Configure dual-stack network type
Amazon MSK supports dual-stack network type for existing MSK Serverless clusters that use Kafka version 3.6.0 or later at no additional cost. With dual-stack networking, your clusters can use both IPv4 and IPv6 addresses. Dual-stack endpoints also support IPv4 thus maintaining backward compatibility. Amazon MSK provides IPv6 support through dual-stack network type, not as IPv6-only.
By default, clients connect to Amazon MSK clusters using the IPv4 network type. All new clusters that you create also use IPv4 by default. To update a cluster's network type to dual-stack, make sure you’ve fulfilled the prerequisites described in the following section. Then, use the UpdateConnectivity API to update connectivity to dual-stack.
Note
Once you update your cluster to use the dual-stack network type, you can’t switch it back to the IPv4 network type.
Topics
Prerequisites for using dual-stack network type
Before you configure dual-stack network type for your clusters, make sure you that all subnets you provide during cluster creation must support dual-stack network type. If even one subnet in your cluster doesn’t support dual-stack, you won’t be able to update the network type for your cluster to dual-stack.
IAM permissions for MSK Serverless
You must have the following IAM permissions:
-
ec2:DescribeSubnets -
ec2:ModifyVpcEndpoint
For a complete list of permissions required to perform all Amazon MSK actions, see Amazon managed policy: AmazonMSKFullAccess.
Use dual-stack network type for a cluster
You can update the network type for an MSK Serverless cluster using the Amazon Web Services Management Console, Amazon CLI, or Amazon SDK.
Considerations for using dual-stack network type
-
IPv6 support is currently available only in dual-stack mode (IPv4 + IPv6), not as IPv6-only.
-
Dual-stack network type is unavailable for multi-VPC private connectivity.
-
You can change the network type from IPv4 to dual-stack for an existing cluster only if all its subnets support the dual-stack network type.
-
You can't revert to the IPv4 network type after enabling dual-stack. To switch back, you must delete and recreate the cluster.
-
You must have the following IAM permissions:
-
ec2:DescribeSubnetsandec2:ModifyVpcEndpoint
-