Kong Plugin Hub | Kong Docs

Authentication

Portal Application Registration

Allow portal developers to register applications against Services

Support by:

Basic Authentication

Add Basic Authentication to your Services

Support by:

HMAC Auth

Add HMAC Authentication to your Services

Support by:

JWE Decrypt

Decrypt a JWE token in a request

Support by:

JWT

Verify and authenticate JSON Web Tokens

Support by:

Kong JWT Signer

Verify and sign one or two tokens in a request

Support by:

Key Auth

Add key authentication to your Services

Support by:

Key Authentication - Encrypted

Add key authentication to your services

Support by:

LDAP Authentication

Integrate Kong with an LDAP server

Support by:

LDAP Authentication Advanced

Secure Kong clusters, Routes, and Services with username and password protection

Support by:

Mutual TLS Authentication

Secure routes and services with client certificate and mutual TLS authentication

Support by:

OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your services

Support by:

OAuth 2.0 Introspection

Integrate Kong with a third-party OAuth 2.0 Authorization Server

Support by:

OpenID Connect

Integrate Kong with a third-party OpenID Connect provider

Support by:

SAML

Provides SAML v2.0 authentication and authorization between a Service Provider (Kong) and an Identity Provider

Support by:

Session

Support sessions for Kong Authentication Plugins.

Support by:

Vault Authentication

Add Vault authentication to your Services

Support by:

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway

Support by:

Okta

Security

ACME

Let's Encrypt and ACMEv2 integration with Kong

Support by:

Bot Detection

Detect and block bots or custom clients

Support by:

CORS

Allow developers to make requests from the browser

Support by:

IP Restriction

Allow or deny IPs that can make requests to your Services

Support by:

OPA

Authorize requests against Open Policy Agent

Support by:

TLS Handshake Modifier

Requests a client to present its client certificate

Support by:

TLS Metadata Headers

Proxies TLS client certificate metadata to upstream services via HTTP headers

Support by:

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Support by:

Imperva

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Support by:

Optum

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Support by:

Optum

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Support by:

Salt Security

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs

Support by:

Wallarm

Traffic Control

ACL

Control which Consumers can access Services

Support by:

Canary Release

Slowly roll out software changes to a subset of users

Support by:

Forward Proxy Advanced

Allows Kong to connect to intermediary transparent HTTP proxies

Support by:

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

GraphQL Rate Limiting Advanced

Provide rate limiting for GraphQL queries

Support by:

Mocking

Provide mock endpoints to test your APIs against your services

Support by:

OAS Validation

Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification

Support by:

Proxy Cache

Cache and serve commonly requested responses in Kong

Support by:

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

Rate Limiting

Rate-limit how many HTTP requests can be made in a period of time

Support by:

Rate Limiting Advanced

Upgrades Kong Rate Limiting with more flexibility and higher performance

Support by:

Request Size Limiting

Block requests with bodies greater than a specified size

Support by:

Request Termination

Terminates all requests with a specific response

Support by:

Request Validator

Validates requests before they reach the Upstream service

Support by:

Response Rate Limiting

Rate-limiting based on a custom response header value

Support by:

Route By Header

Route request based on request headers

Support by:

Upstream Timeout

Set timeouts on routes and override service-level timeouts

Support by:

WebSocket Size Limit

Block incoming WebSocket messages greater than a specified size

Support by:

WebSocket Validator

Validate WebSocket messages before they are proxied

Support by:

XML Threat Protection

Apply structural and size checks on XML payloads

Support by:

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Support by:

Optum

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Support by:

Optum

Serverless

AWS Lambda

Invoke and manage AWS Lambda functions from Kong

Support by:

Azure Functions

Invoke and manage Azure functions from Kong

Support by:

Apache OpenWhisk

Invoke and manage OpenWhisk actions from Kong

Support by:

Serverless Functions

Dynamically run Lua code from Kong

Support by:

AWS Request Signing

Sign requests with AWS SIGV4 and temp credentials for secure use of AWS Lambdas in Kong.

Support by:

The LEGO Group

Analytics & Monitoring

AppDynamics

Integrate Kong with the AppDynamics APM Platform

Support by:

Datadog

Visualize metrics on Datadog

Support by:

OpenTelemetry

Propagate spans and report space to a backend server through OTLP protocol.

Support by:

Prometheus

Expose metrics related to Kong and proxied upstream services in Prometheus exposition format

Support by:

Zipkin

Propagate Zipkin spans and report space to a Zipkin server

Support by:

Amberflo.io API Metering

API usage metering and usage-based billing.

Support by:

Amberflo.io Inc.

Moesif API Analytics and Monetization

Powerful API analytics and tools to activate, understand, and monetize customers

Support by:

Moesif

Transformations

Correlation ID

Correlate requests and responses using a unique ID

Support by:

DeGraphQL

Transform a GraphQL upstream into a REST API

Support by:

Exit Transformer

Customize Kong exit responses sent downstream

Support by:

gRPC-gateway

Access gRPC services through HTTP REST

Support by:

gRPC-Web

Allow browser clients to call gRPC services

Support by:

Transform JSON objects included in API requests or responses using jq programs.

Support by:

Kafka Upstream

Transform requests into Kafka messages in a Kafka topic.

Support by:

Request Transformer

Use regular expressions, variables, and templates to transform requests

Support by:

Request Transformer Advanced

Use powerful regular expressions, variables, and templates to transform API requests

Support by:

Response Transformer

Modify the upstream response before returning it to the client

Support by:

Response Transformer Advanced

Modify the upstream response before returning it to the client

Support by:

Route Transformer Advanced

Transform routing by changing the upstream server, port, or path

Support by:

Logging

File Log

Append request and response data to a log file

Support by:

HTTP Log

Send request and response logs to an HTTP server

Support by:

Kafka Log

Publish logs to a Kafka topic

Support by:

Loggly

Send request and response logs to Loggly

Support by:

StatsD

Send metrics to StatsD

Support by:

StatsD Advanced

Send metrics to StatsD with more flexible options

Support by:

Syslog

Send request and response logs to Syslog

Support by:

TCP Log

Send request and response logs to a TCP server

Support by:

UDP Log

Send request and response logs to a UDP server

Support by:

Amberflo.io API Metering

API usage metering and usage-based billing.

Support by:

Amberflo.io Inc.

Moesif API Analytics and Monetization

Powerful API analytics and tools to activate, understand, and monetize customers

Support by:

Moesif

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Support by:

Optum

Welcome to Kong Plugin Hub

Extend Kong Gateway and Kong Konnect with powerful plugins and easy integrations

Plugin Overview | Compatibility | License tiers

Authentication

Security

Traffic Control

Serverless

Analytics & Monitoring

Transformations

Logging