REGISTER NOW FOR API + AI SUMMIT 2026 | EARLY BIRD PRICING ENDS MAY 17 SECURE YOUR SPOT FOR THE KONG AGENTIC ERA WORLD TOUR GOVERN A2A TRAFFIC WITH KONG'S NEW AGENT GATEWAY DON’T MISS API + AI SUMMIT 2026 SEPT 30 – OCT 1
  • [Why Kong](/company/why-kong)Why Kong
    • Explore the unified API Platform
        • BUILD APIs
        • [
          Kong Insomnia](/products/kong-insomnia)
          Kong Insomnia
        • [
          API Design](/products/kong-insomnia/api-design)
          API Design
        • [
          API Mocking](/products/kong-insomnia/api-mocking)
          API Mocking
        • [
          API Testing and Debugging](/products/kong-insomnia/api-testing-and-debugging)
          API Testing and Debugging
        • [
          MCP Client](/products/kong-insomnia/mcp-client)
          MCP Client
        • RUN APIs
        • [
          API Gateway](/products/kong-gateway)
          API Gateway
        • [
          Context Mesh](/products/kong-konnect/features/context-mesh)
          Context Mesh
        • [
          AI Gateway](/products/kong-ai-gateway)
          AI Gateway
        • [
          Event Gateway](/products/event-gateway)
          Event Gateway
        • [
          Kubernetes Operator](/products/kong-gateway-operator)
          Kubernetes Operator
        • [
          Service Mesh](/products/kong-mesh)
          Service Mesh
        • [
          Ingress Controller](/products/kong-ingress-controller)
          Ingress Controller
        • [
          Runtime Management](/products/kong-konnect/features/runtime-management)
          Runtime Management
        • DISCOVER APIs
        • [
          Developer Portal](/products/kong-konnect/features/developer-portal)
          Developer Portal
        • [
          Service Catalog](/products/kong-konnect/features/api-service-catalog)
          Service Catalog
        • [
          MCP Registry](/products/mcp-registry)
          MCP Registry
        • GOVERN APIs
        • [
          Metering and Billing](/products/kong-konnect/features/usage-based-metering-and-billing)
          Metering and Billing
        • [
          APIOps and Automation](/products/apiops-automation)
          APIOps and Automation
        • [
          API Observability](/products/kong-konnect/features/api-observability)
          API Observability
        • [Why Kong?](/company/why-kong)Why Kong?
      • CLOUD
      • [Cloud API Gateways](/products/kong-konnect/features/dedicated-cloud-gateways)Cloud API Gateways
      • [Need a self-hosted or hybrid option?](/products/kong-enterprise)Need a self-hosted or hybrid option?
      • COMPARE
      • [Considering AI Gateway alternatives? ](/performance-comparison/ai-gateway-alternatives)Considering AI Gateway alternatives?
      • [Kong vs. Postman](/performance-comparison/kong-vs-postman)Kong vs. Postman
      • [Kong vs. MuleSoft](/performance-comparison/kong-vs-mulesoft)Kong vs. MuleSoft
      • [Kong vs. Apigee](/performance-comparison/kong-vs-apigee)Kong vs. Apigee
      • [Kong vs. IBM](/performance-comparison/ibm-api-connect-vs-kong)Kong vs. IBM
      • GET STARTED
      • [Sign Up for Kong Konnect](/products/kong-konnect/register)Sign Up for Kong Konnect
      • [Documentation](https://developer.konghq.com/)Documentation
      • FOR PLATFORM TEAMS
      • [Developer Platform](/solutions/building-developer-platform)Developer Platform
      • [Kubernetes and Microservices](/solutions/build-on-kubernetes)Kubernetes and Microservices
      • [Observability](/solutions/observability)Observability
      • [Service Mesh Connectivity ](/solutions/service-mesh-connectivity)Service Mesh Connectivity
      • [Kafka Event Streaming](/solutions/kafka-stream-api-management)Kafka Event Streaming
      • FOR EXECUTIVES
      • [AI Connectivity](/ai-connectivity)AI Connectivity
      • [Open Banking](/solutions/open-banking)Open Banking
      • [Legacy Migration](/solutions/legacy-api-management-migration)Legacy Migration
      • [Platform Cost Reduction](/solutions/api-platform-consolidation)Platform Cost Reduction
      • [Kafka Cost Optimization](/solutions/reduce-kafka-cost)Kafka Cost Optimization
      • [API Monetization](/solutions/api-monetization)API Monetization
      • [AI Monetization](/solutions/ai-monetization)AI Monetization
      • [AI FinOps](/solutions/ai-cost-governance-finops)AI FinOps
      • FOR AI TEAMS
      • [Agent Gateway](/agent-gateway)Agent Gateway
      • [AI Governance](/solutions/ai-governance)AI Governance
      • [AI Security](/solutions/ai-security)AI Security
      • [AI Cost Control](/solutions/ai-cost-optimization-management)AI Cost Control
      • [Agentic Infrastructure](/solutions/agentic-ai-workflows)Agentic Infrastructure
      • [MCP Production](/solutions/mcp-production-and-consumption)MCP Production
      • [MCP Traffic Gateway](/solutions/mcp-governance)MCP Traffic Gateway
      • FOR DEVELOPERS
