Kafka Cloud Deployment
Deployment guides for running Apache Kafka on cloud platforms.
Cloud Deployment Overview
Section titled “Cloud Deployment Overview”Platform Comparison
Section titled “Platform Comparison”| Aspect | AWS | Azure | GCP | Kubernetes |
|---|---|---|---|---|
| Compute | EC2 | Virtual Machines | Compute Engine | Pods |
| Storage | EBS gp3 | Premium SSD v2 | PD-SSD | PVC |
| Networking | VPC | VNet | VPC | Services |
| Load Balancing | NLB | LB | TCP LB | Service/Ingress |
| IAM | IAM Roles | Managed Identity | Service Accounts | RBAC |
Deployment Patterns
Section titled “Deployment Patterns”Single Region
Section titled “Single Region”Multi-Region (Active-Passive)
Section titled “Multi-Region (Active-Passive)”Region Strategy
Section titled “Region Strategy”Choosing between single-region and multi-region deployments is a critical architectural decision. See Single Region vs Multi-Region for:
- Cloud region failure statistics and historical incidents
- RTO/RPO analysis for different architectures
- Industry-specific recommendations (finance, healthcare, e-commerce)
- Cost analysis and decision framework
- Implementation checklists
Cloud-Specific Guides
Section titled “Cloud-Specific Guides”- EC2 instance selection
- EBS volume configuration
- VPC and security groups
- Terraform examples
- VM sizing
- Managed disk configuration
- VNet and NSG
- Terraform examples
- Compute Engine sizing
- Persistent disk configuration
- VPC and firewall rules
- Terraform examples
- StatefulSet configuration
- Persistent volume claims
- Network policies
- Helm charts
Common Considerations
Section titled “Common Considerations”High Availability
Section titled “High Availability”| Requirement | Implementation |
|---|---|
| Zone redundancy | Spread brokers across 3+ AZs |
| Rack awareness | Configure broker.rack per zone |
| Replication | replication.factor=3 |
| ISR | min.insync.replicas=2 |
Security
Section titled “Security”| Layer | Cloud Implementation |
|---|---|
| Network | Private subnets, security groups |
| Encryption in transit | TLS certificates |
| Encryption at rest | Encrypted volumes |
| Authentication | SASL/SCRAM or mTLS |
| Authorization | Kafka ACLs |
Monitoring
Section titled “Monitoring”| Aspect | Cloud Service |
|---|---|
| Metrics | CloudWatch / Azure Monitor / Cloud Monitoring |
| Logs | CloudWatch Logs / Log Analytics / Cloud Logging |
| Alerting | SNS / Action Groups / Alerting |
Cost Optimization
Section titled “Cost Optimization”Compute
Section titled “Compute”- Use reserved instances for steady workloads
- Right-size based on actual utilization
- Consider spot/preemptible for non-critical workloads
Storage
Section titled “Storage”- Use appropriate disk type for workload
- Implement retention policies to limit storage growth
- Consider tiered storage for cold data
Network
Section titled “Network”- Keep replication traffic within zone when possible
- Use private endpoints to avoid egress costs
- Compress data to reduce transfer volume
Related Documentation
Section titled “Related Documentation”- Region Strategy - Single vs multi-region decision guide
- Multi-Datacenter - DR strategies and MirrorMaker 2
- Architecture - System architecture
- Operations - Operational procedures
- Security - Security configuration