Kong DataDome Plugin

Contact 3rd party for support: This plugin is developed, tested, and maintained by DataDome

Support

The DataDome plugin is developed in Lua and integrates smoothly with Kong.

This plugin relies on the DataDome Bot & Fraud Protection Platform to validate if any incoming API request is legitimate or coming from a bot. Once the plugin is installed, the only requirement is to configure your DataDome server-side key.

How it works

The DataDome plugin will hook into every API request from a client, proxy the request to the DataDome Bot & Fraud Protection Platform to assess for threats in real time using our machine learning solution before allowing the request to be proxied to the upstream service.

How to install

Custom plugins can be installed via LuaRocks. A Lua plugin is distributed in .rock format, which is a self-contained package that can be installed locally or from a remote server.

If you used one of the official Kong Gateway installation packages, the LuaRocks utility should already be installed in your system. Install the .rock in your LuaRocks tree, that is, the directory in which LuaRocks installs Lua modules.

Install the DataDome plugin:
```
 luarocks install kong-plugin-datadome
```

Update your loaded plugins list in Kong Gateway.

In your kong.conf, append datadome to the plugins field. Make sure the field is not commented out.

 plugins = bundled,datadome              # Comma-separated list of plugins this node
                                         # should load. By default, only plugins
                                         # bundled in official distributions are
                                         # loaded via the `bundled` keyword.

Restart Kong Gateway:
```
 kong restart
```

Using the plugin

First of all, make sure you have your DataDome server-side key. It is available inside your dashboard in the Integrations section.

Kong Gateway

If you already configured an API, execute the command below after replacing <YOUR_API> with the name of your API and <server_side_key> with your DataDome server-side key.

curl -i -X POST http://localhost:8001/services/<YOUR_API>/plugins \
     -F "name=datadome" \
     -F "config.datadome_server_side_key=<server_side_key>"

Kong Konnect

Depending on where you want to enable DataDome, select Plugins
Click on + New Plugin
On Custom Plugins, select DataDome
Fill the DataDome Server Side Key field
Hit Save

For further information, please check our DataDome Kong documentation page.

Next Kong DataDome Plugin Configuration