Skip to main content

Enterprise Streaming Service

Enterprise Streaming Service – fully managed event streaming platform of ix.Cloud for real-time processing of events, transactions, and state changes.

:::info Status: Alpha The Enterprise Streaming Service is a community service of ix.Cloud. :::

It provides a fully managed event streaming platform that is shared by multiple customers (shared service). Tenant separation is ensured by the platform at the topic level.

The service is operated in Inventx data centers. The service meets regulatory requirements for data retention, tenant isolation, and auditability.

The following services are provided by Inventx and are included in the service.

Inventx Scope of Services

Managed Streaming Cluster

Inventx operates and monitors the entire streaming infrastructure. This includes broker management, cluster scaling, rolling upgrades, patching, and capacity planning. The customer uses the platform without having to worry about operations.

Schema Registry

Inventx provides a central schema registry. This enables producers and consumers to manage schemas centrally and ensure compatibility between applications.

Supported schema types:

  • Avro
  • Protobuf
  • JSON Schema

Access Control & Tenant Separation

Each customer's topic begins with the customer identifier defined in the Inventx system. Within this prefix, additional topic groups can be created to make access control more granular. Permissions are granted per user and topic prefix.

Supported authentication methods:

  • SASL/SCRAM
  • mTLS
  • OAuth

The registration and management of clients is performed by Inventx. The customer receives reports that allow them to view and verify permissions within their topics.

Topic Management

After assignment of a topic prefix and associated permissions, topics can be created and configured within this area:

  • Directly via the Kafka Admin API (if appropriate permissions are available)
  • Via Inventx Self-Service (planned)

Configurable topic settings:

SettingDefaultMaximum
Retention Time7 days30 days
Partition Count1296

Fixed settings:

SettingValue
Replication Factor3

Monitoring & Alerting

Inventx monitors cluster health, throughput, and partition distribution in real time. Proactive alerting occurs when anomalies and SLA-relevant thresholds are detected.

Security

Table: Security
Type Description
Encryption in Transit Always guaranteed when using mTLS authentication. With OAuth or SASL/SCRAM, the connection must be established via TLS.
Encryption at Rest Ensured through the standard disk encryption of ix.Cloud.
Application-Level Encryption Not covered by the service. It is the responsibility of the respective application.

Topic Monitoring & Logs

Monitoring and log information for the customer's own topics and clients are provided via reports.

Internal cluster and operational logs (e.g., broker/system logs) are not provided. Log forwarding to customer-owned systems is not supported.

RetentionDuration
Online90 days
Offline2 years

Customer Responsibility

The following items are the responsibility of the customer.

Integration of Applications

The customer is responsible for the development, configuration, and operation of their producer and consumer applications. The following conditions apply:

  • Maximum message size: 1 MB
  • Topics must use the assigned topic prefix (the application name cannot be freely chosen)
  • Connectors that access shared resources within the cluster (e.g., MirrorMaker 2) cannot be used
  • The Kafka version is specified by the Enterprise Streaming Service
  • The replication factor is fixed and cannot be changed

Network Connectivity

The customer ensures network connectivity between their consumer/producer applications and the streaming platform (in collaboration with Inventx Network Services).

Schema Registration

Schemas must be registered in the schema registry before production.

Monitoring Usage

The customer actively uses the provided monitoring reports to monitor their topics and capacity.

Service Level Parameters (SLP)

The service level parameters are based on the performance handover point (PaaS) platform level Platinum.