      • [Mobile App API Development](/solutions/mobile-application-api-development)Mobile App API Development
      • [GenAI App Development](/solutions/power-openai-applications)GenAI App Development
      • [API Gateway for Istio](/solutions/istio-gateway)API Gateway for Istio
      • [Decentralized Load Balancing](/solutions/decentralized-load-balancing)Decentralized Load Balancing
      • BY INDUSTRY
      • [Financial Services](/solutions/financial-services-industry)Financial Services
      • [Healthcare](/solutions/healthcare)Healthcare
      • [Higher Education](/solutions/api-platform-for-education-services)Higher Education
      • [Insurance](/solutions/insurance)Insurance
      • [Manufacturing](/solutions/manufacturing)Manufacturing
      • [Retail](/solutions/retail)Retail
      • [Software & Technology](/solutions/software-and-technology)Software & Technology
      • [Transportation](/solutions/transportation-and-logistics)Transportation
      • [See all Solutions](/solutions)See all Solutions
  • [Pricing](/pricing)Pricing
      • DOCUMENTATION
      • [Kong Konnect](https://developer.konghq.com/konnect/)Kong Konnect
      • [Kong Gateway](https://developer.konghq.com/gateway/)Kong Gateway
      • [Kong Mesh](https://developer.konghq.com/mesh/)Kong Mesh
      • [Kong AI Gateway](https://developer.konghq.com/ai-gateway/)Kong AI Gateway
      • [Kong Event Gateway](https://developer.konghq.com/event-gateway/)Kong Event Gateway
      • [Kong Insomnia](https://developer.konghq.com/insomnia/)Kong Insomnia
      • [Plugin Hub](https://developer.konghq.com/plugins/)Plugin Hub
      • EXPLORE
      • [Blog](/blog)Blog
      • [Learning Center](/blog/learning-center)Learning Center
      • [eBooks](/resources/e-book)eBooks
      • [Reports](/resources/reports)Reports
      • [Demos](/resources/demos)Demos
      • [Customer Stories](/customer-stories)Customer Stories
      • [Videos](/resources/videos)Videos
      • EVENTS
      • [API + AI Summit](/events/conferences/api-ai-summit)API + AI Summit
      • [Agentic Era World Tour](/agentic-era-world-tour)Agentic Era World Tour
      • [Webinars](/events/webinars)Webinars
      • [User Calls](/events/user-calls)User Calls
      • [Workshops](/events/workshops)Workshops
      • [Meetups](/events/meetups)Meetups
      • [See All Events](/events)See All Events
      • FOR DEVELOPERS
      • [Get Started](https://developer.konghq.com/)Get Started
      • [Community](/community)Community
      • [Certification](/academy/certification)Certification
      • [Training](https://education.konghq.com)Training
      • COMPANY
      • [About Us](/company/about-us)About Us
      • [We're Hiring!](/company/careers)We're Hiring!
      • [Press Room](/company/press-room)Press Room
      • [Contact Us](/company/contact-us)Contact Us
      • [Kong Partner Program](/partners)Kong Partner Program
      • [Enterprise Support Portal](https://support.konghq.com/s/)Enterprise Support Portal
      • [Documentation](https://developer.konghq.com/?_gl=1*tphanb*_gcl_au*MTcxNTQ5NjQ0MC4xNzY5Nzg4MDY0LjIwMTI3NzEwOTEuMTc3MzMxODI2MS4xNzczMzE4MjYw*_ga*NDIwMDU4MTU3LjE3Njk3ODgwNjQ.*_ga_4JK9146J1H*czE3NzQwMjg1MjkkbzE4OSRnMCR0MTc3NDAyODUyOSRqNjAkbDAkaDA)Documentation
  • [](/search)
  • [Login](https://cloud.konghq.com/login)Login
  • [Book Demo](/contact-sales)Book Demo
  • [Get Started](/products/kong-konnect/register)Get Started
[Blog](/blog)Blog
  • [AI Gateway](/blog/tag/ai-gateway)AI Gateway
  • [AI Security](/blog/tag/ai-security)AI Security
  • [AIOps](/blog/tag/aiops)AIOps
  • [API Security](/blog/tag/api-security)API Security
  • [API Gateway](/blog/tag/api-gateway)API Gateway
|
    • [API Management](/blog/tag/api-management)API Management
    • [API Development](/blog/tag/api-development)API Development
    • [API Design](/blog/tag/api-design)API Design
    • [Automation](/blog/tag/automation)Automation
    • [Service Mesh](/blog/tag/service-mesh)Service Mesh
    • [Insomnia](/blog/tag/insomnia)Insomnia
    • [Event Gateway](/blog/tag/event-gateway)Event Gateway
    • [View All Blogs](/blog/page/1)View All Blogs
We're Entering the Age of AI Connectivity [Read more](/blog/news/the-age-of-ai-connectivity)Read moreProducts & Agents:
    • [Kong AI Gateway](/products/kong-ai-gateway)Kong AI Gateway
    • [Kong API Gateway](/products/kong-gateway)Kong API Gateway
    • [Kong Event Gateway](/products/event-gateway)Kong Event Gateway
    • [Kong Metering & Billing](/products/usage-based-metering-and-billing)Kong Metering & Billing
    • [Kong Insomnia](/products/kong-insomnia)Kong Insomnia
    • [Kong Konnect](/products/kong-konnect)Kong Konnect
  • [Documentation](https://developer.konghq.com)Documentation
  • [Book Demo](/contact-sales)Book Demo
  1. Home
  2. Blog
  3. Engineering
  4. Building a Secure, Scalable AI Infrastructure with Kong and Akamai: A Technical Introduction
[AI Connectivity](/blog/ai-connectivity)AI Connectivity
May 4, 2026
4 min read

