All Products
Search
Document Center

ApsaraMQ for Kafka:FAQ

Last Updated:Mar 10, 2026

Does Kafka Confluent Edition support sending and receiving messages over HTTPS?

Yes. Confluent sends messages over HTTPS using the Kafka REST Proxy. HTTPS requests are forwarded to the Kafka REST Proxy, which then forwards them to Kafka. Requests do not go directly to Kafka.

Does Kafka Confluent Edition support bidirectional TLS access?

The Kafka REST Proxy does not support bidirectional TLS. It supports only unidirectional TLS.

Bidirectional TLS is not supported between the Kafka REST Proxy and Kafka. Bidirectional TLS connections are also not supported between clients and the frontend Server Load Balancer for the Kafka REST Proxy.

What should I know when installing and using Kafka Confluent Edition?

The Server Load Balancer domain name corresponds to the Kafka REST Proxy. Clients can use this domain name directly. For more information, see Network Access and Security Settings.

You can download the certificate from the console.

VPC access: You can access the service as long as the network is reachable. No cross-region or cross-account restrictions apply.

After Kafka brokers reach their capacity limit, you can perform horizontal scale-out and modify the number of replicas. Vertical scale-out is not supported.

Resource assessment: For more information, see Cluster Resource Assessment.

What do i do if an SLB quota error occurs when deploying Confluent?

Deploying a Confluent instance requires multiple SLBs. Increase your SLB quota in Quota Center—for example, to 200—then redeploy. Visit SLB Quota Center.