Kong Konnect
Compatibility
Supported browsers
IE | Edge | Firefox | Chrome | Safari | |
---|---|---|---|---|---|
Kong Konnect |
Runtime version compatibility
Note: Currently, the only supported runtime type in Kong Konnect is a Kong Gateway data plane.
Kong Konnect | First supported patch version | |
---|---|---|
Kong Enterprise 3.2.x | 3.2.1.0 | |
Kong Enterprise 3.1.x | 3.1.0.0 | |
Kong Enterprise 3.0.x | 3.0.0.0 | |
Kong Enterprise 2.8.x | 2.8.0.0 | |
Kong Enterprise 2.7.x | 2.7.0.0 | |
Kong Enterprise 2.6.x | 2.6.0.0 | |
Kong Enterprise 2.5.x | 2.5.0.1 | |
Kong Enterprise 2.4.x or earlier | – |
Plugin compatibility
Each subscription tier gives you access to a subset of plugins:
- Free tier: Open-source Kong plugins
- Plus tier: Open-source and Plus-specific plugins
- Enterprise tier: All Kong plugins
If you’re looking for supported network protocols and entity scopes, see Plugin Compatibility on the Plugin Hub.
Authentication
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
Application Registration |
Application registration is available in Konnect Cloud, but doesn't require this plugin. Learn how to Enable Application Registration in Konnect Cloud. |
||||
Basic Auth | -- | ||||
HMAC Auth | -- | ||||
JWT | -- | ||||
JWT Signer | -- | ||||
JWE Decrypt | -- | ||||
Key Auth | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | ||||
Key Auth Encrypted | The time-to-live (ttl) does not work in Konnect or hybrid mode. This setting determines the length of time a credential remains valid. | ||||
LDAP Auth | -- | ||||
LDAP Auth Advanced | -- | ||||
Mutual TLS | -- | ||||
OAuth 2 | This plugin can't be used in Konnect, hybrid, or DB-less modes. It needs to generate and delete tokens, and commit those changes to a database on the same node. | ||||
OAuth 2 Introspection | -- | ||||
OpenID Connect | -- | ||||
SAML | -- | ||||
Session | -- | ||||
Vault Auth | -- |
Security
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
Acme | -- | ||||
Bot Detection | -- | ||||
CORS | -- | ||||
IP Restriction | -- | ||||
OPA | -- | ||||
TLS Handshake Modifier | -- | ||||
TLS Metadata Headers | -- |
Traffic Control
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
ACL | -- | ||||
Canary | -- | ||||
Forward Proxy | -- | ||||
GraphQL Proxy Caching Advanced | -- | ||||
GraphQL Rate Limiting Advanced |
In DB-less and hybrid modes, the cluster config strategy
is not supported. Use redis instead.
|
||||
Mocking | -- | ||||
OAS Validation | -- | ||||
Proxy Caching | -- | ||||
Proxy Caching Advanced | -- | ||||
Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
||||
Rate Limiting Advanced |
In Konnect, DB-less, and hybrid modes, the cluster config strategy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
||||
Request Size Limiting | -- | ||||
Request Termination | -- | ||||
Request Validator | -- | ||||
Response Rate Limiting |
In Konnect, DB-less, and hybrid modes, the cluster config policy
is not supported.
For DB-less mode, use one of redis or local ;
for Konnect and hybrid mode, use redis , or local for data
planes only.
|
||||
Route By Header | -- | ||||
Upstream Timeout | -- | ||||
WebSocket Size Limit | -- | ||||
WebSocket Validator | -- | ||||
XML Threat Protection | -- |
Serverless
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
AWS Lambda | -- | ||||
Azure Functions | -- | ||||
Serverless Functions | -- | ||||
OpenWhisk |
Not bundled with Kong Gateway.
Installed as a LuaRocks package. |
Analytics and Monitoring
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
AppDynamics | -- | ||||
Datadog | -- | ||||
OpenTelemetry | -- | ||||
Prometheus | -- | ||||
Zipkin | -- |
Transformations
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
Correlation ID | -- | ||||
DeGraphQL | -- | ||||
Exit Transformer | -- | ||||
gRPC Gateway | -- | ||||
gRPC Web | -- | ||||
jq | -- | ||||
Kafka Upstream | -- | ||||
Request Transformer | -- | ||||
Request Transformer Advanced | -- | ||||
Response Transformer | -- | ||||
Response Transformer Advanced | -- | ||||
Route Transformer Advanced | -- |
Logging
Plugin | Free | Plus | Enterprise | Konnect support | Notes |
---|---|---|---|---|---|
File Log | -- | ||||
HTTP Log | -- | ||||
Kafka Log | -- | ||||
Loggly | -- | ||||
StatsD | -- | ||||
StatsD Advanced | -- | ||||
Syslog | -- | ||||
TCP Log | -- | ||||
UDP Log | -- |
Deployment
Deployment plugins are not bundled with any version of Konnect, and are simply tools to help you deploy Kong Gateway in various environments.