# Building a Secure, Scalable AI Infrastructure with Kong and Akamai: A Technical Introduction

Claudio Acquaviva
Principal Architect, Kong
Marco Raffaelli
Director of Technology Partnerships, Akamai

As organizations transition from experimental AI to production-grade systems, they often face a fragmented landscape of unmanaged LLM providers, complex tool integrations, and escalating security risks. Without a centralized orchestration layer, developers struggle to maintain consistent governance, observability, and cost control across disparate models and the [Model Context Protocol (MCP) ](https://konghq.com/blog/learning-center/what-is-mcp)Model Context Protocol (MCP) ecosystem. This infrastructure gap leaves AI applications vulnerable to sophisticated threats like prompt injection and data exfiltration, necessitating a unified stack that secures the edge while streamlining the data plane.

As organizations move from simple large language model (LLM) experiments to production-grade multi GenAI model AI systems, a new infrastructure stack is emerging where scalability and security become even more critical. This blog post describes how Kong and Akamai are providing a new combined offering to build a modern AI-based infrastructure for new agents.

## The platform

Together, the following components represent the three layers of the new AI platform:

  • - AI Gateway: Kong AI Gateway (including MCP support) controls both GenAI and MCP flow and orchestrates the existing services like Vector Databases, Event Streaming, etc.
  • - Compute Layer: Akamai Linode Kubernetes Engine (LKE)
  • - Security Layer: Akamai Firewall for AI

Here's the fundamental diagram with the three main components:

A basic LLM request flow goes through the following steps:

  1. - User or Agent sends a request with a prompt.
  2. - Request passes through Akamai Firewall for AI. Prompt is inspected and sanitized.
  3. - Request reaches the infrastructure on Akamai LKE.
  4. - Request goes through Kong AI Gateway: The request is Authenticated and routed to the best model.
  5. - Model executes inference.
  6. - Response flows back to Kong which logs it and generates metrics and traces.
  7. - Filtered again by Akamai Firewall for AI.
  8. - Return to user.

