Skip to content
Kong Logo | Kong Docs Logo
search
  • We're Hiring!
  • Docs
    • Kong Gateway
    • Kong Konnect
    • Kong Mesh
    • Plugin Hub
    • decK
    • Kubernetes Ingress Controller
    • Insomnia
    • Kuma

    • Docs contribution guidelines
  • Plugin Hub
  • Support
  • Community
  • Kong Academy
Get a Demo Start Free Trial
  • Kong Gateway
  • Kong Konnect
  • Kong Mesh
  • Plugin Hub
  • decK
  • Kubernetes Ingress Controller
  • Insomnia
  • Kuma

  • Docs contribution guidelines
    • Overview of Konnect
    • Architecture
    • Network Resiliency and Availability
    • Port and Network Requirements
    • Compatibility
    • Stages of Software Availability
    • Release Notes
      • Control Plane Upgrades FAQ
      • Supported Installation Options
    • Overview
    • Access a Konnect Account
    • Set up a Runtime
    • Configure a Service
    • Implement and Test the Service
      • Publish and Consume Services
      • Register Applications
    • Import Kong Gateway Entities into Konnect
    • Overview
      • Overview
      • Upgrade a Runtime Instance
      • Verify a Runtime Instance
      • Renew Data Plane Certificates
      • Runtime Parameter Reference
      • Overview
      • Create Consumer Groups
        • Overview
        • Set Up and Use a Vault in Konnect
      • Manage Runtime Configuration using decK
    • Backup and Restore
    • Version Compatibility
    • Troubleshooting
    • Overview
    • Manage Service Documentation
      • Overview
      • Configure a Plugin on a Service
      • Configure a Plugin on a Route
    • Overview
    • Access the Dev Portal
    • Sign Up for a Dev Portal Account
      • Manage Developer Access
      • Manage Application Registration Requests
      • Manage Application Connections
      • Auto Approve Dev and App Registrations
      • Azure OIDC
      • Application Overview
      • Enable and Disable App Registration
        • Overview
        • Okta
        • Curity
        • Auth0
      • Create, Edit, and Delete an Application
      • Register an Application with a Service
      • Generate Credentials for an Application
    • Customize Dev Portal
    • Troubleshoot
    • Introduction to Analytics
    • Analyze Services and Routes
    • Reports Use Cases
    • Reports Reference
    • Troubleshoot
      • Manage a Konnect Account or Plan
      • Change to a Different Plan
      • Manage Payment Methods and Invoices
      • Overview
        • Overview
        • Manage Teams
        • Teams Reference
        • Roles Reference
      • Manage Users
      • Manage System Accounts
      • Set up SSO with OIDC
      • Set up SSO with Okta
      • Login Sessions Reference
    • Account and Org Deactivation
    • Troubleshoot
    • Overview
      • API Documentation
      • Identity Integration Guide
      • API Documentation
      • API Documentation
      • Portal RBAC Guide
      • Overview
      • Nodes
      • Data Plane Certificiates
        • Services
        • Routes
        • Consumers
        • Plugins
        • Upstreams
        • Certificates
        • CA Certificates
        • SNIs
        • Targets
        • Vaults
      • API Spec
      • Filtering
    • Labels
    • Plugin Ordering Reference

github-edit-pageEdit this page

report-issueReport an issue

enterprise-switcher-iconSwitch to OSS

On this page
  • Kong plugins in Kong Konnect
    • Plugin configuration
    • Application registration
    • Plugin limitations
  • Custom plugins
Kong Konnect
  • Home
  • Kong Konnect
  • Service Hub
  • Manage Plugins

Manage Plugins

Plugins lets you extend Konnect functionality. You can find a full list of all Kong plugins on the Plugin Hub.

Kong plugins in Kong Konnect

Plugin configuration

Manage Konnect plugins through the Service Hub or the Runtime Manager.

You can scope a plugin to an object, or apply it globally.

  • A scoped plugin applies configuration only to a specific service, route, or consumer. You can configure plugins on services and routes through Service Hub, and on consumers through the Runtime Manager.

  • If you want to apply a plugin globally – that is, to all services, routes, and consumers in a runtime group, using the Runtime Manager.

Application registration

Application registration is built into the Service Hub. Enabling it on a service also enables two plugins in read-only mode: ACL, and one of Key Auth or OpenID Connect. These plugins appear in the service’s plugin list, and you can view their configurations, but you can’t edit or delete them directly.

Plugin limitations

Rate limiting plugins default to the redis strategy, for which you must provide your own Redis server. You can also use local to apply rate limiting per individual data plane.

The following plugins are not available with Kong Konnect:

  • OAuth2 Authentication
  • Apache OpenWhisk
  • Vault Auth
  • DeGraphQL
  • GraphQL Rate Limiting Advanced
  • Key Authentication Encrypted

See the plugin compatibility chart for a full comparison of plans and network configurations that each plugin supports.

Custom plugins

Kong Konnect supports the use of custom plugins. You can write new custom plugins using this template as a guide. Every custom plugin must meet the following requirements:

  • Admin API extensions must not contain an api.lua file.
  • Custom plugin database tables must not contain a dao.lua file.
  • Custom validation functions must be written in Lua and be self-contained within the schema.
  • The schema.lua file must not contain any require() statements.
  • Plugins that require third-party libraries must reference them in the handler.lua file.

If your plugin meets these requirements and you want to use it in Kong Konnect, contact Kong Support.

Custom plugins can’t be added directly through the Kong Konnect application.

Thank you for your feedback.
Was this page useful?
  • Kong
    THE CLOUD CONNECTIVITY COMPANY

    Kong powers reliable digital connections across APIs, hybrid and multi-cloud environments.

    • Company
    • Customers
    • Events
    • Investors
    • Careers Hiring!
    • Partners
    • Press
    • Contact
  • Products
    • Kong Konnect
    • Kong Gateway
    • Kong Mesh
    • Get Started
    • Pricing
  • Resources
    • eBooks
    • Webinars
    • Briefs
    • Blog
    • API Gateway
    • Microservices
  • Open Source
    • Install Kong Gateway
    • Kong Community
    • Kubernetes Ingress
    • Kuma
    • Insomnia
  • Solutions
    • Decentralize
    • Secure & Govern
    • Create a Dev Platform
    • API Gateway
    • Kubernetes
    • Service Mesh
Star
  • Terms•Privacy
© Kong Inc. 2023