Kong Enterprise 3.3 delivers enhanced security, usability, and platform reliability. Learn more

Install Kong API Gateway and Kong Mesh

Get Started

Built for hybrid and multi-cloud environments, optimized for microservices and distributed architectures.

Install Kong Gateway

Install Kong Mesh

Install Kong Gateway (OSS)

Install Kuma

Install Kong Gateway

The world’s most popular API gateway.
Looking for an enterprise solution? Contact Sales

Install Kong Mesh

Enterprise-grade service mesh for multi-cloud and multi-cluster on both Kubernetes and VMs.
Contact us today to discuss how you can get started with Kong Mesh.
If you are already a Kong Mesh customer, you can get started with one of our installation guides below.


Install Kong Gateway (Open Source)

This is the open source community Kong Gateway.

Install Kuma

The universal Envoy service mesh for distributed service connectivity.

Features: OSS vs Enterprise


What It's For

Kong Open Source Gateway

Kong Enterprise

API Infrastructure Modernization
Fast, Lightweight, Cloud-Native API Gateway
High-performance proxying of APIs
End-to-End Automation
Drive a GitOps flow of API design and execution
Kubernetes Ingress Controller
Deploy APIs to Kubernetes in a native fashion
Gateway Mocking
Mock API responses directly on the API gateway
Kong Manager: Admin GUI
Visually manage Kong cluster, plugins, APIs, and consumers
Traffic Management and Transformations
Basic Traffic Control Plugins
Manage ACME certificates, basic rate limiting, and lightweight caching
Simple Data Transformations
Add or remove headers, JSON data, or query strings
gRPC Transformations
Translate requests from gRPC-Web and REST to backend gRPC services
Convert GraphQL queries to REST requests. Rate limit and cache GraphQL queries
Request Validation
Validate requests using either Kong’s own schema validator or a JSON Schema Draft 4-compliant validator
jq Transformations
Advanced JSON transformations of requests or responses with the ability to chain transformations
Advanced Caching
Cache responses and optimize for high scale by integrating distributed backends
Advanced Rate Limiting
Enterprise-grade rate limiting with sliding window controls
Security and Governance
Common methods of API authentication - Basic Auth, HMAC, JWT Key Auth, limited OAuth 2.0, limited LDAP
Advanced Authentication
Enterprise-grade API authentication - Full OAuth 2.0, OpenID Connect, Vault, Mutual TLS, JWT Signing/Resigning, full LDAP
Role-Based Access Control (RBAC)
Control gateway configurations based on a user's role in the organization
Basic Authorization (Bot Detection, CORS controls, ACLs)
Control access to APIs by rules of user behavior and control lists
Advanced Authorization (OPA)
Control access to APIs with complex, programmable, enterprise-wide rules
Secret Management
Encrypt sensitive keys, certificates, and passwords
FIPS 140-2 Compliance
Generally Available version coming soon. Kong Gateway in a FIPS 140-2 compliant mode
Simple logging
Send basic API gateway logs - File logging, HTTP logging, basic StatsD, TCP/UDP logging
API Analytics
Natively analyze requests and responses flowing through the API gateway
Gateway Event Hooks
Automatically log out or send web hooks on changes to the gateway, such as administrators added or rate limits exceeded
Enterprise Support and Services
Enterprise support
24/7 x 365 technical support SLAs
Security CVE and Bug Fix Backports
Performance Tuning Guidance
Customer Success Packages - Add-on
Accelerate time to value with dedicated Technical Account Managers and Field Engineers

Features: Kuma vs Kong Mesh




Kong Mesh

Enterprise Support
Kong backed 24/7 x 365 Support
Customer Success Packages
Management & Authentication
Role Based Access Control (RBAC)
Multi-Zone Authentication
UBI Distributions
Windows Distributions
Native AWS ECS Controller
mTLS HashiCorp Vault CA
mTLS Automatic CA Rotation
mTLS GUI Analytics
FIPS-140-2 Encryption Support
Native OPA Agent and Policy
Mesh / Multi-Mesh
Multi-Zone & Multi-Cluster
Native VM Support (no K8s dependency)
Traffic Control