Multiple variations also exist. Depending on the request, Kong AI Gateway may send queries to the Vector Database to solve, for example, Semantic Routing policies.

Similarly, the Agent might send MCP requests which will be also handled by the Data Plane which is responsible for enforcing policies specifically defined for the MCP Servers and Tools, like, for example OAuth2 Authorization.

## Kong AI Gateway

As part of the Kong Konnect product, the Kong AI Gateway is designed to solve several challenges in AI adoption. In fact, modern AI applications rarely rely on a single model. Instead, they combine multiple GenAI providers, Agent frameworks, external MCP (Model Context Protocol) Servers and REST based APIs.

Kong AI Gateway is a powerful set of features built on top of Kong Gateway, designed to help developers and organizations effectively adopt AI capabilities quickly and securely. Logically speaking it provides capabilities to play both roles LLM (or GenAI) and MCP Gateway.

  • - **LLM Gateway**: While AI providers don’t conform to a standard API specification, the Kong LLM Gateway provides a normalized API layer allowing clients to consume multiple AI services from the same client code base. The AI Gateway provides additional capabilities for credential management, AI usage observability, governance, and tuning through prompt engineering. Developers can use no-code AI Plugins to enrich existing API traffic, easily enhancing their existing application functionality.
  • - **MCP Gateway: **It sits side-by-side with the Kong LLM Gateway and it is responsible for converting Kong Gateway Services into MCP Servers as well as proxying and protecting existing MCP Servers.

At its core, Kong AI Gateway provides:

  • - **GenAI/LLM Provider Abstraction:** It exposes a unified API that hides differences between LLM providers, allowing applications to switch models without rewriting code.
  • - **Semantic Processing**: Implements Routing, Caching and Guardrails policies based on semantics.
  • - **Advanced and Dynamic Routing Policies** based on cost, latency, etc.
  • - **Token-Based Rate Limiting.**
  • - **Governance and Observability**: It centralizes observability signals including metrics, logging and tracing for all LLM and MCP traffic.
  • - **Security and Policy Enforcement**: Provides extensive AuthN and AuthZ mechanisms to protect the Models and MCP Server including OAuth/OIDC, API Key, mTLS, etc.

## Akamai Linode Kubernetes Engine

The Kong Konnect platform provides a Cloud Management Control Plane (CP), which manages all service configurations. Through specific communication channels, it propagates those configurations to all runtime Data Planes (DP) where the Kong AI Gateway resides.

Underneath the Kong Konnect AI Gateway Data Plane sits the compute infrastructure. This is where Akamai Linode Kubernetes Engine (LKE) comes in.

Besides being totally based on Kubernetes, Akamai LKE provides Virtual Machines based on CPU/GPU, Load Balancers, Storage, Global Edge infrastructure, and Built-in Network Security.

## Akamai Firewall for AI

In this architecture, security is not an afterthought—it is embedded directly into the flow of the AI interaction. Akamai Firewall for AI is deployed here as a high-performance, specialized security layer designed specifically for the nuances of Large Language Models (LLMs).

By sitting alongside the Kong AI Gateway on Akamai’s Edge, FAI provides real-time inspection of the "intent" behind every request. It doesn't just look for malicious code; it understands the context of the conversation. While Kong orchestrates the LLM traffic and MCP flows, Akamai secures the intelligence being exchanged.

The Akamai Firewall for AI introduces sophisticated security policies to address the unique vulnerabilities of the GenAI era:

  • - **Prompt Injection Attacks.** Manipulating AI-generated responses to leak sensitive information or bypass safety measures.
  • - **Toxic Output & Topic Moderation.** AI-generated content that may include harmful, offensive language, or restricted topics.
  • - **Data Security & Data Exfiltration.** Threat actors attempting to extract PII and other sensitive data from AI models.
  • - **AI-Specific Denial of Service (DoS).** Attackers overloading AI models with high-volume or malicious queries.

Here's a screenshot of a Firewall for AI policy definition:

## Conclusion

By unifying Kong AI Gateway with Akamai’s secure cloud infrastructure, organizations can finally move beyond the "experimental" phase of GenAI with total confidence. This "Secure by Design" architecture that effectively decouples your AI logic from the underlying model providers, shielding your business from vendor lock-in and volatile API costs.

