Release 88.4: Security, Performance and Resizable Columns
Release Info
Kpow can be found on Dockerhub
docker pull operatr/kpow:88.4View our Docker quick start guide for help getting started.
Kpow can be found on ArtifactHub
Helm version: 1.0.32
helm repo add kpow https://charts.kpow.io
helm repo update
helm install --namespace factorhouse --create-namespace my-kpow kpow/kpow --version 1.0.32 \
--set env.LICENSE_ID="00000000-0000-0000-0000-000000000001" \
--set env.LICENSE_CODE="KPOW_CREDIT" \
--set env.LICENSEE="Your Corp\, Inc." \
--set env.LICENSE_EXPIRY="2024-01-01" \
--set env.LICENSE_SIGNATURE="638......A51" \
--set env.BOOTSTRAP="127.0.0.1:9092\,127.0.0.1:9093\,127.0.0.1:9094" \
--set env.SECURITY_PROTOCOL="SASL_PLAINTEXT" \
--set env.SASL_MECHANISM="PLAIN" \
--set env.SASL_JAAS_CONFIG="org.apache.kafka.common.security.plain.PlainLoginModule required username=\"user\" password=\"secret\";"
--set env.LICENSE_CREDITS="7"View our Helm instructions for help getting started.
Kpow can be found on the AWS Marketplace
View our AWS Marketplace documentation for help getting started.
Kpow can be downloaded and installed as a Java JAR file. This JAR is compatible with Java versions 11+.
View our JAR quick start guide for help getting started.
Kpow can be downloaded and installed as a Java JAR file. This JAR is compatible with Java 8.
View our JAR quick start guide for help getting started.
For more information, read the Kpow accessibility documentation.
Kpow v88.4 brings nice new UI features including resizable columns and easy JSON export of tabular data. The results of a recent security audit bring improved websocket security and user session management configuration. Finally, we have reduced the local topic disk usage and CPU consumption.
This release blog provides details of both the 88.3 and 88.4 releases.
Table UI Improvements
Sometimes it's the little things.
Two often requested features of Kpow are the ability to download tabular information easily and to be able to resize columns for easy access to data.
Security Improvements
A recent security audit provided valuable feedback, with some minor improvements incorporated into Kpow v88.4.
Websocket Same-Origin Protection
The Kpow UI makes use of websockets and when a user session starts a websocket connection upgrade occurs in your browser.
It is now possible to restrict the websocket upgrade request with a same-origin policy.
To apply same-origin header checking to the websocket upgrade request configure the user-facing scheme, host, and (optional) port of the Kpow instance like so:
WS_ALLOWED_ORIGINS=https://kpow.mycorp:3000
Kpow websockets are also protected by CSRF tokens, same-origin checking is an optional extra setting. The default allowed origins are '*', in part because Kpow is often deployed in a manner that it is impossible for Kpow to determine the user-facing host of its own instance.
Concurrent User Login Controls
Kpow v88.4 introduces the ability to optionally detect and block concurrent logins to the same user account.
ALLOW_CONCURRENT_LOGIN=false
Concurrent sessions are allowed by default.
User Session Max Age
Kpow v88.4 provides a new configuration parameter to control the maximum user session age.
SESSION_MAX_AGE=-1
The default max age is -1, which means no expiry. You may manage this session age via the identity provide integrated with Kpow (e.g. Okta, etc). However if you are using Kpow with LDAP this new parameter allows you to evict session after a set period in seconds.
Performance Improvements
We continuously monitor, stress, and record metrics about Kpow's performance in multi-cluster, multi-connect, multi-schema environment.
Recent observations let us to performance improvements that reduce Kpow local topic disk usage by 75% and CPU usage by 50%.
Confluent Cloud Disk Usage
We recently detected that our internal topics were not being compressed in Confluent Cloud due to limitations on configuration that we rely on as default.
Kpow 88.4 brings performance improvements that drop disk usage in a Confluent Cloud environment by 95%.
Release v88.4 Changelog
See the Factor House Product Roadmap to understand current delivery priorities.
Kpow v88.4 Changelog
See the full Kpow Changelog for information on previous releases
- Security improvement, reduce visibility of application functionality per RBAC rules.
- Fix connect task actions bug
- Fix schema subject actions bug
- Fix Java 8 KpowLdapLoginModule bug
- Improve connect UI labels
- Schema and connect table to react-virtualized
- Kpow application logs are JSON formatted
- Improve UI to allow table export to JSON
- Improve UI support dynamic table column resizing
- Security improvement, optional disallow concurrent login
- Security improvement, improved websocket CSRF and same-origin impl
- Security improvement, LDAP session max age configuration
- Reduce Kpow topic disk usage by 75%
- Reduce Kpow CPU usage by 50%
- Reduce Kpow Confluent Cloud topic disk usage by 95%
- Support UUID literal in EDN data format
Release 95.1: A unified experience across product, web, docs and licensing
95.1 delivers a cohesive experience across Factor House products, licensing, and brand. This release introduces our new license portal, refreshed company-wide branding, a unified Community License for Kpow and Flex, and a series of performance, accessibility, and schema-related improvements.
Release 94.6: Factor Platform, Ververica Integration, and kJQ Enhancements
The first Factor Platform release candidate is here, a major milestone toward a unified control plane for real-time data streaming technologies. This release also introduces Ververica Platform integration in Flex, plus support for Kafka Clients 4.1 / Confluent 8.0.0 and new kJQ operators for richer stream inspection.
Release 94.5: New Factor House docs, enhanced data inspection and URP & KRaft improvements
This release introduces a new unified documentation hub - Factor House Docs. It also introduces major data inspection enhancements, including comma-separated kJQ Projection expressions, in-browser search, and over 15 new kJQ transforms and functions. Further improvements include more reliable cluster monitoring with improved Under-Replicated Partition (URP) detection, support for KRaft improvements, the flexibility to configure custom serializers per-cluster, and a resolution for a key consumer group offset reset issue.
Start your streaming transformation today.
Try both Kpow or Flex free for 30 days with a single license - no credit card required.