API Management with Kong Konnect Cloud

Create a Kong Connect account to access management and control planes, sign up options, and configure region and organization in Kong Connect.

Launch a local Kong Konnect data plane by deploying Kong Gateway 3.5 on Windows with Docker, via Gateway Manager, to enable a self-managed hybrid data plane and local runtime.

Generate a docker run script from Kong Connect Cloud and run it in PowerShell to create a docker container with Kong Gateway 3.5, connected to Connect Cloud.

Test the Kong Konnect configuration by validating http port 8000 and https port 8443, review container logs and json configuration, and confirm local Kong gateway installation completed.

Create and log into a Kong Connect account in Kong Konnect Cloud, sign up for free, and navigate the runtime manager to install a runtime instance on your local machine.

Configure Docker Desktop on Windows to install a local runtime instance as the data plane for Kong Konnect Cloud, enabling WSL2 and managing it via the cloud runtime manager.

Build a Kong gateway docker container with a batch script, connect the data plane to the runtime group in Kong Connect Cloud, and run Linux scripts on Windows via Ubuntu.

Install a Linux distribution on Windows using WSL and the virtual machine platform, then install Ubuntu and configure Docker integration. Run Kong's bash script to create a Kong Gateway container, add your user to the Docker group, restart, and verify ports 8008 and 8443.

Governs runtimes and their instances, the runtime manager enables adding or deleting runtime groups and stores state details; Connect Cloud provides the control plane and the data plane offers proxy.

Explore runtime groups as independent control planes in Kong Konnect Cloud, configuring gateway services, routes, consumers, plugins, upstreams, and certificates across gateway runtime instances.

Configure the runtime on your own across Windows, Linux, Mac, OS, and Kubernetes gateway. Monitor runtime group analytics and traffic, including the default runtime group and data plane gateway instance.

Explore the developer portal, a customization site for discovering and testing API services with docs, endpoints, and credential management, published from Service Hub for developer registration.

Developers access APIs through the developer portal by signing up and awaiting approval in Kong manager. They create an app, associate services, and log in after approval.

Log into the developer portal and create an app with a unique name and reference id, generate a 32-character api key as credentials, and associate services from the catalog.

Explore how Kong Konnect Cloud manages teams and users by assigning predefined roles, inheriting team properties, and controlling access to developer portal resources and service publishing.

Create a gateway service in Kong Konnect Cloud to proxy traffic to a backend API via a route, using a runtime group and a url or host and path.

Create a route for the gateway service to expose the backend API via get customer path. Root serves as the client entry point.

Apply the rate limit plugin to a route in Kong Konnect Cloud, configure it for one minute to allow two transactions, and observe how exceeding requests are blocked.

Learn how the service hub publishes services to the developer portal. Manage versions, tie them to a runtime group, and deploy gateway services with configured routes.

Kong vitals monitor the Kong Gateway health and performance, showing total requests and average error rate; learn to view vitals, generate service, route, and application reports with configurable time frames.

Use the Kong Konnect Cloud proxy caching plugin to cache responses by status codes and content types, set expiration, and create cache keys from path, headers, and query parameters.

Configure the request size limiting plugin in Kong Konnect Cloud, set payload size and units, enable content length checks, apply to a gateway route, and test with Postman.

Configure the request termination plugin to reject all incoming requests, choosing a status code, content type, and body or message, then test the gateway service for default and customized responses.

Implement the request transformer plugin in Kong Konnect Cloud to add and remove headers, modify http method, and convert requests to xml for upstream, with route setup and testing.

Configure the IP restriction plugin to allow or deny access by source IP using allowlist and blacklist rules, then create a gateway service route and customize the response.

Basic authentication validates username and password via the authorization header with base64 encoding, granting access through a Kong gateway; configure a gateway service, add the plugin, and test with Postman.

Implement ACL with basic authentication in Kong Konnect Cloud by creating gateway services, consumers, and ACL groups to enforce allow and deny lists.

Configure a gateway service and route in Kong Konnect Cloud, enable API key authentication, create a consumer with credentials, and enforce access with the ACL plugin to deny unauthorized requests.

Apply hmac sha-256 to sign the date with a shared secret for Kong Konnect Cloud, including a clock skew tolerance, and send the base64 signature in the authorization header.

Learn to secure resources with JSON Web Tokens (JWT) in Kong Konnect Cloud, using 256 signing with a shared or public/private key, and configure headers and claims for authorization.

Configure the bot detection plugin in Kong Konnect Cloud to protect the API proxy using a user agent deny list, and validate blocking of Postman, Edge, Chrome, and curl requests.

Configure an upstream object as a virtual host to load balance requests across two targets. Use round robin with health checks and a gateway service to route to backend APIs.

Install Docker Desktop on Windows, enable WSL 2, log in to Docker Hub, and run a container to explore images, containers, gateway runtime, and switch between Linux and Windows containers.

Install the Logs Explorer extension in Docker Desktop to view all container logs in one place for faster debugging. Monitor containers and uninstall via manage extensions.