For the enterprise, this means accelerated time-to-market for new AI agents, strengthened compliance through rigorous edge filtering, and operational clarity via a single pane of glass for all AI and MCP traffic. Instead of managing fragmented tools, you gain a resilient, high-performance foundation that turns AI from a security risk into a scalable competitive advantage.

**Ready to Build?**

Explore the documentation from [Akamai](https://techdocs.akamai.com/home)Akamai and [Kong](https://developer.konghq.com/)Kong to find the right deployment path for your environment.

  • - Experience the Control Plane: [_Start a 30-day trial of Kong Konnect_](https://konghq.com/products/kong-konnect/register)_Start a 30-day trial of Kong Konnect_.
  • - Scale your Infrastructure: [_Kick off your free Akamai trial today._](https://www.google.com/search?q=https://www.linode.com/lp/free-credit/)_Kick off your free Akamai trial today._
- [AI Connectivity](/blog/tag/ai-connectivity)AI Connectivity- [AI Gateway](/blog/tag/ai-gateway)AI Gateway- [AI Security](/blog/tag/ai-security)AI Security- [MCP](/blog/tag/mcp)MCP- [API Gateway](/blog/tag/api-gateway)API Gateway

Table of Contents

  • The platform
  • Kong AI Gateway
  • Akamai Linode Kubernetes Engine
  • Akamai Firewall for AI
  • Conclusion

## More on this topic

_Webinars_

## You Secured Your APIs. Then You Added AI.

_Videos_

## MCP vs OpenAPI vs A2A vs ?: Preparing for the Agentic World

## See Kong in action

Accelerate deployments, reduce vulnerabilities, and gain real-time visibility. 

[Get a Demo](/contact-sales)Get a Demo
**Topics**
- [AI Connectivity](/blog/tag/ai-connectivity)AI Connectivity- [AI Gateway](/blog/tag/ai-gateway)AI Gateway- [AI Security](/blog/tag/ai-security)AI Security- [MCP](/blog/tag/mcp)MCP- [API Gateway](/blog/tag/api-gateway)API Gateway
Claudio Acquaviva
Principal Architect, Kong
Marco Raffaelli
Director of Technology Partnerships, Akamai

Recommended posts

# Governing Claude Code: How To Secure Agent Harness Rollouts with Kong AI Gateway

[Engineering](/blog/tag)EngineeringMarch 7, 2026

Claude Code is Anthropic's agentic coding and agent harness tool. Unlike traditional code-completion assistants that suggest the next line in an editor, Claude Code operates as an autonomous agent that reads entire codebases, edits files across mult

Alex Drag
[](https://konghq.com/blog/engineering/claude-code-governance-with-an-ai-gateway)

# Secure AI at Scale: Prisma AIRS and Kong AI Gateway Now Integrated

[Engineering](/blog/tag)EngineeringFebruary 9, 2026

In today's digital landscape, APIs are the backbone of modern applications, and AI is the engine of innovation. As organizations increasingly rely on microservices and AI-powered features, the API gateway has become the critical control point for man

Tom Prenderville
[](https://konghq.com/blog/engineering/prisma-airs-kong-ai-gateway)

# Model Context Protocol (MCP) Security: How to Restrict Tool Access Using AI Gateways

[Engineering](/blog/tag)EngineeringFebruary 3, 2026

MCP servers expose all tools by default. There are two problems with this: security (agents get capabilities they shouldn't have) and performance (too many tools degrade LLM tool selection). The solution? Put a gateway between agents and MCP server

Deepak Grewal
[](https://konghq.com/blog/engineering/mcp-tool-governance-security-meets-context-efficiency)

# Building Secure AI Agents with Kong's MCP Proxy and Volcano SDK

[Engineering](/blog/tag)EngineeringJanuary 27, 2026

The example below shows how an AI agent can be built using Volcano SDK with minimal code, while still interacting with backend services in a controlled way. The agent is created by first configuring an LLM, then defining an MCP (Model Context Prot

Eugene Tan
[](https://konghq.com/blog/engineering/secure-ai-agents-volcano-sdk-kong-mcp-proxy)

