Skip to main contentInterceptors are Gateway plugins that intercept and modify Kafka requests and responses in real time.
They help enforce policies, protect data, and add functionality without changing your applications or Kafka configuration.
What Interceptors do
Interceptors can:
- Encrypt and decrypt message fields or entire payloads
- Block or skip records that don’t meet data quality rules
- Enforce producer settings like acks or compression
- Control topic creation parameters like replication factor or partition count
- Transform message content or headers
How they work
Interceptors execute in priority order (lowest number first) and can be:
- Chained - Multiple Interceptors process requests sequentially
- Scoped - Apply to specific service accounts, groups, or Virtual Clusters
- Overridden - More specific scopes override broader ones
Gateway applies Interceptors dynamically based on which client connects, so different teams can have different policies without separate clusters.
