Skip to content
WarpStream Documentation
Start Free

Deploy (advanced)

This section explains how to configure more advanced deployment options for the WarpStream BYOC Agents.

WarpStream BYOC Agents support a number of advanced features:

  1. Agent Roles can be used to split an Agent deployment into multiple where each split handles a subset of the functionality. This is helpful for isolating the write path, read path, and background jobs from each other.
  2. Agent Groups can be used to split a single logical WarpStream cluster at the service discovery level for isolation purposes, or so it can be flexed across multiple network boundaries (VPCs, cloud accounts, etc).
  3. Agents can authenticate to the control plane with short-lived, federated OIDC tokens instead of a static Agent Key using Workload Identity Federation.
  4. Agents can be configured with TLS, mTLS, and SASL authentication.
  5. Agents can be configured to have much lower latency in exchange for higher costs.
  6. Agents can be deployed behind a standard proxy / network load balancer because they’re completely stateless and any Agent can serve requests for any topic-partition.