Edit this page
Report an issueCompatibility
Supported browsers
| IE | Edge | Firefox | Chrome | Safari | |
|---|---|---|---|---|---|
| Kong Konnect |
Kong Gateway version compatibility
| Kong Konnect | First supported patch version | |
|---|---|---|
| Kong Enterprise 3.3.x | 3.3.0.0 | |
| Kong Enterprise 3.2.x | 3.2.1.0 | |
| Kong Enterprise 3.1.x | 3.1.0.0 | |
| Kong Enterprise 3.0.x | 3.0.0.0 | |
| Kong Enterprise 2.8.x | 2.8.0.0 | |
| Kong Enterprise 2.7.x | 2.7.0.0 | |
| Kong Enterprise 2.6.x | 2.6.0.0 | |
| Kong Enterprise 2.5.x | 2.5.0.1 | |
| Kong Enterprise 2.4.x or earlier | – |
Kong Mesh compatibility
To use Mesh Manager, you must also use a compatible version of Kong Mesh.
| Kong Konnect | First supported patch version | |
|---|---|---|
| Kong Mesh 2.4.x | 2.4.1 | |
| Kong Mesh 2.3.x or earlier | - |
Plugin compatibility
Each subscription tier gives you access to a subset of plugins:
- Free tier
- Paid tier
- Premium tier
If you’re looking for supported network protocols and entity scopes, see Plugin Compatibility on the Plugin Hub.
Authentication
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| Portal Application Registration | Not Applicable | Not Applicable | Not Applicable |
Application registration is available in Konnect, but doesn't require this plugin. Learn how to Enable Application Registration in Konnect. |
| Basic Authentication | -- | |||
| HMAC Auth | -- | |||
| JWE Decrypt | -- | |||
| JWT | -- | |||
| Kong JWT Signer | Not Applicable | Not Applicable | Not Applicable | -- |
| Key Auth | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | |||
| Key Authentication - Encrypted | Not Applicable | Not Applicable | Not Applicable | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. |
| LDAP Authentication | -- | |||
| LDAP Authentication Advanced | -- | |||
| Mutual TLS Authentication | -- | |||
| OAuth 2.0 Authentication | Not Applicable | Not Applicable | Not Applicable | This plugin can't be used in Konnect, hybrid, or DB-less modes. It needs to generate and delete tokens, and commit those changes to a database on the same node. |
| OAuth 2.0 Introspection | -- | |||
| OpenID Connect | -- | |||
| SAML | -- | |||
| Session | -- | |||
| Vault Authentication | Not Applicable | Not Applicable | Not Applicable | -- |
Security
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| ACME | -- | |||
| Bot Detection | -- | |||
| CORS | -- | |||
| IP Restriction | -- | |||
| OPA | -- | |||
| TLS Handshake Modifier | Not Applicable | Not Applicable | Not Applicable | -- |
| TLS Metadata Headers | Not Applicable | Not Applicable | Not Applicable | -- |
Traffic Control
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| ACL | -- | |||
| Canary Release | -- | |||
| Forward Proxy Advanced | -- | |||
| GraphQL Proxy Caching Advanced | -- | |||
| GraphQL Rate Limiting Advanced |
In DB-less, hybrid mode, and Konnect, the cluster config strategy
is not supported. Use redis instead.
|
|||
| Mocking | -- | |||
| OAS Validation | -- | |||
| Proxy Cache | -- | |||
| Proxy Caching Advanced | -- | |||
| Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
|||
| Rate Limiting Advanced |
In Konnect, DB-less, and hybrid modes, the cluster config strategy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
|||
| Request Size Limiting | -- | |||
| Request Termination | -- | |||
| Request Validator | -- | |||
| Response Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local;
for Konnect and hybrid mode, use redis, or local for data
planes only.
|
|||
| Route By Header | -- | |||
| Upstream Timeout | -- | |||
| WebSocket Size Limit | -- | |||
| WebSocket Validator | -- | |||
| XML Threat Protection | -- |
Serverless
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| AWS Lambda | -- | |||
| Azure Functions | -- | |||
| Apache OpenWhisk | Not Applicable | Not Applicable | Not Applicable |
Not bundled with Kong Gateway.
Installed as a LuaRocks package. |
| Kong Functions (Post-Plugin) | ||||
| Kong Functions (Pre-Plugins) |
Analytics & Monitoring
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| AppDynamics | ||||
| Datadog | -- | |||
| OpenTelemetry | -- | |||
| Prometheus | -- | |||
| Zipkin | -- |
Transformations
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| Correlation ID | -- | |||
| DeGraphQL | -- | |||
| Exit Transformer | -- | |||
| gRPC-gateway | -- | |||
| gRPC-Web | -- | |||
| jq | -- | |||
| Kafka Upstream | -- | |||
| Request Transformer | -- | |||
| Request Transformer Advanced | -- | |||
| Response Transformer | -- | |||
| Response Transformer Advanced | -- | |||
| Route Transformer Advanced | -- |
Logging
| Plugin | Free | Paid | Premium | Notes |
|---|---|---|---|---|
| File Log | -- | |||
| HTTP Log | -- | |||
| Kafka Log | -- | |||
| Loggly | -- | |||
| StatsD | -- | |||
| StatsD Advanced | -- | |||
| Syslog | -- | |||
| TCP Log | -- | |||
| UDP Log | -- |
