Skip to content
Kong Docs are moving soon! Our docs are migrating to a new home. You'll be automatically redirected to the new site in the future. In the meantime, view this page on the new site!
Kong Logo | Kong Docs Logo
  • Docs
    • Explore the API Specs
      View all API Specs View all API Specs View all API Specs arrow image
    • Documentation
      API Specs
      Kong Gateway
      Lightweight, fast, and flexible cloud-native API gateway
      Kong Konnect
      Single platform for SaaS end-to-end connectivity
      Kong AI Gateway
      Multi-LLM AI Gateway for GenAI infrastructure
      Kong Mesh
      Enterprise service mesh based on Kuma and Envoy
      decK
      Helps manage Kong’s configuration in a declarative fashion
      Kong Ingress Controller
      Works inside a Kubernetes cluster and configures Kong to proxy traffic
      Kong Gateway Operator
      Manage your Kong deployments on Kubernetes using YAML Manifests
      Insomnia
      Collaborative API development platform
  • Plugin Hub
    • Explore the Plugin Hub
      View all plugins View all plugins View all plugins arrow image
    • Functionality View all View all arrow image
      View all plugins
      AI's icon
      AI
      Govern, secure, and control AI traffic with multi-LLM AI Gateway plugins
      Authentication's icon
      Authentication
      Protect your services with an authentication layer
      Security's icon
      Security
      Protect your services with additional security layer
      Traffic Control's icon
      Traffic Control
      Manage, throttle and restrict inbound and outbound API traffic
      Serverless's icon
      Serverless
      Invoke serverless functions in combination with other plugins
      Analytics & Monitoring's icon
      Analytics & Monitoring
      Visualize, inspect and monitor APIs and microservices traffic
      Transformations's icon
      Transformations
      Transform request and responses on the fly on Kong
      Logging's icon
      Logging
      Log request and response data using the best transport for your infrastructure
  • Support
  • Community
  • Kong Academy
Get a Demo Start Free Trial
Kong Ingress Controller
2.6.x
  • Home icon
  • Kong Ingress Controller
  • Guides
  • Configuring a fallback service
github-edit-pageEdit this page
report-issueReport an issue
  • Kong Gateway
  • Kong Konnect
  • Kong Mesh
  • Kong AI Gateway
  • Plugin Hub
  • decK
  • Kong Ingress Controller
  • Kong Gateway Operator
  • Insomnia
  • Kuma

  • Docs contribution guidelines
  • unreleased
  • 3.4.x (latest) (LTS)
  • 3.3.x
  • 3.2.x
  • 3.1.x
  • 3.0.x
  • 2.12.x (LTS)
  • 2.11.x
  • 2.10.x
  • 2.9.x
  • 2.8.x
  • 2.7.x
  • 2.6.x
  • 2.5.x (LTS)
  • Introduction
    • FAQ
    • Version Support Policy
    • Stages of Software Availability
    • Changelog
  • Concepts
    • Architecture
    • Custom Resources
    • Deployment Methods
    • Kong for Kubernetes with Kong Gateway Enterprise
    • High-Availability and Scaling
    • Resource Classes
    • Security
    • Ingress Resource API Versions
    • Gateway API
  • Deployment
    • Kong Ingress on Minikube
    • Kong for Kubernetes
    • Kong Enterprise for Kubernetes (DB-less)
    • Kong Enterprise for Kubernetes (DB-backed)
    • Kong Ingress on AKS
    • Kong Ingress on EKS
    • Kong Ingress on GKE
    • Admission Controller
    • Installing Gateway APIs
  • Guides
    • Getting Started with KIC
    • Upgrading from previous versions
    • Upgrading to Kong 3.x
    • Using Kong Gateway Enterprise
    • Getting Started using Istio
    • Using Custom Resources
      • Using the Kong(Cluster)Plugin Resource
      • Using the KongIngress Resource
      • Using KongConsumer and Credential Resources
      • Using the TCPIngress Resource
      • Using the UDPIngress Resource
    • Using the ACL and JWT Plugins
    • Using cert-manager with Kong
    • Configuring a Fallback Service
    • Using an External Service
    • Configuring HTTPS Redirects for Services
    • Using Redis for Rate Limiting
    • Integrate KIC with Prometheus/Grafana
    • Configuring Circuit-Breaker and Health-Checking
    • Setting up a Custom Plugin
    • Using Ingress with gRPC
    • Setting up Upstream mTLS
    • Exposing a TCP-based Service
    • Exposing a UDP-based Service
    • Using the mTLS Auth Plugin
    • Using the OpenID Connect Plugin
    • Rewriting Hosts and Paths
    • Preserving Client IP Address
    • Using Gateway API
    • Using Kong with Knative
  • References
    • KIC Annotations
    • CLI Arguments
    • Custom Resource Definitions
    • Plugin Compatibility
    • Version Compatibility
    • Troubleshooting
    • Prometheus Metrics
    • Feature Gates
    • Gateway API Support
    • File Permissions Reference
enterprise-switcher-icon Switch to OSS
On this pageOn this page
  • Prerequisites
    • Install Kong
    • Test connectivity to Kong
  • Setup a sample service
  • Setup a fallback service
  • Test the fallback service
You are browsing documentation for an older version. See the latest documentation here.

Configuring a fallback service

Learn to setup a fallback service using Ingress resource. The fallback service receives all requests that don’t match against any of the defined Ingress rules. This can be useful if you would like to return a 404 page to the end user if the user clicks a dead link or inputs an incorrect URL.

Prerequisites: Install Kong Ingress Controller in your Kubernetes cluster and connect to Kong.

Prerequisites

Install Kong

You can install Kong in your Kubernetes cluster using Helm.

