Emergency Incident Response
Brokers down, a consumer group that won't stabilize, or a partition with no leader. A senior Kafka engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Kafka Support
Last reviewed by Scott Sternloff
AceMQ provides expert Apache Kafka support, 24/7, under a contract with written SLAs: a 15-minute first response on a production emergency, 1 hour for critical issues, 4 hours for high-priority ones and the next business day for standard questions. It covers self-managed Kafka, Amazon MSK and Confluent Platform, including versions the Apache project no longer patches. Every ticket reaches a named senior engineer, and most teams start with a Kafka health check.
Planning a build, upgrade or migration instead? See AceMQ Apache Kafka consulting and services.
Customers




Partners


Incident Triage
These are real symptoms from real Apache Kafka production environments — and the first thing our engineers check when one comes in.
| Symptom you're seeing | What we check first | Typical resolution |
|---|---|---|
| Consumer lag climbing steadily on one partition only | Partition leader skew and per-consumer commit latency. One slow member holds the whole group back — and if processing exceeds max.poll.interval.ms the member is evicted mid-batch, triggering a silent rebalance loop that looks like lag. | 1–2 hours |
| Consumer group rebalancing constantly, throughput near zero | session.timeout.ms against heartbeat.interval.ms, whether the group is on the eager or cooperative-sticky assignor, and whether pods are being rescheduled. Rolling deploys on the eager assignor stop-the-world on every pod restart. | 1–3 hours |
| ISR shrinking and expanding repeatedly, URP alerts flapping | replica.lag.time.max.ms against follower fetch latency, then disk I/O wait and network saturation on the lagging broker. This is almost always a storage or NIC bottleneck on one node, not a Kafka configuration problem. | 2–4 hours |
| Producer throwing TimeoutException: Expiring N records | Whether the batch is aging out in the accumulator (request.timeout.ms, delivery.timeout.ms, linger.ms) or the partition leader is unavailable. With acks=all and min.insync.replicas=2, losing one replica stalls every produce to that partition. | Under 2 hours |
| Disk filling on brokers despite short retention settings | Whether log cleanup is actually running: compacted topics with a stuck cleaner thread, open file handles pinning deleted segments, or segment.ms so large that retention.ms never gets a closed segment to delete. | 1–3 hours |
| Exactly-once pipeline stalls, consumers block on LSO | Hanging transactions — an aborted or never-committed producer transaction pins the last stable offset, so read_committed consumers stop. We identify the stuck producer ID and transactional.id.expiration.ms behavior before intervening. | 2–4 hours |
| KRaft controller quorum loses leadership, metadata writes fail | Controller log directory latency and the quorum voter set. In KRaft mode a slow metadata log disk on any voter causes election churn; on ZooKeeper-based clusters the same symptom traces to ZK session expiry from GC pauses. | 2–4 hours |
| Amazon MSK cluster degraded, but CloudWatch metrics look normal | Broker-level partition count against instance class limits, MSK storage autoscaling state, and whether the client is pinned to a broker that failed over. MSK hides the broker logs you need — we pull them via the log delivery config first. | 2–4 hours |
Resolution times reflect typical Apache Kafka engagements under an active AceMQ support contract. Every P1 closes with a written root-cause analysis.
What's Included
No add-on pricing for incidents. No per-ticket charges. One contract covers the whole surface.
Brokers down, a consumer group that won't stabilize, or a partition with no leader. A senior Kafka engineer joins a live bridge within 15 minutes with access to diagnose — not a ticket acknowledgement.
Every P1 closes with a written RCA: what failed, why, the fix applied, and the specific broker setting, client config, or topic design change that prevents recurrence.
Partition count, batch size and linger, compression choice, fetch sizing, and replication settings tuned against your actual message sizes and consumer processing time — not against a generic benchmark.
mTLS and SASL/OAUTHBEARER configuration review, ACL auditing, and proactive alerts for CVEs affecting your exact Kafka, Connect, or client library version with tested upgrade paths.
Kafka Connect worker failures, dead-letter queue design, sink connector backpressure, and Schema Registry compatibility breaks during rolling producer deploys — all inside the same contract.
Rolling upgrades with inter.broker.protocol.version staging, ZooKeeper-to-KRaft migration, and cluster moves between self-managed, MSK, and Confluent with mirrored offsets.
Why AceMQ
The same senior engineers stay on your account. They know your partition layout, your retention policy, and your consumer topology — so a P1 call starts with diagnosis instead of twenty minutes of you describing your cluster.
