Kroxylicious release 0.18.0

November 28, 2025 by Keith Wall

The Kroxylicious project is very pleased to announce the release of Kroxylicious 0.18.0. See the Changelog for a list of changes and summary of Deprecations, Changes and Removals.

The main highlights of this release are:

Filter API Improvements

  • Filters now have a convenient mechanism to convert from topic ids KIP-516 to topic names this is based on design proposal#008
  • Filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Further details and context can be found in design proposal#009

Authorizer Filter

We’ve added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own Authorization API. This allows you to enforce authorizations rules at the proxy.

Azure KMS integration for Record Encryption

With this release, Record Encryption now has the capability to use Azure Vault for storage of the key material used to encrypt Kafka records.

Feedback

Please let us know if you find the project interesting or helpful, and especially if you have deployed it in production. You can reach us through Slack, GitHub or even bsky).