Kong Plugin Hub

Extend Kong Gateway and Kong Konnect with powerful plugins and easy integrations
Plugins Overview Custom Plugin Development

AI

AI AWS Guardrails

Use AWS Guardrails to validate requests and/or responses in the AI Proxy plugin before forwarding them between clients and upstream LLMs.

AI Azure Content Safety

Use Azure AI Content Safety to check and audit AI Proxy plugin messages before proxying them to an upstream LLM

AI Prompt Compressor

Compress prompts before they are sent to LLMs to reduce costs, and improve latency

AI Prompt Decorator

Prepend or append an array of llm/v1/chat messages to a user’s chat history

AI Prompt Guard

Check llm/v1/chat or llm/v1/completions requests against a list of allowed or denied expressions

AI Prompt Template

Provide fill-in-the-blank AI prompts to users

AI Proxy

The AI Proxy plugin lets you transform and proxy requests to a number of AI providers and models.

AI Proxy Advanced

The AI Proxy Advanced plugin lets you transform and proxy requests to multiple AI providers and models at the same time. This lets you set up load balancing between targets.

AI RAG Injector

Create RAG pipelines by automatically injecting content from a vector database

AI Rate Limiting Advanced

Provides rate limiting for the providers used by any AI plugins.

AI Request Transformer

Use an LLM service to transform a client request body prior to proxying the request to the upstream server

AI Response Transformer

Use an LLM service to transform the upstream HTTP(S) prior to forwarding it to the client

AI Sanitizer

Protect sensitive information in client request bodies before they reach upstream services

AI Semantic Cache

Enhance performance for AI providers by caching LLM responses semantically

AI Semantic Prompt Guard

Semantically and intelligently create allow and deny lists of topics that can be requested across every LLM.

Traffic Control

ACL

Control which Consumers can access Services and Routes

Canary Release

Slowly roll out software changes to a subset of users

Confluent Consume

Consume messages from Confluent Cloud Kafka topics and make them available through HTTP endpoints

Premium Partner

Forward Proxy Advanced

Allows Kong Gateway to connect to intermediary transparent HTTP proxies

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong Gateway

GraphQL Rate Limiting Advanced

Provides rate limiting for GraphQL queries

Kafka Consume

Consume messages from Kafka topics and make them available through HTTP endpoints

Mocking

Provide mock endpoints to test your APIs against your Services

OAS Validation

Validate HTTP requests and responses based on an OpenAPI 3.0 or Swagger API Specification

Proxy Cache

Cache and serve commonly requested responses in Kong

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong, in-memory or using Redis

Rate Limiting

You can use the Rate Limiting plugin to limit how many HTTP requests can be made in a given period of seconds, minutes, hours, days, months, or years.

Rate Limiting Advanced

Enhanced rate limiting capabilities such as sliding window support, Redis Sentinel support, and increased performance

Redirect

Redirect incoming requests to a new URL

Request Size Limiting

Block requests with bodies greater than a specified size

Request Termination

Terminates all requests with a specific response

Request Validator

Validates requests before they reach the upstream service

Response Rate Limiting

Rate limit based on a custom response header value.

Route By Header

Route requests based on specified request headers

Service Protection

Prevent abuse and protect services with absolute limits on the number of requests reaching the service

Standard Webhooks

Validate that incoming webhooks adhere to the Standard Webhooks specification

Upstream Timeout

Set custom timeouts on connections to upstream services to override Gateway Service-level timeouts.

WebSocket Size Limit

Block incoming WebSocket messages greater than a specified size

WebSocket Validator

Validate WebSocket messages before they are proxied

XML Threat Protection

Apply structural and size checks on XML payloads

3rd Party Plugins

Amberflo.io API Metering

API usage metering and usage-based billing

Third Party

AppSentinels

AppSentinels plugin for API security

Third Party

AWS Request Signing

Sign requests with AWS SIGV4 and temp credentials for secure use of AWS Lambdas in Kong

Third Party

DataDome

Detect and mitigate attacks on mobile apps, websites, and APIs with DataDome bot and online fraud protection

Third Party

Imperva API Security

Integrate Kong Gateway with Imperva API Security to discover, monitor, and protect APIs

Third Party

Impart Security

Integrate Impart Security’s WAF and API security protection platform with Kong Gateway.

Third Party

Inigo GraphQL

Integrate Kong API Gateway with Inigo GraphQL Observability and Security

Third Party

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Third Party

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Third Party

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Third Party

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Third Party

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Third Party

Moesif API Monetization and Analytics

Powerful API analytics and usage-based billing to monetize APIs

Third Party

Noname Security Kong Traffic Source

Noname Security machine learning & prevention blocking for Kong Gateway discovery

Third Party

Palo Alto Networks API Security

Enhance your API security by integrating your Kong Gateway with Cortex API Security

Third Party

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Third Party

Traceable.ai

API security with inline request blocking and data capture

Premium PartnerThird Party

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs

Third Party

Did this doc help?

Something wrong?
Report an Issue | Edit this Page

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!
Contribute

Still need help

Ask in our Forum
Contact Support