You reach a senior Kafka engineer directly by phone, email, or Slack. Nobody collects information to pass along, and no escalation approval sits between you and someone who can read a controller log.
Most Kafka incidents are client-side: prefetch, poll loops, commit strategy, or a producer with the wrong acks setting. We debug your Java, Go, Python, or .NET consumers alongside the brokers, because that's where the fault usually is.
Engineers across 26+ countries and every time zone. Your 3am incident is someone's mid-afternoon — no overnight skeleton crew, no waiting for a region to wake up.
Quarterly cluster health checks plus shared intelligence across our support base. When a version-specific broker bug or client library regression surfaces on one cluster, every affected customer hears about it before it reaches their production.
Amazon MSK and Confluent Cloud remove some operational surface but not the ones that cause incidents. We support managed clusters as first-class environments, including the parts the provider's own support scope stops short of.
Cloud, Kubernetes, bare metal, hybrid, and air-gapped — including environments where you can't give us outbound network access.
Version coverage
The Apache project maintains only its three most recent release lines. AceMQ supports the version you run in production, including the ones Apache no longer patches.
| Kafka version | Latest release | Apache status | AceMQ coverage |
|---|---|---|---|
| Kafka 4.4 | 4.4.0, released 22 October 2026 | Supported release | 24/7 support |
| Kafka 4.3 | 4.3.2, released 23 October 2026 | Supported release | 24/7 support |
| Kafka 4.2 | 4.2.2, released 29 September 2026 | Supported release | 24/7 support |
| Kafka 4.0 and 4.1 | Archived | End of life: no further fixes | 24/7 support and upgrade planning |
| Kafka 3.8 and 3.9 | Archived | End of life (3.9 was the last 3.x release) | 24/7 support and ZooKeeper to KRaft migration |
| Kafka 2.8 to 3.7 | Archived | End of life | 24/7 support, plus CVE fixes backported through OSSeva |
| Kafka 2.7 and earlier | Archived | End of life | Support and upgrade planning |
Source: the Apache Kafka downloads page, checked 28 October 2026. The project aims for three feature releases a year and makes bug-fix releases for supported releases only.
Designing the event-driven systems that run on Kafka, not just supporting the cluster? See our event-driven architecture consulting.
IBM and Confluent
IBM announced the deal on 8 December 2025 ($31 a share in cash, about $11 billion in enterprise value) and completed it on 17 March 2026. Apache Kafka did not change hands: it is still an Apache Software Foundation project, and your cluster is only affected if you run Confluent's commercial products.
Confluent Platform and Confluent Cloud now belong to IBM, and Confluent has said it continues as a distinct brand inside IBM. Existing contracts run as signed. What changes is who you negotiate the next renewal with.
Open-source Apache Kafka, Amazon MSK and Strimzi clusters are unaffected, and the Kafka core inside Confluent Platform is supportable without a Confluent subscription. AceMQ supports all of them under one contract.
List which Confluent-only components you actually run, such as Control Center or role-based access control, which sit under Confluent's commercial licence. If the answer is none, get an independent quote for the Kafka layer before you renew.
Source: the IBM newsroom release of 17 March 2026. Comparing platforms rather than support? Confluent alternatives after the IBM acquisition
Entry offer
Most Kafka support relationships begin with an engineer-led review of the running cluster, so the contract is scoped on what the estate needs rather than a broker count. A health check takes one to four weeks, depending on complexity. It is not a condition of support.
Nine areas on every cluster, including KRaft readiness, replication and ISR, partition skew, consumer lag, ACLs and TLS, retention, client configuration, and the monitoring that should have caught your last incident.
A written report, a ranked fix list and the reasoning behind each finding, walked through with your team by the engineer who did the review.
The findings become the first runbooks and the starting scope of a support contract, with named senior engineers on your account from day one.
Escalation Path
Every tier reaches a senior Apache Kafka engineer. There is no tier-1 triage layer to get through.
P1 escalation path
A replay of one P1, from the first page to the written root-cause analysis
15-minute P1 response, 24/7.
A response time, not a resolution time.
P1 opened, on-call engineer paged
Phone, email or Slack reaches the on-call senior engineer directly, whether the incident is in RabbitMQ, Kafka, Redis, PostgreSQL or Kubernetes. No web form, no tier-1 queue.
Senior engineer on your bridge
A senior engineer who already knows your environment joins a live bridge, so nobody has to re-explain your topology.
Specialists across the stack join
When an incident crosses components, the engineers who know each one join. For RabbitMQ, the path runs to the core team.