# Govern the Full AI Data Path with Kong AI Gateway 3.14

[Product Releases](/blog/tag)Product ReleasesApril 14, 2026

Agent-to-agent communication is the next frontier of AI infrastructure. As teams decompose monolithic AI workflows into specialized agents — a research agent, a booking agent, a summarization agent — the calls between those agents become as importa

Greg Peranich
[](https://konghq.com/blog/product-releases/kong-ai-gateway-3-14)

# From Microservices to AI Traffic — Kong as the Unified Control Plane

[Enterprise](/blog/tag)EnterpriseMarch 30, 2026

The Anatomy of Architectural Complexity Modern architectures now juggle three distinct traffic patterns. Each brings unique demands. Traditional approaches treat them separately. This separation creates unnecessary complexity. North-South API Traf

Kong
[](https://konghq.com/blog/enterprise/microservices-to-ai-traffic-kong-as-the-unified-control-plane)

# Managing the Chaos: How AI Gateways Enable Scalable AI Connectivity

[Enterprise](/blog/tag)EnterpriseMarch 16, 2026

Executive Summary AI adoption has moved past the "honeymoon phase" and into the "operational chaos" phase. As enterprises juggle multiple LLM providers, skyrocketing token costs, and "Shadow AI" usage, the need for a centralized control plane has be

Kong
[](https://konghq.com/blog/enterprise/ai-gateways-for-scalable-ai-connectivity)

## Ready to see Kong in action?

Get a personalized walkthrough of Kong's platform tailored to your architecture, use cases, and scale requirements.

[Get a Demo](/contact-sales)Get a Demo

## step-0

  • ## Company

    • [About Kong](/company/about-us)About Kong
    • [Customers](/customer-stories)Customers
    • [Careers](/company/careers)Careers
    • [Press](/company/press-room)Press
    • [Events](/events)Events
    • [Contact](/company/contact-us)Contact
    • [Pricing](/pricing)Pricing
      •    * [Terms](/legal/terms-of-use)
      •    * [Privacy](/legal/privacy-policy)
      •    * [Trust and Compliance](https://trust.konghq.com/)
  • ## Platform

    • [Kong AI Gateway](/products/kong-ai-gateway)Kong AI Gateway
    • [Kong Konnect](/products/kong-konnect)Kong Konnect
    • [Kong Gateway](/products/kong-gateway)Kong Gateway
    • [Kong Event Gateway](/products/event-gateway)Kong Event Gateway
    • [Kong Insomnia](/products/kong-insomnia)Kong Insomnia
    • [Documentation](https://developer.konghq.com)Documentation
    • [Book Demo](/contact-sales)Book Demo
  • ## Compare

    • [AI Gateway Alternatives](/performance-comparison/ai-gateway-alternatives)AI Gateway Alternatives
    • [Kong vs Apigee](/performance-comparison/kong-vs-apigee)Kong vs Apigee
    • [Kong vs IBM](/performance-comparison/ibm-api-connect-vs-kong)Kong vs IBM
    • [Kong vs Postman](/performance-comparison/kong-vs-postman)Kong vs Postman
    • [Kong vs Mulesoft](/performance-comparison/kong-vs-mulesoft)Kong vs Mulesoft
  • ## Explore More

    • [Open Banking API Solutions](/solutions/open-banking)Open Banking API Solutions
    • [API Governance Solutions](/solutions/api-governance)API Governance Solutions
    • [Istio API Gateway Integration](/solutions/istio-gateway)Istio API Gateway Integration
    • [Kubernetes API Management](/solutions/build-on-kubernetes)Kubernetes API Management
    • [API Gateway: Build vs Buy](/campaign/secure-api-scalability)API Gateway: Build vs Buy
    • [Kong vs Apigee](/performance-comparison/kong-vs-apigee)Kong vs Apigee
  • ## Open Source

    • [Kong Gateway](https://developer.konghq.com/gateway/install/)Kong Gateway
    • [Kuma](https://kuma.io/)Kuma
    • [Insomnia](https://insomnia.rest/)Insomnia
    • [Kong Community](/community)Kong Community

Kong enables the connectivity layer for the agentic era – securely connecting, governing, and monetizing APIs and AI tokens across any model or cloud.

  • English
  • Japanese
  • Frenchcoming soon
  • Spanishcoming soon
  • Germancoming soon
Everything is 200 OK
© Kong Inc. 2026
Interaction mode