Compatibility
Supported browsers
IE | Edge | Firefox | Chrome | Safari | |
---|---|---|---|---|---|
Kong Konnect |
Kong Gateway version compatibility
Kong Konnect | First supported patch version | |
---|---|---|
Kong Enterprise 3.3.x | 3.3.0.0 | |
Kong Enterprise 3.2.x | 3.2.1.0 | |
Kong Enterprise 3.1.x | 3.1.0.0 | |
Kong Enterprise 3.0.x | 3.0.0.0 | |
Kong Enterprise 2.8.x | 2.8.0.0 | |
Kong Enterprise 2.7.x | 2.7.0.0 | |
Kong Enterprise 2.6.x | 2.6.0.0 | |
Kong Enterprise 2.5.x | 2.5.0.1 | |
Kong Enterprise 2.4.x or earlier | – |
Kong Mesh compatibility
To use Mesh Manager, you must also use a compatible version of Kong Mesh.
Kong Konnect | First supported patch version | |
---|---|---|
Kong Mesh 2.4.x | 2.4.1 | |
Kong Mesh 2.3.x or earlier | - |
Plugin compatibility
Each subscription tier gives you access to a subset of plugins:
- Free tier
- Paid tier
- Premium tier
If you’re looking for supported network protocols and entity scopes, see Plugin Compatibility on the Plugin Hub.
Authentication
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
Portal Application Registration | Not Applicable | Not Applicable | Not Applicable |
Application registration is available in Konnect, but doesn't require this plugin. Learn how to Enable Application Registration in Konnect. |
Basic Authentication | -- | |||
HMAC Auth | -- | |||
JWE Decrypt | -- | |||
JWT | -- | |||
Kong JWT Signer | Not Applicable | Not Applicable | Not Applicable | -- |
Key Auth | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | |||
Key Authentication - Encrypted | Not Applicable | Not Applicable | Not Applicable | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. |
LDAP Authentication | -- | |||
LDAP Authentication Advanced | -- | |||
Mutual TLS Authentication | -- | |||
OAuth 2.0 Authentication | Not Applicable | Not Applicable | Not Applicable | This plugin can't be used in Konnect, hybrid, or DB-less modes. It needs to generate and delete tokens, and commit those changes to a database on the same node. |
OAuth 2.0 Introspection | -- | |||
OpenID Connect | -- | |||
SAML | -- | |||
Session | -- | |||
Vault Authentication | Not Applicable | Not Applicable | Not Applicable | -- |
Security
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
ACME | -- | |||
Bot Detection | -- | |||
CORS | -- | |||
IP Restriction | -- | |||
OPA | -- | |||
TLS Handshake Modifier | Not Applicable | Not Applicable | Not Applicable | -- |
TLS Metadata Headers | Not Applicable | Not Applicable | Not Applicable | -- |
Traffic Control
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
ACL | -- | |||
Canary Release | -- | |||
Forward Proxy Advanced | -- | |||
GraphQL Proxy Caching Advanced | -- | |||
GraphQL Rate Limiting Advanced |
In DB-less, hybrid mode, and Konnect, the cluster config strategy
is not supported. Use redis instead.
|
|||
Mocking | -- | |||
OAS Validation | -- | |||
Proxy Cache | -- | |||
Proxy Caching Advanced | -- | |||
Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
|||
Rate Limiting Advanced |
In Konnect, DB-less, and hybrid modes, the cluster config strategy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
|||
Request Size Limiting | -- | |||
Request Termination | -- | |||
Request Validator | -- | |||
Response Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
|||
Route By Header | -- | |||
Upstream Timeout | -- | |||
WebSocket Size Limit | -- | |||
WebSocket Validator | -- | |||
XML Threat Protection | -- |
Serverless
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
AWS Lambda | -- | |||
Azure Functions | -- | |||
Apache OpenWhisk | Not Applicable | Not Applicable | Not Applicable |
Not bundled with Kong Gateway.
Installed as a LuaRocks package. |
Kong Functions (Post-Plugin) | ||||
Kong Functions (Pre-Plugins) |
Analytics & Monitoring
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
AppDynamics | ||||
Datadog | -- | |||
OpenTelemetry | -- | |||
Prometheus | -- | |||
Zipkin | -- |
Transformations
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
Correlation ID | -- | |||
DeGraphQL | -- | |||
Exit Transformer | -- | |||
gRPC-gateway | -- | |||
gRPC-Web | -- | |||
jq | -- | |||
Kafka Upstream | -- | |||
Request Transformer | -- | |||
Request Transformer Advanced | -- | |||
Response Transformer | -- | |||
Response Transformer Advanced | -- | |||
Route Transformer Advanced | -- |
Logging
Plugin | Free | Paid | Premium | Notes |
---|---|---|---|---|
File Log | -- | |||
HTTP Log | -- | |||
Kafka Log | -- | |||
Loggly | -- | |||
StatsD | -- | |||
StatsD Advanced | -- | |||
Syslog | -- | |||
TCP Log | -- | |||
UDP Log | -- |