Open-Source API Management and Microservice Management

Authentication

Portal Application Registration

Allow portal developers to register applications against Services

Support by:

Basic Authentication

Add Basic Authentication to your Services

Support by:

HMAC Authentication

Add HMAC Authentication to your Services

Support by:

Kong JWT Signer

Verify and (re-)sign one or two tokens in a request

Support by:

JWT

Verify and authenticate JSON Web Tokens

Support by:

Key Authentication - Encrypted

Add key authentication to your Services

Support by:

Key Authentication

Add key authentication to your Services

Support by:

LDAP Authentication Advanced

Secure Kong clusters, routes and services with username and password protection

Support by:

LDAP Authentication

Integrate Kong with a LDAP server

Support by:

Mutual TLS Authentication

Secure routes and services with client certificate and mutual TLS authentication

Support by:

OAuth 2.0 Introspection

Integrate Kong with a third-party OAuth 2.0 Authorization Server

Support by:

OAuth 2.0 Authentication

Add OAuth 2.0 authentication to your Services

Support by:

OpenID Connect

Integrate Kong with a third-party OpenID Connect 1.0 provider

Support by:

Session

Support sessions for Kong Authentication Plugins.

Support by:

Vault Authentication

Add Vault authentication to your Services

Support by:

Okta

Integrate Okta's API Access Management (OAuth as a Service) with Kong API Gateway.

Support by:
Okta

PASETO

PASETO (Platform-Agnostic Security Tokens)

Support by:
peter-evans

Upstream HTTP Basic Authentication

Add HTTP Basic Authentication header to upstream service request

Support by:
Revolution Systems Inc.

Security

ACME

Let's Encrypt and ACMEv2 integration with Kong

Support by:

Bot Detection

Detect and block bots or custom clients

Support by:

CORS

Allow developers to make requests from the browser

Support by:

IP Restriction

Allow or deny IPs that can make requests to your Services

Support by:

Cleafy plugin for Kong

Integrate Kong API GW with Cleafy threat detection & protection for API-based apps

Support by:
Cleafy

Approov API Threat Protection

Approov ensures that only genuine and unmodified instances of your mobile app can connect to your server or cloud backend

Support by:
CriticalBlue Ltd

Kong Spec Expose

Expose OAS/Swagger/etc. specifications of auth protected APIs proxied by Kong

Support by:
Optum

Kong Upstream JWT

Add a signed JWT into the header of proxied requests

Support by:
Optum

Salt Security

Integrate Kong API Gateway with Salt Security Discovery & Prevention for API-based apps

Support by:
Salt Security

Kong Path Allow

Determine if the path is in the path allow list, and if not, return a 403

Support by:
Seifchen

Signal Sciences

Secure your web applications and APIs without impacting your business

Support by:
Signal Sciences

Wallarm

Wallarm is AI-Powered Security Platform for protecting microservices and APIs

Support by:
Wallarm

Traffic Control

ACL

Control which consumers can access Services

Support by:

Canary Release

Slowly roll out software changes to a subset of users

Support by:

Forward Proxy Advanced

Allows Kong to connect to intermediary transparent HTTP proxies

Support by:

GraphQL Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

GraphQL Rate Limiting Advanced

Provide rate limiting for GraphQL queries

Support by:

Proxy Caching Advanced

Cache and serve commonly requested responses in Kong

Support by:

Proxy Cache

Cache and serve commonly requested responses in Kong

Support by:

Rate Limiting Advanced

Upgrades Kong Rate Limiting with more flexibility and higher performance

Support by:

Rate Limiting

Rate-limit how many HTTP requests can be made in a period of time

Support by:

Request Size Limiting

Block requests with bodies greater than a specified size

Support by:

Request Termination

Terminates all requests with a specific response

Support by:

Request Validator

Validates requests before they reach the Upstream service

Support by:

Response Rate Limiting

Rate-limiting based on a custom response header value

Support by:

Route By Header

Route request based on request headers

Support by:

Kong Response Size Limiting

Block responses with bodies greater than a specified size

Support by:
Optum

Kong Service Virtualization

Mock virtual API request and response pairs through Kong Gateway

Support by:
Optum

JWT to Header (Route by JWT Claim)

