Overview
Zilla Plus is a Kafka-native edge and service proxy. It is a flexible, secure, and reliable way of creating stateless API entry points into your Amazon MSK cluster for both native and non-native Kafka clients, removing the need for Kafka Connectors, integration pipelines, custom code, and VPNs.
Use Zilla Plus to securely expose your Amazon MSK cluster to external partners, decouple clients and brokers for disaster recovery, stream data to web/mobile apps for real-time experiences, turn Amazon MSK into an IoT broker, and more!
[SECURE PUBLIC ACCESS] Enable authorized clients to access your Amazon MSK cluster via a custom domain name over the internet with no changes to underlying brokers. Supports IAM, SASL and mTLS authentication via integrations with AWS Secrets Manager and AWS Certificate Manager (including AWS Nitro Enclaves for automated certificate renewal).
Multiple Zilla Plus instances require only a single NLB, even if there are multiple brokers. The presence of an NLB ensures that publicly reachable Zilla Plus endpoints to Amazon MSK can be DDoS-protected via AWS Shield.
[SECURE PRIVATE ACCESS (FOR MSK SERVERLESS)] Enable authorized clients deployed across VPCs (even cross-account) to securely connect, publish messages, and subscribe to topics in your Amazon MSK Serverless cluster. Eliminates the need to manually whitelist 1000 broker DNS names to enable broker access.
[DISASTER RECOVERY] Deploy Amazon MSK custom DNS name via Zilla Plus in both primary and secondary AWS regions to support seamless disaster recovery via DNS record update to secondary AWS region without needing to reconfigure Kafka clients due to consistent bootstrap server name.
[WEB STREAMING] Expose Amazon MSK topics via SSE (Server Sent Events) endpoints and stream messages to web and mobile clients at scale with reliability and security. Create REST endpoints for clients to POST and PUT updates back into Amazon MSK topics.
[IOT INGEST & CONTROL] Turn Amazon MSK into a fully-fledged IoT broker, enabling MQTT clients to directly publish and subscribe to topics. Both MQTT messages and client state are stored in Amazon MSK, removing the need for a separate dedicated MQTT broker.
[GRPC-KAFKA EVENT MESH] Turn Amazon MSK into a gRPC server and route service method requests and responses to and from topics. Fan out messages from an Amazon MSK topic to multiple gRPC clients or proxy messages between a gRPC client and server through Kafka, allowing them to communicate as if they are talking directly to each other.
Highlights
- Flexibility: Seamlessly connect both native and non-native Kafka clients to your Amazon MSK cluster. Declaratively defined Kafka, REST, SSE, gRPC, and MQTT APIs on top of your cluster.
- Security: Integrations with AWS Secrets Manager and AWS Certificate Manager.
- Performance: Zilla proxies are stateless and scale out linearly. When multiple Zilla instances are deployed, only a single NLB is required, even if there are multiple brokers present.
Details
Features and programs
Financing for AWS Marketplace purchases
Pricing
- ...
Instance type | Product cost/hour | EC2 cost/hour | Total/hour |
---|---|---|---|
t1.micro | $0.60 | $0.02 | $0.62 |
t2.nano | $0.60 | $0.006 | $0.606 |
t2.micro AWS Free Tier | $0.60 | $0.012 | $0.612 |
t2.small | $0.60 | $0.023 | $0.623 |
t2.medium | $1.20 | $0.046 | $1.246 |
t2.large | $1.20 | $0.093 | $1.293 |
t2.xlarge | $2.40 | $0.186 | $2.586 |
t2.2xlarge | $4.80 | $0.371 | $5.171 |
t3.nano | $1.20 | $0.005 | $1.205 |
t3.micro AWS Free Tier | $1.20 | $0.01 | $1.21 |
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
Secure Public Access (Unauthorized/SASL)
The following CloudFormation template configures Zilla as a Kafka proxy that enables secure, flexible public internet access to a privately-networked AWS MSK cluster. This allows Kafka clients from outside the private network access to the full functionality of your Amazon MSK cluster. For example, to manage topics (create/update/delete) and to produce to/consume from topics. It also supports connecting to a private cluster from a local machine as well as setting up access for third parties, such as partners.
Key features include:
- Deploy once and enable on-premise or cross-cloud Kafka clients to securely reach your MSK cluster, even if the number of brokers in the cluster changes over time
- Support for custom DNS names via the public internet
- Integrations with AWS Certificate Manager and AWS Secrets Manager
Zilla does not require any changes to the underlying cluster, maintaining the privacy and security benefits of a private network.
When multiple Zilla instances are deployed, only a single NLB is required, even if there are multiple brokers present.
CloudFormation Template (CFT)
AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."
Version release notes
Zilla Plus 0.7.61
Additional details
Usage instructions
Usage Instructions: Follow the step-by-step setup guide available at: https://docs.aklivity.io/zilla/latest/solutions/how-tos/amazon-msk/
Resources
Vendor resources
Support
Vendor support
Zilla Plus comes with standard enterprise support, which includes a 24x7, 8-hour SLA via email and direct messaging. Advanced enterprise support with a 2-hour SLA is additionally available. To learn more about our support offerings and engage with the team, please visit https://www.aklivity.io/support .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

