Directly expose my Kafka brokers to external consumers or use a http-based gateway?

Question

Which one is the best way to expose my Kafka ecosystem to thirdy-party applications that need to consume or publish messages?

1. Use a gateway (http-based) to hide