AWS Networking Overview on Confluent Cloud

Confluent Cloud supports public and private networking solutions on AWS.

Public networking solutions

Confluent Cloud offers data in motion services that can be shared across organizations over secure public endpoints. Confluent Cloud services include the public connectivity for the Basic, Standard, and Dedicated cluster types.

Confluent Cloud clusters with secure public endpoints are protected by a proxy layer that prevents types of DoS, DDoS, syn flooding, and other network-level attacks.

For Confluent Cloud clusters with public connectivity, you can use public egress IP addresses to communicate with external resources (such as data sources and sinks for managed connectors) over secure public endpoints. For details, see Use Public Egress IP Addresses on Confluent Cloud for Connectors and Cluster Linking.

Private networking solutions

Confluent Cloud supports data in motion services that are shared privately with organizations on private networks and offers additional customization and controls for security and privacy. The following private networking solutions are supported on AWS.

AWS Private Network Feature Support by Service / Cluster

Feature	VPC Peering	Transit Gateway	PrivateLink (Inbound)	PrivateLink (Outbound)	Private Network Interface
Enterprise cluster			✓ Serverless		✓
Freight cluster					✓
Dedicated cluster	✓	✓	✓ Dedicated
Connect	✓	✓
Flink	✓	✓	✓ Serverless | Dedicated
Schema Registry	✓	✓	✓ Serverless | Dedicated
Flink external table lookups				✓ Serverless
Inferences for external AI models				✓ Serverless
Connect with Enterprise Kafka clusters				✓ Serverless
Connect with Dedicated Kafka clusters				✓ Dedicated
Cluster Linking with Enterprise Kafka clusters				✓ Serverless