Convert JWT Claims to Headers for upstream consumption or to route by JWT Claims

Support by:
Yes Interactive

Serverless

AWS Lambda

Invoke and manage AWS Lambda functions from Kong

Support by:

Azure Functions

Invoke and manage Azure functions from Kong

Support by:

Apache OpenWhisk

Invoke and manage OpenWhisk actions from Kong

Support by:

Serverless Functions

Dynamically run Lua code from Kong

Support by:

Analytics & Monitoring

Datadog

Visualize metrics on Datadog

Support by:

Prometheus

Expose metrics related to Kong and proxied Upstream services in Prometheus exposition format

Support by:

Zipkin

Propagate Zipkin spans and report space to a Zipkin server

Support by:

API Fortress HTTP Log

Record mock responses with API Fortress.

Support by:
API Fortress

ArecaBay MicroSensor

Discover, Monitor, and Secure your APIs at object/data level.

Support by:
ArecaBay

Moesif API Insights

User-centric API analytics and monitoring

Support by:
Moesif

SignalFx

Monitor and analyze Kong in SignalFx

Support by:
SignalFx

Transformations

Correlation ID

Correlate requests and responses using a unique ID

Support by:

DeGraphQL

Transform a GraphQL upstream into a REST API

Support by:

Exit Transformer

Customize Kong exit responses sent downstream

Support by:

gRPC-gateway

Access gRPC services through HTTP REST

Support by:

gRPC-Web

Allow browser clients to call gRPC services.

Support by:

Kafka Upstream

Transform requests into Kafka messages in a topic.

Support by:

Request Transformer Advanced

Use powerful regular expressions, variables and templates to transform API requests

Support by:

Request Transformer

Modify the request before hitting the upstream server

Support by:

Response Transformer Advanced

Modify the upstream response before returning it to the client

Support by:

Response Transformer

Modify the upstream response before returning it to the client

Support by:

Route Transformer Advanced

Transform routing by changing the upstream server, port, or path.

Support by:

Inspur Request Transformer

Kong plugin to transform diversiform requests

Support by:
Inspur

Inspur Response Transform

kong plugin to transform http response from json to xml

Support by:
Inspur

API Transformer

Kong middleware to transform requests / responses, using Lua script.

Support by:
QNAP Inc.

Template Transformer

Kong middleware to transform requests / responses, using pre-configured templates.

Support by:
stone-payments

URL Rewrite

Kong middleware to completely rewrite the URL of a route.

Support by:
stone-payments

Logging

File Log

Append request and response data to a log file on disk

Support by:

HTTP Log

Send request and response logs to an HTTP server

Support by:

Kafka Log

Publish logs to a Kafka topic.

Support by:

Loggly

Send request and response logs to Loggly

Support by:

StatsD Advanced

Send metrics to StatsD with more flexible options

Support by:

StatsD

Send request and response logs to StatsD

Support by:

Syslog

Send request and response logs to Syslog

Support by:

TCP Log

Send request and response logs to a TCP server

Support by:

UDP Log

Send request and response logs to a UDP server

Support by:

API Fortress HTTP Log

Record mock responses with API Fortress.

Support by:
API Fortress

Kong Splunk Log

Log API transactions to Splunk using the Splunk HTTP collector

Support by:
Optum

Google Analytics Log

Log API transactions to Google Analytics

Support by:
Yes Interactive

Deployment

Kong on AWS with Terraform

Terraform module to provision Kong and Kong Enterprise clusters on Amazon Web Services.

Support by:

Kong on Microsoft Azure Certified

The Bitnami Kong Stack provides a one-click install solution for Kong

Support by:
Bitnami

Kong Heroku app

Deploy Kong clusters to Heroku Common Runtime or Private Spaces

Support by:
Heroku community

Kongverge

A Desired State Configuration tool for Kong.

Support by:
Just Eat

Microsoft Azure

Deploy Kong on Microsoft Azure

Support by:
Tom Kerkhove

Microsoft Azure Container Instances

Deploy Kong on Microsoft Azure Container Instances

Support by:
Tom Kerkhove

Jun	JUL	Aug
	21
2019	2020	2021

Kong Hub

Extend Kong with Powerful Plugins and Easy Integrations

Introduction

Filters

Functionality

Authentication

Security

Traffic Control

Serverless

Analytics & Monitoring

Transformations

Logging

Deployment