consumers.

API entry from apis.yml

apis.yml Raw ↑
aid: gravitee:gravitee-kafka-gateway
name: Gravitee Kafka Gateway
description: The Gravitee Kafka Gateway brings full API management discipline to Apache Kafka. It sits
  in front of one or more Kafka clusters and applies authentication mediation, ACLs, quotas, message filtering
  and routing, schema and serialization policies, virtual topics, and subscription workflows — exposing
  Kafka as a governed, productized event streaming surface for internal and external consumers.
humanURL: https://www.gravitee.io/platform/kafka-gateway
baseURL: https://documentation.gravitee.io/apim
tags:
- Kafka
- Event Streaming
- Event Gateway
- Message Broker
- Governance
- Open Source
properties:
- type: Documentation
  url: https://documentation.gravitee.io/apim
- type: GitHubRepository
  url: https://github.com/gravitee-io/gravitee-api-management
features:
- name: API Management for Kafka
  description: Apply policies — rate limiting, header assignment, serialization, JSON / Protobuf transformation
    — directly to Kafka streams.
- name: Message Filtering and Routing
  description: Route and filter messages by content or headers, moving routing logic off the client and
    into the gateway.
- name: Virtual Topics and Topic Mapping
  description: Expose user-friendly aliases for complex Kafka topic names and abstract backend topic structures
    from consumers.
- name: Subscription Approval Workflows
  description: Customizable approval workflows that gate which consumers may subscribe to which Kafka
    topics.
- name: Authentication Mediation
  description: Let consumers connect using their preferred auth (OAuth2, JWT, mTLS, SASL) while the broker
    keeps its own auth model.
- name: Granular Access Control
  description: Fine-grained ACLs over topics, partitions, and consumer groups managed centrally.
useCases:
- name: Securely Expose Kafka
  description: Combine access control, authentication mediation, and approval workflows to safely expose
    Kafka to internal and external consumers.
- name: Kafka Governance
  description: Gain visibility and control over Kafka data flows while enforcing organizational standards
    via policies and workflows.
- name: Self-Service Streaming
  description: Let developers discover and subscribe to Kafka topics through the Gravitee Developer Portal.
- name: Kafka TCO Reduction
  description: Cut Kafka cost through virtual topics, message offloading, and consolidated access management.
integrations:
- name: Apache Kafka
- name: Confluent
- name: RedPanda
- name: Gravitee Developer Portal
- name: Schema Registry
authentication:
- type: OAuth2
- type: JWT
- type: mTLS
- type: SASL
- type: API Key