This article examines the limitations of using Network Load Balancers to expose private Amazon MSK clusters with custom domains, particularly regarding mTLS support, and proposes Zilla Plus as a protocol-aware alternative that maintains cluster privacy and preserves mTLS authentication.