Written root-cause analysis
Root cause, the fix applied and the prevention steps, delivered after every P1.
Pricing
AceMQ Apache Kafka support contracts typically run $24,000–72,000 a year, depending on SLA level, scope (number of clusters or nodes, and environments) and deployment (self-managed, Amazon MSK, Confluent Platform or Kubernetes).
| What moves the price | How it changes the contract |
|---|---|
| SLA level | Business-hours cover costs less than 24/7 cover with a 15-minute emergency response. |
| Scope | More clusters or nodes, and more environments, make a larger contract. |
| Deployment | Self-managed, cloud-managed and Kubernetes estates need different amounts of hands-on work. |
Covering several technologies under one contract, for example RabbitMQ, Kafka and Redis, earns an aggressive discount.
Support In Practice
Kafka support, remediation and assessment work from AceMQ. Each card links to the full write-up: the cluster, what AceMQ diagnosed or changed, and the result.
European Hosting Provider
A five-node Kafka cluster serving 60,000 customers was timing out producers under load. The cause was topology, not capacity.
Banking Transaction Platform
Throughput fell from 320,000 to roughly 45,000 transactions per hour after Kafka was introduced. The platform needed 80,000 to prove it could scale.
European Online Trading Platform
Independent architecture and performance review of RabbitMQ, Kafka, and Redis for an online trading platform.
Global Technology Enterprise
AceMQ developed a multi-technology compliance strategy covering CVE patching for Kafka alongside RabbitMQ and IBM MQ deployments, creating a unified vulnerability management approach across the entire enterprise messaging stack.
PagoNXT (Financial Technology)
AceMQ provided ongoing support for PagoNXT's high-throughput payments infrastructure running Kafka and RabbitMQ at 2,500 transactions per second, including load testing validation and architecture optimization.
Enterprise Organizations
AceMQ's Kafka assessment service evaluates streaming architecture health, identifies operational risks, and provides a structured migration or modernization roadmap for enterprises running or evaluating Kafka.
Support options
AceMQ offers Apache Kafka cover in four options, each handing more of the day-to-day work to AceMQ: 24/7 support and incident management for clusters your team runs, proactive monitoring that catches lag, ISR and CVE problems first, managed Kafka on your own infrastructure, and fully managed Kafka on a dedicated cluster hosted by AceMQ. Self-managed Kafka, Confluent Platform and Amazon MSK are covered.
You run it, we back you up
Best for: Teams that run Kafka themselves and need senior cover at 3am.
You run it, we watch it with you
Best for: Clusters where a rebalance storm or a shrinking ISR must be caught before users notice.
We run it in your cloud or data centre
Best for: Regulated estates that must keep Kafka brokers inside their own boundary.
We host it and run it, as a service
Best for: Teams that want Kafka endpoints without a cloud account, Kubernetes or a rota to run.
| Who does what | Tier 1 24/7 support | Tier 2 Proactive monitoring | Tier 3 Managed, your infrastructure | Tier 4 Fully managed by AceMQ |
|---|---|---|---|---|
| Who runs Apache Kafka day to day? | Your team | Your team, with AceMQ reviews | AceMQ | AceMQ |
| Where does it run? | Your infrastructure | Your infrastructure | Your cloud account or data centre | AceMQ infrastructure |
| 24/7 incident response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response | 15-minute P1 response |
| Health checks and CVE alerts | On request | Scheduled | Included | Included |
| Patching and upgrades | Your team, AceMQ advises | Planned with AceMQ | Done by AceMQ | Done by AceMQ |
| Monitoring and on-call | Your team | Your team | AceMQ | AceMQ |
| Data, keys and accounts | Yours | Yours | Yours | Your data, hosted by AceMQ |
Every Tier can start as an ad hoc engagement or an annual partnership, and you can move up or down a Tier as your team changes.
One partner for Apache Kafka
Support is one part of what AceMQ does for Apache Kafka. The same engineers deliver consulting, health checks, migrations and end-of-life cover, and support the systems that usually run next to it.
Confluent supports Confluent Platform and Confluent Cloud under its own subscriptions. AWS supports Amazon MSK as a service, which covers the managed infrastructure rather than your topic design, consumers or clients. The Apache Kafka project itself offers community mailing lists, not a support contract. Independent providers such as AceMQ support open-source Apache Kafka, Confluent Platform and MSK estates under one 24/7 contract with a 15-minute emergency SLA.
