Skip to content
Kong Gateway 2.8 Increases Security and Simplifies API Management.  —Learn More →
Kong Logo | Kong Docs Logo
search
  • We're Hiring!
  • Docs
    • Kong Gateway
    • Konnect Cloud
    • Kong Mesh
    • Plugin Hub
    • decK
    • Kubernetes Ingress Controller
    • Insomnia
    • Kuma

    • Kong Konnect Platform

    • Docs contribution guidelines
  • Plugin Hub
  • Support
  • Community
  • Kong Academy
Request Demo
  • Kong Gateway
  • Konnect Cloud
  • Kong Mesh
  • Plugin Hub
  • decK
  • Kubernetes Ingress Controller
  • Insomnia
  • Kuma

  • Kong Konnect Platform

  • Docs contribution guidelines
    • Using the Konnect Docs
    • Key Concepts and Terms
    • Access a Konnect Account
      • Manage a Konnect Account or Plan
      • Change to a Different Plan
      • Manage Payment Methods and Invoices
      • Manage Users and Roles
      • Set up SSO with Okta
    • Account and Org Deactivation
    • License Management
    • Port and Network Requirements
    • Network Resiliency and Availability
    • Migrate from Kong Gateway to Konnect Cloud
      • Set up a Runtime
      • Configure a Service
      • Implement and Test the Service
    • Manage Konnect Cloud with decK
    • Manage Services
      • Manage Service Documentation
      • Publish a Service to Dev Portal
      • Docker
      • Kubernetes
      • Linux
      • Runtime Parameter Reference
    • Upgrade a Runtime to a New Version
    • Renew Certificates
      • Developer Registration
      • Manage Developer Access
      • Auto Approve Dev and App Registrations
      • Application Overview
      • Create, Edit, and Delete an Application
      • Enable App Registration
      • Disable App Registration
      • Manage Application Registration Requests
      • Manage Application Connections
      • Register an Application with a Service
      • Generate Credentials for an Application
      • Appearance
      • Public Portal
      • Add a Custom Domain
    • Generating Vitals Reports
    • Configure a Plugin on a Service
    • Configure a Plugin on a Route
    • Configure Global or Consumer Plugins
    • Proxy Traffic
      • Konnect API Reference

github-edit-pageEdit this page

report-issueReport an issue

enterprise-switcher-iconSwitch to OSS

On this page
  • Kong plugins in Konnect Cloud
    • Plugin configuration
    • Functionality differences from self-managed Kong Gateway
    • Plugin limitations
  • Custom plugins
Konnect Cloud
  • Kong Konnect Platform
  • Konnect Cloud

Manage Plugins

Any plugins supported in a self-managed hybrid mode deployment are also accessible through ServiceHub or the Shared Config page.

Kong plugins in Konnect Cloud

Plugin configuration

You can configure a plugin in Konnect Cloud by scoping it to an object, or applying it globally.

  • A scoped plugin applies configuration only to a specific service, route, or consumer. You can configure plugins on services and routes through ServiceHub, and on consumers through the Shared Config page.

  • If you want to apply a plugin globally – that is, to all services, routes, and consumers in a cluster – set it up through the Shared Config page.

Functionality differences from self-managed Kong Gateway

Application registration is built into the ServiceHub. Enabling it on a service also enables two plugins in read-only mode: ACL, and one of Key Auth or OpenID Connect. These plugins appear in the service’s plugin list, and you can view their configurations, but you can’t edit or delete them directly.

Plugin limitations

Rate limiting plugins default to the redis strategy, for which you must provide your own Redis server. You can also use local to apply rate limiting per individual data plane.

The following plugins are not available with Konnect Cloud:

  • OAuth2 Authentication
  • OAuth2 Introspection
  • Apache OpenWhisk
  • Vault Auth

See the plugin compatibility chart for a full comparison of plans and network configurations that each plugin supports.

Custom plugins

Currently, there is no way to add a custom plugin directly through the Konnect Cloud application. Contact Kong Support to get them manually added to your organization.

Custom plugins must not have the following:

  • Admin API extensions: No api.lua file
  • Custom plugin database tables: No dao.lua file
  • Custom function validations: No function definitions in schema.lua
  • Code that runs on the control plane in the plugin handler:
    • No init_worker callback
    • No Lua code outside of the top-level functions
  • Third-party library dependencies: No require() calls to modules that are not bundled by default with Kong Konnect

If your plugin meets these requirements and you want to use it in Konnect Cloud, contact Kong Support.

Thank you for your feedback.
Was this page useful?
  • Kong
    THE CLOUD CONNECTIVITY COMPANY

    Kong powers reliable digital connections across APIs, hybrid and multi-cloud environments.

    • Company
    • Customers
    • Events
    • Investors
    • Careers Hiring!
    • Partners
    • Press
    • Contact
  • Products
    • Kong Konnect
    • Kong Gateway
    • Kong Mesh
    • Get Started
    • Pricing
  • Resources
    • eBooks
    • Webinars
    • Briefs
    • Blog
    • API Gateway
    • Microservices
  • Open Source
    • Install Kong Gateway
    • Kong Community
    • Kubernetes Ingress
    • Kuma
    • Insomnia
  • Solutions
    • Decentralize
    • Secure & Govern
    • Create a Dev Platform
    • API Gateway
    • Kubernetes
    • Service Mesh
Star
  • Terms•Privacy
© Kong Inc. 2022