Help Center> Cloud Stream Service> FAQ> Job Related FAQs> How Does CS Interconnect with DMS Using SASL_SSL?
View PDF

How Does CS Interconnect with DMS Using SASL_SSL?

A Kafka premium instance of DMS can be the source and sink streams of CS.

If you enable SASL_SSL when creating a DMS instance, data will be encrypted before transmission for enhanced security.

CS connects to a DMS instance in command line mode. The procedure is as follows:

  1. Obtain the client.truststore.jks certificate.

    Click here to download a package and decompress the package to obtain the client certificate file client.truststore.jks.

  2. Upload the client.truststore.jks file to a directory on the CS cluster, for example, /opt/cs/user_files.
  3. Add the following parameters to the SQL code: kafka_properties_delimiter and kafka_properties.

    The sample code is as follows:

    CREATE SINK STREAM kafka_sink (
    id STRING
) 
WITH (
  type="kafka",
  kafka_bootstrap_servers = "192.168.0.143:9093,192.168.0.113:9093,192.168.0.180:9093",
  kafka_topic = "csdms",
  encode = "csv",
  kafka_properties_delimiter = ",",
  kafka_properties = "sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username=\"test\" password=\"*******\";,sasl.mechanism=PLAIN,security.protocol=SASL_SSL,ssl.truststore.location=/opt/cs/user_files/client.truststore.jks,ssl.truststore.password=dms@kafka"
);

    username and password are the username and password configured when enabling SASL_SSL for DMS.

    After the configurations are complete, CS interconnects with DMS.

For details about how to connect to a Kafka premium instance using SASL, see Distributed Message Service User Guide.

Parent topic: Job Related FAQs