What’s New in Redpanda

This topic includes new content added in version 25.3. For a complete list of all product updates, see the Redpanda release notes. See also:

Redpanda v25.3 introduces breaking schema changes for Iceberg topics. If you are using Iceberg topics and want to retain the data in the corresponding Iceberg tables, review Schema Changes and Migration Guide for Iceberg Topics in Redpanda v25.3 before upgrading your cluster, and follow the required migration steps to avoid sending new records to a dead-letter queue table.

Iceberg topics with GCP BigLake

A new REST catalog integration with Google Cloud BigLake allows you to add Redpanda topics as Iceberg tables in your data lakehouse.

See Use Iceberg Catalogs for details on configuring Iceberg REST catalog integrations with Redpanda.

Shadowing

Redpanda v25.3 introduces Shadowing, an enterprise-licensed disaster recovery solution that provides asynchronous, offset-preserving replication between distinct Redpanda clusters. Shadowing enables cross-region data protection by replicating topic data, configurations, consumer group offsets, ACLs, and Schema Registry data with byte-level fidelity.

The shadow cluster operates in read-only mode while continuously receiving updates from the source cluster. During a disaster, you can failover individual topics or an entire shadow link to make resources fully writable for production traffic. See Failover Runbook for emergency procedures.

Connected client monitoring

You can view details about Kafka client connections using rpk or the Admin API ListKafkaConnections endpoint. This allows you to view detailed information about active client connections on a cluster, and identify and troubleshoot problematic clients. For more information, see the connected client details example in the Manage Throughput guide.

New Admin API style

Redpanda v25.3 introduces a new API style for the Admin API, powered by ConnectRPC. New Redpanda features and operations in v25.3 are available as ConnectRPC services, allowing you to use autogenerated Protobuf clients in addition to using HTTP clients such as curl.

Use the new ConnectRPC endpoints with the following v25.3 features:

  • Shadowing

  • Connected client monitoring

Existing Admin API endpoints from versions earlier than 25.3 remain supported, and you can continue to use them as usual. See Manage Redpanda with the Admin API to learn more about Admin API, and the Admin API reference to view the new endpoints.

Schema Registry import mode

Redpanda Schema Registry now supports an import mode that allows you to import existing schemas and retain their current IDs and version numbers. Import mode is useful when migrating from another schema registry.

Starting with this release, import mode must be used when importing schemas. Read-write mode no longer allows specifying a schema ID and version when registering a schema. See Use the Schema Registry API.

Security report

You can now generate a security report for your Redpanda cluster using the /v1/security/report Admin API endpoint. The report provides detailed information about TLS configuration, authentication methods, authorization status, and security alerts across all Redpanda interfaces (Kafka, RPC, Admin, Schema Registry, HTTP Proxy).

Topic identifiers

Redpanda v25.3 implements topic identifiers using 16 byte UUIDs as proposed in KIP-516.

New commands

Redpanda v25.3 introduces the following rpk shadow commands for managing Redpanda shadow links:

In addition, the following commands have been added:

New configuration properties

Redpanda 25.3 introduces the following configuration properties:

Shadowing:

Timestamp validation:

Audit logging:

Object storage:

Iceberg:

TLS:

Other configuration:

Changes to default values

The following configuration properties have new default values in v25.3:

Deprecations

The following configuration properties have been deprecated in v25.3 and will be removed in a future release:

Deprecated features

Redpanda has deprecated support for specific TLSv1.2 and TLSv1.3 cipher suites and now uses more secure defaults. See Deprecated Features for the complete list.