Yes. Apache Kafka commercial support does not require a Confluent subscription, and a support contract for Apache Kafka can come from an independent provider. AceMQ supports Apache Kafka as released by the project, on the version you run, including clusters still on ZooKeeper, with incident response, root cause analysis, upgrade planning and KRaft migration support.
Yes. The Apache project maintains only its three most recent releases, which as of October 2026 are Kafka 4.4, 4.3 and 4.2. Every 3.x and 2.x line, and Kafka 4.0 and 4.1, receive no upstream fixes. AceMQ supports the version you are actually running, advises on which CVEs affect it, and plans the upgrade path, including the ZooKeeper to KRaft migration that Kafka 4.0 made mandatory. Where you need security patches on a version you cannot yet leave, AceMQ's OSSeva platform backports CVE fixes to Apache Kafka 2.8.x through 3.7.x.
Kafka support covers 24/7 emergency incident response with a 15-minute SLA, written root cause analysis on every P1, throughput and latency tuning, security and CVE advisory, Kafka Connect and Schema Registry coverage, and upgrade or migration support. Every ticket is handled by a named senior engineer assigned to your account. There is no first-line triage layer and no per-incident charge.
All three. We support self-managed Kafka, Amazon MSK and MSK Serverless, and Confluent Platform and Confluent Cloud. Managed Kafka removes broker provisioning but leaves you the parts that cause most incidents — partition design, consumer group behavior, client configuration, and topic-level retention. Those are exactly where our diagnostic time goes, and they are outside what provider support typically covers.
P1 emergencies — brokers down, a partition with no leader, a consumer group stuck in perpetual rebalance — get a 15-minute first response with a senior engineer joining a live bridge. P2 critical issues are 1 hour, P3 high-priority 4 hours, and P4 standard questions next business day. These are contractual commitments, not best-effort targets.
Yes, and it is one of the most common things we are called for. Unexplained lag is usually one of four things: a rebalance loop caused by processing time exceeding max.poll.interval.ms, partition-to-consumer skew from a poor key distribution, a slow downstream dependency inside the poll loop, or a hanging transaction pinning the last stable offset. We instrument the consumer to identify which before changing any configuration.
Yes. We plan and execute ZooKeeper-to-KRaft migrations, including the dual-write bridge phase, controller quorum sizing, and the version gates that have to be cleared before migration can start. We also do rolling version upgrades with inter.broker.protocol.version staging so clients are never forced into a lockstep deploy.
Yes, both are inside the standard contract. Connect worker rebalances, failed tasks, sink connector backpressure, and dead-letter queue design are common ticket sources. So are Schema Registry compatibility failures during rolling producer deploys, where a schema change is accepted by the registry but breaks consumers still running the previous version.
Yes, and the design question comes before the tooling. MirrorMaker 2 and Cluster Linking replicate differently, and neither gives you an RPO by itself — offsets, consumer group state and topic configuration all have to be part of the plan or a failover leaves consumers reprocessing or skipping. We review the replication topology, what actually fails over versus what has to be rebuilt, and the recovery procedure end to end. Active-active, active-passive and stretch clusters each carry different failure behaviour under partition, and the right answer depends on whether your workload can tolerate duplicate delivery.
Kafka is not a database and backing it up like one goes wrong. Durability comes from replication factor, min.insync.replicas and acks together — a replication factor of three with min.insync.replicas of one will lose data on a broker failure regardless of your backup. Beyond that, retention and tiered storage decide what is actually recoverable and for how long, and topic-level overrides routinely drift from the cluster default. Support covers reviewing that configuration against the durability you believe you have, plus the offset and schema state you would need to reconstruct a cluster.
Both. A security review covers SASL mechanism and TLS configuration, ACLs and whether the principals map to what teams actually need, ZooKeeper or KRaft controller exposure, and inter-broker encryption. On monitoring, the signals that predict incidents are under-replicated and offline partitions, ISR shrink rate, request handler idle ratio, consumer lag trend by partition rather than aggregate, and controller election frequency. Alerting on broker liveness alone finds out after users do. We define the thresholds and review what you already collect in Prometheus, Grafana, Datadog or whatever is in place.
Kafka support services are a contract for technical support on a Kafka cluster you run: SLA-backed incident response from Kafka experts, root cause analysis, performance tuning, upgrade planning across the Kafka lifecycle, and reviews that prevent downtime and data loss before they happen. Apache Kafka is a distributed event streaming platform from the Apache Software Foundation, and the project itself offers mailing lists, not a contract. Support covers the brokers and controllers, and in practice also the things around them that fail more often: producers and consumer groups, Kafka Connect, Kafka Streams applications, Schema Registry, and the data pipelines that depend on them. Good support also leaves runbooks behind, so the next incident is shorter.