  1. Add the Kong Helm charts:

     helm repo add kong https://charts.konghq.com
     helm repo update
    
  2. Install Kong Ingress Controller and Kong Gateway with Helm:

     helm install kong kong/ingress -n kong --create-namespace 
    

Test connectivity to Kong

Kubernetes exposes the proxy through a Kubernetes service. Run the following commands to store the load balancer IP address in a variable named PROXY_IP:

  1. Populate $PROXY_IP for future commands:

     export PROXY_IP=$(kubectl get svc --namespace kong kong-gateway-proxy -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
     echo $PROXY_IP
    
  2. Ensure that you can call the proxy IP:

     curl -i $PROXY_IP
    

    The results should look like this:

     HTTP/1.1 404 Not Found
     Content-Type: application/json; charset=utf-8
     Connection: keep-alive
     Content-Length: 48
     X-Kong-Response-Latency: 0
     Server: kong/3.0.0
      
     {"message":"no Route matched with those values"}
    

Setup a sample service

  1. Deploy an example echo service.

     kubectl apply -f https://docs.konghq.com/assets/kubernetes-ingress-controller/examples/echo-service.yaml
    

    The results should look like this:

     deployment.apps/echo created
     service/echo created
    
  2. Create an Ingress rule to proxy the echo service.

     $ echo '
     apiVersion: networking.k8s.io/v1
     kind: Ingress
     metadata:
       name: demo
       annotations:
         konghq.com/strip-path: "true"
     spec:
       ingressClassName: kong
       rules:
       - http:
           paths:
           - path: /echo
             pathType: ImplementationSpecific
             backend:
               service:
                 name: echo
                 port:
                   number: 1027
     ' | kubectl apply -f -
    

    The results should look like this:

     ingress.extensions/demo created
    
  3. Test the Ingress rule:

     $ curl -i $PROXY_IP/echo
    

    The results should look like this:

     HTTP/1.1 200 OK
     Content-Type: text/plain; charset=utf-8
     Content-Length: 137
     Connection: keep-alive
     Date: Sun, 17 Sep 2023 19:45:02 GMT
     X-Kong-Upstream-Latency: 1
     X-Kong-Proxy-Latency: 0
     Via: kong/3.3.1
        
     Welcome, you are connected to node kind.
     Running on Pod echo-74d47cc5d9-9zbzh.
     In namespace default.
     With IP address 192.168.194.7.
    

Setup a fallback service

  1. Deploy another sample service service.

    $ echo '
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: fallback-svc
    spec:
      replicas: 1
      selector:
        matchLabels:
          app: fallback-svc
      template:
        metadata:
          labels:
            app: fallback-svc
        spec:
          containers:
          - name: fallback-svc
            image: hashicorp/http-echo
            args:
            - "-text"
            - "This is not the path you are looking for. - Fallback service"
            ports:
            - containerPort: 5678
    ---
    apiVersion: v1
    kind: Service
    metadata:
      name: fallback-svc
      labels:
        app: fallback-svc
    spec:
      type: ClusterIP
      ports:
      - port: 80
        targetPort: 5678
        protocol: TCP
        name: http
      selector:
        app: fallback-svc
    ' | kubectl apply -f -
    

    The results should look like this:

    deployment.apps/fallback-svc created
    service/fallback-svc created
    
  2. Configure an Ingress rule to make it the fallback service to send all requests to it that don’t match any of the Ingress rules.

     $ echo "
     apiVersion: networking.k8s.io/v1
     kind: Ingress
     metadata:
       name: fallback
       annotations:
     spec:
       ingressClassName: kong
       defaultBackend:
         service:
           name: fallback-svc
           port:
             number: 80
     " | kubectl apply -f -
    

    The results should look like this:

     ingress.networking.k8s.io/fallback created
    

    Test the fallback service

    Send a request with a request property that doesn’t match any of the defined rules:

     $ curl $PROXY_IP/random-path
    

    The results should look like this:

     HTTP/1.1 200 OK
     Content-Type: text/plain; charset=utf-8
     Content-Length: 61
     Connection: keep-alive
     X-App-Name: http-echo
     X-App-Version: 0.2.3
     Date: Wed, 20 Sep 2023 09:46:56 GMT
     X-Kong-Upstream-Latency: 16
     X-Kong-Proxy-Latency: 0
     Via: kong/3.3.1
    
     This is not the path you are looking for. - Fallback service
    

    This message is from the fallback service that you deployed.

Create more Ingress rules, some complicated regex based ones and see how requests that don’t match any rules, are forwarded to the fallback service.

You can also use Kong’s request-termination plugin on the fallback Ingress resource to terminate all requests at Kong, without forwarding them inside the infrastructure.

Thank you for your feedback.
Was this page useful?
Too much on your plate? close cta icon
More features, less infrastructure with Kong Konnect. 1M requests per month for free.
Try it for Free
  • Kong
    Powering the API world

    Increase developer productivity, security, and performance at scale with the unified platform for API management, service mesh, and ingress controller.

    • Products
      • Kong Konnect
      • Kong Gateway Enterprise
      • Kong Gateway
      • Kong Mesh
      • Kong Ingress Controller
      • Kong Insomnia
      • Product Updates
      • Get Started
    • Documentation
      • Kong Konnect Docs
      • Kong Gateway Docs
      • Kong Mesh Docs
      • Kong Insomnia Docs
      • Kong Konnect Plugin Hub
    • Open Source
      • Kong Gateway
      • Kuma
      • Insomnia
      • Kong Community
    • Company
      • About Kong
      • Customers
      • Careers
      • Press
      • Events
      • Contact
  • Terms• Privacy• Trust and Compliance
© Kong Inc. 2025