I am struggling to determine the best way to failover a passive cluster on the end of a cluster link that has consumers to the active cluster (where the producer send there messages) because Confluent does not preserve the offsets for the downstream clusters. The customer states the passive cluster must support consumers for geo-replication reasons. Having the consumers keep track of their own offsets is not an option the customer allows. Has anyone come across any technique or open source software that would maintain these offsets (reading them from the __consumers_offset topic), storing them somewhere and allow them to be set by the operations teams before the consumers on the passive cluster are failed over to the active cluster?