Kafka 4.0 removed ZooKeeper entirely, so every 4.x cluster runs in KRaft mode, and a 3.x cluster has to be migrated to KRaft on a late 3.x release before it can move to 4.x. Kafka 4.0 also dropped support for the oldest client protocol versions, moved to newer Java requirements, and made the new consumer group rebalance protocol generally available. We support both lines. For 3.x clusters, which the project is phasing out, that means incident response and mitigation now, and a rehearsed KRaft migration and upgrade when you are ready.
They solve different problems. Managed Kafka services such as Confluent Cloud or Amazon MSK run the brokers for you, which removes infrastructure work and introduces a degree of vendor lock-in and a cost that scales with throughput. They do not operate your producers, consumers or stream processing, which is where most incidents start. Independent support keeps the streaming platform under your control, on premises or in your own cloud account, and adds round-the-clock support from engineers who can see the whole path. Many teams use both: a managed service for the brokers, and a support partner for everything that talks to them.
Usually at one of four moments: an audit or customer contract requires a support agreement for production Kafka; the team has no dedicated Kafka SRE and incidents depend on one person; a Kafka 3.x to 4.x upgrade or ZooKeeper to KRaft migration is coming; or the organisation is leaving Confluent or MSK support and wants cover that does not depend on the platform.
For Apache Kafka and the community components, yes: AceMQ supports Confluent Platform deployments directly. Check one thing first. Confluent Platform's enterprise features, such as Control Center and role-based access control, run under Confluent's commercial licence, so dropping the subscription can mean losing those features rather than just changing who answers the phone. We help map exactly which components you use before you decide.
Kafka enterprise support is a paid contract with defined response times for a production Kafka estate, as opposed to community help from mailing lists and forums. Confluent (now part of IBM) provides it for Confluent Platform and Confluent Cloud, AWS covers the Amazon MSK service, and independent providers such as AceMQ support open-source Apache Kafka, MSK and Confluent Platform together. Compare them on which versions are covered, whether clients and Connect are in scope, and who answers a P1. Ours is a 15-minute first response, 24/7, from a named senior engineer.
Start with scope, then response. Check which Kafka versions are covered, including ones the Apache project no longer patches, whether clients, Kafka Connect and Schema Registry are in scope, whether Amazon MSK and Confluent Platform clusters are covered, and who answers a P1 and how fast. A Kafka support provider that follows your estate, not one product, can cover a mixed fleet under one contract. Ours is a 15-minute first response, 24/7, from a named senior engineer.
IBM announced the acquisition on 8 December 2025 and completed it on 17 March 2026. Existing Confluent contracts continue as signed, and renewals are now a conversation with IBM, so many teams are checking whether they need Confluent's platform or only support for Apache Kafka. Apache Kafka itself is unchanged. The options are compared in Confluent alternatives after the IBM acquisition.
Yes. Coverage runs from business hours through to 24/7 with a 15-minute emergency response, and you can move up a coverage level when a workload becomes critical without re-onboarding: the engineers already know your clusters.
Support is an SLA over clusters your team runs: you hold the pager and call us when something breaks. Managed Kafka services means AceMQ runs the clusters on your infrastructure or on AceMQ infrastructure, owning monitoring, patching, upgrades, capacity and on-call. Teams with a platform team that wants to keep ownership choose support; teams that want Kafka to stop being their problem choose managed services.
Yes. AceMQ works on Apache Kafka in two ways: ad hoc engagements for a defined piece of work, such as a health check, an upgrade or an incident, or an annual partner engagement that covers 24/7 support, proactive reviews and named engineers. Many teams start ad hoc and move to an annual partnership once the first engagement is done.
Every AceMQ proposal is tailored to your requirements: your Apache Kafka environment, the SLA you need, the hours of cover and the scope of work. Most contracts run $24,000–72,000 a year, depending on the SLA, the scope and how Apache Kafka is deployed, with aggressive discounts when several technologies share one contract. Request a quote and AceMQ replies within 1 hour.
Let's talk
Reactive cover, proactive reviews, or AceMQ running Apache Kafka for you on your infrastructure or ours. A senior engineer scopes it with you, and quote requests are answered within 1 hour.
Production incident right now?Email an Apache Kafka Architect
Send us a message and we'll follow up within 1 hour — or book a free 30-min consultation directly.
305-204-2607info@acemq.comPrefer to talk now? Call us directly or use the consultation tab to find a time that works.