The DataDome plugin is developed in Lua and integrates smoothly with Kong.
This plugin relies on the DataDome Bot & Fraud Protection Platform to validate if any incoming API request is legitimate or coming from a bot.
Once the plugin is installed, the only requirement is to configure your DataDome server-side key.
How it works
The DataDome plugin will hook into every API request from a client, proxy the request to the DataDome Bot & Fraud Protection Platform to assess for threats in real time using our machine learning solution before allowing the request to be proxied to the upstream service.
How to install
Custom plugins can be installed via LuaRocks. A Lua plugin is distributed in
.rock format, which is
a self-contained package that can be installed locally or from a remote server.
If you used one of the official Kong Gateway installation packages, the LuaRocks utility
should already be installed in your system.
.rock in your LuaRocks tree, that is, the directory in which LuaRocks
installs Lua modules.
Install the DataDome plugin:
luarocks install kong-plugin-datadome
Update your loaded plugins list in Kong Gateway.
datadome to the
plugins field. Make sure the field is not commented out.
plugins = bundled,datadome # Comma-separated list of plugins this node
# should load. By default, only plugins
# bundled in official distributions are
# loaded via the `bundled` keyword.
Restart Kong Gateway:
Using the plugin
First of all, make sure you have your DataDome server-side key. It is available inside your dashboard in the Integrations section.
If you already configured an API, execute the command below after replacing
<YOUR_API> with the name of your API and
<server_side_key> with your DataDome server-side key.
curl -i -X POST http://localhost:8001/services/<YOUR_API>/plugins \
-F "name=datadome" \
- Depending on where you want to enable DataDome, select
- Click on
+ New Plugin
Custom Plugins, select
- Fill the DataDome Server Side Key field
For further information, please check our DataDome Kong documentation page.