Kafka in a DMZ: Protecting AWS MSK with Kong Event Gateway

The MSK exposure problem Amazon MSK brokers live in private subnets by default. That’s the right default. Kafka’s protocol wasn’t designed for untrusted networks — it has no concept of rate limiting, no built-in field-level encryption, and its ACL model a…