Kong Konnect
Compatibility
Supported browsers
| IE | Edge | Firefox | Chrome | Safari | |
|---|---|---|---|---|---|
| Kong Konnect |
Runtime version compatibility
Note: Currently, the only supported runtime type in Kong Konnect is a Kong Gateway data plane.
| Kong Konnect | First supported patch version | |
|---|---|---|
| Kong Enterprise 3.2.x | 3.2.1.0 | |
| Kong Enterprise 3.1.x | 3.1.0.0 | |
| Kong Enterprise 3.0.x | 3.0.0.0 | |
| Kong Enterprise 2.8.x | 2.8.0.0 | |
| Kong Enterprise 2.7.x | 2.7.0.0 | |
| Kong Enterprise 2.6.x | 2.6.0.0 | |
| Kong Enterprise 2.5.x | 2.5.0.1 | |
| Kong Enterprise 2.4.x or earlier | – |
Plugin compatibility
Each subscription tier gives you access to a subset of plugins:
- Free tier: Open-source Kong plugins
- Plus tier: Open-source and Plus-specific plugins
- Enterprise tier: All Kong plugins
If you’re looking for supported network protocols and entity scopes, see Plugin Compatibility on the Plugin Hub.
Authentication
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| Application Registration |
Application registration is available in Konnect Cloud, but doesn't require this plugin. Learn how to Enable Application Registration in Konnect Cloud. |
||||
| Basic Auth | -- | ||||
| HMAC Auth | -- | ||||
| JWT | -- | ||||
| JWT Signer | -- | ||||
| JWE Decrypt | -- | ||||
| Key Auth | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | ||||
| Key Auth Encrypted | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | ||||
| LDAP Auth | -- | ||||
| LDAP Auth Advanced | -- | ||||
| Mutual TLS | -- | ||||
| OAuth 2 | This plugin can't be used in Konnect, hybrid, or DB-less modes. It needs to generate and delete tokens, and commit those changes to a database on the same node. | ||||
| OAuth 2 Introspection | -- | ||||
| OpenID Connect | -- | ||||
| SAML | -- | ||||
| Session | -- | ||||
| Vault Auth | -- |
Security
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| Acme | -- | ||||
| Bot Detection | -- | ||||
| CORS | -- | ||||
| IP Restriction | -- | ||||
| OPA | -- | ||||
| TLS Handshake Modifier | -- | ||||
| TLS Metadata Headers | -- |
Traffic Control
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| ACL | -- | ||||
| Canary | -- | ||||
| Forward Proxy | -- | ||||
| GraphQL Proxy Caching Advanced | -- | ||||
| GraphQL Rate Limiting Advanced |
In DB-less and hybrid modes, the cluster config strategy
is not supported. Use redis instead.
|
||||
| Mocking | -- | ||||
| OAS Validation | -- | ||||
| Proxy Caching | -- | ||||
| Proxy Caching Advanced | -- | ||||
| Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
||||
| Rate Limiting Advanced |
In Konnect, DB-less, and hybrid modes, the cluster config strategy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
||||
| Request Size Limiting | -- | ||||
| Request Termination | -- | ||||
| Request Validator | -- | ||||
| Response Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
||||
| Route By Header | -- | ||||
| Upstream Timeout | -- | ||||
| WebSocket Size Limit | -- | ||||
| WebSocket Validator | -- | ||||
| XML Threat Protection | -- |
Serverless
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| AWS Lambda | -- | ||||
| Azure Functions | -- | ||||
| Serverless Functions | -- | ||||
| OpenWhisk |
Not bundled with Kong Gateway.
Installed as a LuaRocks package. |
Analytics and Monitoring
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| AppDynamics | -- | ||||
| Datadog | -- | ||||
| OpenTelemetry | -- | ||||
| Prometheus | -- | ||||
| Zipkin | -- |
Transformations
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| Correlation ID | -- | ||||
| DeGraphQL | -- | ||||
| Exit Transformer | -- | ||||
| gRPC Gateway | -- | ||||
| gRPC Web | -- | ||||
| jq | -- | ||||
| Kafka Upstream | -- | ||||
| Request Transformer | -- | ||||
| Request Transformer Advanced | -- | ||||
| Response Transformer | -- | ||||
| Response Transformer Advanced | -- | ||||
| Route Transformer Advanced | -- |
Logging
| Plugin | Free | Plus | Enterprise | Konnect support | Notes |
|---|---|---|---|---|---|
| File Log | -- | ||||
| HTTP Log | -- | ||||
| Kafka Log | -- | ||||
| Loggly | -- | ||||
| StatsD | -- | ||||
| StatsD Advanced | -- | ||||
| Syslog | -- | ||||
| TCP Log | -- | ||||
| UDP Log | -- |
Deployment
Deployment plugins are not bundled with any version of Konnect, and are simply tools to help you deploy Kong Gateway in various environments.